{
    "type": "bundle",
    "id": "bundle--0a127802-27c7-4ff1-a046-071279931580",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--5ace95f0-bd6c-4fee-a494-ca40e791918d",
            "created": "2023-03-08T12:51:44.544245Z",
            "modified": "2024-09-09T23:28:33.92829Z",
            "name": "PaloaltoNetworks",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c4d32de7-281e-4379-a2ff-c893b35da396",
            "hashes": {
                "MD5": "6590830061f85c0acc5259013555d079",
                "SHA-1": "b014e1b20499fcbab4c8e7af351ce08ac7f7832e",
                "SHA-256": "4b3416fb6d1ed1f762772b4dd4f4f652e63ba41f7809b25c5fa0ee9010f7dae7"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ecf7fe35-dde4-474c-8a84-35a0e7c4d4fb",
            "hashes": {
                "MD5": "57ef27823865c8f7784b0d37fd2c4aa8",
                "SHA-1": "d953005a70bf9d6282a9792c2598218657f31e25",
                "SHA-256": "bd6efb16527b025a5fd256bb357a91b4ff92aff599105252e50b87f1335db9e1"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--bb3a8907-01b2-44fb-a860-d894d44b5ebe",
            "hashes": {
                "MD5": "d742aa65c4880f85ae43feebb0781b67"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--f3f6f1d2-1e3c-44b9-9a78-e765ab228ebd",
            "hashes": {
                "MD5": "61f42c2dc1da18b046c6b274abe6f4ca",
                "SHA-1": "da188539e0dddae87245bcbc6e30eeb8ea607657",
                "SHA-256": "d50a0980da6297b8e4cec5db0a8773635cee74ac6f5c1ff18197dfba549f6712"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--dffbe42a-fc69-4a84-938c-651401ed6f8d",
            "hashes": {
                "MD5": "f3d27c9e0af3d049af5d35c6fd81ed49",
                "SHA-1": "9169ce3acf44d3b29a8f3711cb8aaad10ac7ddae",
                "SHA-256": "33ce9bcaeb0733a77ff0d85263ce03502ac20873bf58a118d1810861caced254"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--276efb68-5758-4aaa-ace7-4bb74577d493",
            "hashes": {
                "MD5": "03dbc1b3d79a4ff70f06fd6e67e00985",
                "SHA-1": "dbfdf474c76428f02fc4fbe408a8fe81a9402421",
                "SHA-256": "75917cc1bd9ecd7ef57b7ef428107778b19f46e8c38c00f1c70efc118cb8aab5"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--af35762d-237f-4bc6-a0a9-e694aecf3da9",
            "hashes": {
                "MD5": "bde663d08d4e2e17940d890ccf2e6e74"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ace421ca-bf9e-42b6-a503-eaa89f19e2f2",
            "hashes": {
                "MD5": "2d330c354c14b39368876392d56fb18c",
                "SHA-1": "a1f72c890d0b920f4f4cb2d59df6fa40734de90d",
                "SHA-256": "f86d05c1d7853c06fc5561f8df19b53506b724a83bb29c69b39f004a0f7f82d8"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--a47df7ed-30bf-4ab6-bc13-b41e0543a564",
            "hashes": {
                "MD5": "daab894b81cc375f0684ae66981b357d"
            }
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--1e5b5ecf-b64f-47a3-a650-3f7f9112fe08",
            "value": "173.248.170.149"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--1c1ebae0-8540-4ccd-ba02-3877c6efc78e",
            "created_by_ref": "identity--5ace95f0-bd6c-4fee-a494-ca40e791918d",
            "created": "2026-10-10T15:03:04.523443Z",
            "modified": "2026-10-10T15:03:04.523443Z",
            "name": "BabyShark Malware Part Two \u2013 Attacks Continue Using KimJongRAT and PCRat",
            "published": "2019-04-26T00:00:00Z",
            "object_refs": [
                "identity--5ace95f0-bd6c-4fee-a494-ca40e791918d",
                "file--c4d32de7-281e-4379-a2ff-c893b35da396",
                "file--ecf7fe35-dde4-474c-8a84-35a0e7c4d4fb",
                "file--bb3a8907-01b2-44fb-a860-d894d44b5ebe",
                "file--f3f6f1d2-1e3c-44b9-9a78-e765ab228ebd",
                "file--dffbe42a-fc69-4a84-938c-651401ed6f8d",
                "file--276efb68-5758-4aaa-ace7-4bb74577d493",
                "file--af35762d-237f-4bc6-a0a9-e694aecf3da9",
                "file--ace421ca-bf9e-42b6-a503-eaa89f19e2f2",
                "file--a47df7ed-30bf-4ab6-bc13-b41e0543a564",
                "ipv4-addr--1e5b5ecf-b64f-47a3-a650-3f7f9112fe08"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://unit42.paloaltonetworks.com/babyshark-malware-part-two-attacks-continue-using-kimjongrat-and-pcrat/"
                }
            ]
        }
    ]
}