{
    "type": "bundle",
    "id": "bundle--78ca6828-08b7-4d81-97ce-268aa7ee07ff",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--59f99ee9-2b33-4e70-a488-4addc93d3d77",
            "created": "2023-03-08T12:51:43.018137Z",
            "modified": "2024-10-23T12:33:11.030915Z",
            "name": "Kaspersky",
            "identity_class": "organization"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--2a00f4b2-e80d-46a0-8e13-e46c38bed059",
            "value": "ms.msteam.biz"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--8b6b525b-15aa-44d7-a28d-b79bcaac81d1",
            "value": "155.138.159.45"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--c64d87fd-2d90-4c88-a5d2-cc9baeee9ced",
            "value": "104.168.174.80"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--4f11149a-74c5-4261-b4ef-ea25fb424855",
            "value": "149.28.247.34"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--839dc94a-b7a2-4fb4-9f45-3094e9b4db5c",
            "value": "152.89.247.87"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--0d735ff4-6a8d-438e-a8bd-3418734e4e0e",
            "value": "172.86.121.130"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--94933d33-ef71-481f-8e77-f7fccd0e4d24",
            "hashes": {
                "MD5": "21e9ddd5753363c9a1f36240f989d3a9",
                "SHA-1": "71627bf5d3fa0c09e0631b2172ee0c6499168ed9",
                "SHA-256": "a3f087c83453cde2bc845122c05ebeb60e8891e395b45823c192869ec1b72ea6"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--24f882b1-1bef-4d59-8e70-7ca365a52b53",
            "hashes": {
                "MD5": "931d0969654af3f77fc1dab9e2bd66b1",
                "SHA-1": "7cf53577520861a1833ae99489c307f98da01b4b",
                "SHA-256": "f14c5bad5219b1ed5166eb02f5ff08a890a181cef2af565f3fe7bcea9c870e22"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--5ef46a85-79cd-4df4-aa76-91d86bc9afad",
            "hashes": {
                "MD5": "a17e9fc78706431ffc8b3085380fe29f",
                "SHA-1": "37002564bae2fcffea363f6ec7aeac151dc72f6b",
                "SHA-256": "5f4f006bfb9136c304e0aabf75575360120d022567180ce6b9c1835e209c541e"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--a86d2371-eef0-40b3-86b2-c8f6e860eada",
            "hashes": {
                "MD5": "d8f6290517c114e73e03ab30165098f6"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--1ff2d16d-d712-456a-be9d-595a2508ea4b",
            "hashes": {
                "MD5": "f766f97eb213d81bf15c02d4681c50a4"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--54cbec9d-37c6-452e-8ba4-1485bf1f39f8",
            "hashes": {
                "MD5": "087407551649376d90d1743bac75aac8"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--04aabbb9-4b76-45d3-8b60-e7ae1b9c3f4d",
            "hashes": {
                "MD5": "1e3df8ee796fc8a13731c6de1aed0818",
                "SHA-1": "b17b4bc60b0a34f14d280cf97fa2c36940a27654",
                "SHA-256": "79de30973b69aa4c44574a512e7820cc0a00f1241930ea361b7b0afcb1cccf2d"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d9b17d61-68ef-4c8e-91fe-9eea05f44ac8",
            "hashes": {
                "MD5": "4c0fb06320d1b7ecf44ffd0442fc10ed"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--11a5f4d3-33fc-46dc-beaf-4d3d41148f3b",
            "hashes": {
                "MD5": "ef3179d498793bf4234f708d3be28633",
                "SHA-1": "dd399ae46303343f9f0da189aee11c67bd868222",
                "SHA-256": "b53f3c0cd32d7f20849850768da6431e5f876b7bfa61db0aa0700b02873393fa"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--5ea10112-c514-4aab-825b-f5148dc5a4d6",
            "hashes": {
                "MD5": "0b4340ed812dc82ce636c00fa5c9bef2",
                "SHA-1": "51c97ebe601ef079b16bcd87af827b0be5283d96",
                "SHA-256": "dba3137811c686fd35e418d76184070e031f207002649da95385dfd05a8bb895"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--3f4bf3c7-ee34-4b75-bd1a-c81be491b0e1",
            "hashes": {
                "MD5": "61a227bf4c5c1514f5cbd2f37d98ef5b"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--f3389d50-f512-4fb1-8e19-b85a5d713ef8",
            "hashes": {
                "SHA-256": "da9f0e7dc6c52044fa29bea5337b4792b8b873373ba99ad816d5c9f5f275f03f"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--8e661277-a019-4d40-bea5-96f9085ccb91",
            "hashes": {
                "MD5": "d3503e87df528ce3b07ca6d94d1ba9fc"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--61695997-bf01-4fc2-a739-e9573fecc90e",
            "value": "http://avid.lno-prima.lol/NafqhbXR7KC/rTVCtCpxPH/kMjTqFDDNt/fiOHK5H35B/bM%3D"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--46c8230b-7bc3-4c4f-beb2-952db903bc06",
            "value": "https://www.angelbridge.jp"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--a64a21b2-8a0a-469f-b75f-1643845183a7",
            "value": "https://docs.azure-protection.cloud/%2BgFJKOpVX/4vRuFIaGlI/D%2BOfpTtg/YTN0TU1BNx/bMA5aGuZZP/ODq7aFQ%3D/%3D"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--70ffcf81-0757-41bc-8d53-f7401a2909e9",
            "value": "http://offerings.cloud/NafqhbXR7KC/rTVCtCpxPH/pdQTpFN6FC/Lhr_wXGXix/nQ%3D"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--b49dc471-af3f-4717-9b85-8b1f8de77168",
            "value": "https://www.abf-cap.com"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--a606eb21-45ce-4fd9-bfc4-cf5b1994fd1d",
            "value": "https://www.capmarketreport.com/packageupd.msi?ccop=RoPbnVqYd"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--48f3c5ba-9011-4e3e-b8c2-f8fe309174aa",
            "value": "abf-cap.co"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--7a73fdda-0038-49c1-9f7c-a4be19235655",
            "value": "offerings.cloud"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--0f233487-14f4-43d1-b841-83839218cb4f",
            "value": "smbc-vc.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--13bd095a-0404-45ba-b6e3-b12ceca67dff",
            "value": "beyondnextventures.co"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--2c90ced9-2469-4d57-b77e-eb931bfa099d",
            "value": "tptf.co"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--1dfab75a-49e6-4a6c-a87c-08de805f09ce",
            "value": "vote.anobaka.info"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--0d275023-44bf-4317-902d-97042b743c7d",
            "value": "cloud.beyondnextventures.co"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--d122df9a-e473-433b-94fe-1eb5a3b14c40",
            "value": "bankofamerica.us.org"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--f99f7598-caaa-4919-b062-67d1e15fe350",
            "value": "beyondnextventures.com"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--f909a1dc-39ad-47a0-b719-fb5832fcea5b",
            "value": "104.168.249.50"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--2bff9cb0-8f73-4a0c-9ad5-bd47183aad3c",
            "value": "https://docs.azure-protection.cloud/EMPxSKTgrr3/2CKnoSNLFF/0d6rQrBEMv/gGFroIw5_m/n9hLXkEOy3/wyQ%3D%3D"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--f7f0d913-f17b-5632-a48a-76b4eef8a1cb",
            "created": "2026-10-10T15:04:04.621541Z",
            "modified": "2026-10-10T15:04:04.621541Z",
            "name": "Bluenoroff"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--5bc67321-d832-442a-b077-67def9dd7433",
            "created_by_ref": "identity--59f99ee9-2b33-4e70-a488-4addc93d3d77",
            "created": "2026-10-10T15:04:04.628074Z",
            "modified": "2026-10-10T15:04:04.628074Z",
            "name": "BlueNoroff introduces new methods bypassing MoTW",
            "published": "2022-12-27T00:00:00Z",
            "object_refs": [
                "identity--59f99ee9-2b33-4e70-a488-4addc93d3d77",
                "domain-name--2a00f4b2-e80d-46a0-8e13-e46c38bed059",
                "ipv4-addr--8b6b525b-15aa-44d7-a28d-b79bcaac81d1",
                "ipv4-addr--c64d87fd-2d90-4c88-a5d2-cc9baeee9ced",
                "ipv4-addr--4f11149a-74c5-4261-b4ef-ea25fb424855",
                "ipv4-addr--839dc94a-b7a2-4fb4-9f45-3094e9b4db5c",
                "ipv4-addr--0d735ff4-6a8d-438e-a8bd-3418734e4e0e",
                "file--94933d33-ef71-481f-8e77-f7fccd0e4d24",
                "file--24f882b1-1bef-4d59-8e70-7ca365a52b53",
                "file--5ef46a85-79cd-4df4-aa76-91d86bc9afad",
                "file--a86d2371-eef0-40b3-86b2-c8f6e860eada",
                "file--1ff2d16d-d712-456a-be9d-595a2508ea4b",
                "file--54cbec9d-37c6-452e-8ba4-1485bf1f39f8",
                "file--04aabbb9-4b76-45d3-8b60-e7ae1b9c3f4d",
                "file--d9b17d61-68ef-4c8e-91fe-9eea05f44ac8",
                "file--11a5f4d3-33fc-46dc-beaf-4d3d41148f3b",
                "file--5ea10112-c514-4aab-825b-f5148dc5a4d6",
                "file--3f4bf3c7-ee34-4b75-bd1a-c81be491b0e1",
                "file--f3389d50-f512-4fb1-8e19-b85a5d713ef8",
                "file--8e661277-a019-4d40-bea5-96f9085ccb91",
                "url--61695997-bf01-4fc2-a739-e9573fecc90e",
                "url--46c8230b-7bc3-4c4f-beb2-952db903bc06",
                "url--a64a21b2-8a0a-469f-b75f-1643845183a7",
                "url--70ffcf81-0757-41bc-8d53-f7401a2909e9",
                "url--b49dc471-af3f-4717-9b85-8b1f8de77168",
                "url--a606eb21-45ce-4fd9-bfc4-cf5b1994fd1d",
                "domain-name--48f3c5ba-9011-4e3e-b8c2-f8fe309174aa",
                "domain-name--7a73fdda-0038-49c1-9f7c-a4be19235655",
                "domain-name--0f233487-14f4-43d1-b841-83839218cb4f",
                "domain-name--13bd095a-0404-45ba-b6e3-b12ceca67dff",
                "domain-name--2c90ced9-2469-4d57-b77e-eb931bfa099d",
                "domain-name--1dfab75a-49e6-4a6c-a87c-08de805f09ce",
                "domain-name--0d275023-44bf-4317-902d-97042b743c7d",
                "domain-name--d122df9a-e473-433b-94fe-1eb5a3b14c40",
                "domain-name--f99f7598-caaa-4919-b062-67d1e15fe350",
                "ipv4-addr--f909a1dc-39ad-47a0-b719-fb5832fcea5b",
                "url--2bff9cb0-8f73-4a0c-9ad5-bd47183aad3c",
                "threat-actor--f7f0d913-f17b-5632-a48a-76b4eef8a1cb"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://securelist.com/bluenoroff-methods-bypass-motw/108383/"
                }
            ]
        }
    ]
}