{
    "type": "bundle",
    "id": "bundle--7dc61d03-6da1-4f99-be41-ec8c2cec9e4a",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--cb43c38b-3374-49f0-afd4-899e66835d60",
            "created": "2023-03-08T12:51:43.512673Z",
            "modified": "2023-03-08T12:51:43.512753Z",
            "name": "Volexity",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--bd61a995-742b-4968-8617-912bd5a0f715",
            "hashes": {
                "MD5": "18644822140eda7493bd75ba1e1f235d",
                "SHA-1": "b801643e2d817931e6aa36e6bf24d1c42e9b8fdc",
                "SHA-256": "fe948451df90df80c8028b969bf89ecbf501401e7879805667c134080976ce2e"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ca93c61b-7b81-4a49-9fab-4ff7c4d3d18d",
            "hashes": {
                "MD5": "435c7b4fd5e1eaafcb5826a7e7c16a83",
                "SHA-1": "1a6366a45cb892cf76af8ba25d114334f1e34532",
                "SHA-256": "479cc0a490ffa98652683796c5cef12f3e6380107aac83321a9705048b801b54"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--94648ddc-b36f-4fba-b677-f505b837738b",
            "value": "rebelthumb.net"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--aa75a5bb-c8ca-49ce-a821-25aeb3491384",
            "value": "https://strainservice.com/resources?a=1666860077&v=1666527365"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--92cc17ac-90c9-4cc1-8981-73d62ad5bc4e",
            "value": "strainservice.com"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--e8b34e31-87d6-4837-ab56-c9580f9dfaa2",
            "hashes": {
                "MD5": "76111d9780b2d0b5adee61cf752d937e",
                "SHA-1": "5b03294b72c0caa5fb20e7817002c600645eb475",
                "SHA-256": "9352625b3e6a3c998e328e11ad43efb5602fe669aed9c9388af5f55fadfedc78"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c495955d-8bfe-4ea2-a0b2-e550ccf321a5",
            "hashes": {
                "MD5": "ec3f99dd7d9dbce8d704d407b086e84f",
                "SHA-1": "790a0e6790fb359b5010d952ea773d1a89668133",
                "SHA-256": "295c20d0f0a03fd8230098fade0af910b2c56e9e5700d4a3344d10c106a6ae2a"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--ce341c5b-0017-42ce-b95f-0826b6c4be6d",
            "value": "wirexpro.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--7a6ebb44-51c2-43d5-bcc3-2f8e9f9f0b43",
            "value": "oilycargo.com"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--fbf9633b-5069-4f7e-9c30-9675b3615b59",
            "hashes": {
                "MD5": "eb1e19613a6a260ddd0ae9224178355b",
                "SHA-1": "dde2a0b2f85d313222324159b61b2fd7d6e66e7a",
                "SHA-256": "8400f2674892cdfff27b0dfe98a2a77673ce5e76b06438ac6110f0d768459942"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--29ed2984-f99f-4499-a696-bc13066a00be",
            "hashes": {
                "MD5": "61923b65c963b82a063ec07dcb32db1a",
                "SHA-1": "93b91aaf6d1ec30a27f866ef35af01defb2e6d3a",
                "SHA-256": "e5980e18319027f0c28cd2f581e75e755a0dace72f10748852ba5f63a0c99487"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--2ad5d6ac-084e-4cde-a801-aeb671bcbf29",
            "hashes": {
                "MD5": "34ae87e0693e5c0962564559514649f2",
                "SHA-1": "c5fc27bf3d9abe24f52d147a556d3539fe243369",
                "SHA-256": "a2d3c41e6812044573a939a51a22d659ec32aea00c26c1a2fdf7466f5c7e1ee9"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b8c15c1a-5b76-415c-acca-26dad2eaa3ac",
            "hashes": {
                "MD5": "9319c3e14e1a60888ae6b2477668f7ba",
                "SHA-1": "03357d9e06597ddebe523e0009dc8e1543efe341",
                "SHA-256": "abca3253c003af67113f83df2242a7078d5224870b619489015e4fde060acad0"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--42a2b0ef-6734-4e6c-a1d0-8fb3335bf762",
            "hashes": {
                "MD5": "18e190413af045db88dfbd29609eb877"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--5f5bff32-03f0-4fd0-ac37-9a49ab8d1da6",
            "value": "telloo.io"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--f7da1fa0-deaf-47dd-86e7-cab99879c3fa",
            "value": "bloxholder.com"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--28980718-492a-4cf2-9eba-23dda4b6a8c5",
            "hashes": {
                "MD5": "b450d946b4617dca9f0c2ad4f9a936c9",
                "SHA-1": "1017258005da16f4981ef722e1f35ee0a467751a",
                "SHA-256": "82d6b2e14763f398d2a559d3f7fbf2f7a3c7f9001c8dcdf4543d4ff0b97a8785"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--2d089694-1e59-456a-bdcb-eb33f2d9fedc",
            "hashes": {
                "MD5": "b07dede3d23cbc3b41bd2ecfd194c2b6",
                "SHA-1": "9d7797e1b3f46ba5a2f050a2efabd4bce742528a",
                "SHA-256": "4c5611d63fd78a2de9591d7b4d70c574d1f534a2aec86bb70bd49e60fafd54ea"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b32640ef-707a-4ddf-a11b-23364ac7340f",
            "hashes": {
                "MD5": "fe97c113301e79932b65ce87439d464b",
                "SHA-1": "2f9e1236be80dc727d1f3734c9cd81dd7faef7c1",
                "SHA-256": "90b0a4c9fe8fd0084a5d50ed781c7c8908f6ade44e5654acffea922e281c6b33"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--f53cca8a-4c35-40ea-b179-d3f432f61961",
            "hashes": {
                "MD5": "245bb604621cea7962668325995bca7c",
                "SHA-1": "cc5544eff3e5b9cf20d8cf2291147596d4346dbe",
                "SHA-256": "eee4e3612af96b694e28e3794c4ee4af2579768e8ec6b21daf71acfc6e22d52b"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--eae2addf-71b2-48d7-826a-82d522e297c5",
            "hashes": {
                "SHA-256": "a0db8f8f13a27df1eacbc01505f311f6b14cf9b84fbc7e84cb764a13f001dbbb"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--40503d22-5192-4f23-9226-9bbeb02319fb",
            "hashes": {
                "MD5": "8077b9696bfeae73e5238868e4aaa161",
                "SHA-1": "733c81f6a20acfc0c3168cd457a720259bc8498d",
                "SHA-256": "636813038ba5c9755aa881ae62e2911df3b8f84ad1d2ff682e325e00d24d4a74"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--e95c9645-9278-4040-ab3c-9789a1f71540",
            "hashes": {
                "MD5": "aa71a7a597e71b8fca56f30c329c8b5c",
                "SHA-1": "89c95bf758d3b2a42a75ef28624957b30a2fe667",
                "SHA-256": "efaf52549ffcc8a16373a8f7f0bddebabc3edc17f71b0158bbaf89c1b29a6043"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--fe84a293-f9ab-43f2-9e8c-b205b91d7421",
            "hashes": {
                "MD5": "e66bc1e91f1a214d098cf44ddb1ae91a",
                "SHA-1": "5d7022006d7dc90d97c01041107d70b2c58131e5",
                "SHA-256": "2e8d2525a523b0a47a22a1e9cc9219d6526840d8b819d40d24046b17db8ea3fb"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b476a840-c7a1-4cde-bcba-1e774835b551",
            "hashes": {
                "MD5": "51871504c1d5c09ade5e2a1e6e98c37a",
                "SHA-1": "ae34fa6c6baf77390fb3ff683d880cde14bf893d",
                "SHA-256": "17e6189c19dedea678969e042c64de2a51dd9fba69ff521571d63fd92e48601b"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--fd310e69-6212-4bd8-a1ef-3e5849ba2ebc",
            "value": "haasonline.com"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--bf50d0a5-2102-5377-a684-13b3f5a023c4",
            "created": "2026-10-09T10:48:56.693794Z",
            "modified": "2026-10-09T10:48:56.693794Z",
            "name": "AppleJeus"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b",
            "created": "2026-10-09T10:48:56.694469Z",
            "modified": "2026-10-09T10:48:56.694469Z",
            "name": "Lazarus"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--70496c59-14ca-4a20-841c-965823ac3878",
            "created_by_ref": "identity--cb43c38b-3374-49f0-afd4-899e66835d60",
            "created": "2026-10-09T10:48:56.694773Z",
            "modified": "2026-10-09T10:48:56.694773Z",
            "name": "Buyer Beware: Fake Cryptocurrency Applications Serving as Front for AppleJeus Malware",
            "published": "2022-12-01T00:00:00Z",
            "object_refs": [
                "identity--cb43c38b-3374-49f0-afd4-899e66835d60",
                "file--bd61a995-742b-4968-8617-912bd5a0f715",
                "file--ca93c61b-7b81-4a49-9fab-4ff7c4d3d18d",
                "domain-name--94648ddc-b36f-4fba-b677-f505b837738b",
                "url--aa75a5bb-c8ca-49ce-a821-25aeb3491384",
                "domain-name--92cc17ac-90c9-4cc1-8981-73d62ad5bc4e",
                "file--e8b34e31-87d6-4837-ab56-c9580f9dfaa2",
                "file--c495955d-8bfe-4ea2-a0b2-e550ccf321a5",
                "domain-name--ce341c5b-0017-42ce-b95f-0826b6c4be6d",
                "domain-name--7a6ebb44-51c2-43d5-bcc3-2f8e9f9f0b43",
                "file--fbf9633b-5069-4f7e-9c30-9675b3615b59",
                "file--29ed2984-f99f-4499-a696-bc13066a00be",
                "file--2ad5d6ac-084e-4cde-a801-aeb671bcbf29",
                "file--b8c15c1a-5b76-415c-acca-26dad2eaa3ac",
                "file--42a2b0ef-6734-4e6c-a1d0-8fb3335bf762",
                "domain-name--5f5bff32-03f0-4fd0-ac37-9a49ab8d1da6",
                "domain-name--f7da1fa0-deaf-47dd-86e7-cab99879c3fa",
                "file--28980718-492a-4cf2-9eba-23dda4b6a8c5",
                "file--2d089694-1e59-456a-bdcb-eb33f2d9fedc",
                "file--b32640ef-707a-4ddf-a11b-23364ac7340f",
                "file--f53cca8a-4c35-40ea-b179-d3f432f61961",
                "file--eae2addf-71b2-48d7-826a-82d522e297c5",
                "file--40503d22-5192-4f23-9226-9bbeb02319fb",
                "file--e95c9645-9278-4040-ab3c-9789a1f71540",
                "file--fe84a293-f9ab-43f2-9e8c-b205b91d7421",
                "file--b476a840-c7a1-4cde-bcba-1e774835b551",
                "domain-name--fd310e69-6212-4bd8-a1ef-3e5849ba2ebc",
                "threat-actor--bf50d0a5-2102-5377-a684-13b3f5a023c4",
                "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.volexity.com/blog/2022/12/01/buyer-beware-fake-cryptocurrency-applications-serving-as-front-for-applejeus-malware"
                }
            ]
        }
    ]
}