{
    "type": "bundle",
    "id": "bundle--0977dc2b-4ecc-4a5c-b778-b497140d6c97",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--eafdd258-8d1a-438d-bbef-6ca0d4a35852",
            "created": "2023-03-08T12:51:41.544512Z",
            "modified": "2025-02-04T10:54:04.972936Z",
            "name": "Ahnlab",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c65f1fd2-9e29-4377-8d78-c8a086db8f36",
            "hashes": {
                "MD5": "aa8936431f7bc0fabb0b9efb6ea153f9",
                "SHA-1": "e9f134a3f4bc5bec1f71906c37f325808b9da2d9",
                "SHA-256": "000e2926f6e094d01c64ff972e958cd38590299e9128a766868088aa273599c7"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--92d9fd0a-047d-4c86-b36f-e183affce1ac",
            "hashes": {
                "MD5": "28ce4d33e7994c2be95816eea5773ed1"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--1ef7530c-0b0c-4de3-aacd-ea497cabe1d6",
            "hashes": {
                "MD5": "0315e137a6e2d658f07af454c63a0af2"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--9e821a22-0556-4394-9b98-fb12adbb6ffa",
            "hashes": {
                "MD5": "73d2899aade924476e58addf26254c2e",
                "SHA-1": "3671eaf95ce83f769ee2bd73f5c1c9e85b34fee1",
                "SHA-256": "cca1705d7a85fe45dce9faec5790d498427b3fa8e546d7d7b57f18a925fdfa5d"
            }
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--795f7e73-27e4-5fce-882a-0da9083fbccb",
            "created": "2026-09-19T09:33:04.869528Z",
            "modified": "2026-09-19T09:33:04.869528Z",
            "name": "Larva-25004"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--aaf25bc3-6209-4f50-8ee1-90480f990fac",
            "created_by_ref": "identity--eafdd258-8d1a-438d-bbef-6ca0d4a35852",
            "created": "2026-09-19T09:33:04.870286Z",
            "modified": "2026-09-19T09:33:04.870286Z",
            "name": "Case of Larva-25004 Group (Related to Kimsuky) Exploiting Additional Certificate - Malware Signed with Nexaweb Certificate",
            "published": "2025-05-24T00:00:00Z",
            "object_refs": [
                "identity--eafdd258-8d1a-438d-bbef-6ca0d4a35852",
                "file--c65f1fd2-9e29-4377-8d78-c8a086db8f36",
                "file--92d9fd0a-047d-4c86-b36f-e183affce1ac",
                "file--1ef7530c-0b0c-4de3-aacd-ea497cabe1d6",
                "file--9e821a22-0556-4394-9b98-fb12adbb6ffa",
                "threat-actor--795f7e73-27e4-5fce-882a-0da9083fbccb"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://asec.ahnlab.com/en/88132/"
                }
            ]
        }
    ]
}