{
    "type": "bundle",
    "id": "bundle--8e95cc90-3060-49ac-9cdc-14ffd3863388",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--483c1127-0f26-473b-8bf2-e2f7ab2c0c1f",
            "created": "2023-03-08T12:52:00.332108Z",
            "modified": "2025-02-23T23:00:11.709116Z",
            "name": "Checkpoint",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b868389e-33ef-481d-ab7c-6bf0c3b4d711",
            "hashes": {
                "MD5": "cb675bbebcc4a77cf5a3b341734b84de",
                "SHA-1": "39663e144dc00e3eff004895347a91cb78a6f675",
                "SHA-256": "0e926d8b6fbf6f14a2a19d4d4af843253f9f5f6de337956a12dde279f3321d78"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--14274cb5-b67e-408d-aeba-081219263206",
            "hashes": {
                "MD5": "7336068f2c5ed3ed154b6c8b1d72726a",
                "SHA-1": "e72c90aedd2ef27226d891f464caec19635a6fd3",
                "SHA-256": "5a3f1d14b9cc4890db64fbc41818d7039f25b0120574dcdec4e20d13e6b2740c"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--0cfe75e7-3dce-4731-856b-d3a4c1cdc14b",
            "value": "naver-file.com"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7e126153-fca8-4c2b-a5fe-023b49c386d1",
            "hashes": {
                "MD5": "45aca657889ac60f1ee129c5c8442cdb",
                "SHA-1": "5db63aa4f87c6194d62b2e2e59c54bfcf9fbc9fc",
                "SHA-256": "050c65d45e5f21018aa940f0188c4aa1318ac3df865d901f8643ed7ce4a4b52c"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--b58bdbba-49fa-4bc5-814e-b5b7ca8af7b2",
            "value": "naver-storage.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--5742599d-af59-4b03-8e2e-84b2185537b6",
            "value": "daum-store.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--6e5c4af2-ec54-4b7c-83c8-94ca35eaafcf",
            "value": "nate-download.com"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--30d618d9-b7e1-4c0b-bea5-ed4103b1b968",
            "value": "https://1drv.ms/u/s!AhQMP6eg8aRFb7LU1COCf3xNo"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--1e9e021c-156b-43df-b84b-85161b683413",
            "hashes": {
                "MD5": "85e71578ad7fea3c15095b6185b14881",
                "SHA-1": "5d3e6a8d4bd0cf68c3fc3bdf7836c124538f5e8d",
                "SHA-256": "6753933cd54e4eba497c48d63c7418a8946b4b6c44170105d489d29f1fe11494"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ba6ecfb5-cd5f-44f7-95ed-24830cf4ca52",
            "hashes": {
                "MD5": "7b7c43ed1eb6a423bdcfd0484fe560c3",
                "SHA-1": "fe6722b92f25b0605b0281327c0470bfd03f1398",
                "SHA-256": "732fca9be66ba2c40c5d05845540207b9e1480e609d767aff63895bf49d33a81"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--36a5870c-5524-49d2-9596-b0e206c9b0cc",
            "value": "https://1drv.ms/u/s!AjQNLvEE_CUObPWg-xOdo1EqX"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--2ca9cade-597f-485a-926d-58d5033111ec",
            "value": "https://api.onedrive.com/v1.0/shares/u!aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBalFOTHZFRV9DVU9iUFdnLXhPZG8xRXFYckU_ZT1BM1QwV2Q/root/content"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--85ddfecf-61ca-47a5-b8f1-72e7526a0a6f",
            "hashes": {
                "MD5": "e233e4da734f75388b40fed1717bfb6a",
                "SHA-1": "d38ed1f834c168e5b8759d534d047e0a40aa9db1",
                "SHA-256": "1e0b5d6b85fca648061fdaf2830c5a90248519e81e78122467c29beeb78daa1e"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--1cf4ad02-d383-4add-9df9-f5196c8f6055",
            "value": "https://1drv.ms/i/s!AhXEXLJSNMPTbfzgUMxNbInC6"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--5084eb0a-bc51-4644-b406-a55a2b577d2a",
            "hashes": {
                "MD5": "f948adbdfd39c63d226b0699c8b84bf0",
                "SHA-1": "8a69d2018fe65eea05c108d159c5839f2323e01d",
                "SHA-256": "cb4c7037c7620e4ce3f8f43161b0ec67018c09e71ae4cea3018104153fbed286"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7077b722-a268-4381-83c3-1d6057709723",
            "hashes": {
                "MD5": "5a6f56c3eb7d1ec4e6a0924fb3117554",
                "SHA-1": "f58611c93df7c95786840ecde4514eb1fe587357",
                "SHA-256": "240e7bd805bd7f2d17217dd4cebc03ac37ee60b7fb1264655cfd087749db647a"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--bf557b2a-0bc9-4cab-a1e2-7b29eb0ddedf",
            "hashes": {
                "MD5": "80ed080d170e4da5e2ddbd4a723a65fb",
                "SHA-1": "8c446351121a43f191503ad7b3cc5703426a50b5",
                "SHA-256": "1c5b9409243bfb81a5924881cc05f63a301a3a7ce214830c7a83aeb2485cc5c3"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--5adfbad8-21d0-4715-8c5d-a1c80211aa6a",
            "hashes": {
                "MD5": "ad3699fb5f6b50b83b30e507a8edbf4d",
                "SHA-1": "a61a8b9fbb5cc63e9eeb4984b6e2d464670507fe",
                "SHA-256": "00d88009fa50bfab849593291cce20f8b2f2e2cf2428d9728e06c69fced55ed5"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--af1aedaf-10d1-4e6f-8516-7a9ac7c455eb",
            "hashes": {
                "MD5": "aa8ba9a029fa98b868be66b7d46e927b",
                "SHA-1": "df84ef49d7a50bd04c695489ec5a528155c6caec",
                "SHA-256": "f92297c4efabba98befeb992a009462d1aba6f3c3a11210a7c054ff5377f0753"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--39d73c85-616c-4aa4-aff6-cb29a4640afd",
            "hashes": {
                "MD5": "8fef5eb77e0a9ef2f97591d4d150a363",
                "SHA-1": "babf2d3ad80442138b8563e6f5bb02800ee76eac",
                "SHA-256": "06431a5d8f6262cc3db39d911a920f793fa6c648be94daf789c11cc5514d0c3d"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--0ce01b32-20c8-417a-a469-f4be1180cad3",
            "value": "https://1drv.ms/u/s!Au2my1xh6t8XgR2Mzms8nhRwo-6B?e=jHHC6y"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--acb8e46c-709e-465d-8a0d-5232a0173951",
            "hashes": {
                "MD5": "657fd7317ccde5a0e0c182a626951a9f",
                "SHA-1": "edb782f50c899555506150e097f6346deb3f6fb1",
                "SHA-256": "c5c05f9df89fc803884fed2bd20a3824eae95eeb34a1827bf5210e4ac17beadd"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--9e593ba9-e424-4b6d-a0ca-e28c93cea5cb",
            "hashes": {
                "MD5": "be32725e676d49eaa11ff51c61f18907",
                "SHA-1": "37ee57a1097bbacbece974653c0ec435ee19b4f3",
                "SHA-256": "479894be4c5dec0992ad3c5b21fb1423643996d80d59dcca76386bb325dc811e"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7b9b6263-dc24-4f0e-a7d1-15b835817e4e",
            "hashes": {
                "MD5": "8f106544bfd4755d17a353064666426a",
                "SHA-1": "652af768b1bf3f9730737bdd115bbb88e3a4b977",
                "SHA-256": "3252345b2640efc44cdd98667dbd25806ee2316d1e01eec488fd678e885aa960"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--4a446b94-79c8-4276-9233-0947536c96bd",
            "hashes": {
                "MD5": "bf757d55d6b48ec73851540ca7fe9315",
                "SHA-1": "8a50a4ee479d9ba2f5525fa899420b30296e3ed8",
                "SHA-256": "12ecabf01508c40cfea1ebc3958214751acfb1cd79a5bf2a4b42ebf172d7381b"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--732f5187-f66e-4091-a20c-4b01615fa3c9",
            "value": "https://1drv.ms/u/s!Au2my1xh6t8XdIJlymxomZlWv"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d63e4996-b549-41e5-a496-5d16e65f6e26",
            "hashes": {
                "MD5": "2adc8e6cad8e7ce38a97ea97bffeeb5f",
                "SHA-1": "2b7a3adbba3aa765eba1608d5df52db0be0a038c",
                "SHA-256": "eb03f8b8e41b3ad27ccdecb092111e2c3c010436ad59add42755e2af04762b67"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7fa0c7a0-5f63-4031-90c4-a10c9d09489e",
            "hashes": {
                "MD5": "69da7c34be35ce0f926ea7521d8cbeda",
                "SHA-1": "a9b244723035962f20935afa9b7223efd0cd2988",
                "SHA-256": "9a4c61cdf0e291dc364c568aa161f744f59065efeafc72a3f892e12cbf88fc5b"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ab355a04-64f5-4b81-8d1b-95fa69366442",
            "hashes": {
                "SHA-256": "c4029a2f1d0c07ae2b388b5a4076fba41e57af0dd0d2d0f86844464f22d63861"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--c8fb3fec-ae73-4a23-82e9-d4e7277ab3aa",
            "value": "1erluw.bl.files.1drv.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--68acfcbe-0912-45c1-a0ca-f478e334eaf3",
            "value": "u9izog.dm.files.1drv.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--1c2ff955-b411-4591-b215-e27f34f76012",
            "value": "qb3oaq.bl.files.1drv.com"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--62194a73-a1fc-493b-8b91-d7ed3c2ddfc9",
            "hashes": {
                "MD5": "2cd04d9e11c6e458ec16db1ab810d625",
                "SHA-1": "2d9b50e28864ae47786b3f6bcb2e7218aed2d7df",
                "SHA-256": "6234ef67435dfcb65bd661b5f3bb0b77b82fe6cdd2109b6dfb9dea1b65a17d5d"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--2a155c87-1783-4e7f-bbef-af88e20a8251",
            "hashes": {
                "MD5": "461ce7d6c6062d1ae33895d1f44d98fb",
                "SHA-1": "76e9c63f48121faf26bc1046eac27ec6967e64d4",
                "SHA-256": "70f9216f0c5badb24120f74270dbbc5100b07c4fc6eb45f6652b00882290a73c"
            }
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--3be555f5-1f0d-5001-b84a-c6c910760fd0",
            "created": "2026-10-10T15:02:41.761711Z",
            "modified": "2026-10-10T15:02:41.761711Z",
            "name": "APT37"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--1939f2a9-aa63-439c-8129-3266e8c1303c",
            "created_by_ref": "identity--483c1127-0f26-473b-8bf2-e2f7ab2c0c1f",
            "created": "2026-10-10T15:02:41.762886Z",
            "modified": "2026-10-10T15:02:41.762886Z",
            "name": "CHAIN REACTION: ROKRAT\u2019S MISSING LINK",
            "published": "2023-05-01T00:00:00Z",
            "object_refs": [
                "identity--483c1127-0f26-473b-8bf2-e2f7ab2c0c1f",
                "file--b868389e-33ef-481d-ab7c-6bf0c3b4d711",
                "file--14274cb5-b67e-408d-aeba-081219263206",
                "domain-name--0cfe75e7-3dce-4731-856b-d3a4c1cdc14b",
                "file--7e126153-fca8-4c2b-a5fe-023b49c386d1",
                "domain-name--b58bdbba-49fa-4bc5-814e-b5b7ca8af7b2",
                "domain-name--5742599d-af59-4b03-8e2e-84b2185537b6",
                "domain-name--6e5c4af2-ec54-4b7c-83c8-94ca35eaafcf",
                "url--30d618d9-b7e1-4c0b-bea5-ed4103b1b968",
                "file--1e9e021c-156b-43df-b84b-85161b683413",
                "file--ba6ecfb5-cd5f-44f7-95ed-24830cf4ca52",
                "url--36a5870c-5524-49d2-9596-b0e206c9b0cc",
                "url--2ca9cade-597f-485a-926d-58d5033111ec",
                "file--85ddfecf-61ca-47a5-b8f1-72e7526a0a6f",
                "url--1cf4ad02-d383-4add-9df9-f5196c8f6055",
                "file--5084eb0a-bc51-4644-b406-a55a2b577d2a",
                "file--7077b722-a268-4381-83c3-1d6057709723",
                "file--bf557b2a-0bc9-4cab-a1e2-7b29eb0ddedf",
                "file--5adfbad8-21d0-4715-8c5d-a1c80211aa6a",
                "file--af1aedaf-10d1-4e6f-8516-7a9ac7c455eb",
                "file--39d73c85-616c-4aa4-aff6-cb29a4640afd",
                "url--0ce01b32-20c8-417a-a469-f4be1180cad3",
                "file--acb8e46c-709e-465d-8a0d-5232a0173951",
                "file--9e593ba9-e424-4b6d-a0ca-e28c93cea5cb",
                "file--7b9b6263-dc24-4f0e-a7d1-15b835817e4e",
                "file--4a446b94-79c8-4276-9233-0947536c96bd",
                "url--732f5187-f66e-4091-a20c-4b01615fa3c9",
                "file--d63e4996-b549-41e5-a496-5d16e65f6e26",
                "file--7fa0c7a0-5f63-4031-90c4-a10c9d09489e",
                "file--ab355a04-64f5-4b81-8d1b-95fa69366442",
                "domain-name--c8fb3fec-ae73-4a23-82e9-d4e7277ab3aa",
                "domain-name--68acfcbe-0912-45c1-a0ca-f478e334eaf3",
                "domain-name--1c2ff955-b411-4591-b215-e27f34f76012",
                "file--62194a73-a1fc-493b-8b91-d7ed3c2ddfc9",
                "file--2a155c87-1783-4e7f-bbef-af88e20a8251",
                "threat-actor--3be555f5-1f0d-5001-b84a-c6c910760fd0"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://research.checkpoint.com/2023/chain-reaction-rokrats-missing-link/"
                }
            ]
        }
    ]
}