{
    "type": "bundle",
    "id": "bundle--6e78a25b-f0ea-4919-b7ea-b375787937ae",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--eafdd258-8d1a-438d-bbef-6ca0d4a35852",
            "created": "2023-03-08T12:51:41.544512Z",
            "modified": "2025-02-04T10:54:04.972936Z",
            "name": "Ahnlab",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--debcc98d-0416-4ab3-8f5b-dd9c501cbb57",
            "hashes": {
                "MD5": "27f74072d6268b5d96d73107c560d852",
                "SHA-1": "0c91f681090b1917264c4f53cee1572f2e0fa43c",
                "SHA-256": "562a4d8980acda8411fc1f830cb9bb5bdafd3dd586f871485a27e996bb07ac07"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--8c44b8dc-f2b3-404f-85cd-4074afa8fbe1",
            "hashes": {
                "MD5": "0eb8db3cbde470407f942fd63afe42b8",
                "SHA-1": "b93c13204acb4819c7688f847b1470ac25df52b3",
                "SHA-256": "a39831ecbe0792adf87f63fb99557356ba688e5f6da8c2b058d2a3d0f0d7d1e4"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--74d852b1-56ab-4df2-bd45-5bf3cff2dce9",
            "hashes": {
                "MD5": "2d444b6f72c8327d1d155faa2cca7fd7",
                "SHA-1": "d9144b0da0d1ea7671667ffcd85448436e174486",
                "SHA-256": "ebd20c8c63690965267c97348f4db89cb73c9974c68a586862d73a339a05e677"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--89b4a4fc-7197-4226-ba03-05d3fb7bd8f8",
            "value": "http://bian0151.cafe24.com/admin/board/1.html"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--ee5f563f-b42f-44f2-9c9e-d4eb2b034585",
            "value": "bian0151.cafe24.com"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--2fcd9d7a-3149-4149-96e9-9afcf8bc123c",
            "value": "75.119.136.207"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--d4935025-e2f2-5654-b62f-dd9fdb8d28f9",
            "created": "2026-10-09T12:00:01.457506Z",
            "modified": "2026-10-09T12:00:01.457506Z",
            "name": "RedEyes"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--c571cecc-393e-500e-9d4a-28c0b8dec018",
            "created": "2026-10-09T12:00:01.458226Z",
            "modified": "2026-10-09T12:00:01.458226Z",
            "name": "Scarcruft"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--a5f015ff-1065-4a8b-bf71-b62876e72a5c",
            "created_by_ref": "identity--eafdd258-8d1a-438d-bbef-6ca0d4a35852",
            "created": "2026-10-09T12:00:01.459362Z",
            "modified": "2026-10-09T12:00:01.459362Z",
            "name": "Distribution of Backdoor via Malicious LNK: RedEyes (ScarCruft)",
            "published": "2023-09-06T00:00:00Z",
            "object_refs": [
                "identity--eafdd258-8d1a-438d-bbef-6ca0d4a35852",
                "file--debcc98d-0416-4ab3-8f5b-dd9c501cbb57",
                "file--8c44b8dc-f2b3-404f-85cd-4074afa8fbe1",
                "file--74d852b1-56ab-4df2-bd45-5bf3cff2dce9",
                "url--89b4a4fc-7197-4226-ba03-05d3fb7bd8f8",
                "domain-name--ee5f563f-b42f-44f2-9c9e-d4eb2b034585",
                "ipv4-addr--2fcd9d7a-3149-4149-96e9-9afcf8bc123c",
                "threat-actor--d4935025-e2f2-5654-b62f-dd9fdb8d28f9",
                "threat-actor--c571cecc-393e-500e-9d4a-28c0b8dec018"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://asec.ahnlab.com/en/56756/"
                }
            ]
        }
    ]
}