{
    "type": "bundle",
    "id": "bundle--b9f57f41-4bb0-4972-baf3-b329d544b3c2",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--018ab958-b94d-441e-991f-a101a5144848",
            "created": "2023-03-08T12:51:42.869471Z",
            "modified": "2024-11-07T23:01:18.079469Z",
            "name": "SentinelOne",
            "identity_class": "organization"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--a6abb95e-1f4d-465a-ba92-31c182a1d752",
            "value": "https://github.com/Steed-LHV/assessment"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--64846bac-5beb-4132-b96e-490789c2a737",
            "value": "https://github.com/RyanLRay/Technical-Assessments/blob/19af09ebe8b7ad03419677dda515507dd099bc39/README.md?plain=1#L175"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--9b6b83b8-abf8-4e43-a512-a126558849a8",
            "value": "https://github.com/chainstacker/Northwind-IAC/blob/930e5be6d34511bedbfb0d762bd08fffe64e9630/aws/us-east-1/prod/northwind/global/vpc/.terraform.lock.hcl"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--2bd26cb7-9608-4277-a175-8f48daea5499",
            "value": "https://github.com/radupopa369/gtn-candidate-repo/blob/feat/three-tier-infrastructure/live/.terraform.lock.hcl"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--5135fc16-8b1d-4548-931f-17f7faafbbde",
            "value": "https://github.com/exubient0/terraform-candidate-repo/blob/main/.terraform.lock.hcl"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--10425500-81f6-4a84-ad98-fbf1a9bb27d2",
            "value": "www.tinklify.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--c7b89536-bfa1-4b74-b61a-8dbb7a51a205",
            "value": "www.mactroubleshoots.pro"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--1aad23ab-642b-495e-88b2-3ff509c36706",
            "value": "www.heyhay.online"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--dd771713-b453-4329-b186-2847a6e0949c",
            "value": "www.freehealth.lat"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--30083420-e556-4ef9-89ca-87c36144d5c1",
            "value": "www.anesthesiaschool.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--1f14f248-0c39-44a9-9740-86a65e4aa047",
            "value": "wss.sytes.net"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--fa8dab9c-348f-4caf-8f85-31bd2888c71a",
            "value": "vaimage.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--8b6ae264-feca-4523-afeb-c133bc42cf3a",
            "value": "update.heyhay.online"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--0bb2d9b2-5b0f-4b9e-8f4c-ff96252c6161",
            "value": "tinklify.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--c6ece961-fb01-4ebc-aa0f-2d5a93031522",
            "value": "ns4.galaxy-royal.online"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--c85e744a-6075-401b-8e26-a6f9913418f9",
            "value": "mx01.galaxy-royal.online"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--f6b1cdb8-85f1-469e-8498-bef8d87df2bd",
            "value": "mactroubleshoots.pro"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--79d3bf0c-1fe4-4280-9e48-d236c4094fa2",
            "value": "game.galaxy-royal.online"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--19c643f8-a7c7-4ff2-99c9-5660ce2628f1",
            "value": "galaxy-royal.online"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--2a3187bc-7753-4652-83a1-5eb3c2c8f251",
            "value": "dela.servehttp.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--e6c8b4de-f3a5-494c-855d-052c6d061412",
            "value": "heyhay.online"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--70a068a1-5626-49cf-82fe-4e305af92f57",
            "value": "app.heyhay.online"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--8696d438-7575-4755-b383-b7209ec7c91f",
            "value": "anesthesiaschool.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--23ee8ece-f38d-46f7-85f5-2a12e2d5aded",
            "value": "213-111-146-132.cprapid.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--97326bc8-4acb-4c16-8e9e-49b725702200",
            "value": "185-66-91-112.cprapid.com"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--1054198b-99d6-4c93-ba11-6b4e2136c2c7",
            "value": "85.137.56.10"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--070c1b3c-08f2-470e-9d14-ac9ddcdd1ad9",
            "value": "45.11.59.140"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--f1905976-bebc-416c-860d-9e27a8232541",
            "value": "176.97.114.232"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--29671156-c149-4b7c-8bb9-25113b458881",
            "value": "85.137.56.245"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--d9bbf2ec-92c5-420c-8657-5fc5c42eed81",
            "value": "grenight.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--ed47178f-2b1a-4e3c-b5de-d0be7a7f496c",
            "value": "storage.hubpage.cloud"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--ca13a6ca-d336-41b7-8504-376b14b5515a",
            "value": "technicais.sytes.net"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--93d9aab2-fa65-4904-85c8-86b4911c813e",
            "value": "registry.hashicorp-terraform.io"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--a7eaf3dd-2403-44d5-8746-c95a5e6b21eb",
            "value": "registry.hashicorp-aws.io"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--1988d996-0e02-42a4-bd24-ac1729ff54b9",
            "value": "registry.hashicorp-aws.com"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--9df8aba7-12ef-4d96-a265-c78f5703377b",
            "hashes": {
                "SHA-1": "4ad92bf92ee614b05c340ce17bef7b6ef5a25e82"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--e9902332-0aff-4143-b88b-e8086f5faa7a",
            "hashes": {
                "SHA-256": "4b2d3e8ccce8920a6d01e7d02b84236545a20e5f754b3eec253f8b416b731daa"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--2c85b079-175e-4610-a2d3-3628ce251de7",
            "hashes": {
                "SHA-1": "5728b11d30586bbfc1d8bd12df1c722a06e767a2"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7765e4de-39db-4ff1-8b45-6eb5c203786c",
            "hashes": {
                "SHA-1": "02df07a173ab03b82a4fb6a08973fff8b1467f28"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d0203717-1bf7-4da9-8977-b359e13bc604",
            "hashes": {
                "MD5": "d95dede4387ff516f4c23351c450427d",
                "SHA-1": "c491d477dbe0ae04e9aed9dbe237144c03f73ec4",
                "SHA-256": "77b4fd46994992f0e57302cfe76ed23c0d90101381d2b89fc2ddf5c4536e77ca"
            }
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--8a41ce71-b2d4-5fc7-9a01-40a7672a1fc9",
            "created": "2026-09-19T08:12:59.750186Z",
            "modified": "2026-09-19T08:12:59.750186Z",
            "name": "TraderTraitor"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--b9dde916-f4ed-40c4-beb5-7fd9534c9849",
            "created_by_ref": "identity--018ab958-b94d-441e-991f-a101a5144848",
            "created": "2026-09-19T08:12:59.752323Z",
            "modified": "2026-09-19T08:12:59.752323Z",
            "name": "Don\u2019t Call Us, We\u2019ll Call Your APIs | TraderTraitor Backdoors Resurface on Victim With No Crypto Ties",
            "published": "2026-09-18T00:00:00Z",
            "object_refs": [
                "identity--018ab958-b94d-441e-991f-a101a5144848",
                "url--a6abb95e-1f4d-465a-ba92-31c182a1d752",
                "url--64846bac-5beb-4132-b96e-490789c2a737",
                "url--9b6b83b8-abf8-4e43-a512-a126558849a8",
                "url--2bd26cb7-9608-4277-a175-8f48daea5499",
                "url--5135fc16-8b1d-4548-931f-17f7faafbbde",
                "domain-name--10425500-81f6-4a84-ad98-fbf1a9bb27d2",
                "domain-name--c7b89536-bfa1-4b74-b61a-8dbb7a51a205",
                "domain-name--1aad23ab-642b-495e-88b2-3ff509c36706",
                "domain-name--dd771713-b453-4329-b186-2847a6e0949c",
                "domain-name--30083420-e556-4ef9-89ca-87c36144d5c1",
                "domain-name--1f14f248-0c39-44a9-9740-86a65e4aa047",
                "domain-name--fa8dab9c-348f-4caf-8f85-31bd2888c71a",
                "domain-name--8b6ae264-feca-4523-afeb-c133bc42cf3a",
                "domain-name--0bb2d9b2-5b0f-4b9e-8f4c-ff96252c6161",
                "domain-name--c6ece961-fb01-4ebc-aa0f-2d5a93031522",
                "domain-name--c85e744a-6075-401b-8e26-a6f9913418f9",
                "domain-name--f6b1cdb8-85f1-469e-8498-bef8d87df2bd",
                "domain-name--79d3bf0c-1fe4-4280-9e48-d236c4094fa2",
                "domain-name--19c643f8-a7c7-4ff2-99c9-5660ce2628f1",
                "domain-name--2a3187bc-7753-4652-83a1-5eb3c2c8f251",
                "domain-name--e6c8b4de-f3a5-494c-855d-052c6d061412",
                "domain-name--70a068a1-5626-49cf-82fe-4e305af92f57",
                "domain-name--8696d438-7575-4755-b383-b7209ec7c91f",
                "domain-name--23ee8ece-f38d-46f7-85f5-2a12e2d5aded",
                "domain-name--97326bc8-4acb-4c16-8e9e-49b725702200",
                "ipv4-addr--1054198b-99d6-4c93-ba11-6b4e2136c2c7",
                "ipv4-addr--070c1b3c-08f2-470e-9d14-ac9ddcdd1ad9",
                "ipv4-addr--f1905976-bebc-416c-860d-9e27a8232541",
                "ipv4-addr--29671156-c149-4b7c-8bb9-25113b458881",
                "domain-name--d9bbf2ec-92c5-420c-8657-5fc5c42eed81",
                "domain-name--ed47178f-2b1a-4e3c-b5de-d0be7a7f496c",
                "domain-name--ca13a6ca-d336-41b7-8504-376b14b5515a",
                "domain-name--93d9aab2-fa65-4904-85c8-86b4911c813e",
                "domain-name--a7eaf3dd-2403-44d5-8746-c95a5e6b21eb",
                "domain-name--1988d996-0e02-42a4-bd24-ac1729ff54b9",
                "file--9df8aba7-12ef-4d96-a265-c78f5703377b",
                "file--e9902332-0aff-4143-b88b-e8086f5faa7a",
                "file--2c85b079-175e-4610-a2d3-3628ce251de7",
                "file--7765e4de-39db-4ff1-8b45-6eb5c203786c",
                "file--d0203717-1bf7-4da9-8977-b359e13bc604",
                "threat-actor--8a41ce71-b2d4-5fc7-9a01-40a7672a1fc9"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.sentinelone.com/labs/dont-call-us-well-call-your-apis-tradertraitor-backdoors-resurface-on-victim-with-no-crypto-ties"
                }
            ]
        }
    ]
}