{
    "type": "bundle",
    "id": "bundle--e266eb4c-12ee-48d1-81a2-40b89250b8d8",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--668e6015-84fd-40d4-bba0-e823fb5e0860",
            "created": "2026-10-19T15:25:35.377866Z",
            "modified": "2026-10-19T23:08:45.797556Z",
            "name": "BlueCyber",
            "identity_class": "organization"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--46760d59-edcd-4d4b-a866-68acdd56165a",
            "value": "23.27.13.72"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--aeabdf54-ad96-4355-8b6b-8edc4c47d425",
            "value": "progressive934.onmicrosoft.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--3b361187-d914-4c8e-adf4-02f406dc813b",
            "value": "helpdesk@progressive934.onmicrosoft.com"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--083a08af-72f6-402d-91c1-20f22a57e534",
            "value": "https://cover.wedencentral.cloudapp.azure.com"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--489c0357-81aa-4f54-bb52-e64c2f2db8af",
            "value": "https://dns1.southafricanorth.cloudapp.azure.com"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--a21844a7-97a4-468d-8672-4d83217d27e1",
            "value": "https://resurce.swedencentral.cloudapp.azure.com"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--f11127af-a673-4fd9-8091-72bf69fa9665",
            "value": "https://seconds.australiaeast.cloudapp.azure.com"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--b8ccdf62-6309-447f-87a1-8c7bdb0fdc40",
            "value": "https://labipt.com"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--3c5e7ef7-a855-4aff-a0a0-c67636ae6b14",
            "value": "https://necropatia.com"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--ee6cd14c-7c76-46b9-8d75-26297432ff90",
            "value": "https://camorreado.click/v7.msi"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--da540f41-0418-4968-8122-84e95f399dec",
            "hashes": {
                "SHA-256": "c16784e2c7b3e3b798addd718850da18f8eb532ab8f352c769a4470d7124805d"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--96654a7a-f007-40b6-8592-5a1980ea7924",
            "hashes": {
                "SHA-256": "d46b4e8d188fe1773c44d38d730dcb6287639568240c765d9ad4ad79cd239e82"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--0cab14ac-59a4-4a54-83cb-2adf68974108",
            "hashes": {
                "SHA-256": "0cb2f7651d50e1ed1a691e82f0297d49444bdded2461e136cffb156d4f234e52"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--620c7ad2-aee5-4995-b2d9-da4e3f7771e7",
            "hashes": {
                "MD5": "dddb4289dec4a4755bfac26a41bb5ffd",
                "SHA-1": "e67f92586f2d9e5a2f9ac45e422d1645e369cee0",
                "SHA-256": "94cb54d53927e4ba469099760db531be563a84d716df69e864062d90f0f2448d"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--37ac1575-5eb7-4500-a510-cf4b219979ea",
            "hashes": {
                "SHA-256": "c2eeb74892408496f5a307a5b1fdc92d94fd014ab4252868f04046bf84718ab6"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--fa867a02-e115-4d5e-b319-28edc5d2caae",
            "hashes": {
                "MD5": "d040d459b452f6a51f9e6e832dcadccb",
                "SHA-1": "5436442852830fcd65b0ba5b4b09d509318555c7",
                "SHA-256": "fc2907fa866f86e0821f75060a331ce69ee10ff3aa374587993b17ba5406fa33"
            }
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--81a355cc-ccb1-42e7-915d-e23e9c8c2114",
            "value": "91.218.183.174"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--b7fd86f2-f06a-4695-95c4-a4372d132b9d",
            "value": "166.88.134.75"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--f7e017d4-f292-475a-8ef6-42d16a04b3f5",
            "value": "193.247.144.38"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--0b370ee7-fbd7-44cd-866e-72609a647079",
            "value": "23.27.13.135"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--e0b90d8c-53f3-4695-86fa-78baa09794f7",
            "value": "166.88.73.46"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--58eae032-cb85-4636-885a-e48bf57667d1",
            "value": "166.88.134.62"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--517f1d6a-514b-592b-8216-43a310ad6d08",
            "created": "2026-10-20T02:37:41.688541Z",
            "modified": "2026-10-20T02:37:41.688541Z",
            "name": "ContagiousInterview"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--356bb04a-7e72-4124-b4e3-33afb4306b30",
            "created_by_ref": "identity--668e6015-84fd-40d4-bba0-e823fb5e0860",
            "created": "2026-10-20T02:37:41.696074Z",
            "modified": "2026-10-20T02:37:41.696074Z",
            "name": "EtherRAT ph\u00e1t t\u00e1n qua gi\u1ea3 m\u1ea1o h\u1ed7 tr\u1ee3 IT tr\u00ean Microsoft Teams: Smart contract Ethereum l\u00e0m c\u01a1 ch\u1ebf ph\u00e2n gi\u1ea3i C&C",
            "published": "2026-10-18T00:00:00Z",
            "object_refs": [
                "identity--668e6015-84fd-40d4-bba0-e823fb5e0860",
                "ipv4-addr--46760d59-edcd-4d4b-a866-68acdd56165a",
                "domain-name--aeabdf54-ad96-4355-8b6b-8edc4c47d425",
                "email-addr--3b361187-d914-4c8e-adf4-02f406dc813b",
                "url--083a08af-72f6-402d-91c1-20f22a57e534",
                "url--489c0357-81aa-4f54-bb52-e64c2f2db8af",
                "url--a21844a7-97a4-468d-8672-4d83217d27e1",
                "url--f11127af-a673-4fd9-8091-72bf69fa9665",
                "url--b8ccdf62-6309-447f-87a1-8c7bdb0fdc40",
                "url--3c5e7ef7-a855-4aff-a0a0-c67636ae6b14",
                "url--ee6cd14c-7c76-46b9-8d75-26297432ff90",
                "file--da540f41-0418-4968-8122-84e95f399dec",
                "file--96654a7a-f007-40b6-8592-5a1980ea7924",
                "file--0cab14ac-59a4-4a54-83cb-2adf68974108",
                "file--620c7ad2-aee5-4995-b2d9-da4e3f7771e7",
                "file--37ac1575-5eb7-4500-a510-cf4b219979ea",
                "file--fa867a02-e115-4d5e-b319-28edc5d2caae",
                "ipv4-addr--81a355cc-ccb1-42e7-915d-e23e9c8c2114",
                "ipv4-addr--b7fd86f2-f06a-4695-95c4-a4372d132b9d",
                "ipv4-addr--f7e017d4-f292-475a-8ef6-42d16a04b3f5",
                "ipv4-addr--0b370ee7-fbd7-44cd-866e-72609a647079",
                "ipv4-addr--e0b90d8c-53f3-4695-86fa-78baa09794f7",
                "ipv4-addr--58eae032-cb85-4636-885a-e48bf57667d1",
                "threat-actor--517f1d6a-514b-592b-8216-43a310ad6d08"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://bluecyber.hashnode.dev/etherrat-malware-bootcamp2026"
                }
            ]
        }
    ]
}