{
    "type": "bundle",
    "id": "bundle--26dd9363-5acb-431f-9561-dcb301649cb8",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--a6be7899-54b3-431f-951f-bfaac72ee255",
            "created": "2024-07-03T13:22:06.470853Z",
            "modified": "2024-07-03T13:24:45.541423Z",
            "name": "CloudSEK",
            "identity_class": "organization"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--b7470d03-68f4-498c-a882-6b3263cdcd47",
            "value": "http://brightlaunch-ext75642.vercel.app/api/handle"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--7731604c-72b0-4cf2-948b-36a4d8124f0a",
            "value": "http://brightlaunch-ext75642.vercel.app/api/package"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--3d8d895d-649f-4d0f-9460-61f498708076",
            "value": "http://brightlaunch-ext75642.vercel.app/api/g"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--7f3c7ba0-b1f2-4d46-b14a-bb7a6a9a37e3",
            "value": "http://brightlaunch-ext75642.vercel.app/api/tokenw"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--8d422a2a-aba0-461c-a95f-dec55e9b8643",
            "value": "http://brightlaunch-ext75642.vercel.app/api/tokenl"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--9328af0d-362c-4dac-8c83-879010448237",
            "value": "http://brightlaunch-ext75642.vercel.app/api/w"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--ad76d9c8-ebbf-462e-8de9-9e926cb18dd6",
            "value": "http://brightlaunch-ext75642.vercel.app/api/m"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--cc61b4c4-48b5-450c-9923-05728cd16f37",
            "value": "http://brightlaunch-ext75642.vercel.app/api/l"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--2c8c860c-aa9e-440c-9785-8f708373bd24",
            "value": "https://primevector-app924560.vercel.app/api/key?mem=ghappier"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--e605f810-a7c4-4eee-bc31-3775d0ee409a",
            "value": "brightlaunch-ext75642.vercel.app"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--b14b3b2b-eda4-40f1-8e3d-8689389ebcb2",
            "value": "primevector-app924560.vercel.app"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7c115680-b85f-4bc4-acc5-4d9b36d6c64d",
            "hashes": {
                "SHA-256": "e5c7ee2c1a3a2e8ca4a0ccda8376e387f25e410b0ca9550e870694e65c145b4c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--5674b377-34b0-46e6-8425-59cb522af962",
            "hashes": {
                "SHA-256": "b7c0eac8030f829388f4205d2a4c58298f63ec6672db19702dd6b3bbd08cdebd"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--cee10aea-607a-4ee4-a678-2d4abdc6d116",
            "hashes": {
                "SHA-256": "4e1c1b0d2cfc72c9c4f3742e64630f0a2f2e835f197d17a90b6d752310bb0bbc"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--86a835bd-25b3-458d-bb52-7ada585b2165",
            "hashes": {
                "SHA-256": "a434ca08be20d88f4e731bd1085651f7de8e053dbd9966583114c83cb8092c99"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--2672879c-e591-4e1d-be3f-2c8713e7a35b",
            "hashes": {
                "SHA-256": "63b62c6d9c35fed72a518189f63889d7aee9aed2512754b8ec264807c6970592"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--740bca26-5e16-4dd4-8e9d-ea70a6a0ced8",
            "hashes": {
                "SHA-256": "ab851915d7b35e1b64e315f07ee7232d1d49a2349a5686f35dc8fc9bf9c2809e"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--0adfb6e4-880b-4234-818e-88096f2eeff0",
            "hashes": {
                "SHA-256": "ce96b204c0371df053cc6fcfdd9ead0fc0fbbbb23053dad01e2e6d4ef16e4d92"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--98f36f2c-d7f6-4046-b80e-32ec58426b1b",
            "hashes": {
                "SHA-256": "cc8502cb19ef30fe2ce68306e800bbb343e5da6799a57a91d1ebb4cb027029a5"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--16acf6fa-8594-4fb6-b118-8a6861dae1f2",
            "hashes": {
                "SHA-256": "bb36446376455c96b574567b7ee849657d8fe15ace897f460ad3fb867be9aafc"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--45a11a84-1be3-477e-b55c-1888a04c6db1",
            "hashes": {
                "SHA-256": "50ed4f880d6d38ee26f410fc6bd9b734e4857b3a94ee6ef152e7e1158bd83153"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--0f3f1a58-9596-4471-a7e8-faa4e998b1a5",
            "hashes": {
                "SHA-256": "c8337c06f4d3e79dd65aca4058b7a32c763468cdc7df76a849c55395d703a40d"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--0e30f7ff-b69a-4b82-a240-51218f939eec",
            "hashes": {
                "SHA-256": "a85c6955ad689aa89eaae8c8b30723935274f069aed044489cfd922b46bcf2f7"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--e6f54e9b-2bf9-43c4-8d9f-84b342d0ef3d",
            "hashes": {
                "SHA-256": "f2c8234c00b1f5b0b135534bf51207dc0239647890b73531996d60c90cf9e866"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--4c5f415d-58db-4d50-8473-2ec27ef99146",
            "hashes": {
                "SHA-256": "e9045b27557e5019fe44a1d5ae4b77714faa65fef883127ca7db85b7970afab4"
            }
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--716cc18d-309a-4f43-a0e1-929f22c9a283",
            "value": "193.26.115.131"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--f7e017d4-f292-475a-8ef6-42d16a04b3f5",
            "value": "193.247.144.38"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--e0b90d8c-53f3-4695-86fa-78baa09794f7",
            "value": "166.88.73.46"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--21a5efde-6a09-5457-b095-3687a21fa8b8",
            "created": "2026-09-20T14:54:22.901421Z",
            "modified": "2026-09-20T14:54:22.901421Z",
            "name": "PolinRider"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--102f0afc-94a0-4c82-8080-a155fcb91fd9",
            "created_by_ref": "identity--a6be7899-54b3-431f-951f-bfaac72ee255",
            "created": "2026-09-20T14:54:22.902564Z",
            "modified": "2026-09-20T14:54:22.902564Z",
            "name": "GHAPPIER - One loader, sixty-five repositories, twenty-two accounts: an unreported loader family beside DPRK's PolinRider campaign",
            "published": "2026-09-20T00:00:00Z",
            "object_refs": [
                "identity--a6be7899-54b3-431f-951f-bfaac72ee255",
                "url--b7470d03-68f4-498c-a882-6b3263cdcd47",
                "url--7731604c-72b0-4cf2-948b-36a4d8124f0a",
                "url--3d8d895d-649f-4d0f-9460-61f498708076",
                "url--7f3c7ba0-b1f2-4d46-b14a-bb7a6a9a37e3",
                "url--8d422a2a-aba0-461c-a95f-dec55e9b8643",
                "url--9328af0d-362c-4dac-8c83-879010448237",
                "url--ad76d9c8-ebbf-462e-8de9-9e926cb18dd6",
                "url--cc61b4c4-48b5-450c-9923-05728cd16f37",
                "url--2c8c860c-aa9e-440c-9785-8f708373bd24",
                "domain-name--e605f810-a7c4-4eee-bc31-3775d0ee409a",
                "domain-name--b14b3b2b-eda4-40f1-8e3d-8689389ebcb2",
                "file--7c115680-b85f-4bc4-acc5-4d9b36d6c64d",
                "file--5674b377-34b0-46e6-8425-59cb522af962",
                "file--cee10aea-607a-4ee4-a678-2d4abdc6d116",
                "file--86a835bd-25b3-458d-bb52-7ada585b2165",
                "file--2672879c-e591-4e1d-be3f-2c8713e7a35b",
                "file--740bca26-5e16-4dd4-8e9d-ea70a6a0ced8",
                "file--0adfb6e4-880b-4234-818e-88096f2eeff0",
                "file--98f36f2c-d7f6-4046-b80e-32ec58426b1b",
                "file--16acf6fa-8594-4fb6-b118-8a6861dae1f2",
                "file--45a11a84-1be3-477e-b55c-1888a04c6db1",
                "file--0f3f1a58-9596-4471-a7e8-faa4e998b1a5",
                "file--0e30f7ff-b69a-4b82-a240-51218f939eec",
                "file--e6f54e9b-2bf9-43c4-8d9f-84b342d0ef3d",
                "file--4c5f415d-58db-4d50-8473-2ec27ef99146",
                "ipv4-addr--716cc18d-309a-4f43-a0e1-929f22c9a283",
                "ipv4-addr--f7e017d4-f292-475a-8ef6-42d16a04b3f5",
                "ipv4-addr--e0b90d8c-53f3-4695-86fa-78baa09794f7",
                "threat-actor--21a5efde-6a09-5457-b095-3687a21fa8b8"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.cloudsek.com/blog/ghappier-malware-loader-npm-supply-chain-attack"
                }
            ]
        }
    ]
}