{
    "type": "bundle",
    "id": "bundle--ece8f9df-ff75-434b-b73e-52a8c41e21b0",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--75563814-dcb9-4a65-b3c1-c17c26c84b8b",
            "created": "2026-09-09T20:12:05.97985Z",
            "modified": "2026-09-09T22:07:46.192175Z",
            "name": "MalBeacon",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--3d9abb66-b790-479e-8736-1682f1ddb10e",
            "hashes": {
                "SHA-256": "bc866cfcdda37e24dc2634dc282c7a0e6f55209da17a8fa105b07414c0e7c527"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--8a6a900b-1562-46b8-ac93-4c6415067a5a",
            "hashes": {
                "SHA-256": "c197268f7e7cf2848b8c1ae59bbd0e0c14defe668a2d365302137ea929b47769"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--4b00354e-d6fd-4ae6-a4b3-571ab7771b00",
            "hashes": {
                "SHA-256": "d4688428d0e99fd4f0320d14fdd6ed46445e775b25779cdea8790e6804426ac6"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--fe4a5e5f-db0b-4cae-a272-b7401d263fdf",
            "hashes": {
                "SHA-256": "7c4029b7f1383e25fb1b1ed10292e0bbe024952df2772c1d14f3bfee6ab29984"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--2cb6c444-11b3-4f02-aabd-18cc50801412",
            "hashes": {
                "SHA-256": "75ad8365fce771294258a792fcd6b92be499714626aba0960aa1c1746e8672fd"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--9b4b9212-30ba-48b2-98e3-d3a036f15dd1",
            "value": "https://gitlab.com/test26330331/test"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--5bc5d6df-d5fc-426a-b72b-f62641af7e32",
            "value": "150.251.113.223"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--0b370ee7-fbd7-44cd-866e-72609a647079",
            "value": "23.27.13.135"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--10af5fc0-c232-4297-8cb0-7f0fba15adc9",
            "value": "files.catbox.moe"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--21a5efde-6a09-5457-b095-3687a21fa8b8",
            "created": "2026-09-10T00:22:43.242589Z",
            "modified": "2026-09-10T00:22:43.242589Z",
            "name": "PolinRider"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--db106c76-cf67-4b23-a0f9-33db3c6840ad",
            "created_by_ref": "identity--75563814-dcb9-4a65-b3c1-c17c26c84b8b",
            "created": "2026-09-10T00:22:43.242908Z",
            "modified": "2026-09-10T00:22:43.242908Z",
            "name": "Hands-on-Keyboard Activity from the DPRK \"PolinRider\" Supply Chain Attack",
            "published": "2026-09-09T00:00:00Z",
            "object_refs": [
                "identity--75563814-dcb9-4a65-b3c1-c17c26c84b8b",
                "file--3d9abb66-b790-479e-8736-1682f1ddb10e",
                "file--8a6a900b-1562-46b8-ac93-4c6415067a5a",
                "file--4b00354e-d6fd-4ae6-a4b3-571ab7771b00",
                "file--fe4a5e5f-db0b-4cae-a272-b7401d263fdf",
                "file--2cb6c444-11b3-4f02-aabd-18cc50801412",
                "url--9b4b9212-30ba-48b2-98e3-d3a036f15dd1",
                "ipv4-addr--5bc5d6df-d5fc-426a-b72b-f62641af7e32",
                "ipv4-addr--0b370ee7-fbd7-44cd-866e-72609a647079",
                "domain-name--10af5fc0-c232-4297-8cb0-7f0fba15adc9",
                "threat-actor--21a5efde-6a09-5457-b095-3687a21fa8b8"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://blog.deception.pro/blog/hok-dprk-polinrider-sep-2026"
                }
            ]
        }
    ]
}