{
    "type": "bundle",
    "id": "bundle--e6bc538f-37b2-4030-acc3-67e8143a41cc",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--e0838585-a593-4bba-b343-01d5109c5f12",
            "created": "2023-07-14T00:26:44.833378Z",
            "modified": "2023-07-14T00:26:44.8334Z",
            "name": "Tencent",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--3974cfd4-bbfe-48d5-8215-5477cfc10bd3",
            "hashes": {
                "MD5": "46f3540f9a850d3114261e9f1c88100d",
                "SHA-1": "d0e06b006df4a3baea40fc9c949f52011c8f7a29",
                "SHA-256": "e94fa697d8661d79260edf17c0a519fae4b2a64037aa79b29d6631205995fdad"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--e3d81a4a-8613-467b-a6de-696083353374",
            "hashes": {
                "MD5": "68b080cdc748e9357e75a65fba30eaa7",
                "SHA-1": "48728a243a8abcab2837e907640925e45f4cf8c6",
                "SHA-256": "8da5b75b6380a41eee3a399c43dfe0d99eeefaa1fd21027a07b1ecaa4cd96fdd"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--b8293381-d768-492f-b7ef-78c2b4c75f26",
            "value": "clean.1apps.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--242d00c3-0390-4a8f-bfcb-f497595e39a3",
            "value": "ftpupload.net"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--ef8a57e0-51c5-4bbb-9bd7-426a441d89fa",
            "value": "185.27.134.11"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--8ae2d235-0352-4431-89d3-0e9a2c23aa62",
            "value": "5.252.198.93"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--edb9d3f6-de0e-4c38-82e4-be1bc9136c34",
            "value": "alabamaok0515.1apps.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--4d367bf1-5ede-46d6-af10-b9d97ed2fbee",
            "value": "fighiting1013.org"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--d64dc39f-24c4-4bef-a715-cffd6d301b22",
            "value": "071790.000webhostapp.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--a3dca3f1-df3b-43a6-9d47-f6d4ba0147d3",
            "value": "881.000webhostapp.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--deb29e29-322a-4074-ab1a-a604bb420aeb",
            "value": "attach10132.1apps.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--11860d30-4776-40ee-b4d7-c49c736ce907",
            "value": "mail.naver-download.com"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--b3b7c840-2c7b-4b89-bb1f-9d0cb7870151",
            "value": "http://clean.1apps.com/4.txt"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--11f910d4-30e3-4c41-a99b-835443a4095a",
            "value": "http://clean.1apps.com/1.txt"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--9081b5b7-4039-497d-bde7-2b32c9526d86",
            "hashes": {
                "MD5": "c0c007ce1a2d9fb8420c421d419f9f87",
                "SHA-1": "186baabda13ad1a97d58c563c7671301add1a4db",
                "SHA-256": "33eeaf2f78e05a4911cf57c7ec52edf1ee48c308b58ce2ba46b0a3ee905bdfc7"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--08977db3-7c6d-47a5-952c-fbecbd80f9eb",
            "hashes": {
                "MD5": "a5406729bf6acda782022ac5486436c3",
                "SHA-1": "e3d0f7e724a69ab79b960308a78dc54199eeefe9",
                "SHA-256": "eb7886c963720d65e28bdff12b268ae16051fcde9d5e0acf10012afecdf5d0b9"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--00936fa1-8ae3-4fc9-abfd-588b0f0a5c77",
            "hashes": {
                "MD5": "51ce85fdf98e29acf3cce5493888b6bb",
                "SHA-1": "2e008f8a555fea20083c5344570393fee01d4b62",
                "SHA-256": "c9c8df7d50f98cbe32332b2a57eb258e80b72be082004dfa48b4b1571d2b6059"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--9520c1bf-d2d9-49c2-91f4-4cdcc1bb63c9",
            "hashes": {
                "MD5": "ed527d42819ad7ed9bbaa2791e8bb445",
                "SHA-1": "1bf7de94455a96d8f8709e3e27b82d95dbc39e86",
                "SHA-256": "eff8310ab03543ba265f02d0721e97fb3ea7aaf11a376c396713d7cd5df659bb"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c90241ef-9153-478b-a117-dc94234cfde2",
            "hashes": {
                "MD5": "a9bd8c69ba5ea70002e776c9f618157b",
                "SHA-1": "4b9c223824ce5d08508ec1be43d57509b313b654",
                "SHA-256": "f521b34d4b330ffb42284dc267b154da670139b41c79fc05700ff515f13e9e14"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--953c4a0d-1e16-49bc-a889-e86bc54eb874",
            "hashes": {
                "MD5": "9768b1208506e7f026625be173cdb2ee",
                "SHA-1": "d8840123c36a026200ffc59d3a912f77ee08c7a5",
                "SHA-256": "32dade4c9d07487883a5eed07be98d4b2a954536b9d9155a6d367ec1efdefe90"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--02846492-2453-42d1-b18d-6d520a4d1c84",
            "hashes": {
                "MD5": "63dc47d134d7dade7fa3e290d879eba4",
                "SHA-1": "8f4cdf5aca03a075801766112f88b1154f3de186",
                "SHA-256": "4f166d95a91d3251d086f6f0918a8f17cb44a353f800e07dc8eaeb79ff8e4036"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--bf6c1dee-6762-4d21-9e6e-0bc62b6d7962",
            "hashes": {
                "MD5": "a59dbf872d4d275415caed24f93a4d02",
                "SHA-1": "cb4256e40b3d5ca5258f6f9f0f5f656ade1490f1",
                "SHA-256": "bd66db626ed1190fc316849fb95122d589cf9fbd92f4e32b19961a435b1408e1"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c4b28e07-c0a5-4e18-a394-0cb104879cc2",
            "hashes": {
                "MD5": "237026e58e0ac6ce109d874d43d3d64e",
                "SHA-1": "055c30bdbbbf265a16abc9196579450ae7c7bf4b",
                "SHA-256": "367e347bbbad0a8f612973803a84aeeb6ba4db270277c7ad3e8799a733640746"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ab3d6174-fda5-4ea1-844b-30d05bc1a7a2",
            "hashes": {
                "MD5": "2df5a0be61f9b09f380a3fc20945afc0",
                "SHA-1": "afd296ad304eef1a4c3249909a49513fedbff0c1",
                "SHA-256": "1333706bd1de43150b46af308deb89676532e68da00dfb8a127d492a731af453"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6020aa8a-d77f-43ac-baa1-4f301d86a6f2",
            "hashes": {
                "MD5": "43cbadadaead6f11295bf8843bd909ed",
                "SHA-1": "8780add8f6d943e43892be470436859734af462b",
                "SHA-256": "6e3856d907dc10621e967e3b805dbe8af0ceadaee0e946d479079e62f2dba64b"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--0820e907-059c-45fe-bb1c-4b24543c3709",
            "hashes": {
                "MD5": "5968b80e0567a25909273ccf3527dd83",
                "SHA-1": "069d80378ca58f4a6271b0bae30a8abdfcb92df9",
                "SHA-256": "c1032dafeceabce411ff1ff74738a64411fe19c7709ed7c892acc22e0c6b6ea1"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--2787799d-0341-4cb6-ab1a-2bd087f8c3d9",
            "hashes": {
                "MD5": "0072b08eb4c1fe2201c52e26833beeb0",
                "SHA-1": "8cf34701341cf045f598938f9ffa0d7dabdda8c3",
                "SHA-256": "c1de680c9e8af523173bdb5695e45cef77ddc5e07a89978a5c77c950ffa4887a"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--e5fe1bfb-61ae-44a4-aaae-6b2b8d643b38",
            "hashes": {
                "MD5": "eb800f555ad690d99d34b1a3b05f610a",
                "SHA-1": "087ba6d78fe7e955287372d98501b2290bfc5771",
                "SHA-256": "993a03e9e7a57b3f616ff108aa90ab07d106428def3617d54a5f905fd8abb633"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--005acda3-59ce-4b8d-86cb-27bcd3885997",
            "value": "https://071790.000webhostapp.com/vic/1.txt"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--b2cceb7b-eeed-44e7-8187-ca553ee269e3",
            "value": "http://tgbabcrfv.1apps.com/1.txt"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--18f25b51-51bc-4f23-b869-4b52039d2829",
            "value": "http://csewater.co.kr/workfolder/work/monitor/setup.txt"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--aadde367-7205-43fe-9dab-bcacf11854cd",
            "value": "http://fighiting1013.org/2/modif8.doc"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--23a20c83-564a-4060-bbb4-d58b2ac52e1c",
            "value": "http://csewater.co.kr/workfolder/work/monitor/1.txt"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--78376880-feb5-4be9-8fdd-546bef2405b2",
            "value": "csewater.co.kr"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--aae09c86-f818-49fc-bc1c-cf7dedee472d",
            "value": "http://fighiting1013.org/2/sp.exe"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--a1ade828-892d-45ce-b4f6-92bfe8885b28",
            "value": "tgbabcrfv.1apps.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--21c43aed-85a7-45e2-87b4-d561c5a2653c",
            "value": "charley-online.com"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--9aa4e19a-123a-4b3f-a733-c329a003a735",
            "hashes": {
                "MD5": "fb42ddf48bc581fb9aa8d13f1e4636d1",
                "SHA-1": "3cd40467d1066f19689585e5285f2a5cb233c113",
                "SHA-256": "8b6b4a0e0945c6daf3ebc8870e3bd37e54751f95162232d85dc0a0cc8bead9aa"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--2a28dd07-c03c-41ab-840c-f2af0a628566",
            "hashes": {
                "MD5": "268fb8da9c7d4c18d0ea1e9a3cbbc449",
                "SHA-1": "e02213b65745e6cd13328132c95fe60f02f1440f",
                "SHA-256": "3869c738fa80b1e127f97c0afdb6c2e1c15115f183480777977b8422561980dd"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--2d189c78-0547-4fe8-9b9e-cb727213babc",
            "hashes": {
                "MD5": "f2d2a2ea4654b2369378fae0b4b9574d",
                "SHA-1": "20d8f5f7827e4b02c580fb1e79e35595dc5c2264",
                "SHA-256": "dca9bd1c2d068fc9c84a754e4dcf703629fbe2aa33a089cb50a7e33e073f5cea"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--af29ccc6-45c9-40a7-8e40-18c7af756ce0",
            "hashes": {
                "MD5": "c2c2a8e9c5b8298d77a225bf3476b7ae",
                "SHA-1": "0d8e847cd296d7b208a5874800dbf1e4548f6134",
                "SHA-256": "6c591dddd05a2462e252997dc9d1ba09a9d9049df564d00070c7da36e526a66a"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--88880300-fba8-4d67-9c78-204f27f82b87",
            "hashes": {
                "MD5": "d896402609e63fc48c7f2433b10c1038",
                "SHA-1": "2f9cf7f652c95cc427c14e1771bd4ce80e14635b",
                "SHA-256": "ba78f0a6ce53682942e97b5ad7ec76a2383468a8b6cd5771209812b6410f10cb"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--4db2fe25-84ca-40b6-b7d6-33fe62ef9674",
            "hashes": {
                "MD5": "7d842177155e20b7b42b0a68ba9081e3",
                "SHA-1": "1d14f51c4e81b120d2e84b808a5e5b583dbd7739",
                "SHA-256": "e527ade24beacb2ef940210ba9acb21073e2b0dadcd92f1b8f6acd72b523c828"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--142f7326-79da-482e-9d92-24eee7f3db13",
            "hashes": {
                "MD5": "f38d61237d4ecfb87b58cfcd4fd9dd44",
                "SHA-1": "94d999ff80f4db08ce8a7004efe35d544e7a9aec",
                "SHA-256": "42e18ef3aaadac5b40a37ec0b3686c0c2976d65c978a2b685fefe50662876ded"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6190ea46-542d-4a78-902e-63df72ab9d1d",
            "hashes": {
                "MD5": "dabccfdd50e593a8cb961a39296f0edf",
                "SHA-1": "c12e1dc17c5e4219a64947ecd2bed64404de7c64",
                "SHA-256": "7d443434c302431734caf1d034c054ad80493c4c703d5aaeafa4a931a496b2ae"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b172f645-781f-47c8-b7c7-bfc84d1288d7",
            "hashes": {
                "MD5": "3e4015366126dcdbdcc8b5c508a6d25c",
                "SHA-1": "f459f9cfbd10b136cafb19cbc233a4c8342ad984",
                "SHA-256": "aef92be267a05cbff83aec0f23d33dfe0c4cdc71f9a424f5a2e59ba62b7091de"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--a6921277-ba9c-495a-9487-d8a9a8e45606",
            "value": "http://s8877.1apps.com/vip/1.txt"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--a2662fa0-ed4a-4ef5-9782-f901c64166cf",
            "value": "http://a7788.1apps.com/att/1.txt"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--315ba504-dbee-4c0d-880a-5130b7f86e1a",
            "value": "s8877.1apps.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--57fac338-850d-4e72-9ea0-2a8e6e902c4f",
            "value": "a7788.1apps.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--d6fb96ca-ddcf-4e9d-809a-104eb575fea2",
            "value": "hanbosston.000webhostapp.com"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--16747ab0-d5f4-51c3-b6b6-5f0dfdb280d9",
            "created": "2026-10-10T15:05:20.298379Z",
            "modified": "2026-10-10T15:05:20.298379Z",
            "name": "Hermit"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--0c54bd6d-4e4d-43d3-a6c2-1dec4fd748a2",
            "created_by_ref": "identity--e0838585-a593-4bba-b343-01d5109c5f12",
            "created": "2026-10-10T15:05:20.299526Z",
            "modified": "2026-10-10T15:05:20.299526Z",
            "name": "Hermit\uff08\u9690\u58eb\uff09\u6d3b\u52a8\u7eed\uff1a\u7ee7\u7eed\u9488\u5bf9\u671d\u9c9c\u534a\u5c9b\u8fdb\u884c\u7684APT\u653b\u51fb\u6d3b\u52a8",
            "published": "2019-05-24T00:00:00Z",
            "object_refs": [
                "identity--e0838585-a593-4bba-b343-01d5109c5f12",
                "file--3974cfd4-bbfe-48d5-8215-5477cfc10bd3",
                "file--e3d81a4a-8613-467b-a6de-696083353374",
                "domain-name--b8293381-d768-492f-b7ef-78c2b4c75f26",
                "domain-name--242d00c3-0390-4a8f-bfcb-f497595e39a3",
                "ipv4-addr--ef8a57e0-51c5-4bbb-9bd7-426a441d89fa",
                "ipv4-addr--8ae2d235-0352-4431-89d3-0e9a2c23aa62",
                "domain-name--edb9d3f6-de0e-4c38-82e4-be1bc9136c34",
                "domain-name--4d367bf1-5ede-46d6-af10-b9d97ed2fbee",
                "domain-name--d64dc39f-24c4-4bef-a715-cffd6d301b22",
                "domain-name--a3dca3f1-df3b-43a6-9d47-f6d4ba0147d3",
                "domain-name--deb29e29-322a-4074-ab1a-a604bb420aeb",
                "domain-name--11860d30-4776-40ee-b4d7-c49c736ce907",
                "url--b3b7c840-2c7b-4b89-bb1f-9d0cb7870151",
                "url--11f910d4-30e3-4c41-a99b-835443a4095a",
                "file--9081b5b7-4039-497d-bde7-2b32c9526d86",
                "file--08977db3-7c6d-47a5-952c-fbecbd80f9eb",
                "file--00936fa1-8ae3-4fc9-abfd-588b0f0a5c77",
                "file--9520c1bf-d2d9-49c2-91f4-4cdcc1bb63c9",
                "file--c90241ef-9153-478b-a117-dc94234cfde2",
                "file--953c4a0d-1e16-49bc-a889-e86bc54eb874",
                "file--02846492-2453-42d1-b18d-6d520a4d1c84",
                "file--bf6c1dee-6762-4d21-9e6e-0bc62b6d7962",
                "file--c4b28e07-c0a5-4e18-a394-0cb104879cc2",
                "file--ab3d6174-fda5-4ea1-844b-30d05bc1a7a2",
                "file--6020aa8a-d77f-43ac-baa1-4f301d86a6f2",
                "file--0820e907-059c-45fe-bb1c-4b24543c3709",
                "file--2787799d-0341-4cb6-ab1a-2bd087f8c3d9",
                "file--e5fe1bfb-61ae-44a4-aaae-6b2b8d643b38",
                "url--005acda3-59ce-4b8d-86cb-27bcd3885997",
                "url--b2cceb7b-eeed-44e7-8187-ca553ee269e3",
                "url--18f25b51-51bc-4f23-b869-4b52039d2829",
                "url--aadde367-7205-43fe-9dab-bcacf11854cd",
                "url--23a20c83-564a-4060-bbb4-d58b2ac52e1c",
                "domain-name--78376880-feb5-4be9-8fdd-546bef2405b2",
                "url--aae09c86-f818-49fc-bc1c-cf7dedee472d",
                "domain-name--a1ade828-892d-45ce-b4f6-92bfe8885b28",
                "domain-name--21c43aed-85a7-45e2-87b4-d561c5a2653c",
                "file--9aa4e19a-123a-4b3f-a733-c329a003a735",
                "file--2a28dd07-c03c-41ab-840c-f2af0a628566",
                "file--2d189c78-0547-4fe8-9b9e-cb727213babc",
                "file--af29ccc6-45c9-40a7-8e40-18c7af756ce0",
                "file--88880300-fba8-4d67-9c78-204f27f82b87",
                "file--4db2fe25-84ca-40b6-b7d6-33fe62ef9674",
                "file--142f7326-79da-482e-9d92-24eee7f3db13",
                "file--6190ea46-542d-4a78-902e-63df72ab9d1d",
                "file--b172f645-781f-47c8-b7c7-bfc84d1288d7",
                "url--a6921277-ba9c-495a-9487-d8a9a8e45606",
                "url--a2662fa0-ed4a-4ef5-9782-f901c64166cf",
                "domain-name--315ba504-dbee-4c0d-880a-5130b7f86e1a",
                "domain-name--57fac338-850d-4e72-9ea0-2a8e6e902c4f",
                "domain-name--d6fb96ca-ddcf-4e9d-809a-104eb575fea2",
                "threat-actor--16747ab0-d5f4-51c3-b6b6-5f0dfdb280d9"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://s.tencent.com/research/report/727.html"
                }
            ]
        }
    ]
}