{
    "type": "bundle",
    "id": "bundle--6fe23ddf-6f78-43d2-a912-d932df0953af",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--6d992553-973c-4d7b-92f5-9cd102f7cd02",
            "created": "2026-01-28T05:26:55.962468Z",
            "modified": "2026-01-28T05:28:30.646254Z",
            "name": "SynapticSecurity",
            "identity_class": "organization"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--d3ee39ff-c0bd-405a-bbb5-27fc26e97627",
            "value": "152.32.138.15"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--dd8b1f48-f48c-4017-8af4-300db29a8b39",
            "value": "176.111.220.168"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--c365dbb3-ba38-48b9-9cf8-cdd2a445e74d",
            "value": "aointerviews.com"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b1036e1c-3aeb-4ab3-882b-a9267a8aa622",
            "hashes": {
                "SHA-256": "962e7a2a0b6ea9926f2198db06aa1d67326a75de7168400f8863fe7a23e51ef8"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--bacb75f2-db72-4880-b23b-d7bedfbda6f2",
            "hashes": {
                "SHA-256": "21781885f9d6ebc5f9e0f828aacbe3db2aaa1c142bda1495b17e723c9912f826"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--ca69ec56-e177-4eea-b3c0-7b30e37f0b17",
            "value": "http://acnms.dmdoc.dynv6.net/smltm/checkservice.php?idx=5"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--a44a4c88-fce5-4cb3-9dc9-3c10e4c7470a",
            "value": "http://acnms.dmdoc.dynv6.net/smltm/finalservice.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--3f09b7a5-20c4-455c-ad2e-87b3dc077591",
            "value": "http://acnms.dmdoc.dynv6.net/smltm/bootservice.php"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--c13349cb-54f4-4c48-8657-3085031779c3",
            "value": "118.194.249.91"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--c16bbcbf-6302-40ff-8dcd-ea763f8a70c5",
            "value": "acnms.dmdoc.dynv6.net"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--3e13ab17-e83e-4596-a3a4-6ca57b755f5d",
            "hashes": {
                "MD5": "e092e459bf259a8fc372d152c4a84245",
                "SHA-1": "4d9e2af49ebd0e4e490b4e2f85797da9244a16a4",
                "SHA-256": "0efbd18c77479b458078521c18bdad84852b71250122a17cb8105c10d3df38d4"
            }
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--765df14f-7680-42c1-9cf1-60464e8dc26c",
            "value": "51.79.185.184"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--4a828611-6c2a-4b6a-bbf0-6d05536ea4d9",
            "hashes": {
                "SHA-256": "26ba5b01f614a215b948a5700338575412dcff2df972b7696b2c8c3f3b74a723"
            }
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1",
            "created": "2026-06-30T21:48:44.368112Z",
            "modified": "2026-06-30T21:48:44.368112Z",
            "name": "Kimsuky"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--63e9682d-38d2-5722-b086-9047600dfd58",
            "created": "2026-06-30T21:48:44.386481Z",
            "modified": "2026-06-30T21:48:44.386481Z",
            "name": "MB-0010"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--c6b3b217-b1c0-495b-b1b6-a61f9bcc6a0a",
            "created_by_ref": "identity--6d992553-973c-4d7b-92f5-9cd102f7cd02",
            "created": "2026-06-30T21:48:44.387483Z",
            "modified": "2026-06-30T21:48:44.387483Z",
            "name": "Inside Kimsuky\u2019s CHM Tradecraft: Multi-Stage Execution and Selective Payload Delivery",
            "published": "2026-06-29T00:00:00Z",
            "object_refs": [
                "identity--6d992553-973c-4d7b-92f5-9cd102f7cd02",
                "ipv4-addr--d3ee39ff-c0bd-405a-bbb5-27fc26e97627",
                "ipv4-addr--dd8b1f48-f48c-4017-8af4-300db29a8b39",
                "domain-name--c365dbb3-ba38-48b9-9cf8-cdd2a445e74d",
                "file--b1036e1c-3aeb-4ab3-882b-a9267a8aa622",
                "file--bacb75f2-db72-4880-b23b-d7bedfbda6f2",
                "url--ca69ec56-e177-4eea-b3c0-7b30e37f0b17",
                "url--a44a4c88-fce5-4cb3-9dc9-3c10e4c7470a",
                "url--3f09b7a5-20c4-455c-ad2e-87b3dc077591",
                "ipv4-addr--c13349cb-54f4-4c48-8657-3085031779c3",
                "domain-name--c16bbcbf-6302-40ff-8dcd-ea763f8a70c5",
                "file--3e13ab17-e83e-4596-a3a4-6ca57b755f5d",
                "ipv4-addr--765df14f-7680-42c1-9cf1-60464e8dc26c",
                "file--4a828611-6c2a-4b6a-bbf0-6d05536ea4d9",
                "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1",
                "threat-actor--63e9682d-38d2-5722-b086-9047600dfd58"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://blog.synapticsystems.de/inside-kimsukys-chm-tradecraft-multi-stage-execution-and-selective-payload-delivery/"
                }
            ]
        }
    ]
}