{
    "type": "bundle",
    "id": "bundle--bcee3ce1-aa5e-4fdb-a00b-dccefcb88217",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--7d04d9c9-63ad-45b0-939f-43c500f20fd3",
            "created": "2023-03-08T12:51:57.449788Z",
            "modified": "2023-10-04T14:12:09.815385Z",
            "name": "Qihoo360",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--305c56e6-7d5d-47ae-8553-4c1092425b3d",
            "hashes": {
                "MD5": "e7caf25de7ce463a6f22ecb8689389ad",
                "SHA-1": "16b3487022b674040227afc8979ffedd2f70b67e",
                "SHA-256": "fe1a734019f0dc714bd3360e2369853ea97c02f108afe963769318934470967b"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--a96631ed-2d73-45ae-902c-9692894350ad",
            "value": "app.at-me.ml"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--ef1c62ee-37dd-4919-a686-24f796553e52",
            "value": "104.128.239.70"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--020d28b4-4656-4081-ab1e-0e521e7032b9",
            "hashes": {
                "MD5": "f0255dfcb932c3072c2489124b25b373",
                "SHA-1": "1302ef3a4b3ebd2127b21ec56e140cfd74aebd93",
                "SHA-256": "97e2f035a2fac5ee8d07a204fcf36edc6417fd8099c66d95f314c05b45a9d34f"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--60ae4425-09bf-4f47-aad2-dd150eeae55b",
            "hashes": {
                "MD5": "b567f7aac1574b2ba3a769702d2f6a1e",
                "SHA-1": "a2d722b2efdea91033037cf5dd5aed8730a010bd",
                "SHA-256": "679a17688cde5d57c4662df12ab134f64931497b87dfffd1cd87fd38ca2feeff"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b9445320-bac8-41e9-96ac-71d195037cce",
            "hashes": {
                "MD5": "c861f25bb943f77a909b33d62bb71926",
                "SHA-1": "576b953cb4fe71adb71a338a42524b0e424824c1",
                "SHA-256": "fd59597169668b90c47d0ad6db1bcd7d778c6d54ee3c42bdd2d86b2d2d34c885"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--248825b1-4551-4dfd-8024-c15389164362",
            "hashes": {
                "MD5": "815c690bfc097b82a8f1d171cd00e775",
                "SHA-1": "fe301ca0bee41580ff1d06a2c33c63cc0a033637",
                "SHA-256": "6184acd90c735783aafd32c3346c94332fa8c0212ec128a61f2764bd224c2535"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--855e9958-14ba-47f5-837d-64666a0a2994",
            "value": "http://app.at-me.ml/index.php?m=b&p1="
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--fc86382c-3f31-407f-8915-33318bf227f8",
            "value": "http://mail.kumb.cf/?query=5"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--1ce2f14a-4e79-4e02-b002-cb25311db325",
            "value": "mail.kumb.cf"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--2094875a-b0ab-468e-92fb-2b5e8afeb451",
            "value": "http://app.at-me.ml/index.php"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--259df80f-d45a-4572-b3e5-9706cbf81653",
            "hashes": {
                "MD5": "7e041b101e1e574fb81f3f0cdf1c72b8",
                "SHA-1": "2dccc8eb48bc7bdbde42cc4450086acac2c6ceeb",
                "SHA-256": "742e04ae5f2cd42cf514abbd1956c5993a3a3b268f4abe6e107f81097a75d509"
            }
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1",
            "created": "2026-10-09T12:02:50.415892Z",
            "modified": "2026-10-09T12:02:50.415892Z",
            "name": "Kimsuky"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--63d1f955-d6ed-491f-ba74-4435db4f3833",
            "created_by_ref": "identity--7d04d9c9-63ad-45b0-939f-43c500f20fd3",
            "created": "2026-10-09T12:02:50.416182Z",
            "modified": "2026-10-09T12:02:50.416182Z",
            "name": "Kimsuky APT\u7ec4\u7ec7\u5bf9\u97e9\u56fd\u56fd\u9632\u5b89\u5168\u76f8\u5173\u90e8\u95e8\u7684\u5b9a\u5411\u653b\u51fb\u6d3b\u52a8\u5206\u6790",
            "published": "2021-06-23T00:00:00Z",
            "object_refs": [
                "identity--7d04d9c9-63ad-45b0-939f-43c500f20fd3",
                "file--305c56e6-7d5d-47ae-8553-4c1092425b3d",
                "domain-name--a96631ed-2d73-45ae-902c-9692894350ad",
                "ipv4-addr--ef1c62ee-37dd-4919-a686-24f796553e52",
                "file--020d28b4-4656-4081-ab1e-0e521e7032b9",
                "file--60ae4425-09bf-4f47-aad2-dd150eeae55b",
                "file--b9445320-bac8-41e9-96ac-71d195037cce",
                "file--248825b1-4551-4dfd-8024-c15389164362",
                "url--855e9958-14ba-47f5-837d-64666a0a2994",
                "url--fc86382c-3f31-407f-8915-33318bf227f8",
                "domain-name--1ce2f14a-4e79-4e02-b002-cb25311db325",
                "url--2094875a-b0ab-468e-92fb-2b5e8afeb451",
                "file--259df80f-d45a-4572-b3e5-9706cbf81653",
                "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.freebuf.com/articles/paper/278762.html"
                }
            ]
        }
    ]
}