{
    "type": "bundle",
    "id": "bundle--035f5443-bd24-4af4-a1ed-d6d02e213a05",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--c21f9a8f-41e5-4a30-9e6e-0974b6a01bb5",
            "created": "2025-04-06T01:59:19.641157Z",
            "modified": "2025-04-06T02:00:06.336451Z",
            "name": "Seqrite",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--cf3b343e-62cd-4468-a073-e504ba55a64e",
            "hashes": {
                "MD5": "a3353ea094f45915408065d03ae157c4",
                "SHA-1": "1b5e2b292ea3d2a958c4c128fad7304f2e7146f8",
                "SHA-256": "3c2ea04090ad8c28116c42a9a2be5b240f135ac184e5a2c121b4eb311a7bf075"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d3836f6c-34a6-4c5c-8c22-6e09e7850c9f",
            "hashes": {
                "MD5": "1b90eff0b4f54da72b19195489c3af6c",
                "SHA-1": "f8dcc427ba2eb0ced9309cb0cbd2a830c381739a",
                "SHA-256": "28f2fcece68822c38e72310c911ef007f8bd8fd711f2080844f666b7f371e9e1"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--ab06445e-a4c3-4d89-bac1-34f4fac5c3b0",
            "value": "srvdown.ddns.net"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--2eecef7d-1726-4c76-b067-a9a1995ad6b3",
            "hashes": {
                "MD5": "1d64508b384e928046887dd9cb32c2ac",
                "SHA-1": "23cf29e451394d1824046335b2c85eaa2b6e4d0b",
                "SHA-256": "a66c25b1f0dea6e06a4c9f8c5f6ebba0f6c21bd3b9cc326a56702db30418f189"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--e8cf7154-eda2-4563-8f94-0f7f788767b8",
            "hashes": {
                "MD5": "ce4549607e46e656d8e019624d5036c1",
                "SHA-1": "0aa097bc61e7201fe67d793615e1d561a1633158",
                "SHA-256": "f73164bd4d2a475f79fb7d0806cfc3ddb510015f9161e7dce537d90956c11393"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--972041a0-532b-4ea2-bce5-274e4a94225b",
            "value": "cdn.glitch.global"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--1b5e1ba0-1404-4489-8fa5-ef78d058480f",
            "hashes": {
                "MD5": "f0f63808e17994e91fd397e3a54a80cb",
                "SHA-1": "d6ce4707c663d6d6745eb446cd27481f973d8ccb",
                "SHA-256": "12a00489c8c646e2f558778491751dec9fe6ff1339f7705866f0d7a97123055e"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--1086d9fb-83ef-458a-a9a9-726ab107574a",
            "value": "http://srvdown.ddns.net"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--8ffc27c1-00e0-45d8-b9da-ee5577da00f8",
            "value": "https://cdn.glitch.global/"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--981a13cc-b225-422f-9175-79bd7a699624",
            "hashes": {
                "MD5": "64677cae14a2ec4d393a81548417b61b",
                "SHA-1": "d64ab2f19cf00b449f6e357cbeceb6e245cb71c7",
                "SHA-256": "b1f9b450b97320de54f2450ace151b4f16444dc871f5e89487d52d862ce13cc2"
            }
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1",
            "created": "2026-09-20T11:03:51.654066Z",
            "modified": "2026-09-20T11:03:51.654066Z",
            "name": "Kimsuky"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--d6a5af87-fe3f-41f1-9bc8-7517a17efbe8",
            "created_by_ref": "identity--c21f9a8f-41e5-4a30-9e6e-0974b6a01bb5",
            "created": "2026-09-20T11:03:51.658485Z",
            "modified": "2026-09-20T11:03:51.658485Z",
            "name": "Kimsuky APT Targets South Korea with Deceptive PDF Lures",
            "published": "2025-04-04T00:00:00Z",
            "object_refs": [
                "identity--c21f9a8f-41e5-4a30-9e6e-0974b6a01bb5",
                "file--cf3b343e-62cd-4468-a073-e504ba55a64e",
                "file--d3836f6c-34a6-4c5c-8c22-6e09e7850c9f",
                "domain-name--ab06445e-a4c3-4d89-bac1-34f4fac5c3b0",
                "file--2eecef7d-1726-4c76-b067-a9a1995ad6b3",
                "file--e8cf7154-eda2-4563-8f94-0f7f788767b8",
                "domain-name--972041a0-532b-4ea2-bce5-274e4a94225b",
                "file--1b5e1ba0-1404-4489-8fa5-ef78d058480f",
                "url--1086d9fb-83ef-458a-a9a9-726ab107574a",
                "url--8ffc27c1-00e0-45d8-b9da-ee5577da00f8",
                "file--981a13cc-b225-422f-9175-79bd7a699624",
                "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.seqrite.com/blog/kimsuky-apt-south-korea-pdf-lures/"
                }
            ]
        }
    ]
}