{
    "type": "bundle",
    "id": "bundle--918cba87-91ed-42c5-93b8-d056b60c6a14",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--5eb6a718-92a2-4bb1-b833-13e0c9d4b3fb",
            "created": "2024-11-21T11:00:36.171375Z",
            "modified": "2024-11-21T11:04:05.727162Z",
            "name": "SecAI",
            "identity_class": "organization"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--2f68aa74-9e4f-458c-9fa4-ebb70c088a23",
            "value": "n-e.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--a73a3f63-5466-45e4-a6e4-aaf33f968e95",
            "value": "p-e.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--017fa299-6c80-47b9-aee0-2964427a8c43",
            "value": "o-r.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--cb709de6-361c-440f-b1ce-ab4d788f910e",
            "value": "r-e.kr"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--3c974099-6a08-492d-8e8e-c9b4d1653f32",
            "hashes": {
                "MD5": "929a87be39ed3ad28e7285340f64414f",
                "SHA-1": "c0af9ae360dfe366adb028e29e95f2152fd0aa77",
                "SHA-256": "5d25e53b59bd2dcf234c6819f8cd294efe6d943d04625b9d575002362794e74a"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b29e49ad-1e72-4937-9e8a-4489226742ec",
            "hashes": {
                "MD5": "f4fdd224b363bc1f085286e464e937a9",
                "SHA-1": "1e57a0eb95e848ed0eb38ecfe357d25588f6ec22",
                "SHA-256": "7d766cbd60b2184b4181eb83562d5a406b848adddfa20842a073c25d3f1fe853"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--cd5cee4f-dd8e-4352-ae36-7c5a9700d85a",
            "hashes": {
                "MD5": "2075c69a4b721f7b814448464cda7d01",
                "SHA-1": "d2d7ad334be11dac637dcb497c25ebf5ea5ab713",
                "SHA-256": "6263530f1bde08b13872252fa1e90efc0ac5c8d433db6931316c8eb7322d23c4"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--541570bb-75ff-45cd-b502-8f782a15bd32",
            "hashes": {
                "MD5": "5b39fc810261ce179e8348e11a840c15",
                "SHA-1": "9fb97274e136d3e2837a4a58b1f4ac6b94ecfe7c",
                "SHA-256": "ea332de382c843e4d862323466fee3d94c3722e3e9e61c00bf2bdf379a7087af"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--438abf34-28c6-4dcb-93e8-2f7387f8f695",
            "hashes": {
                "SHA-256": "1099a77b2de97f26605b32e25e806b636e36103a3b8d601e1e30b15c922de578"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--9d351cff-1b7c-4487-b4cc-dcc5e5a77a93",
            "hashes": {
                "MD5": "ef8947d291107256cb5883ac3bc163d0",
                "SHA-1": "cf8555a2d9fc8081ba8c8e29f7905dd926655df1",
                "SHA-256": "8028b918d06cf3635e7e77d29cb0a4622d8cf4ee30881fb297435f7328ff45e4"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--5e42271f-70c8-4e78-a4d5-b5978e5e3554",
            "hashes": {
                "MD5": "6fba482cb866a3c51dc9063527886f5d",
                "SHA-1": "97d91cd399b5c4c6f2edd32e1a4211aba9b77f9d",
                "SHA-256": "06e2ab3fe5afc927642244644dfddb0f920ff1ab11c5e5631e26dbd62ed6978a"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d0e434a6-b136-40fa-8d57-600a9b130e72",
            "hashes": {
                "MD5": "e562cf30d17d47347c7e6ffd249fc190",
                "SHA-1": "93edc15a20aac8b5193e5b22e35dbb09848e2ca0",
                "SHA-256": "30584f13c0a9d0c86562c803de350432d5a0607a06b24481ad4d92cdf7288213"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b2d85bdb-d50a-41c7-a846-048e1d730be4",
            "hashes": {
                "MD5": "97ba3c7b95aac463c4c561c5f940bbf8",
                "SHA-1": "13c2c93022576a173226f10e35c64c83b495f868",
                "SHA-256": "35ddb63c0729a7e3019c026865ea195607a51943d8867607a26c006f0df6e594"
            }
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1",
            "created": "2026-09-19T09:17:16.488864Z",
            "modified": "2026-09-19T09:17:16.488864Z",
            "name": "Kimsuky"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--8b095d92-7689-4a52-b238-1621807574dd",
            "created_by_ref": "identity--5eb6a718-92a2-4bb1-b833-13e0c9d4b3fb",
            "created": "2026-09-19T09:17:16.490027Z",
            "modified": "2026-09-19T09:17:16.490027Z",
            "name": "Kimsuky Arsenal Exposure: Multi-format Trojan Analysis",
            "published": "2024-11-20T00:00:00Z",
            "object_refs": [
                "identity--5eb6a718-92a2-4bb1-b833-13e0c9d4b3fb",
                "domain-name--2f68aa74-9e4f-458c-9fa4-ebb70c088a23",
                "domain-name--a73a3f63-5466-45e4-a6e4-aaf33f968e95",
                "domain-name--017fa299-6c80-47b9-aee0-2964427a8c43",
                "domain-name--cb709de6-361c-440f-b1ce-ab4d788f910e",
                "file--3c974099-6a08-492d-8e8e-c9b4d1653f32",
                "file--b29e49ad-1e72-4937-9e8a-4489226742ec",
                "file--cd5cee4f-dd8e-4352-ae36-7c5a9700d85a",
                "file--541570bb-75ff-45cd-b502-8f782a15bd32",
                "file--438abf34-28c6-4dcb-93e8-2f7387f8f695",
                "file--9d351cff-1b7c-4487-b4cc-dcc5e5a77a93",
                "file--5e42271f-70c8-4e78-a4d5-b5978e5e3554",
                "file--d0e434a6-b136-40fa-8d57-600a9b130e72",
                "file--b2d85bdb-d50a-41c7-a846-048e1d730be4",
                "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.secai.ai/blog/latest_research/Kimsuky_Arsenal_Exposure"
                }
            ]
        }
    ]
}