{
    "type": "bundle",
    "id": "bundle--eedf3953-aee9-4d93-9cb0-5d55aa97946a",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--d6060d27-a078-4b68-808e-0f825436ce05",
            "created": "2025-02-20T01:00:01.713031Z",
            "modified": "2025-02-20T01:01:57.020342Z",
            "name": "ENKI",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--39c77a90-c5b6-4423-8b05-f1cf56f12afd",
            "hashes": {
                "MD5": "8ac5d4d3a68ca82b190bceb8cf7cb07e",
                "SHA-1": "582216e6562e1cbe36d65c502dbde15d94fd9435",
                "SHA-256": "11afe5cc28666c39d3dc3e9d51f780e55ce57e29424861b94002fb3370474f7e"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--01749c72-3342-4dc5-8c79-4432d6a2c88d",
            "hashes": {
                "MD5": "8b541e4da55cb41e3304bda5ea568eb7",
                "SHA-1": "9ff8aa48c6703d20d7567e20ae84399f672dcd26",
                "SHA-256": "f4c4f68f8b27279b00b718b02392d5dfe1766c342a189a51e0e2a6f6412e1ce0"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7cbb3189-48c3-41db-b85b-e784b44ab2f7",
            "hashes": {
                "MD5": "5e040663bbe55915a67f696a6aafb81a",
                "SHA-1": "778c8765fc05ac390f347b610bfe807a8fb493cf",
                "SHA-256": "e6e3a8fb352641bb5b6f6db1479490d942852d77d9ca30b2f0931f28e2691983"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--49abaa34-f2c9-4a37-9bc8-13b4cc2cbeed",
            "value": "71532697854-ef1nlsl4cjn4scm57dsf1685leiunavu.apps.googleusercontent.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--87b0e123-0b0e-43df-9cff-9fb7d606ba36",
            "value": "159263970130-1gil63rpicrhtbo4he4qvnfiks351oc4.apps.googleusercontent.com"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--c790943d-62f3-4866-bc0f-2337cfb6e441",
            "value": "74.50.94.175"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--cee03af1-1ed8-46d5-a12e-87abec953a83",
            "hashes": {
                "SHA-256": "694af547d321771e69c48cf3c04411fc1de1b5d4a465815c54fff44d3d8da790"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--098671f4-aac5-4cea-89fd-5ff652aa654d",
            "hashes": {
                "MD5": "899e67effbfd198f76b71899b0b7fb59",
                "SHA-1": "c6d5267c3e5afb0d870e844002332ad2e226617e",
                "SHA-256": "9af27198deefa87bb1d3868abb295f0136c18e74b5231772351c359ccd740323"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b712e27a-8a07-486e-9b4a-80103a33c9b6",
            "hashes": {
                "MD5": "85127fdb8e13ebc449f4f8733e6378ae",
                "SHA-1": "be6fdd5048aa3dcc050ca63b79ac358745ce5654",
                "SHA-256": "47abd1682a88f7aadd3fe57583a7edba9cae2d7cf6632df19fbe687544dac632"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ab1351dc-4734-40f5-8fec-14b79dbb4210",
            "hashes": {
                "MD5": "37a463ef019694e4d4a52c715a531d05",
                "SHA-1": "f53c93ab36e6485b80758ae5d44ed5d2afc3331e",
                "SHA-256": "7a21d0e9793a4f115d395c6e99927d54840a75f9f5501d77eca52c2e35069006"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d45ea732-30b2-4f45-a4fa-985a0de68a95",
            "hashes": {
                "MD5": "ac52762981306119be210d3001e99d10",
                "SHA-1": "c65fd70ec60b7b48b8dc286dcfc0333c18c6639e",
                "SHA-256": "5967513540ad610ddbbc124f2437cf58dd10341da7d8d016932e74c3241dfa2a"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--a3aa0dea-d88c-421e-8d51-a26d91d75125",
            "hashes": {
                "SHA-256": "68621690299e676b7562aca350a4ab87b898919c140b11bac7282d9c07d53838"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--59b2cb9b-c95a-4dd6-a118-6e6c2f08ce75",
            "hashes": {
                "MD5": "5bd8cad0e4f14e252056830d16abfbe5",
                "SHA-1": "61bae4c2061e3672eb1d416a2e894f8bd2165502",
                "SHA-256": "811d221a1340e64aa1736d9d4e8f80820a5a02fab3d0c9e454f3ed35cd717b81"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--c6a40e09-7d28-41b8-9d0a-d1def717d706",
            "value": "https://lh3.googleusercontent.com/a/ACg8ocKnUCafLOJBYtrhtGO54t-HCIRkNsHB7BEAuBjzh_y7ZXXKpA=s64"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--1988df3f-c7ba-49dd-a6e3-f28f5f37bb16",
            "value": "74.50.94.47"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--4ec55163-fdda-4a14-9008-e637299fef81",
            "hashes": {
                "MD5": "849aabf394a42d972478293a4df6232d",
                "SHA-1": "75544e7ec0e84bee2b8702e3231435b6e900cf44",
                "SHA-256": "268640934dd1f0cfe3a3653221858851a33cbf49a71adfb4d54a04641df11547"
            }
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--e8ff946d-e3c7-4fcd-ab4e-32c6a96870cf",
            "value": "206.206.127.152"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b51de76b-99aa-4670-89cd-406a7af96daa",
            "hashes": {
                "MD5": "770cc491c1738e1f18b760f5e75cff6b",
                "SHA-1": "2bf57a854bf5daaaec9717a0bdf14b7530d853c9",
                "SHA-256": "52b8e4da732d06000e29d7609668021be8cc99fccd9fb4a04f93f1c25d11bdd6"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--8540d609-1258-4575-a28d-7dd5f56f2643",
            "hashes": {
                "MD5": "3b6ea5e683e6701efd171efb657ee79b",
                "SHA-1": "8076db68e10dae5a2d0f8d1b48b323e85ccfdd58",
                "SHA-256": "dfeec1052063d6dc69cc6d23ca0cd262cd06899554f5ebd528d5d72935204bf2"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--33b0c50d-ab29-4adb-b8bc-6d3b3b776c98",
            "hashes": {
                "MD5": "7ad8a9e74c6f15e03d2ea505a2c48124",
                "SHA-1": "b45b72f8b7fc7e91bab181f1861707df5da97409",
                "SHA-256": "11ac6151182db3b41f9022b4e4b8a388e982f7fece3a34596bd84c11ec2a4ebd"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--fd812362-abdb-4ded-a620-8f04201fbc60",
            "hashes": {
                "MD5": "2b8287656ba39515fb08cb3711db5291",
                "SHA-1": "9bf20b294287aaa0ac4401e8f0e6bc4b6243fafb",
                "SHA-256": "f3aee5924279dd1883efbb04c89166368e954b7e81483507dc032561bb2cf6e1"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--63acf17e-1393-40af-a2aa-b871188d26ba",
            "hashes": {
                "MD5": "db81f6109260d4541904efee54075e97",
                "SHA-1": "897f085148eaab289785b1b8d9e5a68f16e1eaf8",
                "SHA-256": "aacb5aca178f6444a82bca1febb282a2859c5a43208ad1cdd39977dc3521f0f6"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--01791425-c25f-4c0e-b1b2-933f03905adf",
            "hashes": {
                "MD5": "382ba44f59b3738c42121de90322f7f5",
                "SHA-1": "74836141ca62f5333df8d710e0f43f4e0d668df8",
                "SHA-256": "ba52ab256079f80fdf9c47bf5fc215fed99ed1659c976ca692f4493e08e4b301"
            }
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--ede3e48d-1396-42fe-a544-52f068cffa0e",
            "value": "andreytony001@gmail.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--6dafb67b-4a7f-4829-970a-04371fb3a5f0",
            "value": "widyket021701@gmail.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--55c45055-3520-41ad-bd67-46bc51f85e26",
            "value": "widyket02122@gmail.com"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--ca3f2c72-fdd5-4c79-a750-7b3c5cef3682",
            "value": "https://lh3.googleusercontent.com/a-/ALV-UjU7c10Rb7y7XU9dR2xlxcjqWmLDym-Ty65ExsrPiiJyhgY9WA=s64"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--d8cf4c67-5f75-4dc0-9009-9b42e93f25c2",
            "value": "https://olsiop.shop/page?m=verify&token=cW9yd2tyZGlyMTIzQG5hdmVyLmNvbQ==&last=security"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--c56b1653-6c12-4d7f-b50a-e5a7fc5e1b80",
            "value": "https://www.dropbox.com/referrals/AACB4D4xxVeZQqxKKcBvnvC_PVsPOaffNr4?src=app9-6854065"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--4ab950fc-c28f-4f81-baf3-0e313e8dfb0d",
            "value": "https://RRGrg3yur78ewgewFf@acieodls.shop/page/?m=verify&token=dXNvdXBwQG5hdmVyLmNvbQ==&last=security"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--41cd2be4-3563-4882-bc48-93136c4a666e",
            "value": "weakandstrong.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--c31d7ee4-262b-44c9-9957-cb9d548018f8",
            "value": "diagandcall.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--3222e300-5c22-4acf-bef9-767e74866b6b",
            "value": "acieodls.shop"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--99b32a9c-000b-444e-91a9-bdfb6ecd73c8",
            "value": "olsiop.shop"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--afc5ed43-ea6b-4cc2-9372-e24a1a57e669",
            "hashes": {
                "MD5": "42f3e0840bde6eccd1e17b32b48d6096",
                "SHA-1": "c38a378d4d9af72957183cddebb2a659d024fd0c",
                "SHA-256": "aaecb10ca453bec3bb95bedac6d773a593ea984509845eb7b15d8894d4b385ad"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--1953e743-0a76-4f4b-a8d0-4f50fbee790c",
            "hashes": {
                "MD5": "315b01f826d9f2b20665a8cee732cc49",
                "SHA-1": "142d13be4ae4b963f2e4e1ff445c8b0c914a3cce",
                "SHA-256": "2ad3120e1b03317d8d588d0cc097cc4c084700dc98913aa452ae8d0d1830e327"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--2915f80b-530c-48c2-b239-0dc35fa7b364",
            "hashes": {
                "MD5": "47d66179d1437e4b7e4ad863a3fc25b2",
                "SHA-1": "ca711734f5e7ae7013510d5f9ca5347573488231",
                "SHA-256": "9c9df2d90602c915005811aabf444653f55024080c61845029f75da758b27320"
            }
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--c38ff752-915f-47fd-958c-e828777ba1e1",
            "value": "159.100.13.216"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--a014dfac-e081-5b16-a0b1-fe21d104be8f",
            "created": "2026-09-20T20:30:19.537329Z",
            "modified": "2026-09-20T20:30:19.537329Z",
            "name": "Konni"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--a64f97fc-af17-4821-9999-00097d372742",
            "created_by_ref": "identity--d6060d27-a078-4b68-808e-0f825436ce05",
            "created": "2026-09-20T20:30:19.544749Z",
            "modified": "2026-09-20T20:30:19.544749Z",
            "name": "Konni\uc758 \ucd5c\uc2e0 AsyncRAT \uacf5\uaca9: LNK \ud30c\uc77c\uc744 \ud65c\uc6a9\ud55c \uac10\uc5fc \uae30\ubc95",
            "published": "2025-03-12T00:00:00Z",
            "object_refs": [
                "identity--d6060d27-a078-4b68-808e-0f825436ce05",
                "file--39c77a90-c5b6-4423-8b05-f1cf56f12afd",
                "file--01749c72-3342-4dc5-8c79-4432d6a2c88d",
                "file--7cbb3189-48c3-41db-b85b-e784b44ab2f7",
                "domain-name--49abaa34-f2c9-4a37-9bc8-13b4cc2cbeed",
                "domain-name--87b0e123-0b0e-43df-9cff-9fb7d606ba36",
                "ipv4-addr--c790943d-62f3-4866-bc0f-2337cfb6e441",
                "file--cee03af1-1ed8-46d5-a12e-87abec953a83",
                "file--098671f4-aac5-4cea-89fd-5ff652aa654d",
                "file--b712e27a-8a07-486e-9b4a-80103a33c9b6",
                "file--ab1351dc-4734-40f5-8fec-14b79dbb4210",
                "file--d45ea732-30b2-4f45-a4fa-985a0de68a95",
                "file--a3aa0dea-d88c-421e-8d51-a26d91d75125",
                "file--59b2cb9b-c95a-4dd6-a118-6e6c2f08ce75",
                "url--c6a40e09-7d28-41b8-9d0a-d1def717d706",
                "ipv4-addr--1988df3f-c7ba-49dd-a6e3-f28f5f37bb16",
                "file--4ec55163-fdda-4a14-9008-e637299fef81",
                "ipv4-addr--e8ff946d-e3c7-4fcd-ab4e-32c6a96870cf",
                "file--b51de76b-99aa-4670-89cd-406a7af96daa",
                "file--8540d609-1258-4575-a28d-7dd5f56f2643",
                "file--33b0c50d-ab29-4adb-b8bc-6d3b3b776c98",
                "file--fd812362-abdb-4ded-a620-8f04201fbc60",
                "file--63acf17e-1393-40af-a2aa-b871188d26ba",
                "file--01791425-c25f-4c0e-b1b2-933f03905adf",
                "email-addr--ede3e48d-1396-42fe-a544-52f068cffa0e",
                "email-addr--6dafb67b-4a7f-4829-970a-04371fb3a5f0",
                "email-addr--55c45055-3520-41ad-bd67-46bc51f85e26",
                "url--ca3f2c72-fdd5-4c79-a750-7b3c5cef3682",
                "url--d8cf4c67-5f75-4dc0-9009-9b42e93f25c2",
                "url--c56b1653-6c12-4d7f-b50a-e5a7fc5e1b80",
                "url--4ab950fc-c28f-4f81-baf3-0e313e8dfb0d",
                "domain-name--41cd2be4-3563-4882-bc48-93136c4a666e",
                "domain-name--c31d7ee4-262b-44c9-9957-cb9d548018f8",
                "domain-name--3222e300-5c22-4acf-bef9-767e74866b6b",
                "domain-name--99b32a9c-000b-444e-91a9-bdfb6ecd73c8",
                "file--afc5ed43-ea6b-4cc2-9372-e24a1a57e669",
                "file--1953e743-0a76-4f4b-a8d0-4f50fbee790c",
                "file--2915f80b-530c-48c2-b239-0dc35fa7b364",
                "ipv4-addr--c38ff752-915f-47fd-958c-e828777ba1e1",
                "threat-actor--a014dfac-e081-5b16-a0b1-fe21d104be8f"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.enki.co.kr/media-center/blog/konni-s-asyncrat-attack-lnk-based-infection"
                }
            ]
        }
    ]
}