{
    "type": "bundle",
    "id": "bundle--77f4593d-d24a-4c6f-8a9b-2999761acb36",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--a8d58fde-d21c-496d-a3ff-84409afef5b4",
            "created": "2023-03-08T12:51:56.363175Z",
            "modified": "2024-08-19T10:06:03.021098Z",
            "name": "Qianxin",
            "identity_class": "organization"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--07d9eca2-4a12-4ee1-9162-92c72af051fd",
            "value": "http://www.kingsvc.cc/index.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--5bd9a926-5885-4743-9374-f44056640e87",
            "value": "http://www.sofa.rs/wp-admin/network/server_test.php"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--480e032e-e339-4765-bfe8-938b2a58fd6e",
            "hashes": {
                "MD5": "fe2d05365f059d48fd972c79afeee682",
                "SHA-1": "7825c80b1d116c89b331d7832d0252137de75699",
                "SHA-256": "88c168cd261dabea1b7223e8c05042be7e0505dedf6fd5effea90ae42e127968"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--14c6b2bb-84cd-4eab-8a0d-e3c096afded9",
            "hashes": {
                "MD5": "8451be72b75a38516e7ba7972729909e",
                "SHA-1": "45de8115b49ef68915e868138c04da375dfb7096",
                "SHA-256": "7050af905f1696b2b8cdb4c6e6805a618addf5acfbd4edc3fc807a663016ab26"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--eb9b0437-e05c-4118-aefd-b3d2cd54cc2d",
            "hashes": {
                "MD5": "4662dfa19bd590b1088befa28426a161",
                "SHA-1": "d785843a2e5d7851243f88a900b9e55a2db58f3c",
                "SHA-256": "eae3dc403d36b115aa4f7db64cb1a64fa50dbff2b6ce3d118eeb1f745d1ecd14"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--f334db6e-b627-4694-9522-4b15e7d8bd22",
            "value": "http://teslacontrols.ir/wp-includes/images/detail32.jpg"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--aee98ca2-5515-4239-993c-349f703b9371",
            "value": "http://teslacontrols.ir/wp-includes/images/detail31.jpg"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--075d8ff2-f692-4f7b-b25e-dfe7293d1722",
            "value": "teslacontrols.ir"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--3fa50f18-bda2-4027-a713-f89c80d2df60",
            "hashes": {
                "MD5": "bc13fc599bb594bc19ac9e6fde0c28c6",
                "SHA-1": "94b9b7e9f1288fe0dc3a17be4bbca9ac4d0a1faa",
                "SHA-256": "c0bd35a36ea5227b9b981d7707dff0e2c5ca87453a5289dc4a5cd04c7e8b728c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--333492e8-4d1a-4d4c-8648-7e8d129275d6",
            "hashes": {
                "MD5": "e3ef607182564bb158287cafb7b11be7",
                "SHA-1": "3f359dafbe39447ad83c9fdd9128796603013c85",
                "SHA-256": "833a896b9236164472fa3ba30e63446b474f9f204fee06ac297877246b674871"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--526da749-9b24-4929-b344-89910c39aebe",
            "hashes": {
                "MD5": "e6521be3b323865cf05f27d7c43aeff2",
                "SHA-1": "999796dda11b2e21bb405c573ff86591c3e80e16",
                "SHA-256": "07b909fa862319c8c2ff62d0b5f259be6017a5373d4dc1a70e19130e22029e10"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--055ed59f-9045-4cff-a770-7b773e2f4b50",
            "hashes": {
                "MD5": "b5a31d89f5b83d37c921d159364c968c",
                "SHA-1": "907f7ae5ce1938d869b2ff9d7b75d35a6390fafd",
                "SHA-256": "ff4ce7f350b0063c9683499e42028f129195f8d85c372b54f7b52380c64d5ac9"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--5b3d5bd7-d2f9-4781-a65d-d2f55d7c5b44",
            "value": "http://www.sofa.rs/wp-content/themes/twentynineteen/sass/layout/h1.jpg"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--0f9a2005-60f6-499d-99d8-32282b421f52",
            "value": "http://www.mbrainingevents.com/wp-admin/network/server_test.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--3f4a40ce-e59b-4298-9b2c-a2c97ac4cf78",
            "value": "http://www.afuocolento.it/wp-admin/network/server_test.php"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b",
            "created": "2026-10-10T10:21:54.463202Z",
            "modified": "2026-10-10T10:21:54.463202Z",
            "name": "Lazarus"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--9fa83a1e-22b1-4667-96c5-653f104ea6e9",
            "created_by_ref": "identity--a8d58fde-d21c-496d-a3ff-84409afef5b4",
            "created": "2026-10-10T10:21:54.463496Z",
            "modified": "2026-10-10T10:21:54.463496Z",
            "name": "Lazarus APT\u7ec4\u7ec7\u5229\u7528\u65b0\u51a0\u75ab\u60c5\u8bf1\u9975\u9488\u5bf9\u97e9\u56fd\u5730\u533a\u7684\u5b9a\u5411\u653b\u51fb\u5206\u6790",
            "published": "2020-04-15T00:00:00Z",
            "object_refs": [
                "identity--a8d58fde-d21c-496d-a3ff-84409afef5b4",
                "url--07d9eca2-4a12-4ee1-9162-92c72af051fd",
                "url--5bd9a926-5885-4743-9374-f44056640e87",
                "file--480e032e-e339-4765-bfe8-938b2a58fd6e",
                "file--14c6b2bb-84cd-4eab-8a0d-e3c096afded9",
                "file--eb9b0437-e05c-4118-aefd-b3d2cd54cc2d",
                "url--f334db6e-b627-4694-9522-4b15e7d8bd22",
                "url--aee98ca2-5515-4239-993c-349f703b9371",
                "domain-name--075d8ff2-f692-4f7b-b25e-dfe7293d1722",
                "file--3fa50f18-bda2-4027-a713-f89c80d2df60",
                "file--333492e8-4d1a-4d4c-8648-7e8d129275d6",
                "file--526da749-9b24-4929-b344-89910c39aebe",
                "file--055ed59f-9045-4cff-a770-7b773e2f4b50",
                "url--5b3d5bd7-d2f9-4781-a65d-d2f55d7c5b44",
                "url--0f9a2005-60f6-499d-99d8-32282b421f52",
                "url--3f4a40ce-e59b-4298-9b2c-a2c97ac4cf78",
                "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://ti.qianxin.com/blog/articles/analysis-of-lazarus-apt-targeted-attack-against-south-korea-using-new-crown-outbreak-bait/"
                }
            ]
        }
    ]
}