{
    "type": "bundle",
    "id": "bundle--11c6078d-7f4b-4cfa-8a3b-e3d7260fc706",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--5d199e7e-198c-47e8-ad62-397e3bd362e2",
            "created": "2023-03-08T12:51:51.400428Z",
            "modified": "2024-08-19T23:43:12.521753Z",
            "name": "Group-IB",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c8513ef9-9102-437e-aaa0-1dc3a8e81760",
            "hashes": {
                "MD5": "68b56d283205873e748e2bcfdcc447a5",
                "SHA-1": "474325a346e74f805d80053c614c75072884bf03",
                "SHA-256": "fb3f47bbd5fe5b7a89f7305688823cd7b986693eeae3a26bcdaf94c318a8bcd3"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--4d554de1-d416-48a2-827b-6726762aa941",
            "hashes": {
                "MD5": "193a6af481fec9e9ce21c4bcbb8b9bbe",
                "SHA-1": "172f029803e1e2c5d315650ab9819473c7debd01",
                "SHA-256": "e889dc3c95d160c30d675351e6ba1050e0d2ef04ce0b6074277c422a215e932e"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--28c0664d-64aa-4c80-bb02-449c81d224cc",
            "hashes": {
                "MD5": "54125772685ebcbc6bbf7ad89db09cba",
                "SHA-1": "6e9850d13ffef20d6d8a26ff9017e9b43a469146",
                "SHA-256": "c8f27cf9b6fe3de41642c75f64ce955a094a646d907ca2937534ec0d81bdd6d1"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--995b0a8c-d2bc-4fdc-ac48-d991b83d763c",
            "hashes": {
                "MD5": "733c276c7e61609daf6be68cfba5514b",
                "SHA-1": "c0e463b272ffcce458a70493489b3fc97a312381",
                "SHA-256": "06ac32672777f4b7b3e890a9afabde9af3fee85c8d8a83429c5fadd04c298309"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--95a70dcc-5590-44d5-b039-a462e00b271a",
            "hashes": {
                "MD5": "a3697e72657f066a96a1b4028771c82e",
                "SHA-1": "976fd70675b052c9d1c576fdff714997522d9f6f",
                "SHA-256": "d36a330038c7ec5b04c6e5da42071083d87806447b2236fcaa964bfef302a82b"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--fa1c0054-dad7-4db7-81de-1c76f1d5cfd0",
            "hashes": {
                "MD5": "707c42ae4d13b0994335ebfab1516154",
                "SHA-1": "676e74ca1a3c267a93769f2fb473e49712a8f4c6",
                "SHA-256": "51043929f82412a87be8fc315f73c0fc41dd46ae8e45d3e427d03df9dbe8c9e5"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--4e7ae5eb-643b-4a1a-bf2c-fd23af5385dd",
            "hashes": {
                "MD5": "c2ebc9a7b87b8556bb278c7b309927eb",
                "SHA-1": "00a99dd6f37f734d22340d2e34eb78537ff470ba",
                "SHA-256": "79570a46d94301c0b89a8fd0539b0770bc375829b1c42d1ee8e0d4b7b44f8f7c"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--48b5269f-5c6c-4ea7-b610-02469acab0a9",
            "value": "coinpayments.net"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--2fa5a120-8154-4aa3-9cbf-8529def99d3b",
            "value": "signedbooksandcollectibles.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--df58d224-a357-4cf6-ab85-4deb211e5c6d",
            "value": "areac-agr.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--2f61f4f1-dd18-445a-b7f2-f531bdee23d8",
            "value": "technokain.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--67e7131f-8531-4a36-941c-4d504616673b",
            "value": "stefanoturco.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--77cbd0bd-8034-4dc7-82e7-b3a423b286d2",
            "value": "luxmodelagency.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--88a0471e-0457-463d-8d47-98627785397d",
            "value": "darvishkhan.net"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b",
            "created": "2026-10-10T05:10:31.027591Z",
            "modified": "2026-10-10T05:10:31.027591Z",
            "name": "Lazarus"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--74256f09-24ba-4fa4-a5c2-07b07cc68e14",
            "created_by_ref": "identity--5d199e7e-198c-47e8-ad62-397e3bd362e2",
            "created": "2026-10-10T05:10:31.028474Z",
            "modified": "2026-10-10T05:10:31.028474Z",
            "name": "Lazarus BTC Changer: Back in action with JS sniffers redesigned to steal crypto",
            "published": "2021-04-14T00:00:00Z",
            "object_refs": [
                "identity--5d199e7e-198c-47e8-ad62-397e3bd362e2",
                "file--c8513ef9-9102-437e-aaa0-1dc3a8e81760",
                "file--4d554de1-d416-48a2-827b-6726762aa941",
                "file--28c0664d-64aa-4c80-bb02-449c81d224cc",
                "file--995b0a8c-d2bc-4fdc-ac48-d991b83d763c",
                "file--95a70dcc-5590-44d5-b039-a462e00b271a",
                "file--fa1c0054-dad7-4db7-81de-1c76f1d5cfd0",
                "file--4e7ae5eb-643b-4a1a-bf2c-fd23af5385dd",
                "domain-name--48b5269f-5c6c-4ea7-b610-02469acab0a9",
                "domain-name--2fa5a120-8154-4aa3-9cbf-8529def99d3b",
                "domain-name--df58d224-a357-4cf6-ab85-4deb211e5c6d",
                "domain-name--2f61f4f1-dd18-445a-b7f2-f531bdee23d8",
                "domain-name--67e7131f-8531-4a36-941c-4d504616673b",
                "domain-name--77cbd0bd-8034-4dc7-82e7-b3a423b286d2",
                "domain-name--88a0471e-0457-463d-8d47-98627785397d",
                "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.group-ib.com/blog/btc-changer/"
                }
            ]
        }
    ]
}