{
    "type": "bundle",
    "id": "bundle--f10a264a-5672-4556-8b31-7de4785fcc20",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--f124ebed-440c-493a-a454-005060f3b4d8",
            "created": "2023-03-08T12:51:57.814175Z",
            "modified": "2026-04-22T13:31:24.745811Z",
            "name": "TrendMicro",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--fc235aba-3b6d-455c-8766-9523c4fb1c9d",
            "hashes": {
                "MD5": "6258f16dfc57e6b98e8ed5a748fde904",
                "SHA-1": "06d941556831c3413591b078a70c8484e0b5d30b",
                "SHA-256": "4722138dda262a2dca5cbf9acd40f150759c006f56b7637769282dba54de0cab"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--0346dde6-bb5c-4dee-ac53-c6caa2055671",
            "hashes": {
                "MD5": "0f8e2736877648b22baecad61c52692d",
                "SHA-1": "f54fed3a1c34f09e4119caa79ae48a369bdd8e75",
                "SHA-256": "10cbb5d0974af08b5d4aa9c753e274a81348da9f8bfcaa5193fad08b79650cda"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--769276af-c8d5-4074-b067-393923175c62",
            "hashes": {
                "MD5": "a957767639bcbbfd9cf8b1cdd2dd9db0",
                "SHA-1": "f2b9b4769f8b6b8919b9109c902120f5637108af",
                "SHA-256": "6cac0be2120be7b3592fe4e1f7c86f4abc7b168d058e07dc8975bf1eafd7cb25"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--95ff469b-4822-4151-9059-f64b8441026e",
            "hashes": {
                "MD5": "cd3dbbc496ac8ab6c3f0f3f9b0f200e6",
                "SHA-1": "7badbfa8b836907018f7a6bca203bc3a66c451f3",
                "SHA-256": "650d7b814922b58b6580041cb0aa9d27dae7e94e6d899bbb3b4aa5f1047fca0f"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--e917f1ce-a20f-4440-98e8-199f126a32e4",
            "hashes": {
                "MD5": "d253d65adf4285fa5004cd96e647a11f",
                "SHA-1": "1983b60d923b01fcb14ba813532b2f41f2d6c2fe",
                "SHA-256": "972b598d709b66b35900dc21c5225e5f0d474f241fefa890b381089afd7d44ee"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--a8d65ffb-b72f-4874-acab-fa421a2d70eb",
            "hashes": {
                "MD5": "ddabaa2740f590ac964996fd4b691880",
                "SHA-1": "be2e900c64cd985cde9e8515fb4e5b5d70c853f0",
                "SHA-256": "6d4415a2cbedc960c7c7055626c61842b3a3ca4718e2ac0e3d2ac0c7ef41b84d"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c902433a-b57d-4eb5-bc90-926bdaa7b3cf",
            "hashes": {
                "MD5": "23cbc415d94b1841a8a737295dc651ce",
                "SHA-1": "50420970d17af649affaee6be801968aa4c01e46",
                "SHA-256": "8ff100ca86cb62117f1290e71d5f9c0519661d6c955d9fcfb71f0bbdf75b51b3"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6af17723-15fb-4c7a-a59b-6224cec9c922",
            "hashes": {
                "MD5": "ed2cace34381b6bbeb98af31e73e7904",
                "SHA-1": "9cc396887f57d1d266644cbefed48f33880fb218",
                "SHA-256": "db8163d054a35522d0dec35743cfd2c9872e0eb446467b573a79f84d61761471"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d819c397-caab-4eea-8794-bc0946a07f39",
            "hashes": {
                "MD5": "9e36b094d9769025699804f10c9a6523",
                "SHA-1": "88554b0b8066cb059f9fc06d2620d84737251a29",
                "SHA-256": "d5f9a81df5061c69be9c0ed55fba7d796e1a8ebab7c609ae437c574bd7b30b48"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--0c101cb8-754e-4c1b-96b2-09848db90c84",
            "hashes": {
                "MD5": "ec264b9c938355f1a7d1dc97c73fa9a6",
                "SHA-1": "234600a43a957672b8145ea6566f9613a1906899",
                "SHA-256": "1768f2e9cea5f8c97007c6f822531c1c9043c151187c54ebfb289980ff63d666"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--2197e4ba-43d5-466e-9dc6-26bcdcb1cdc7",
            "hashes": {
                "MD5": "878ececefc811b91361b69ff25290a6e",
                "SHA-1": "fb17a710aa690d939d74a6687ae04787fb6324ca",
                "SHA-256": "772b9b873100375c9696d87724f8efa2c8c1484853d40b52c6dc6f7759f5db01"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7e6b5bf1-b796-4a2d-9916-bd38c21ea0af",
            "hashes": {
                "MD5": "a3487b13cbda458bf91c7e802a1ea4f5",
                "SHA-1": "de201a51f96af1405f58ec02b7802088ecae6a2d",
                "SHA-256": "030b4525558f2c411f972d91b144870b388380b59372e1798926cc2958242863"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--0af751f7-ee87-4882-ad9e-5266b500d9e4",
            "hashes": {
                "MD5": "5d06ff8f43f631cd2a71a565dd10b7a5",
                "SHA-1": "97936a1225622bf61f916c629882aab19ff1f1a6",
                "SHA-256": "d844777dcafcde8622b9472b6cd442c50c3747579868a53a505ef2f5a4f0e26a"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--2ca05efe-76f8-4d4a-8f5b-20e3a247ef62",
            "hashes": {
                "MD5": "6c360e9a6f933bf172591a81881ca79b",
                "SHA-1": "d851ff7b371d15bf03a670e45ec5df327406ab45",
                "SHA-256": "f7f2dd674532056c0d67ef1fb7c8ae8dd0484768604b551ee9b6c4405008fe6b"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--45242096-a090-416c-95e4-8d0c7d2ac45e",
            "hashes": {
                "MD5": "e3fc2fbc512b90c54d81989cf42bb885",
                "SHA-1": "46a1d019c1069a8da16224ba6e964d929f42f204",
                "SHA-256": "6cb1e9850dd853880bbaf68ea23243bac9c430df576fa1e679d7f26d56785984"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--a5dec732-1e17-4f88-9cc7-357fc0772ab7",
            "hashes": {
                "MD5": "dc688e6ddd3a1298dd372ec7d0ccb1fb",
                "SHA-1": "8fd089df71a5f48098dc41886631ea6604f108e9",
                "SHA-256": "9d10911a7bbf26f58b5e39342540761885422b878617f864bfdb16195b7cd0f5"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ba2a6f81-5e0c-4adf-990a-0a47ee93208b",
            "hashes": {
                "MD5": "7a27da13bbdfc34118a30ecd83a75614",
                "SHA-1": "53b079072c81f7c879ea1f808c18dcd6134afc5c",
                "SHA-256": "01b047e0f3b49f8ab6ebf6795bc72ba7f63d7acbc68f65f1f8f66e34de827e49"
            }
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b",
            "created": "2026-10-10T05:07:41.131709Z",
            "modified": "2026-10-10T05:07:41.131709Z",
            "name": "Lazarus"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--1e50ec54-1398-4fc2-8e08-c6147aab3f31",
            "created_by_ref": "identity--f124ebed-440c-493a-a454-005060f3b4d8",
            "created": "2026-10-10T05:07:41.132013Z",
            "modified": "2026-10-10T05:07:41.132013Z",
            "name": "Lazarus Campaign Targeting Cryptocurrencies Reveals Remote Controller Tool, an Evolved RATANKBA, and More",
            "published": "2018-01-24T00:00:00Z",
            "object_refs": [
                "identity--f124ebed-440c-493a-a454-005060f3b4d8",
                "file--fc235aba-3b6d-455c-8766-9523c4fb1c9d",
                "file--0346dde6-bb5c-4dee-ac53-c6caa2055671",
                "file--769276af-c8d5-4074-b067-393923175c62",
                "file--95ff469b-4822-4151-9059-f64b8441026e",
                "file--e917f1ce-a20f-4440-98e8-199f126a32e4",
                "file--a8d65ffb-b72f-4874-acab-fa421a2d70eb",
                "file--c902433a-b57d-4eb5-bc90-926bdaa7b3cf",
                "file--6af17723-15fb-4c7a-a59b-6224cec9c922",
                "file--d819c397-caab-4eea-8794-bc0946a07f39",
                "file--0c101cb8-754e-4c1b-96b2-09848db90c84",
                "file--2197e4ba-43d5-466e-9dc6-26bcdcb1cdc7",
                "file--7e6b5bf1-b796-4a2d-9916-bd38c21ea0af",
                "file--0af751f7-ee87-4882-ad9e-5266b500d9e4",
                "file--2ca05efe-76f8-4d4a-8f5b-20e3a247ef62",
                "file--45242096-a090-416c-95e4-8d0c7d2ac45e",
                "file--a5dec732-1e17-4f88-9cc7-357fc0772ab7",
                "file--ba2a6f81-5e0c-4adf-990a-0a47ee93208b",
                "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://blog.trendmicro.com/trendlabs-security-intelligence/lazarus-campaign-targeting-cryptocurrencies-reveals-remote-controller-tool-evolved-ratankba/"
                }
            ]
        }
    ]
}