{
    "type": "bundle",
    "id": "bundle--0849148d-224d-45a3-af8e-00f5581a9157",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--2b55834f-c58d-4a3a-9740-af8333c86d5e",
            "created": "2023-10-24T11:28:20.610044Z",
            "modified": "2023-10-24T11:29:09.958473Z",
            "name": "Hawkeye",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--26332748-6cfb-4723-8d2e-138de58fdef6",
            "hashes": {
                "MD5": "c90d094a8fbeaa8a0083c7372bfc1897",
                "SHA-1": "97e9c7091a7275655d0e44559a3df6d5a0cf21d9",
                "SHA-256": "db6a9934570fa98a93a979e7e0e218e0c9710e5a787b18c6948f2eedd9338984"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c30cd1b2-e14e-4f2e-903c-b5ad72cf1da0",
            "hashes": {
                "MD5": "82491b42b9a2d34b13137e36784a67d7",
                "SHA-1": "1df16f8bb6068e5f65f0a9a3613cc31fe5321a8d",
                "SHA-256": "05e9fe8e9e693cb073ba82096c291145c953ca3a3f8b3974f9c66d15c1a3a11d"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--98326066-b585-4c18-af4b-114ac6d2b5ad",
            "hashes": {
                "MD5": "853341a37ee6cd6516e03ce1341c7889",
                "SHA-1": "6ff55c00a1c09ccd6af7727d526e21ca969e0af0",
                "SHA-256": "773760fd71d52457ba53a314f15dddb1a74e8b2f5a90e5e150dea48a21aa76df"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--fdc9cb7a-b371-4063-ac5f-3f3ca6ea32cb",
            "hashes": {
                "MD5": "7ba98edd7015779a2625f11f3eabe869",
                "SHA-1": "10408e6cf829699f0eb4c5199575261db14fee66",
                "SHA-256": "e3027062e602c5d1812c039739e2f93fc78341a67b77692567a4690935123abe"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7d390b21-967b-4922-9655-fc60d9f8e93d",
            "hashes": {
                "MD5": "c027d641c4c1e9d9ad048cda2af85db6",
                "SHA-1": "f141f9dfc7e082521c9d26980bfc8bf100bb2f61",
                "SHA-256": "ed8ec7a8dd089019cfd29143f008fa0951c56a35d73b2e1b274315152d0c0ee6"
            }
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--5a9abb36-d207-48e1-bace-de919320ba18",
            "value": "108.61.186.55"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--06f50cf1-7968-4abe-86a9-75e309a6d3a4",
            "value": "146.4.21.94"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--cb01a9a6-ef83-4dd8-bbcb-4ab89d655545",
            "value": "109.248.150.13"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--108d8aad-dd37-4f24-9a4a-7af5cc03303d",
            "created_by_ref": "identity--2b55834f-c58d-4a3a-9740-af8333c86d5e",
            "created": "2026-10-09T23:54:45.281364Z",
            "modified": "2026-10-09T23:54:45.281364Z",
            "name": "Lazarus Exploits a Zoho ManageEngine Vulnerability to Distribute QuiteRAT and CollectionRAT",
            "published": "2023-09-22T00:00:00Z",
            "object_refs": [
                "identity--2b55834f-c58d-4a3a-9740-af8333c86d5e",
                "file--26332748-6cfb-4723-8d2e-138de58fdef6",
                "file--c30cd1b2-e14e-4f2e-903c-b5ad72cf1da0",
                "file--98326066-b585-4c18-af4b-114ac6d2b5ad",
                "file--fdc9cb7a-b371-4063-ac5f-3f3ca6ea32cb",
                "file--7d390b21-967b-4922-9655-fc60d9f8e93d",
                "ipv4-addr--5a9abb36-d207-48e1-bace-de919320ba18",
                "ipv4-addr--06f50cf1-7968-4abe-86a9-75e309a6d3a4",
                "ipv4-addr--cb01a9a6-ef83-4dd8-bbcb-4ab89d655545"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.hawk-eye.io/2023/09/lazarus-exploits-a-zoho-manageengine-vulnerability-to-distribute-quiterat-and-collectionrat/"
                }
            ]
        }
    ]
}