{
    "type": "bundle",
    "id": "bundle--111429e1-6346-4dda-90eb-03a183615e8e",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--e98c3f59-8d3e-4b14-98ca-ce4baddc5451",
            "created": "2023-03-08T12:51:48.116242Z",
            "modified": "2023-03-08T12:51:48.11632Z",
            "name": "Qualys",
            "identity_class": "organization"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--efa0fe22-769d-4e1b-9dbe-a8236fe6264b",
            "value": "markettrendingcenter.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--f5941e52-bc71-4672-93bd-9d3c8c6cb121",
            "value": "lm-career.com"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--8f0e3c0c-5b77-47f0-a09a-26276dd9a825",
            "hashes": {
                "MD5": "3f326da2affb0f7f2a4c5c95ffc660cc",
                "SHA-1": "f38abb67d47a4f69536ae67aa9c6df7287c08869",
                "SHA-256": "0d01b24f7666f9bccf0f16ea97e41e0bc26f4c49cdfb7a4dabcc0a494b44ec9b"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ae27cc14-aa92-44e0-940f-a2b9c9ea36df",
            "hashes": {
                "MD5": "490c885dc7ba0f32c07ddfe02a04bbb9",
                "SHA-1": "294690c1aee8dc7723858dafcb2a0ed273296641",
                "SHA-256": "829eceee720b0a3e505efbd3262c387b92abdf46183d51a50489e2b157dac3b1"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d0630af0-4584-4ac0-8075-d5d46fc940ae",
            "hashes": {
                "MD5": "712a8e4d3ce36d72ff74b785aaf18cb0",
                "SHA-1": "22f86d8428aed24d1f5d51229a2a302d46cda7aa",
                "SHA-256": "e8305bdd528b4ef83a311db1825f88dcb27e256090b66f3aedb36eb830d2166d"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--98abb706-ee38-4dde-9684-03062356a7c5",
            "value": "https://markettrendingcenter.com/lk_job_oppor.docx"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--bfc85530-6778-416a-8f68-29e263bda01b",
            "value": "advantims.com"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--a74fd7b0-2ac5-4562-864d-ca6ecec9d0e3",
            "hashes": {
                "MD5": "a27a9324d282d920e495832933d486ee",
                "SHA-1": "0ab8602cee94f36739b6649467ced514301e58fa",
                "SHA-256": "0160375e19e606d06f672be6e43f70fa70093d2a30031affd2929a5c446d07c1"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--ac663880-2dcf-4cdc-82cf-9a67753d6831",
            "value": "https://markettrendingcenter.com/member.htm"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--1a5408bd-6cc3-4db1-93ad-ac8a8d315be6",
            "hashes": {
                "MD5": "e87b575b2ddfb9d4d692e3b8627e3921",
                "SHA-1": "f675c0aa46a18a6026f0d541fce6a75688a018aa",
                "SHA-256": "f188eec1268fd49bdc7375fc5b77ded657c150875fede1a4d797f818d2514e88"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ebdc3fbf-4280-476e-a190-bee05a5a319b",
            "hashes": {
                "MD5": "f2a0e9034d67f8200993c4fa8e4f5d15",
                "SHA-1": "617c42943dcd973235e2227d3ae88f330a2944d0",
                "SHA-256": "cabb45c99ffd8dd189e4e3ed5158fac1d0de4e2782dd704b2b595db5f63e2610"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--29667c08-5fa1-47be-bddb-fd33bed3fd76",
            "value": "https://www.advantims.com/GfxCPL.xsl"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b",
            "created": "2026-10-09T11:57:28.478717Z",
            "modified": "2026-10-09T11:57:28.478717Z",
            "name": "Lazarus"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--f03d5ae9-ad7d-4c13-a137-e7663fa8a92e",
            "created_by_ref": "identity--e98c3f59-8d3e-4b14-98ca-ce4baddc5451",
            "created": "2026-10-09T11:57:28.482146Z",
            "modified": "2026-10-09T11:57:28.482146Z",
            "name": "LolZarus: Lazarus Group Incorporating Lolbins into Campaigns",
            "published": "2022-02-08T00:00:00Z",
            "object_refs": [
                "identity--e98c3f59-8d3e-4b14-98ca-ce4baddc5451",
                "domain-name--efa0fe22-769d-4e1b-9dbe-a8236fe6264b",
                "domain-name--f5941e52-bc71-4672-93bd-9d3c8c6cb121",
                "file--8f0e3c0c-5b77-47f0-a09a-26276dd9a825",
                "file--ae27cc14-aa92-44e0-940f-a2b9c9ea36df",
                "file--d0630af0-4584-4ac0-8075-d5d46fc940ae",
                "url--98abb706-ee38-4dde-9684-03062356a7c5",
                "domain-name--bfc85530-6778-416a-8f68-29e263bda01b",
                "file--a74fd7b0-2ac5-4562-864d-ca6ecec9d0e3",
                "url--ac663880-2dcf-4cdc-82cf-9a67753d6831",
                "file--1a5408bd-6cc3-4db1-93ad-ac8a8d315be6",
                "file--ebdc3fbf-4280-476e-a190-bee05a5a319b",
                "url--29667c08-5fa1-47be-bddb-fd33bed3fd76",
                "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://blog.qualys.com/vulnerabilities-threat-research/2022/02/08/lolzarus-lazarus-group-incorporating-lolbins-into-campaigns"
                }
            ]
        }
    ]
}