{
    "type": "bundle",
    "id": "bundle--c9f30802-e178-4fd2-8e29-3cd5657f4559",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--34169512-f2ce-469b-a77d-edd828ec47c5",
            "created": "2025-03-12T11:42:45.535681Z",
            "modified": "2025-03-12T11:47:45.158691Z",
            "name": "Lookout",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--63c07a5a-058b-4c80-860d-96f03f73799d",
            "hashes": {
                "MD5": "dd5a670fecdcaa870ae94fa61dbb7cfa",
                "SHA-1": "1cc97e490b5f8a582b6b03bdba58cb5f1a389e78",
                "SHA-256": "da56b0416b205b36337af22738967445ff310ca0f6051b243f00b83baa67aa09"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--b3fc825e-ed79-46b3-81a6-b5077e588c87",
            "value": "nidlogon.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--c26ef709-a75d-4949-96c5-ffcff6406d98",
            "value": "st0746.net"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--784c988a-d0eb-4b74-bde6-fe383f094484",
            "value": "naverfiles.com"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--0e1bb0e0-5d0a-423d-a872-a585bb9d9724",
            "value": "27.255.79.225"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--3c6a3719-ed55-4503-92bb-e48a0a006f70",
            "hashes": {
                "MD5": "e61bde8b1d6e409aafd296dedf29f9f5",
                "SHA-1": "f08f036a0c79a53f6b0c9ad84fb6eac1ac79c168",
                "SHA-256": "bf0150e1e31f655978a74e126b973f2cbd6555e970130f8fafef25b884cfb442"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d0522179-5186-421b-a777-cd6ccb8fa40e",
            "hashes": {
                "MD5": "8fcdaf6788e90e72d8b854c6a6622231",
                "SHA-1": "b84604cad2f3a80fb50415aa069cce7af381e249",
                "SHA-256": "75d9353c8fd8f0f88769bca71cf2eaaafee35f1f713ca28bd99c66546f056071"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--5af5381f-f3ca-4381-a4f0-f4584e13f58b",
            "hashes": {
                "MD5": "894d743617a0a95cf93a1d82ab386c7e",
                "SHA-1": "062a869caac496d0182decfadc57a23057caa4ab",
                "SHA-256": "3ca78cecb854ac65760f875c726a062c3dbfd9570adbaed473125c5c61c2ab21"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ef9f011d-0902-4750-8afd-096cabaa60a1",
            "hashes": {
                "MD5": "fce7ebd58c1d4e9975bd10726ee61bf2",
                "SHA-1": "3278324744e14ddf4f4312d375f82b31026f51b5",
                "SHA-256": "d937ea795b97a6f6b99dad10b31557c54d91e95f13c851371796ff06ec65dda9"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--f0cc06c9-0675-46c7-9637-1311461fd647",
            "hashes": {
                "MD5": "565cad577bdb486e0437b35a3b44af2a",
                "SHA-1": "2d1537e92878a3a14b5b3f55b32c91b099513ae0",
                "SHA-256": "f1b33341b0dc25c84b92e6b3bc62125a216d62e746d06560a28f68deead406b9"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6141cef4-ca35-455e-b667-35df8f4e711c",
            "hashes": {
                "MD5": "03b22e4cc944de00feda7120ebea572c",
                "SHA-1": "df39ab90c89aa77a92295721688b18e7f1fdb38d",
                "SHA-256": "b0c0f38551a119d0b633c1b65e61b493574ed7083e3e003c83aa19dff7a0524b"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c50ceb01-3cae-47c9-88ca-7b2779979b3e",
            "hashes": {
                "MD5": "bc4bcc29f12d40952c679e45a3df6a16",
                "SHA-1": "985fd1f74eb617b1fea17095f9e991dcaceec170",
                "SHA-256": "0374615eeca4eaa4a9d97c0de82b7e36b0c60cd40332b61c86fa0b29f7712115"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--f74207cd-a999-437a-be57-19b7d64a209d",
            "hashes": {
                "MD5": "6e68edd3ef11a3e5d124626d9da9ad81",
                "SHA-1": "1a167b65be75fd0651bbda072c856628973a3c1e",
                "SHA-256": "fe1fb1eaf852085c0d1d9e87a49d04722da64c47f8cba75548002c44113c1a7e"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--002f8cde-00ff-44ce-936d-f1e3c9ff1c0d",
            "hashes": {
                "MD5": "d271cde524f16d5a4d9bfcdcbaca92ee",
                "SHA-1": "ea6d12e4a465a7a44cbad12659ade8a4999d64d1",
                "SHA-256": "90ec29bafccc540dcb171a020e1216da2233b2ce8e9b5e4ff1f510e14f09f4b5"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--a9822b1b-5c34-4cf5-9abe-0a34a11286e0",
            "hashes": {
                "MD5": "152b90a0d88691a8af426a2f845cfb78",
                "SHA-1": "911d9f05e1c57a745cb0c669f3e1b67ac4a08601",
                "SHA-256": "0329be10a5be4350e0d2c15ed265f0f32557d869ce32566a248d4ed3f9a20c16"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--425ee97b-60ea-4121-8a36-669703a42f29",
            "hashes": {
                "MD5": "de87afde4fa6a244f7165e8e2bf4fa29",
                "SHA-1": "cd62a9ab320b4f6be49be11c9b1d2d5519cc4860",
                "SHA-256": "f3e004f888becd03881cc3685aaf0963ea3cd9872af285849843cba7da732ca7"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b1a699f6-b98c-4955-8601-916f4c6b56eb",
            "hashes": {
                "MD5": "33fb856978a510daa4f523a646c3a188",
                "SHA-1": "5639fa1fa389ed32f8a8d1ebada8bbbe03ac5171",
                "SHA-256": "cbcfcb8089eded5a9d4541a79e7fb1b099761602ab7f0be29fbc00faa30ce9b0"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c6f45252-2d6c-43ae-944c-da1389572d34",
            "hashes": {
                "MD5": "30aed8101df41fa139e7c88bf810ba64",
                "SHA-1": "744e5181e76c68b8b23a19b939942de9e1db1daa",
                "SHA-256": "aa2bbdde656674f2e62d41a3bae7597b2b5102982d97a0fd9410d9055f65e536"
            }
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--12a8388b-162a-4ee9-a101-b36329ce08b1",
            "value": "mlyqwl@gmail.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--04d7f8c2-851e-43d7-92b0-bceaa9705fd9",
            "value": "crowdon.info"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--e2ec6f83-511e-4a3f-8fd0-6d518d4db0aa",
            "value": "resolveissue.org"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--0b0de706-d4b0-4e98-a7f8-85e8644b1e8d",
            "value": "noticeofpleadings.com"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--3be555f5-1f0d-5001-b84a-c6c910760fd0",
            "created": "2026-09-19T09:10:42.697341Z",
            "modified": "2026-09-19T09:10:42.697341Z",
            "name": "APT37"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--18b6840c-4682-48ab-a22b-f2616a6eac69",
            "created_by_ref": "identity--34169512-f2ce-469b-a77d-edd828ec47c5",
            "created": "2026-09-19T09:10:42.698515Z",
            "modified": "2026-09-19T09:10:42.698515Z",
            "name": "Lookout Discovers North Korean APT37 Mobile Spyware",
            "published": "2025-03-12T00:00:00Z",
            "object_refs": [
                "identity--34169512-f2ce-469b-a77d-edd828ec47c5",
                "file--63c07a5a-058b-4c80-860d-96f03f73799d",
                "domain-name--b3fc825e-ed79-46b3-81a6-b5077e588c87",
                "domain-name--c26ef709-a75d-4949-96c5-ffcff6406d98",
                "domain-name--784c988a-d0eb-4b74-bde6-fe383f094484",
                "ipv4-addr--0e1bb0e0-5d0a-423d-a872-a585bb9d9724",
                "file--3c6a3719-ed55-4503-92bb-e48a0a006f70",
                "file--d0522179-5186-421b-a777-cd6ccb8fa40e",
                "file--5af5381f-f3ca-4381-a4f0-f4584e13f58b",
                "file--ef9f011d-0902-4750-8afd-096cabaa60a1",
                "file--f0cc06c9-0675-46c7-9637-1311461fd647",
                "file--6141cef4-ca35-455e-b667-35df8f4e711c",
                "file--c50ceb01-3cae-47c9-88ca-7b2779979b3e",
                "file--f74207cd-a999-437a-be57-19b7d64a209d",
                "file--002f8cde-00ff-44ce-936d-f1e3c9ff1c0d",
                "file--a9822b1b-5c34-4cf5-9abe-0a34a11286e0",
                "file--425ee97b-60ea-4121-8a36-669703a42f29",
                "file--b1a699f6-b98c-4955-8601-916f4c6b56eb",
                "file--c6f45252-2d6c-43ae-944c-da1389572d34",
                "email-addr--12a8388b-162a-4ee9-a101-b36329ce08b1",
                "domain-name--04d7f8c2-851e-43d7-92b0-bceaa9705fd9",
                "domain-name--e2ec6f83-511e-4a3f-8fd0-6d518d4db0aa",
                "domain-name--0b0de706-d4b0-4e98-a7f8-85e8644b1e8d",
                "threat-actor--3be555f5-1f0d-5001-b84a-c6c910760fd0"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.lookout.com/threat-intelligence/article/lookout-discovers-new-spyware-by-north-korean-apt37"
                }
            ]
        }
    ]
}