{
    "type": "bundle",
    "id": "bundle--bca55972-29f1-432a-b6e8-9aaf80d128fc",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--f124ebed-440c-493a-a454-005060f3b4d8",
            "created": "2023-03-08T12:51:57.814175Z",
            "modified": "2026-04-22T13:31:24.745811Z",
            "name": "TrendMicro",
            "identity_class": "organization"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--d2b8db15-3b94-4789-85a3-7be6a7347c22",
            "value": "https://appstockfolio.com/panel/upload.php"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--7b750d8e-abd1-481c-b93b-da5995e48871",
            "value": "appstockfolio.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--703aa315-97cf-4f1a-b821-3ca144ad176d",
            "value": "owpqkszz.info"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--b8d2388a-ca07-4070-9e38-66fd46a83677",
            "value": "193.37.212.176"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6c49771f-d6b6-4b39-896c-619618964f0a",
            "hashes": {
                "MD5": "6ec1598c61a19e7a7072bc256b761133",
                "SHA-1": "06253731396c4d2c89c06c780e33a46c71a2cf4b",
                "SHA-256": "faa2799751582b8829c61cbfe2cbaf3e792960835884b61046778d17937520f4"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--293f3db2-495d-46f0-bb22-e00993807bd9",
            "hashes": {
                "MD5": "789b8b720c27ffaa807bef0f1b2b49b0",
                "SHA-1": "035fe2d721e267bf1b0d937aea30d7941262f14c",
                "SHA-256": "6f48ef0d76ce68bbca53b05d2d22031aec5ce997e7227c3dcb20809959680f11"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b0780df3-b0de-4bf5-88a0-1e00159360d4",
            "hashes": {
                "MD5": "d8f39ea5d26135087a167aae5e4fc4dc",
                "SHA-1": "bca43d26ee306980aa3e1f04d29c66f991d0fbb1",
                "SHA-256": "efd5b96f489f934f2465a185e43fddf50fcde51b12a8fb91d5d93b09a21706c7"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--0e75920c-2a05-4182-acd2-6e4bbf4a231c",
            "hashes": {
                "MD5": "378549d594c30c833fdf6cc67bc7cdb7",
                "SHA-1": "89a64dee2f95587956e72c55a7a36e13d9d55aef",
                "SHA-256": "18e1db7c37a63d987a5448b4dd25103c8053799b0deea5f45f00ca094afe2fe7"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6741900f-cd66-45de-b974-5c750426af5d",
            "hashes": {
                "MD5": "28c5b98362aad707669f95445b77c933",
                "SHA-1": "328fcfbf4e9fb7bf27d1c3735a3f58fbf104048b",
                "SHA-256": "83df2f39140679a9cfb55f9c839ff8e7638ba29dba164900f9c77bb177796e03"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--23a4f7d7-7760-4521-bf10-7a068819b732",
            "hashes": {
                "MD5": "515a3915d11006ebafe0349353b7a831",
                "SHA-1": "cdb25f871ef59903f62ac8cbde944ab9d335d2f4",
                "SHA-256": "6fe741ef057d38dd6d9bbe02dacbcb4940dac6c32e0f50a641e73727d6bf60d9"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b3470d6d-3469-4b5f-affb-f45fbcb32629",
            "hashes": {
                "SHA-256": "be8b6549da925f285307b17c616a010a9418af70d090ed960ade575ce27c7787"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--10d7db08-e2f0-4473-a02d-a651d134d067",
            "hashes": {
                "MD5": "2d4643a1f9405d7543267a5c908f7fb2",
                "SHA-1": "a6f903443b8f49b60f362c17294d2a3f77110399",
                "SHA-256": "d50f5e94f2c417623c5f573963cc777c0676cc7245d65967ca09a53f464d2b50"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--86170d1a-487b-4dc8-a4d1-4eff485b38a9",
            "value": "http://owpqkszz.info"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--b3fa2d80-e87c-4849-ae62-09741b11cb8d",
            "value": "gmzera54l5qpa6lm.onion"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--11bafeba-182f-48d8-ad41-3e94c3b4709c",
            "created_by_ref": "identity--f124ebed-440c-493a-a454-005060f3b4d8",
            "created": "2026-10-10T10:21:04.78518Z",
            "modified": "2026-10-10T10:21:04.78518Z",
            "name": "Mac Malware that Spoofs Trading App Steals User Information, Uploads it to Website",
            "published": "2019-09-20T00:00:00Z",
            "object_refs": [
                "identity--f124ebed-440c-493a-a454-005060f3b4d8",
                "url--d2b8db15-3b94-4789-85a3-7be6a7347c22",
                "domain-name--7b750d8e-abd1-481c-b93b-da5995e48871",
                "domain-name--703aa315-97cf-4f1a-b821-3ca144ad176d",
                "ipv4-addr--b8d2388a-ca07-4070-9e38-66fd46a83677",
                "file--6c49771f-d6b6-4b39-896c-619618964f0a",
                "file--293f3db2-495d-46f0-bb22-e00993807bd9",
                "file--b0780df3-b0de-4bf5-88a0-1e00159360d4",
                "file--0e75920c-2a05-4182-acd2-6e4bbf4a231c",
                "file--6741900f-cd66-45de-b974-5c750426af5d",
                "file--23a4f7d7-7760-4521-bf10-7a068819b732",
                "file--b3470d6d-3469-4b5f-affb-f45fbcb32629",
                "file--10d7db08-e2f0-4473-a02d-a651d134d067",
                "url--86170d1a-487b-4dc8-a4d1-4eff485b38a9",
                "domain-name--b3fa2d80-e87c-4849-ae62-09741b11cb8d"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://blog.trendmicro.com/trendlabs-security-intelligence/mac-malware-that-spoofs-trading-app-steals-user-information-uploads-it-to-website/"
                }
            ]
        }
    ]
}