{
    "type": "bundle",
    "id": "bundle--5dd84315-fd6a-42ed-b314-6331c0d52ecc",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--ce40c63e-51d4-4ec5-a85b-2d76cd5ec7d1",
            "created": "2023-03-08T12:52:07.036238Z",
            "modified": "2025-06-18T12:58:21.951363Z",
            "name": "CiscoTalos",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7d6fae7c-2884-4c9a-a0d0-835929cef1c0",
            "hashes": {
                "MD5": "505262547f8879249794fc31eea41fc6",
                "SHA-1": "b312dd587e8725edf782e0c176b902fbbfc01468",
                "SHA-256": "f32f6b229913d68daad937cc72a57aa45291a9d623109ed48938815aa7b6005c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--746573d6-ea4f-4e9f-a376-5b8b1500662e",
            "hashes": {
                "MD5": "70652edadedbacfd30d33a826853467d",
                "SHA-1": "45ead9fc05f76d0979bd0f5687bfdc0cd42aea20",
                "SHA-256": "196fb1b6eff4e7a049cea323459cfd6c0e3900d8d69e1d80bffbaabd24c06eba"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--097011de-1e92-49e3-b710-200b963a221f",
            "hashes": {
                "MD5": "cb9e18e21226a89ce2c26c695a989e0d",
                "SHA-1": "ec062c8c6e77808ee2b3573f91eede294d572509",
                "SHA-256": "f78cabf7a0e7ed3ef2d1c976c1486281f56a6503354b87219b466f2f7a0b65c4"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6c8ce52a-b3ce-4278-b8f7-0adcefc6a34b",
            "hashes": {
                "MD5": "b4c9b903dfd18bd67a3824b0109f955b",
                "SHA-1": "a3555a77826df6c8b2886cc0f40e7d7a2bd99610",
                "SHA-256": "f6827dc5af661fbb4bf64bc625c78283ef836c6985bb2bfb836bd0c8d5397332"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--afbc142b-a54c-4bbc-97c7-6a2f7031b39c",
            "hashes": {
                "MD5": "76c3d2092737d964dfd627f1ced0af80",
                "SHA-1": "61d1a5b8f242706a39d06316e4c66b01141b4ab3",
                "SHA-256": "bffe910904efd1f69544daa9b72f2a70fb29f73c51070bde4ea563de862ce4b1"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--f727771a-4565-4c59-a166-68820aa05db3",
            "hashes": {
                "MD5": "643c2ad6067051e3daf7d08b4adeaed4",
                "SHA-1": "7e9cbd2fe29ade9c92f66305bf9159e97252740d",
                "SHA-256": "23eff00dde0ee27dabad28c1f4ffb8b09e876f1e1a77c1e6fb735ab517d79b76"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--a27406f8-4545-45d2-9a60-8f77b5344baf",
            "hashes": {
                "MD5": "4df757390adf71abdd084d3e9718c153",
                "SHA-1": "00331e5f972a98755811c02ec47301336a824a34",
                "SHA-256": "1f8dcfaebbcd7e71c2872e0ba2fc6db81d651cf654a21d33c78eae6662e62392"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--0b76232d-3623-4234-9cfa-b5e7be4d8430",
            "hashes": {
                "SHA-256": "1c926fb3bd99f4a586ed476e4683163892f3958581bf8c24235cd2a415513b7f"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ed10ca0e-25c0-426b-9cfb-2de0affa3bc5",
            "hashes": {
                "SHA-256": "ca932ccaa30955f2fffb1122234fb1524f7de3a8e0044de1ed4fe05cab8702a5"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--492d5885-1cc8-4ae4-8d00-8d48a95d9fd2",
            "hashes": {
                "MD5": "c7c8019f4b5314cd2543ab2ac65d3ea4",
                "SHA-1": "871b08e580e99507501368c967b736e5c1cd38c0",
                "SHA-256": "d20959b615af699d8fff3f0087faade16ed4919355a458a32f5ae61badb5b0ca"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--f11bc839-ef49-4d35-9da2-bf63441c1bf8",
            "value": "visual.1991-06.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--035f8dea-ff28-4dcf-8e1b-e52c5d826336",
            "value": "gendoraduragonkgp126.com"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--976dedc7-882c-4e3c-bacc-1638e48a62c4",
            "value": "66.154.102.91"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--28da043b-54ae-44bc-b461-f8804b816b38",
            "value": "193.56.28.251"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--6a4eef09-8a3e-4c48-a956-d268af2edfc4",
            "value": "64.188.27.73"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--30324205-0b9d-4ae2-aa4d-30feadeae7bc",
            "value": "151.106.2.139"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--0f5ffd6c-3e31-4d20-bda9-76863fe00484",
            "value": "52.202.193.124"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b",
            "created": "2026-10-11T10:38:53.581565Z",
            "modified": "2026-10-11T10:38:53.581565Z",
            "name": "Lazarus"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--64290946-19b3-4d05-998d-26531b6e32ed",
            "created_by_ref": "identity--ce40c63e-51d4-4ec5-a85b-2d76cd5ec7d1",
            "created": "2026-10-11T10:38:53.583143Z",
            "modified": "2026-10-11T10:38:53.583143Z",
            "name": "MagicRAT: Lazarus\u2019 latest gateway into victim networks",
            "published": "2022-09-07T00:00:00Z",
            "object_refs": [
                "identity--ce40c63e-51d4-4ec5-a85b-2d76cd5ec7d1",
                "file--7d6fae7c-2884-4c9a-a0d0-835929cef1c0",
                "file--746573d6-ea4f-4e9f-a376-5b8b1500662e",
                "file--097011de-1e92-49e3-b710-200b963a221f",
                "file--6c8ce52a-b3ce-4278-b8f7-0adcefc6a34b",
                "file--afbc142b-a54c-4bbc-97c7-6a2f7031b39c",
                "file--f727771a-4565-4c59-a166-68820aa05db3",
                "file--a27406f8-4545-45d2-9a60-8f77b5344baf",
                "file--0b76232d-3623-4234-9cfa-b5e7be4d8430",
                "file--ed10ca0e-25c0-426b-9cfb-2de0affa3bc5",
                "file--492d5885-1cc8-4ae4-8d00-8d48a95d9fd2",
                "domain-name--f11bc839-ef49-4d35-9da2-bf63441c1bf8",
                "domain-name--035f8dea-ff28-4dcf-8e1b-e52c5d826336",
                "ipv4-addr--976dedc7-882c-4e3c-bacc-1638e48a62c4",
                "ipv4-addr--28da043b-54ae-44bc-b461-f8804b816b38",
                "ipv4-addr--6a4eef09-8a3e-4c48-a956-d268af2edfc4",
                "ipv4-addr--30324205-0b9d-4ae2-aa4d-30feadeae7bc",
                "ipv4-addr--0f5ffd6c-3e31-4d20-bda9-76863fe00484",
                "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "http://blog.talosintelligence.com/2022/09/lazarus-magicrat.html"
                }
            ]
        }
    ]
}