{
    "type": "bundle",
    "id": "bundle--0a0d658c-97c6-41bc-9673-52b5a6dee5ea",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--ee1af7fe-c2db-446e-ab28-bdb4b4e29c1c",
            "created": "2023-03-08T12:51:42.067091Z",
            "modified": "2023-03-10T04:35:51.526813Z",
            "name": "USCISA",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--732d8ec8-b53c-4241-a66d-f623ed76fe8a",
            "hashes": {
                "SHA-256": "5e40d106977017b1ed235419b1e59ff090e1f43ac57da1bb5d80d66ae53b1df8"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--c904bcfc-85fb-45fd-966a-e602dc0097b4",
            "value": "globalkeystroke.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--e7b77417-ff9b-4aac-8305-63f492fb5ab8",
            "value": "airbseeker.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--61d09306-9d73-4068-baca-93d928da9403",
            "value": "woodmate.it"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--800701c6-b0f4-4992-b091-901a3899f916",
            "hashes": {
                "MD5": "451c23709ecd5a8461ad060f6346930c"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--bef6403b-2f24-446b-80d5-0cd73a8613fe",
            "value": "https://globalkeystroke.com/pockbackx.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--a1838218-86db-43c5-821e-f8d8e90e582f",
            "value": "https://airbseeker.com/rediret.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--3cf3fb1e-e872-4574-ab4d-c3aeef69810f",
            "value": "https://www.woodmate.it/administrator/help/en-GB/bins/tags/taghelper.php"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--5be15bf7-3933-473c-9374-2168475384d5",
            "hashes": {
                "SHA-1": "58b0516d28bd7218b1908fb266b8fe7582e22a5f"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6e8d3fd1-8f19-4644-9b6f-383ad913c481",
            "hashes": {
                "SHA-256": "572a124f5665be68eaa472590f3ba75bf34b0ea2942b5fcbfd3e74654202dd09"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--bce0aee4-1366-463d-9f54-4b8d457a4774",
            "hashes": {
                "SHA-256": "527792dfab79f026eaa6930d2109c93e816ed31826dba0338a9223db71aced18"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--3a39bcf6-3579-4226-aaf7-da8018b3582c",
            "hashes": {
                "SHA-256": "3e5442440aea07229a1bf6ca2fdf78c5e2e5eaac312a325ccb49d45da14f97f4"
            }
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--2af1e9c3-9151-45f6-9ab2-135d1c16a08b",
            "value": "23.152.0.101"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--60705295-8eaf-4074-a0c3-45991beff990",
            "hashes": {
                "SHA-256": "326d7836d580c08cf4b5e587434f6e5011ebf2284bbf3e7c083a8f41dac36ddd"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--adae3a96-8718-4739-8394-819ebbc86280",
            "value": "coingotrade.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--931768be-785a-49e4-92f7-00a2eaa4c3e2",
            "value": "admin@globalkeystroke.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--179959f7-c928-4e8e-a8a2-1935fc320830",
            "value": "support@coingotrade.com"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--ecccfaf4-822f-4c21-bf20-2a09ff848065",
            "value": "https://coingotrade.com/download/[GUID]"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--55012526-85ea-4640-9bcb-3dfdf148777e",
            "value": "https://coingotrade.com/coingotrade_update.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--324f7e5c-981e-4cfd-86a2-d4ea6fe5dbc7",
            "value": "http://23.152.0.101:8080/"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--82554bd4-0d25-46d1-8c6c-62590f996da1",
            "hashes": {
                "SHA-1": "80923c208c2c821ed99e1ed8f50bd549598a210c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c704b9de-125c-4023-94d0-e5fe97082108",
            "hashes": {
                "MD5": "0d195513534855e613bd7a29243565ab"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--8660ec11-9c3d-45d4-929e-89e17336762a",
            "hashes": {
                "SHA-1": "358f4c8575c82f45340886f282d41ca0560cfa6e"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--cd5b0abb-a3a2-4c7b-996b-41432bc787bc",
            "hashes": {
                "MD5": "7a73178c682d1a61b2f1c61ae558b608"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b677062e-69fc-4265-8139-42bb62c4ab63",
            "hashes": {
                "SHA-1": "decb43141699e43a1d27dc2db063e0020f9f33aa"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--746abd1b-4d7a-4898-b58a-d1f7548785de",
            "hashes": {
                "MD5": "149a696472d4a189f5896336ab16cc34"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c528c53f-5be2-40f3-83af-c1aebb4224dd",
            "hashes": {
                "SHA-1": "1d1f9f3ee8329c3f3033222a46c7a311f259a359"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--f9306115-18ec-47cc-8267-59813bd9e157",
            "hashes": {
                "MD5": "88de31ad947927004ab56ab1e855fd64"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--2e46dba6-ca9c-4412-9358-6203904727d5",
            "value": "https://coingotrade.com/update_coingotrade.php"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b",
            "created": "2026-08-20T01:45:17.157583Z",
            "modified": "2026-08-20T01:45:17.157583Z",
            "name": "Lazarus"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--ae7e6b55-eed3-446e-9bd5-d1c35b367a86",
            "created_by_ref": "identity--ee1af7fe-c2db-446e-ab28-bdb4b4e29c1c",
            "created": "2026-08-20T01:45:17.15791Z",
            "modified": "2026-08-20T01:45:17.15791Z",
            "name": "MAR-10322463-5.v1 - AppleJeus: CoinGoTrade",
            "published": "2021-02-17T00:00:00Z",
            "object_refs": [
                "identity--ee1af7fe-c2db-446e-ab28-bdb4b4e29c1c",
                "file--732d8ec8-b53c-4241-a66d-f623ed76fe8a",
                "domain-name--c904bcfc-85fb-45fd-966a-e602dc0097b4",
                "domain-name--e7b77417-ff9b-4aac-8305-63f492fb5ab8",
                "domain-name--61d09306-9d73-4068-baca-93d928da9403",
                "file--800701c6-b0f4-4992-b091-901a3899f916",
                "url--bef6403b-2f24-446b-80d5-0cd73a8613fe",
                "url--a1838218-86db-43c5-821e-f8d8e90e582f",
                "url--3cf3fb1e-e872-4574-ab4d-c3aeef69810f",
                "file--5be15bf7-3933-473c-9374-2168475384d5",
                "file--6e8d3fd1-8f19-4644-9b6f-383ad913c481",
                "file--bce0aee4-1366-463d-9f54-4b8d457a4774",
                "file--3a39bcf6-3579-4226-aaf7-da8018b3582c",
                "ipv4-addr--2af1e9c3-9151-45f6-9ab2-135d1c16a08b",
                "file--60705295-8eaf-4074-a0c3-45991beff990",
                "domain-name--adae3a96-8718-4739-8394-819ebbc86280",
                "email-addr--931768be-785a-49e4-92f7-00a2eaa4c3e2",
                "email-addr--179959f7-c928-4e8e-a8a2-1935fc320830",
                "url--ecccfaf4-822f-4c21-bf20-2a09ff848065",
                "url--55012526-85ea-4640-9bcb-3dfdf148777e",
                "url--324f7e5c-981e-4cfd-86a2-d4ea6fe5dbc7",
                "file--82554bd4-0d25-46d1-8c6c-62590f996da1",
                "file--c704b9de-125c-4023-94d0-e5fe97082108",
                "file--8660ec11-9c3d-45d4-929e-89e17336762a",
                "file--cd5b0abb-a3a2-4c7b-996b-41432bc787bc",
                "file--b677062e-69fc-4265-8139-42bb62c4ab63",
                "file--746abd1b-4d7a-4898-b58a-d1f7548785de",
                "file--c528c53f-5be2-40f3-83af-c1aebb4224dd",
                "file--f9306115-18ec-47cc-8267-59813bd9e157",
                "url--2e46dba6-ca9c-4412-9358-6203904727d5",
                "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.cisa.gov/news-events/analysis-reports/ar21-048e"
                }
            ]
        }
    ]
}