{
    "type": "bundle",
    "id": "bundle--f4599f8f-d372-4744-b742-41b525626545",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--ee1af7fe-c2db-446e-ab28-bdb4b4e29c1c",
            "created": "2023-03-08T12:51:42.067091Z",
            "modified": "2023-03-10T04:35:51.526813Z",
            "name": "USCISA",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--f1aea897-7811-4835-80fc-c4b0348418bb",
            "hashes": {
                "MD5": "451c23709ecd5a8461ad060f6346930c",
                "SHA-1": "58b0516d28bd7218b1908fb266b8fe7582e22a5f",
                "SHA-256": "5e40d106977017b1ed235419b1e59ff090e1f43ac57da1bb5d80d66ae53b1df8"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--c904bcfc-85fb-45fd-966a-e602dc0097b4",
            "value": "globalkeystroke.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--e7b77417-ff9b-4aac-8305-63f492fb5ab8",
            "value": "airbseeker.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--61d09306-9d73-4068-baca-93d928da9403",
            "value": "woodmate.it"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--bef6403b-2f24-446b-80d5-0cd73a8613fe",
            "value": "https://globalkeystroke.com/pockbackx.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--a1838218-86db-43c5-821e-f8d8e90e582f",
            "value": "https://airbseeker.com/rediret.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--3cf3fb1e-e872-4574-ab4d-c3aeef69810f",
            "value": "https://www.woodmate.it/administrator/help/en-GB/bins/tags/taghelper.php"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--42b47509-4b1f-42a4-9e1d-6e75812cc5cb",
            "hashes": {
                "MD5": "7a73178c682d1a61b2f1c61ae558b608",
                "SHA-1": "358f4c8575c82f45340886f282d41ca0560cfa6e",
                "SHA-256": "527792dfab79f026eaa6930d2109c93e816ed31826dba0338a9223db71aced18"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b9994717-f291-49cb-87ab-005b79986f76",
            "hashes": {
                "MD5": "149a696472d4a189f5896336ab16cc34",
                "SHA-1": "decb43141699e43a1d27dc2db063e0020f9f33aa",
                "SHA-256": "572a124f5665be68eaa472590f3ba75bf34b0ea2942b5fcbfd3e74654202dd09"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b4b7a39e-6cd1-4982-b8e4-5b315a7acbfe",
            "hashes": {
                "MD5": "88de31ad947927004ab56ab1e855fd64",
                "SHA-1": "1d1f9f3ee8329c3f3033222a46c7a311f259a359",
                "SHA-256": "3e5442440aea07229a1bf6ca2fdf78c5e2e5eaac312a325ccb49d45da14f97f4"
            }
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--2af1e9c3-9151-45f6-9ab2-135d1c16a08b",
            "value": "23.152.0.101"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6c51a8f0-b852-454e-8568-e9fae1147f9d",
            "hashes": {
                "MD5": "0d195513534855e613bd7a29243565ab",
                "SHA-1": "80923c208c2c821ed99e1ed8f50bd549598a210c",
                "SHA-256": "326d7836d580c08cf4b5e587434f6e5011ebf2284bbf3e7c083a8f41dac36ddd"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--adae3a96-8718-4739-8394-819ebbc86280",
            "value": "coingotrade.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--931768be-785a-49e4-92f7-00a2eaa4c3e2",
            "value": "admin@globalkeystroke.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--179959f7-c928-4e8e-a8a2-1935fc320830",
            "value": "support@coingotrade.com"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--ecccfaf4-822f-4c21-bf20-2a09ff848065",
            "value": "https://coingotrade.com/download/[GUID]"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--55012526-85ea-4640-9bcb-3dfdf148777e",
            "value": "https://coingotrade.com/coingotrade_update.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--324f7e5c-981e-4cfd-86a2-d4ea6fe5dbc7",
            "value": "http://23.152.0.101:8080/"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--2e46dba6-ca9c-4412-9358-6203904727d5",
            "value": "https://coingotrade.com/update_coingotrade.php"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--bf50d0a5-2102-5377-a684-13b3f5a023c4",
            "created": "2026-09-29T07:11:17.374454Z",
            "modified": "2026-09-29T07:11:17.374454Z",
            "name": "AppleJeus"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b",
            "created": "2026-09-29T07:11:17.375555Z",
            "modified": "2026-09-29T07:11:17.375555Z",
            "name": "Lazarus"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--ae7e6b55-eed3-446e-9bd5-d1c35b367a86",
            "created_by_ref": "identity--ee1af7fe-c2db-446e-ab28-bdb4b4e29c1c",
            "created": "2026-09-29T07:11:17.376307Z",
            "modified": "2026-09-29T07:11:17.376307Z",
            "name": "MAR-10322463-5.v1 - AppleJeus: CoinGoTrade",
            "published": "2021-02-17T00:00:00Z",
            "object_refs": [
                "identity--ee1af7fe-c2db-446e-ab28-bdb4b4e29c1c",
                "file--f1aea897-7811-4835-80fc-c4b0348418bb",
                "domain-name--c904bcfc-85fb-45fd-966a-e602dc0097b4",
                "domain-name--e7b77417-ff9b-4aac-8305-63f492fb5ab8",
                "domain-name--61d09306-9d73-4068-baca-93d928da9403",
                "url--bef6403b-2f24-446b-80d5-0cd73a8613fe",
                "url--a1838218-86db-43c5-821e-f8d8e90e582f",
                "url--3cf3fb1e-e872-4574-ab4d-c3aeef69810f",
                "file--42b47509-4b1f-42a4-9e1d-6e75812cc5cb",
                "file--b9994717-f291-49cb-87ab-005b79986f76",
                "file--b4b7a39e-6cd1-4982-b8e4-5b315a7acbfe",
                "ipv4-addr--2af1e9c3-9151-45f6-9ab2-135d1c16a08b",
                "file--6c51a8f0-b852-454e-8568-e9fae1147f9d",
                "domain-name--adae3a96-8718-4739-8394-819ebbc86280",
                "email-addr--931768be-785a-49e4-92f7-00a2eaa4c3e2",
                "email-addr--179959f7-c928-4e8e-a8a2-1935fc320830",
                "url--ecccfaf4-822f-4c21-bf20-2a09ff848065",
                "url--55012526-85ea-4640-9bcb-3dfdf148777e",
                "url--324f7e5c-981e-4cfd-86a2-d4ea6fe5dbc7",
                "url--2e46dba6-ca9c-4412-9358-6203904727d5",
                "threat-actor--bf50d0a5-2102-5377-a684-13b3f5a023c4",
                "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.cisa.gov/news-events/analysis-reports/ar21-048e"
                }
            ]
        }
    ]
}