{
    "type": "bundle",
    "id": "bundle--6d975cc0-f51b-43b1-9091-c2afea0962b4",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--a361b290-d09a-4e0e-a13d-681ca0c3dcc7",
            "created": "2023-03-08T12:51:43.404685Z",
            "modified": "2024-08-31T04:09:59.408166Z",
            "name": "Microsoft",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--daff386e-afce-4689-a37b-c4413480304c",
            "hashes": {
                "MD5": "1d5ad4a60ec9be32c11ad99f234bfe8f",
                "SHA-1": "be6909ba6e0b4d228da5b9daccc83f7082c06cf2",
                "SHA-256": "f59035192098e44b86c4648a0de4078edbe80352260276f4755d15d354f5fc58"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--48e18683-dd83-4c5d-ab12-28fc8a7bd473",
            "hashes": {
                "MD5": "14af3f039f2398b454bbb64c7fdf4a22",
                "SHA-1": "f1f75da17e8c125b87fdafd76386f90213362bcf",
                "SHA-256": "cb97ec024c04150ad419d1af2d1eb66b5c48ab5f345409d9d791db574981a3fb"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--71f6fecf-08a8-44f1-9e5b-1f3200b35cd5",
            "hashes": {
                "MD5": "39898007146d7b436d013924db58ebc6",
                "SHA-1": "dd8b8c4de92d9b6d1d04f0e995f4cc7e746d0a64",
                "SHA-256": "09d152aa2b6261e3b0a1d1c19fa8032f215932186829cfcca954cc5e84a6cc38"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c15287ff-b136-420c-b4a2-2b9b66a9ca17",
            "hashes": {
                "MD5": "608fb305734364e63513ef36da787f2b",
                "SHA-1": "bda08d55f14827abf21abb79384039660f2fa198",
                "SHA-256": "9863173e0a45318f776e36b1a8529380362af8f3e73a2b4875e30d31ad7bd3c1"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d7dd0f83-e14f-4de2-a9a7-3d19c0f9989d",
            "hashes": {
                "MD5": "b8e1fe2955282a58fa3042b25f2ce19d",
                "SHA-1": "dd91678f1d023607430d53b5ff5f1d6533a98469",
                "SHA-256": "cafaa7bc3277711509dc0800ed53b82f645e86c195e85fbf34430bbc75c39c24"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--a5eba6dc-eff6-46e1-96f1-6a5ed9ddbd52",
            "hashes": {
                "MD5": "66c45a736e165cf78cee7970bbc74ead",
                "SHA-1": "b0479c5d4de5541a60923b5627ed62e6391efe2f",
                "SHA-256": "39d7407e76080ec5d838c8ebca5182f3ac4a5f416ff7bda9cbc4efffd78b4ff5"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--155fd86a-bb15-48fc-b8c7-1017578fc40c",
            "value": "ccwaterfall.com"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--07fe522f-c6b7-4475-8250-eb5d07f67bee",
            "hashes": {
                "MD5": "330fff5b3c54a03fd59a64981e96814d",
                "SHA-1": "550bdf367fba63a81276465a65dcb64280240dda",
                "SHA-256": "70c5b64589277ace59db86d19d846a9236214b48aacabbaf880f2b6355ab5260"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--38b90a4d-e414-4f28-a030-86b5a72fa703",
            "hashes": {
                "MD5": "08f8353101fb2f11a1036a947f8fce83",
                "SHA-1": "853d256bafd39426fad9bf5f7fad2971b7978c06",
                "SHA-256": "ecce739b556f26de07adbfc660a958ba2dca432f70a8c4dd01466141a6551146"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--98611646-f30c-40b5-8879-ee010c9994fc",
            "hashes": {
                "MD5": "6c76f795c4b3ff2e478766dee7c738d6",
                "SHA-1": "e99d44e93069001129c8f88f7a5259fb21bb6b68",
                "SHA-256": "56554117d96d12bd3504ebef2a8f28e790dd1fe583c33ad58ccbf614313ead8c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--e489b2dc-1fdc-4ef0-8064-ae663af0095d",
            "hashes": {
                "MD5": "c0bb453d00bf3d8acde09b691ca9b5f2",
                "SHA-1": "2ebfcbf2deb09e9af046ae765797a654b49645c2",
                "SHA-256": "f66122a3e1eaa7dcb7c13838037573dace4e5a1c474a23006417274c0c8608be"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--bfcafb0a-a98d-475f-9a24-5624366d2c39",
            "value": "detankwar.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--953f5608-45ec-41b0-b393-3d0a3b4cf308",
            "value": "freenet-zhilly.org"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--2dfe4c81-46dd-4c1e-954d-0cefe884615e",
            "value": "defitankzone.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--22779d66-52ef-48e7-ba07-e801fd73659a",
            "value": "starglowventures.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--52f581e5-9bc5-430f-9595-b61e9a06e369",
            "value": "pointdnt.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--5b807154-a13d-4e44-9f0f-ae0affde80b4",
            "value": "bestonlinefilmstudio.org"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--be531af9-bc1a-4e30-9518-00a91164289c",
            "value": "mingeloem.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--8fd72d92-18db-484c-9ca3-9f4218bf6dc6",
            "value": "matrixane.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--33579016-6627-4cec-820f-2982176c0ff6",
            "value": "blockchain-newtech.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--341a04eb-5d13-4afd-aaca-14dd375e6aa2",
            "value": "chaingrown.com"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--03550cfe-1db3-5bcf-b290-8a1a27da993d",
            "created": "2026-09-21T06:23:47.30218Z",
            "modified": "2026-09-21T06:23:47.30218Z",
            "name": "MoonstoneSleet"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--3a70b1a8-c1bc-58cd-adad-16cf3ee31b99",
            "created": "2026-09-21T06:23:47.303232Z",
            "modified": "2026-09-21T06:23:47.303232Z",
            "name": "Storm-1789"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--ddde9e57-1fd0-5698-8488-0a3516cca59c",
            "created": "2026-09-21T06:23:47.303997Z",
            "modified": "2026-09-21T06:23:47.303997Z",
            "name": "Storm-1877"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--092a9b0b-9c40-4bcc-897e-9b69ce4630fa",
            "created_by_ref": "identity--a361b290-d09a-4e0e-a13d-681ca0c3dcc7",
            "created": "2026-09-21T06:23:47.305197Z",
            "modified": "2026-09-21T06:23:47.305197Z",
            "name": "Moonstone Sleet emerges as new North Korean threat actor with new bag of tricks",
            "published": "2024-05-28T00:00:00Z",
            "object_refs": [
                "identity--a361b290-d09a-4e0e-a13d-681ca0c3dcc7",
                "file--daff386e-afce-4689-a37b-c4413480304c",
                "file--48e18683-dd83-4c5d-ab12-28fc8a7bd473",
                "file--71f6fecf-08a8-44f1-9e5b-1f3200b35cd5",
                "file--c15287ff-b136-420c-b4a2-2b9b66a9ca17",
                "file--d7dd0f83-e14f-4de2-a9a7-3d19c0f9989d",
                "file--a5eba6dc-eff6-46e1-96f1-6a5ed9ddbd52",
                "domain-name--155fd86a-bb15-48fc-b8c7-1017578fc40c",
                "file--07fe522f-c6b7-4475-8250-eb5d07f67bee",
                "file--38b90a4d-e414-4f28-a030-86b5a72fa703",
                "file--98611646-f30c-40b5-8879-ee010c9994fc",
                "file--e489b2dc-1fdc-4ef0-8064-ae663af0095d",
                "domain-name--bfcafb0a-a98d-475f-9a24-5624366d2c39",
                "domain-name--953f5608-45ec-41b0-b393-3d0a3b4cf308",
                "domain-name--2dfe4c81-46dd-4c1e-954d-0cefe884615e",
                "domain-name--22779d66-52ef-48e7-ba07-e801fd73659a",
                "domain-name--52f581e5-9bc5-430f-9595-b61e9a06e369",
                "domain-name--5b807154-a13d-4e44-9f0f-ae0affde80b4",
                "domain-name--be531af9-bc1a-4e30-9518-00a91164289c",
                "domain-name--8fd72d92-18db-484c-9ca3-9f4218bf6dc6",
                "domain-name--33579016-6627-4cec-820f-2982176c0ff6",
                "domain-name--341a04eb-5d13-4afd-aaca-14dd375e6aa2",
                "threat-actor--03550cfe-1db3-5bcf-b290-8a1a27da993d",
                "threat-actor--3a70b1a8-c1bc-58cd-adad-16cf3ee31b99",
                "threat-actor--ddde9e57-1fd0-5698-8488-0a3516cca59c"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.microsoft.com/en-us/security/blog/2024/05/28/moonstone-sleet-emerges-as-new-north-korean-threat-actor-with-new-bag-of-tricks/"
                }
            ]
        }
    ]
}