{
    "type": "bundle",
    "id": "bundle--873e721f-01f1-445c-b0d9-3097f259882d",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--59f99ee9-2b33-4e70-a488-4addc93d3d77",
            "created": "2023-03-08T12:51:43.018137Z",
            "modified": "2024-10-23T12:33:11.030915Z",
            "name": "Kaspersky",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--225559fa-2bf4-4f7e-93a1-5cf3e6103601",
            "hashes": {
                "MD5": "d8011dcca570689d72064b156647fa82",
                "SHA-1": "060a5d189ccf3fc32a758f1e218f814f6ce81744",
                "SHA-256": "c7f4aa77be7f7afe9d0665d3e705dbf7794bc479bb9c44488c7bf4169f8d14fe"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--18bc8e30-6c58-4ba6-bcae-de596e157ed5",
            "hashes": {
                "MD5": "1fddf14984c6b57358401a4587e7b950",
                "SHA-1": "be903ded39cbc8332cefd9ebbe7a66d95e9d6522",
                "SHA-256": "c9a7b42c7b29ca948160f95f017e9e9ae781f3b981ecf6edbac943e52c63ffc8"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d73cf3de-8f61-4483-824e-266103bf4aa5",
            "hashes": {
                "MD5": "80c1256f8bb2a9572e20dd480ac68759",
                "SHA-1": "31afc12130d8deceb007cca3af0c959772d236b4",
                "SHA-256": "4f6690b82ca4b1f5735386729c4a04161e2cda9443cab700279eb583d9d21f70"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6e47657a-93f8-42bc-b321-d385bb16346b",
            "hashes": {
                "SHA-1": "da96876f9535e3946aff3875c5e5c05e48ecb49c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--50829ebc-5bb7-40f5-bb6e-488d10febf2a",
            "hashes": {
                "MD5": "7e611e0f7ba31b51986f413b41383ef0",
                "SHA-1": "611e5b662c593a08ff58d14ae22452d198df6c60",
                "SHA-256": "b0b1730ecbc7ff4505142c49f1295e6eda6bcaed7e2c68c5be91b5a11001f024"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--402f92ff-6e19-4924-b6a1-04e293d74bc3",
            "hashes": {
                "MD5": "a5a5e18eb7750aeea2377decd3702b7f",
                "SHA-1": "3b166c3b7dc4b751c9fe2afab9135641e388e186",
                "SHA-256": "7afc9d01a62f03a2de9637936d4afe68090d2de18d03f29c88cfb0b1ba63587f"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--d6e54ed1-7053-4960-addc-b60128fabfc7",
            "value": "http://on-global.xyz"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--487e9001-87f9-46d0-875f-99f8b432bd19",
            "value": "http://on-global.xyz/Of56cYsfVV8/OJITWH2WFx/Jy5S7hSx0K/fP7saoiPBc/A=="
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--b6db0b0c-4e9b-424a-bf9b-54f2c8b805e0",
            "value": "http://on-global.xyz/Ov56cYsfVV8/OJITWH2WFx/Jy5S7hSx0K/fP7saoiPBc/A=="
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--5f4a0461-a248-406e-9a1e-5a6065b7ee67",
            "hashes": {
                "MD5": "90385d612877e9d360196770d73d22d6",
                "SHA-1": "09ade0cb777f4a4e0682309a4bc1d0f7d4d7a036",
                "SHA-256": "47b8b4d55d75505d617e53afcb6c32dd817024be209116f98cbbc3d88e57b4d1"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--dc9e6333-1762-4be0-b428-2209c628adda",
            "hashes": {
                "MD5": "b1e01ae0006f449781a05f4704546b34",
                "SHA-1": "884cebf1ad0e65f4da60c04bc31f62f796f90d79",
                "SHA-256": "36001b8b9e05935756fa7525dd49d91b59ea882efe5a2d23ccec35fef96138d4"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--577cc759-b466-4602-9f26-b3a1c45fa9b5",
            "hashes": {
                "MD5": "3b3b3b9f7c71fcd7239abe90c97751c0",
                "SHA-1": "5c93052713f317431bf232a2894658a3a4ebfad9",
                "SHA-256": "c556baaac706191ce75c9263b349242caa3d8efca7b5639896fa3e6570d7c76e"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--fc08c8af-f138-4aaa-99f4-256282877f34",
            "value": "on-global.xyz"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--f7f0d913-f17b-5632-a48a-76b4eef8a1cb",
            "created": "2026-10-09T10:43:35.604169Z",
            "modified": "2026-10-09T10:43:35.604169Z",
            "name": "Bluenoroff"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--bac9dc27-759b-446a-b7e2-b0043ddc689a",
            "created_by_ref": "identity--59f99ee9-2b33-4e70-a488-4addc93d3d77",
            "created": "2026-10-09T10:43:35.605398Z",
            "modified": "2026-10-09T10:43:35.605398Z",
            "name": "New BlueNoroff loader for macOS",
            "published": "2023-12-05T00:00:00Z",
            "object_refs": [
                "identity--59f99ee9-2b33-4e70-a488-4addc93d3d77",
                "file--225559fa-2bf4-4f7e-93a1-5cf3e6103601",
                "file--18bc8e30-6c58-4ba6-bcae-de596e157ed5",
                "file--d73cf3de-8f61-4483-824e-266103bf4aa5",
                "file--6e47657a-93f8-42bc-b321-d385bb16346b",
                "file--50829ebc-5bb7-40f5-bb6e-488d10febf2a",
                "file--402f92ff-6e19-4924-b6a1-04e293d74bc3",
                "url--d6e54ed1-7053-4960-addc-b60128fabfc7",
                "url--487e9001-87f9-46d0-875f-99f8b432bd19",
                "url--b6db0b0c-4e9b-424a-bf9b-54f2c8b805e0",
                "file--5f4a0461-a248-406e-9a1e-5a6065b7ee67",
                "file--dc9e6333-1762-4be0-b428-2209c628adda",
                "file--577cc759-b466-4602-9f26-b3a1c45fa9b5",
                "domain-name--fc08c8af-f138-4aaa-99f4-256282877f34",
                "threat-actor--f7f0d913-f17b-5632-a48a-76b4eef8a1cb"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://securelist.com/bluenoroff-new-macos-malware/111290/"
                }
            ]
        }
    ]
}