{
    "type": "bundle",
    "id": "bundle--c13783c3-b381-461c-9bed-17c3939f8cfe",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--0c5262d6-a544-4758-b214-c1a416d6028e",
            "created": "2023-03-30T22:51:38.926787Z",
            "modified": "2024-09-18T02:59:36.415321Z",
            "name": "Elastic",
            "identity_class": "organization"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--c7acfec5-1bf2-4edd-b64a-ec34a9d45dec",
            "value": "195.26.248.212"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--7f7d886d-abd9-4b20-beb3-81dae155e127",
            "value": "upload.rightwidth.dev"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--0debdc81-fcbe-4646-a999-212d4c6d1535",
            "value": "188.40.64.61"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--8beffe15-bb60-4029-ae38-87ff48926e2a",
            "value": "file.rightwidth.dev"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--8767312f-c8e1-4a8b-add6-a2c6e48692d6",
            "value": "controller.rightwidth.dev"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--027a35c9-6c01-4f9b-8ed2-2f463e6baf47",
            "value": "ldb.rightwidth.dev"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--29e0cdeb-9fcc-4285-bf0a-b417b36e6da3",
            "value": "rightwidth.dev"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--020edb9f-cecf-4836-bbee-d6fef346f8d6",
            "hashes": {
                "MD5": "9c055f0f21059552f29459c1b07de509",
                "SHA-1": "ff0d75903b97acd26776879ba255b8641efaf2fd",
                "SHA-256": "fb94b2caee2c40635448a98ba0118421e19a400e74ccff73315f8fa42351f53f"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--44cfbc70-46c6-499c-ae49-9c84da419c69",
            "hashes": {
                "MD5": "681ad25778e051803503cbf29189b6f4",
                "SHA-1": "54eba094d078db96d4d8c29e5d349737a9bc0738",
                "SHA-256": "cc97517f80f567977300450de11e9a0be53f52657525a20b1091c99fe9e45730"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--1b162ace-e1e9-4ddf-bf06-22da58d05d10",
            "hashes": {
                "MD5": "49356187fbdb16a27756478a514dff3b",
                "SHA-1": "62436d37c5247c41e33b5c93963774bae900ad3c",
                "SHA-256": "c5aed4c063d4970a03250778da8041da9e0c83d8f22d2f1994da0ad72567ebd9"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--fef938dd-e627-4bb2-8d6f-c308713b8006",
            "hashes": {
                "MD5": "5a087c9b1aa99571801e5fdb4b6e323e",
                "SHA-1": "d3f905b72892170de47669f636ab01d88c6917a7",
                "SHA-256": "9df01d242ef46adfedf8c35cb7cc67b1d27d7dc4a1ce74ab32e984090d579886"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--98f19ddc-8188-46c2-8dd7-aa5b60c8c6d6",
            "hashes": {
                "MD5": "3b00a14383b099fdfed05e17ace03bbc",
                "SHA-1": "eb8c6c4446870da0dbd9e26c67baf51d291fbf0d",
                "SHA-256": "96357529d17c4690826d5d4c74deac51743a5388733b3f04004d898f0635ef20"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--af2bc655-44a3-4642-96d1-1b89c1c318c6",
            "hashes": {
                "MD5": "d8f7778fa63af28303c8a4b8c9bcd0dc",
                "SHA-1": "09ca41335b8fbef077b16950f56c1f7532d2e1f7",
                "SHA-256": "54bf36910d81ab516037cb3d69d7c85190f90aa0da9e58617799c1fc738dc5a9"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--4070e3a0-bdd2-4898-a5ee-c59351ddde65",
            "hashes": {
                "MD5": "692cbab7a22a159d6c7de455b9b3a38c",
                "SHA-1": "fffe60d09bd25b0fc0066d6a40f33fe8d934c36b",
                "SHA-256": "4e7639045b4a64de60bfb6312951a5c3dffbd3fb04b84837663242ed27f09864"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--1ee94130-3d8a-4697-87fc-f7a9a3930dad",
            "hashes": {
                "MD5": "e382215527d3e3d7de320797c56898ad",
                "SHA-1": "e1d89263e20ee02f61634759eb34c4c25ba0b423",
                "SHA-256": "3e6360f83a95540aa2176d279ca4694513afb1e5116a7ffe591c6b5bcf3b9c3c"
            }
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--705d1847-1d44-51c3-a51e-8abb7805e8b8",
            "created": "2026-10-08T13:03:28.715338Z",
            "modified": "2026-10-08T13:03:28.715338Z",
            "name": "REF9403"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--9356807a-088a-40dd-bccf-a87f63848e02",
            "created_by_ref": "identity--0c5262d6-a544-4758-b214-c1a416d6028e",
            "created": "2026-10-08T13:03:28.715642Z",
            "modified": "2026-10-08T13:03:28.715642Z",
            "name": "New North Korean campaign uses fake coding interviews to steal developer credentials",
            "published": "2026-07-18T00:00:00Z",
            "object_refs": [
                "identity--0c5262d6-a544-4758-b214-c1a416d6028e",
                "ipv4-addr--c7acfec5-1bf2-4edd-b64a-ec34a9d45dec",
                "domain-name--7f7d886d-abd9-4b20-beb3-81dae155e127",
                "ipv4-addr--0debdc81-fcbe-4646-a999-212d4c6d1535",
                "domain-name--8beffe15-bb60-4029-ae38-87ff48926e2a",
                "domain-name--8767312f-c8e1-4a8b-add6-a2c6e48692d6",
                "domain-name--027a35c9-6c01-4f9b-8ed2-2f463e6baf47",
                "domain-name--29e0cdeb-9fcc-4285-bf0a-b417b36e6da3",
                "file--020edb9f-cecf-4836-bbee-d6fef346f8d6",
                "file--44cfbc70-46c6-499c-ae49-9c84da419c69",
                "file--1b162ace-e1e9-4ddf-bf06-22da58d05d10",
                "file--fef938dd-e627-4bb2-8d6f-c308713b8006",
                "file--98f19ddc-8188-46c2-8dd7-aa5b60c8c6d6",
                "file--af2bc655-44a3-4642-96d1-1b89c1c318c6",
                "file--4070e3a0-bdd2-4898-a5ee-c59351ddde65",
                "file--1ee94130-3d8a-4697-87fc-f7a9a3930dad",
                "threat-actor--705d1847-1d44-51c3-a51e-8abb7805e8b8"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.elastic.co/security-labs/contagious-interview-malware-svg-steganography"
                }
            ]
        }
    ]
}