{
    "type": "bundle",
    "id": "bundle--7ab8568f-2214-4e75-8f46-20a927df2959",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--0c5262d6-a544-4758-b214-c1a416d6028e",
            "created": "2023-03-30T22:51:38.926787Z",
            "modified": "2024-09-18T02:59:36.415321Z",
            "name": "Elastic",
            "identity_class": "organization"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--c7acfec5-1bf2-4edd-b64a-ec34a9d45dec",
            "value": "195.26.248.212"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--7f7d886d-abd9-4b20-beb3-81dae155e127",
            "value": "upload.rightwidth.dev"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--0debdc81-fcbe-4646-a999-212d4c6d1535",
            "value": "188.40.64.61"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--8beffe15-bb60-4029-ae38-87ff48926e2a",
            "value": "file.rightwidth.dev"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--8767312f-c8e1-4a8b-add6-a2c6e48692d6",
            "value": "controller.rightwidth.dev"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--027a35c9-6c01-4f9b-8ed2-2f463e6baf47",
            "value": "ldb.rightwidth.dev"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--29e0cdeb-9fcc-4285-bf0a-b417b36e6da3",
            "value": "rightwidth.dev"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--020edb9f-cecf-4836-bbee-d6fef346f8d6",
            "hashes": {
                "SHA-256": "fb94b2caee2c40635448a98ba0118421e19a400e74ccff73315f8fa42351f53f"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--44cfbc70-46c6-499c-ae49-9c84da419c69",
            "hashes": {
                "SHA-256": "cc97517f80f567977300450de11e9a0be53f52657525a20b1091c99fe9e45730"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--1b162ace-e1e9-4ddf-bf06-22da58d05d10",
            "hashes": {
                "SHA-256": "c5aed4c063d4970a03250778da8041da9e0c83d8f22d2f1994da0ad72567ebd9"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--fef938dd-e627-4bb2-8d6f-c308713b8006",
            "hashes": {
                "SHA-256": "9df01d242ef46adfedf8c35cb7cc67b1d27d7dc4a1ce74ab32e984090d579886"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--98f19ddc-8188-46c2-8dd7-aa5b60c8c6d6",
            "hashes": {
                "SHA-256": "96357529d17c4690826d5d4c74deac51743a5388733b3f04004d898f0635ef20"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--af2bc655-44a3-4642-96d1-1b89c1c318c6",
            "hashes": {
                "SHA-256": "54bf36910d81ab516037cb3d69d7c85190f90aa0da9e58617799c1fc738dc5a9"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--4070e3a0-bdd2-4898-a5ee-c59351ddde65",
            "hashes": {
                "SHA-256": "4e7639045b4a64de60bfb6312951a5c3dffbd3fb04b84837663242ed27f09864"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--1ee94130-3d8a-4697-87fc-f7a9a3930dad",
            "hashes": {
                "SHA-256": "3e6360f83a95540aa2176d279ca4694513afb1e5116a7ffe591c6b5bcf3b9c3c"
            }
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--705d1847-1d44-51c3-a51e-8abb7805e8b8",
            "created": "2026-07-19T19:08:34.660642Z",
            "modified": "2026-07-19T19:08:34.660642Z",
            "name": "REF9403"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--9356807a-088a-40dd-bccf-a87f63848e02",
            "created_by_ref": "identity--0c5262d6-a544-4758-b214-c1a416d6028e",
            "created": "2026-07-19T19:08:34.66099Z",
            "modified": "2026-07-19T19:08:34.66099Z",
            "name": "New North Korean campaign uses fake coding interviews to steal developer credentials",
            "published": "2026-07-18T00:00:00Z",
            "object_refs": [
                "identity--0c5262d6-a544-4758-b214-c1a416d6028e",
                "ipv4-addr--c7acfec5-1bf2-4edd-b64a-ec34a9d45dec",
                "domain-name--7f7d886d-abd9-4b20-beb3-81dae155e127",
                "ipv4-addr--0debdc81-fcbe-4646-a999-212d4c6d1535",
                "domain-name--8beffe15-bb60-4029-ae38-87ff48926e2a",
                "domain-name--8767312f-c8e1-4a8b-add6-a2c6e48692d6",
                "domain-name--027a35c9-6c01-4f9b-8ed2-2f463e6baf47",
                "domain-name--29e0cdeb-9fcc-4285-bf0a-b417b36e6da3",
                "file--020edb9f-cecf-4836-bbee-d6fef346f8d6",
                "file--44cfbc70-46c6-499c-ae49-9c84da419c69",
                "file--1b162ace-e1e9-4ddf-bf06-22da58d05d10",
                "file--fef938dd-e627-4bb2-8d6f-c308713b8006",
                "file--98f19ddc-8188-46c2-8dd7-aa5b60c8c6d6",
                "file--af2bc655-44a3-4642-96d1-1b89c1c318c6",
                "file--4070e3a0-bdd2-4898-a5ee-c59351ddde65",
                "file--1ee94130-3d8a-4697-87fc-f7a9a3930dad",
                "threat-actor--705d1847-1d44-51c3-a51e-8abb7805e8b8"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.elastic.co/security-labs/contagious-interview-malware-svg-steganography"
                }
            ]
        }
    ]
}