{
    "type": "bundle",
    "id": "bundle--213920a8-2fa7-426d-88c2-86e487de64bf",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--6b1d3dfe-e4c1-47eb-9e38-bb509a96d883",
            "created": "2024-11-06T00:58:43.491961Z",
            "modified": "2024-11-06T01:01:17.692995Z",
            "name": "Rewterz",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--9baaf568-7623-4a41-baf2-bd5fcd52b2dd",
            "hashes": {
                "MD5": "1e05449bccfeb965985c356f3ea88787",
                "SHA-1": "035569bdbf955493e4bf5045610fa66d312d164a",
                "SHA-256": "2e40620da710d81d4d1d95d1694aa823bdf25ad8e62662243dcf538c48f9b07d"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--f6c1bcd1-3758-411d-b8ab-1bed9eb9136f",
            "hashes": {
                "MD5": "3c79940610603c0420aa3bf904ff92bf",
                "SHA-1": "037ee4de3892fbf7ba1929ae64f0ee6842f94db4",
                "SHA-256": "c19df37c6d819dae3cc2628940bd3524195e3c4357685b6797b0a0917d3927e7"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--655fec88-ba33-4a15-82d9-d4bf2768d041",
            "value": "safeblog.o-r.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--057f4f46-e9e2-439c-832a-55bf9b58214d",
            "value": "delps.scienceontheweb.net"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1",
            "created": "2026-09-19T08:57:42.934544Z",
            "modified": "2026-09-19T08:57:42.934544Z",
            "name": "Kimsuky"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--d8342981-0292-47df-974d-6d474188d6ca",
            "created_by_ref": "identity--6b1d3dfe-e4c1-47eb-9e38-bb509a96d883",
            "created": "2026-09-19T08:57:42.934894Z",
            "modified": "2026-09-19T08:57:42.934894Z",
            "name": "North Korean APT Kimsuky aka Black Banshee \u2013 Active IOCs",
            "published": "2024-12-16T00:00:00Z",
            "object_refs": [
                "identity--6b1d3dfe-e4c1-47eb-9e38-bb509a96d883",
                "file--9baaf568-7623-4a41-baf2-bd5fcd52b2dd",
                "file--f6c1bcd1-3758-411d-b8ab-1bed9eb9136f",
                "domain-name--655fec88-ba33-4a15-82d9-d4bf2768d041",
                "domain-name--057f4f46-e9e2-439c-832a-55bf9b58214d",
                "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.rewterz.com/threat-advisory/north-korean-apt-kimsuky-aka-black-banshee-active-iocs-37627"
                }
            ]
        }
    ]
}