{
    "type": "bundle",
    "id": "bundle--0fc13443-ac61-44a7-afe9-d2b9ac097df0",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--6b1d3dfe-e4c1-47eb-9e38-bb509a96d883",
            "created": "2024-11-06T00:58:43.491961Z",
            "modified": "2024-11-06T01:01:17.692995Z",
            "name": "Rewterz",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--901081e8-5066-494b-a9c3-a009d01b19d0",
            "hashes": {
                "MD5": "a6598bbdc947286c84f951289d14425c",
                "SHA-1": "07c7cf4441254e8754aa62150bf8c5365c3825f4",
                "SHA-256": "5f23b1ca43f6a18e3c9f21d390f5d1e187b1339b07a1dce70f8338f3be320878"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--064c2fb5-c75e-484a-bfe9-71c0af0c5e62",
            "value": "mrasis.n-e.kr"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--293e55da-67da-4cbb-b572-5039f02e140f",
            "hashes": {
                "MD5": "85f5075610661c9706571a33548d7585",
                "SHA-1": "bc36b9e8cf23dc0287f090a5c0bad3b391d00f86",
                "SHA-256": "6ffb5106d912e582bde2c095365fa37a441741e4b9ea7f856b2ecad9516b74c2"
            }
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--5a0e255a-5bae-48c8-89b5-3e0cc58c9e27",
            "value": "101.36.114.190"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--1a3b8c5f-c653-478a-bc60-6b68131e2675",
            "value": "http://mrasis.n-e.kr/"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--91f75582-3d9d-4e17-b192-14a21336ef2c",
            "hashes": {
                "MD5": "ba00e1a70e5da6ed610652a93e7cc7dd",
                "SHA-1": "2bd2657c4924e2cb6f2ae33997262c7cd8432fe1",
                "SHA-256": "3cc47aea39c48aa22fbf246f11cd4aaa8179efa48bb1c3e30fbf70541fe2cf87"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--42a4c5ff-a21e-4b75-8161-5fbc598e68df",
            "hashes": {
                "MD5": "d414e3718ad82a9925339ac8338b77a6",
                "SHA-1": "d5eb074d6db0e5b0725389236e883915d629de21",
                "SHA-256": "784d5df037879ed47cf46f8b2ec2c54e3c590805dbc05539ddd8c328215644a7"
            }
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1",
            "created": "2026-09-19T08:58:08.02042Z",
            "modified": "2026-09-19T08:58:08.02042Z",
            "name": "Kimsuky"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--482d4b08-88e0-42ae-ba54-cf4caea2fc2e",
            "created_by_ref": "identity--6b1d3dfe-e4c1-47eb-9e38-bb509a96d883",
            "created": "2026-09-19T08:58:08.020731Z",
            "modified": "2026-09-19T08:58:08.020731Z",
            "name": "North Korean APT Kimsuky aka Black Banshee \u2013 Active IOCs",
            "published": "2025-03-17T00:00:00Z",
            "object_refs": [
                "identity--6b1d3dfe-e4c1-47eb-9e38-bb509a96d883",
                "file--901081e8-5066-494b-a9c3-a009d01b19d0",
                "domain-name--064c2fb5-c75e-484a-bfe9-71c0af0c5e62",
                "file--293e55da-67da-4cbb-b572-5039f02e140f",
                "ipv4-addr--5a0e255a-5bae-48c8-89b5-3e0cc58c9e27",
                "url--1a3b8c5f-c653-478a-bc60-6b68131e2675",
                "file--91f75582-3d9d-4e17-b192-14a21336ef2c",
                "file--42a4c5ff-a21e-4b75-8161-5fbc598e68df",
                "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://rewterz.com/threat-advisory/north-korean-apt-kimsuky-aka-black-banshee-active-iocs-43"
                }
            ]
        }
    ]
}