{
    "type": "bundle",
    "id": "bundle--a1cbd0f3-76e4-4ec9-a380-4fb3afccab94",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--ce40c63e-51d4-4ec5-a85b-2d76cd5ec7d1",
            "created": "2023-03-08T12:52:07.036238Z",
            "modified": "2025-06-18T12:58:21.951363Z",
            "name": "CiscoTalos",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--9fd80d16-32eb-4bad-9b26-f26499b4a968",
            "hashes": {
                "MD5": "2c143271dc4e8da1d3f94bb15df49ab3",
                "SHA-1": "f437544e14ac6389806fdee8a4ea335b3d7dfe2f",
                "SHA-256": "dddc57299857e6ecb2b80cbab2ae6f1978e89c4bfe664c7607129b0fc8db8b1f"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b28601d0-290e-46b3-af48-57fa4cd5965f",
            "hashes": {
                "MD5": "56df55ef50e9b9c891437c7148a0764a",
                "SHA-1": "4b77fa3e1fe5a5d880467418f13ae6cb84366cca",
                "SHA-256": "5498c3eb2fb335aadcaf6c5d60560c5d2525997ba6af39b191f6092cb70a3aa6"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--0831511e-df70-48b3-ae3d-58c66dc3a15f",
            "value": "o61666ch.getenjoyment.net"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--f32b8529-b052-45c2-8acd-f4b1f99bcac6",
            "hashes": {
                "MD5": "8edfa086de4dfdc93c0551bbb08cd5a8",
                "SHA-1": "4b1b5bed35bc676e835de14ee033339d37f4549d",
                "SHA-256": "5e3907e9e2ed8ff12bb4e96b52401d871526c5ed502d2149dd4f680da4925590"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c1ed97e8-1efb-4c95-93dd-2571a0173c44",
            "hashes": {
                "MD5": "4d221c328843e34a087aeca964bc19c8",
                "SHA-1": "0b3451dc09de42eeffb15519a86a5657c954ca09",
                "SHA-256": "85f6db3a74a4f1a367cc0b60b190c5da56cd0116c1d6a20fd7b51cda8f8948d8"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6e077663-94cd-4db4-ae79-cf309e538912",
            "hashes": {
                "MD5": "ca9263bfe2f843fb33452ef954a2b0e1",
                "SHA-1": "b3a3174c729898a309c6fc8878d958e3d153904b",
                "SHA-256": "4b0e2244f82170f4e569bb6b100890ec117458bf5cc835fd7bd991f0d334318b"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6d1368b2-b282-4e26-8d02-d0b1c2b8efc0",
            "hashes": {
                "SHA-256": "de0932206c4d531ab4325c0ec8f025108a6807478eb5d744905560ae119fc6fa"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--54b90965-7a8e-4555-93a8-888706a9ebb0",
            "hashes": {
                "SHA-256": "99b516acd059a4b88f281214d849c5134aa1cea936d69e8eb7393b22be0508a0"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7d6c9e7a-e876-46ec-9018-e56459e212e4",
            "hashes": {
                "SHA-256": "395eebf586d5fc033e22235f7a4224e91ad5dce8570023669c6dee97d04aa21d"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d62821ac-f790-46ae-9e7e-c0cb61217517",
            "hashes": {
                "MD5": "866f3d4a530135a2676586fceadd51c4",
                "SHA-1": "12857b8ced1922dd096ad26cbf0224bf37ed235f",
                "SHA-256": "e929f23c242cc102a16f5466163622585455aee7b6ed3f98d12787086b14e721"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6794a3ef-5573-4a6f-95eb-45356126ec11",
            "hashes": {
                "SHA-256": "595be57cb6f025ec5753fbe72222e3f7c02b8cb27b438d48286375adbcf427c6"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7e7f9f9f-4502-45c0-ba95-5a3117918b43",
            "hashes": {
                "SHA-256": "5563599441935e3c0c8bdd42ec2c35b78f8376b6c9560898ef6401531058eb87"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--db5b936e-2ce9-4b9b-b9ae-5372c59b449f",
            "hashes": {
                "MD5": "2c530adb841114366ce6177ce964a5e6",
                "SHA-1": "5b69e3e5f4f49cf8b635a57a8c92e17a4f130d50",
                "SHA-256": "873b8fb97b4b0c6d7992f6af15653295788526def41f337c651dc64e8e4aeebd"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d39eb76c-07a8-4866-98fb-79682e9f88db",
            "hashes": {
                "MD5": "66575a3d4e25a36880214af9108998e8",
                "SHA-1": "0151e982f3692852324796c78be2c5ee76beb81d",
                "SHA-256": "f4d06956085d2305c19dd78c6d01b06f17ab43e9dd4808885fd08d5da08dd9d2"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c72ab080-d89e-4f8a-99ae-c0f40281922d",
            "hashes": {
                "MD5": "18e8c7bf80de9fec1a78d584139c774e",
                "SHA-1": "9931bacfe5722c87062757d122d9802981c824b1",
                "SHA-256": "c43475601f330a5a17a50f075696e058429656db54cdfcbdccb0fb93446f6ac9"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--82bc2e04-212b-494f-8ea3-0ca9979f3730",
            "hashes": {
                "SHA-256": "048f3564d5c4d3e0e3b879f33f3b8d340b692f505515e81f192544b98e269ccf"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--8e892cda-c3e4-4f92-bf11-fa10a4b11385",
            "hashes": {
                "MD5": "d2c534d1213882b62c28def230ad1745",
                "SHA-1": "2c1b4890e7b7cf1bacdd9bb84a72c0b586dd328d",
                "SHA-256": "4b244ac09e4b46792661754bd5d386e8b1a168cb1d5ed440df04c1c2928cb84d"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--9bc63c5f-db29-46cc-945c-a9e06321db74",
            "hashes": {
                "SHA-256": "36187cd4bc18e4d6ddc5c96dc0ed038bfec751dac4f5354398fdaa89d9fcacd1"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--2678911e-5499-4bfa-a7c6-733fcba8d236",
            "value": "pcsecucheck.scienceontheweb.net"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--cfff7f89-c788-4e7f-807f-2534da331e0e",
            "hashes": {
                "MD5": "e69294040dab044805c9d7c47fef4844",
                "SHA-1": "f3a2731e174a68d13b4ae15fab2d7b2788517039",
                "SHA-256": "bb0a3c784e55bd25f845644b69c57e3e470af51983617fdfe7ba5d253019ed24"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--665a90b5-e057-4494-9448-84dcd30964c4",
            "value": "http://eucie09111.myartsonline.com/0502/v.php"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--03771dcd-265f-4d52-8488-0bcfd24143f9",
            "value": "eucie09111.myartsonline.com"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--014d9ce1-b786-497c-9dbb-31db87d78f02",
            "hashes": {
                "MD5": "95c92bcfc39ceafc1735f190a575c60c",
                "SHA-1": "a3cda1db25d43e27061827255e0b192a9c714f7e",
                "SHA-256": "811b42bb169f02d1b0b3527e2ca6c00630bebd676b235cd4e391e9e595f9dfa8"
            }
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1",
            "created": "2026-10-09T10:46:43.938092Z",
            "modified": "2026-10-09T10:46:43.938092Z",
            "name": "Kimsuky"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--fd90c4da-9534-4226-a56c-6a25e8ff765b",
            "created_by_ref": "identity--ce40c63e-51d4-4ec5-a85b-2d76cd5ec7d1",
            "created": "2026-10-09T10:46:43.939267Z",
            "modified": "2026-10-09T10:46:43.939267Z",
            "name": "North Korean attackers use malicious blogs to deliver malware to high-profile South Korean targets",
            "published": "2021-11-10T00:00:00Z",
            "object_refs": [
                "identity--ce40c63e-51d4-4ec5-a85b-2d76cd5ec7d1",
                "file--9fd80d16-32eb-4bad-9b26-f26499b4a968",
                "file--b28601d0-290e-46b3-af48-57fa4cd5965f",
                "domain-name--0831511e-df70-48b3-ae3d-58c66dc3a15f",
                "file--f32b8529-b052-45c2-8acd-f4b1f99bcac6",
                "file--c1ed97e8-1efb-4c95-93dd-2571a0173c44",
                "file--6e077663-94cd-4db4-ae79-cf309e538912",
                "file--6d1368b2-b282-4e26-8d02-d0b1c2b8efc0",
                "file--54b90965-7a8e-4555-93a8-888706a9ebb0",
                "file--7d6c9e7a-e876-46ec-9018-e56459e212e4",
                "file--d62821ac-f790-46ae-9e7e-c0cb61217517",
                "file--6794a3ef-5573-4a6f-95eb-45356126ec11",
                "file--7e7f9f9f-4502-45c0-ba95-5a3117918b43",
                "file--db5b936e-2ce9-4b9b-b9ae-5372c59b449f",
                "file--d39eb76c-07a8-4866-98fb-79682e9f88db",
                "file--c72ab080-d89e-4f8a-99ae-c0f40281922d",
                "file--82bc2e04-212b-494f-8ea3-0ca9979f3730",
                "file--8e892cda-c3e4-4f92-bf11-fa10a4b11385",
                "file--9bc63c5f-db29-46cc-945c-a9e06321db74",
                "domain-name--2678911e-5499-4bfa-a7c6-733fcba8d236",
                "file--cfff7f89-c788-4e7f-807f-2534da331e0e",
                "url--665a90b5-e057-4494-9448-84dcd30964c4",
                "domain-name--03771dcd-265f-4d52-8488-0bcfd24143f9",
                "file--014d9ce1-b786-497c-9dbb-31db87d78f02",
                "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://blog.talosintelligence.com/2021/11/kimsuky-abuses-blogs-delivers-malware.html"
                }
            ]
        }
    ]
}