{
    "type": "bundle",
    "id": "bundle--436c0ff5-9dfd-493e-ad27-866d3798bd0b",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--18a3a1f0-eb3d-4bbc-904e-ee52948913a7",
            "created": "2023-03-08T12:51:43.431426Z",
            "modified": "2023-03-08T12:51:43.431505Z",
            "name": "Malwarebytes",
            "identity_class": "organization"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--efa0fe22-769d-4e1b-9dbe-a8236fe6264b",
            "value": "markettrendingcenter.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--f5941e52-bc71-4672-93bd-9d3c8c6cb121",
            "value": "lm-career.com"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--99c994c4-692c-48f8-a0e3-c05b729da145",
            "hashes": {
                "SHA-256": "f14b1a91ed1ecd365088ba6de5846788f86689c6c2f2182855d5e0954d62af3b"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--8f0e3c0c-5b77-47f0-a09a-26276dd9a825",
            "hashes": {
                "MD5": "3f326da2affb0f7f2a4c5c95ffc660cc",
                "SHA-1": "f38abb67d47a4f69536ae67aa9c6df7287c08869",
                "SHA-256": "0d01b24f7666f9bccf0f16ea97e41e0bc26f4c49cdfb7a4dabcc0a494b44ec9b"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ae27cc14-aa92-44e0-940f-a2b9c9ea36df",
            "hashes": {
                "MD5": "490c885dc7ba0f32c07ddfe02a04bbb9",
                "SHA-1": "294690c1aee8dc7723858dafcb2a0ed273296641",
                "SHA-256": "829eceee720b0a3e505efbd3262c387b92abdf46183d51a50489e2b157dac3b1"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--a74fd7b0-2ac5-4562-864d-ca6ecec9d0e3",
            "hashes": {
                "MD5": "a27a9324d282d920e495832933d486ee",
                "SHA-1": "0ab8602cee94f36739b6649467ced514301e58fa",
                "SHA-256": "0160375e19e606d06f672be6e43f70fa70093d2a30031affd2929a5c446d07c1"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--ac663880-2dcf-4cdc-82cf-9a67753d6831",
            "value": "https://markettrendingcenter.com/member.htm"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--e9214f4b-c4f1-48c5-bc06-8bc7acd2064f",
            "hashes": {
                "SHA-256": "660e60cc1fd3e155017848a1f6befc4a335825a6ae04f3416b9b148ff156d143"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--fab80dcd-c928-4292-9cac-64fcef43fd7b",
            "hashes": {
                "SHA-256": "11b5944715da95e4a57ea54968439d955114088222fd2032d4e0282d12a58abb"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--25537d71-d4b6-4677-9689-76e4ed7bc275",
            "hashes": {
                "MD5": "f93493bd48d6b98b127542750452fae2",
                "SHA-1": "855ae28e312760123f4b7662fe5febc30157d1f2",
                "SHA-256": "4216f63870e2cdfe499d09fce9caa301f9546f60a69c4032cb5fb6d5ceb9af32"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--e7d61bc2-1f9c-4557-a176-84422bba05ae",
            "hashes": {
                "SHA-256": "c677a79b853d3858f8c8b86ccd8c76ebbd1508cc9550f1da2d30be491625b744"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6bee9596-e289-4d5f-beda-f16934365e5a",
            "hashes": {
                "SHA-256": "9d18defe7390c59a1473f79a2407d072a3f365de9834b8d8be25f7e35a76d818"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--44e62e3e-af3d-4bc8-8189-21112a868540",
            "hashes": {
                "SHA-256": "5098ec21c88e14d9039d232106560b3c87487b51b40d6fef28254c37e4865182"
            }
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b",
            "created": "2026-10-10T15:03:47.584955Z",
            "modified": "2026-10-10T15:03:47.584955Z",
            "name": "Lazarus"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--1ce3aa79-ebc6-4a64-a81d-5dad9562c49c",
            "created_by_ref": "identity--18a3a1f0-eb3d-4bbc-904e-ee52948913a7",
            "created": "2026-10-10T15:03:47.585279Z",
            "modified": "2026-10-10T15:03:47.585279Z",
            "name": "North Korea\u2019s Lazarus APT leverages Windows Update client, GitHub in latest campaign",
            "published": "2022-01-27T00:00:00Z",
            "object_refs": [
                "identity--18a3a1f0-eb3d-4bbc-904e-ee52948913a7",
                "domain-name--efa0fe22-769d-4e1b-9dbe-a8236fe6264b",
                "domain-name--f5941e52-bc71-4672-93bd-9d3c8c6cb121",
                "file--99c994c4-692c-48f8-a0e3-c05b729da145",
                "file--8f0e3c0c-5b77-47f0-a09a-26276dd9a825",
                "file--ae27cc14-aa92-44e0-940f-a2b9c9ea36df",
                "file--a74fd7b0-2ac5-4562-864d-ca6ecec9d0e3",
                "url--ac663880-2dcf-4cdc-82cf-9a67753d6831",
                "file--e9214f4b-c4f1-48c5-bc06-8bc7acd2064f",
                "file--fab80dcd-c928-4292-9cac-64fcef43fd7b",
                "file--25537d71-d4b6-4677-9689-76e4ed7bc275",
                "file--e7d61bc2-1f9c-4557-a176-84422bba05ae",
                "file--6bee9596-e289-4d5f-beda-f16934365e5a",
                "file--44e62e3e-af3d-4bc8-8189-21112a868540",
                "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://blog.malwarebytes.com/threat-intelligence/2022/01/north-koreas-lazarus-apt-leverages-windows-update-client-github-in-latest-campaign/"
                }
            ]
        }
    ]
}