{
    "type": "bundle",
    "id": "bundle--88096d6b-7784-4431-b05c-8474e9c4e80f",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--2b96b5d7-2075-4d96-9706-4b67d615e67c",
            "created": "2023-03-08T12:51:44.657627Z",
            "modified": "2024-09-04T07:23:22.792387Z",
            "name": "Mandiant",
            "identity_class": "organization"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--a6b38f84-4a9c-5481-ad0c-9b5ee8bd5a96",
            "created": "2026-10-10T12:19:59.101323Z",
            "modified": "2026-10-10T12:19:59.101323Z",
            "name": "APT38"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--779b8f52-56c4-5aee-b87a-0e7e139d8eff",
            "created": "2026-10-10T12:19:59.102049Z",
            "modified": "2026-10-10T12:19:59.102049Z",
            "name": "Andariel"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1",
            "created": "2026-10-10T12:19:59.102703Z",
            "modified": "2026-10-10T12:19:59.102703Z",
            "name": "Kimsuky"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--3be555f5-1f0d-5001-b84a-c6c910760fd0",
            "created": "2026-10-10T12:19:59.103341Z",
            "modified": "2026-10-10T12:19:59.103341Z",
            "name": "APT37"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--1606607e-9551-57f2-9093-3384040c739e",
            "created": "2026-10-10T12:19:59.104Z",
            "modified": "2026-10-10T12:19:59.104Z",
            "name": "TEMP.Hermit"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b",
            "created": "2026-10-10T12:19:59.104622Z",
            "modified": "2026-10-10T12:19:59.104622Z",
            "name": "Lazarus"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--008f803d-fe22-4884-b7f8-936ce95bc3af",
            "created_by_ref": "identity--2b96b5d7-2075-4d96-9706-4b67d615e67c",
            "created": "2026-10-10T12:19:59.10496Z",
            "modified": "2026-10-10T12:19:59.10496Z",
            "name": "Not So Lazarus: Mapping DPRK Cyber Threat Groups to Government Organizations",
            "published": "2022-03-23T00:00:00Z",
            "object_refs": [
                "identity--2b96b5d7-2075-4d96-9706-4b67d615e67c",
                "threat-actor--a6b38f84-4a9c-5481-ad0c-9b5ee8bd5a96",
                "threat-actor--779b8f52-56c4-5aee-b87a-0e7e139d8eff",
                "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1",
                "threat-actor--3be555f5-1f0d-5001-b84a-c6c910760fd0",
                "threat-actor--1606607e-9551-57f2-9093-3384040c739e",
                "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.mandiant.com/resources/mapping-dprk-groups-to-government"
                }
            ]
        }
    ]
}