{
    "type": "bundle",
    "id": "bundle--4a0c7869-1d59-4986-b62c-3101a5f60f9f",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--c21f9a8f-41e5-4a30-9e6e-0974b6a01bb5",
            "created": "2025-04-06T01:59:19.641157Z",
            "modified": "2025-04-06T02:00:06.336451Z",
            "name": "Seqrite",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b78c0067-f363-4641-83e2-2a0baebf4afd",
            "hashes": {
                "MD5": "1aec7b1227060a987d5cb6f17782e76e",
                "SHA-1": "dbb31ebfaf175f65f92f8b623e81b2377551b505",
                "SHA-256": "eb9ab1de159d7bf96af0fe0c6e6e1acd120b76d339b8f8acd38b2e3279c21f5f"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--48e95a76-b8e3-4f1d-9d26-ef7bd04b959b",
            "hashes": {
                "MD5": "d035135e190fb6121faa7630e4a45eed",
                "SHA-1": "c57b899852b3b1cca24be0074a4b706f52d2988a",
                "SHA-256": "863295b41441bfe25b970f1f89768fad33826f5e3c379cea595c174ad37244f9"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--2038cee7-66a3-49f5-9dd9-1e6d73a124d2",
            "hashes": {
                "MD5": "591b2aaf1732c8a656b5c602875cbdd9",
                "SHA-1": "74238833aa3cb13ec78e3a33470100647e652eed",
                "SHA-256": "06a297eb80274e0821516cb1b0025a231c5b63ae5ab30b84b2d10f6350d4f484"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c6425693-9101-4541-9829-eb92cc022fed",
            "hashes": {
                "MD5": "443a00feeb3beaea02b2fbcd4302a3c9",
                "SHA-1": "65f79b9fa476e9aafec16a7995b39c72d4c5e341",
                "SHA-256": "ccb6ca4cb385db50dad2e3b7c68a90ddee62398edb0fd41afdb793287cfbe8e6"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--31086cac-67b8-49e4-b4a1-e8dc7323bd85",
            "value": "https://content.dropboxapi.com/2/files/download"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--c1044d52-426f-4905-89da-fa1e2d65eeee",
            "value": "https://content.dropboxapi.com/2/files/upload"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--11a1d1f1-9a2b-4ab1-b60a-a32a227e4ef1",
            "hashes": {
                "MD5": "051517b5b685116c2f4f1e6b535eb4cb"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--45888c93-bac1-431b-8781-eebcb1381724",
            "hashes": {
                "MD5": "2dc20d55d248e8a99afbe5edaae5d2fc"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--edb5533b-4062-4a4d-ab7f-9170414d4988",
            "hashes": {
                "MD5": "f34fa3d0329642615c17061e252c6afe"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7c2e14fd-fc2e-4434-b428-7cc1cdc1a5db",
            "hashes": {
                "MD5": "da05d6ab72290ca064916324cbc86bab",
                "SHA-1": "eb16fe402913f3177e50015dc66930ae3b4ff784",
                "SHA-256": "d8d86b15e68889bf76b3cf8e335f43afe0287b9b20aeb18b136b90a516695989"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--670959cb-b3b2-4c9c-b88f-563a4b0f61a0",
            "hashes": {
                "MD5": "cc1522fb2121cf4ae57278921a5965da",
                "SHA-1": "300591d98004e44d4e78a04df68cf5b650303a3d",
                "SHA-256": "f69e102fa65174b2c4821003bde36af264f8ef73bc7ca2ce0d97c43ee3e9e21a"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--56a56ab2-c0d8-43bf-9167-b67f4673c3ad",
            "value": "http://daily.alltop.asia/blog/article/d2.php?downfname=abs.tmp&crc32=0"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--2c1697c7-b133-4053-bed4-19a1cf87b6ea",
            "value": "http://daily.alltop.asia/blog/article/up2.php"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--4ebd44fe-0ca6-4915-87a5-fd59270893be",
            "value": "daily.alltop.asia"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--8f4b7c7f-b745-486a-98a0-bf073a1ab17c",
            "hashes": {
                "MD5": "f6d72abf9ca654a20bbaf23ea1c10a55",
                "SHA-1": "543e3b4b74257c3ffcd45dcdd8c842489a82bc07",
                "SHA-256": "90bf1f20f962d04f8ae3f936d0f9046da28a75fa2fb37f267ff0453f272c60a0"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--8d290fe2-d244-4bf5-b57b-4f6c4660e5d0",
            "value": "https://cloud-api.yandex.net/v1/disk/resources?path=%s&limit=500"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--a64126c6-9559-4290-83bc-03b468f963d2",
            "value": "https://cloud-api.yandex.net/v1/disk/resources/upload?path=%s&overwrite=%s"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--3d0e2263-4447-4e96-8bc2-2e26dd1fabd0",
            "value": "https://cloud-api.yandex.net/v1/disk/resources/download?path=%s"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--04fe9298-99e4-459a-ae8f-10073a59a9da",
            "value": "https://api.pcloud.com/uploadfile?path=%s&filename=%s&nopartial=1"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--76c71fe9-1211-4a69-80ff-c4332edeabec",
            "value": "https://cloud-api.yandex.net/v1/disk/resources?path=%s&permanently=%s"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--ceed8ea1-c030-48eb-83bf-b9ecbc3422cd",
            "value": "https://api.pcloud.com/getfilelink?path=%s&forcedownload=1&skipfilename=1"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--0a5f9e7d-5101-4503-99f6-4e60fc8edf77",
            "value": "https://api.pcloud.com/listfolder?path=%s"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--f038e68c-d14a-4800-8c23-b4e782ab82e7",
            "value": "https://api.dropboxapi.com/2/files/list_folder"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--e98229d3-33d9-496a-bb31-18f8ad4943da",
            "value": "https://api.dropboxapi.com/2/files/delete"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--2544bf0e-67c0-439e-af3d-92960395fe67",
            "value": "https://api.pcloud.com/deletefile?path=%s"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--02e2f1b8-e1eb-428f-ac08-372b2b6e7291",
            "value": "cloud-api.yandex.net"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--3be555f5-1f0d-5001-b84a-c6c910760fd0",
            "created": "2026-09-20T20:25:49.135735Z",
            "modified": "2026-09-20T20:25:49.135735Z",
            "name": "APT37"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--12173ff4-cf20-4ffb-b811-7694e14dbcea",
            "created_by_ref": "identity--c21f9a8f-41e5-4a30-9e6e-0974b6a01bb5",
            "created": "2026-09-20T20:25:49.145819Z",
            "modified": "2026-09-20T20:25:49.145819Z",
            "name": "Operation HanKook Phantom: APT37 Spear-Phishing Campaign",
            "published": "2025-08-29T00:00:00Z",
            "object_refs": [
                "identity--c21f9a8f-41e5-4a30-9e6e-0974b6a01bb5",
                "file--b78c0067-f363-4641-83e2-2a0baebf4afd",
                "file--48e95a76-b8e3-4f1d-9d26-ef7bd04b959b",
                "file--2038cee7-66a3-49f5-9dd9-1e6d73a124d2",
                "file--c6425693-9101-4541-9829-eb92cc022fed",
                "url--31086cac-67b8-49e4-b4a1-e8dc7323bd85",
                "url--c1044d52-426f-4905-89da-fa1e2d65eeee",
                "file--11a1d1f1-9a2b-4ab1-b60a-a32a227e4ef1",
                "file--45888c93-bac1-431b-8781-eebcb1381724",
                "file--edb5533b-4062-4a4d-ab7f-9170414d4988",
                "file--7c2e14fd-fc2e-4434-b428-7cc1cdc1a5db",
                "file--670959cb-b3b2-4c9c-b88f-563a4b0f61a0",
                "url--56a56ab2-c0d8-43bf-9167-b67f4673c3ad",
                "url--2c1697c7-b133-4053-bed4-19a1cf87b6ea",
                "domain-name--4ebd44fe-0ca6-4915-87a5-fd59270893be",
                "file--8f4b7c7f-b745-486a-98a0-bf073a1ab17c",
                "url--8d290fe2-d244-4bf5-b57b-4f6c4660e5d0",
                "url--a64126c6-9559-4290-83bc-03b468f963d2",
                "url--3d0e2263-4447-4e96-8bc2-2e26dd1fabd0",
                "url--04fe9298-99e4-459a-ae8f-10073a59a9da",
                "url--76c71fe9-1211-4a69-80ff-c4332edeabec",
                "url--ceed8ea1-c030-48eb-83bf-b9ecbc3422cd",
                "url--0a5f9e7d-5101-4503-99f6-4e60fc8edf77",
                "url--f038e68c-d14a-4800-8c23-b4e782ab82e7",
                "url--e98229d3-33d9-496a-bb31-18f8ad4943da",
                "url--2544bf0e-67c0-439e-af3d-92960395fe67",
                "domain-name--02e2f1b8-e1eb-428f-ac08-372b2b6e7291",
                "threat-actor--3be555f5-1f0d-5001-b84a-c6c910760fd0"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.seqrite.com/blog/operation-hankook-phantom-north-korean-apt37-targeting-south-korea/"
                }
            ]
        }
    ]
}