{
    "type": "bundle",
    "id": "bundle--f1ae367f-2e44-4f34-ace1-5ef377e2f601",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--eafdd258-8d1a-438d-bbef-6ca0d4a35852",
            "created": "2023-03-08T12:51:41.544512Z",
            "modified": "2025-02-04T10:54:04.972936Z",
            "name": "Ahnlab",
            "identity_class": "organization"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--4b698ce5-35af-40a5-ab02-3cae6bf7003b",
            "value": "185.224.138.29"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--c9743928-3e15-4ee3-87bb-d5ab1d7199e5",
            "value": "my-homework.890m.com"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--479d8967-cfd3-4d51-8d95-0d09acf546aa",
            "hashes": {
                "MD5": "b994bd755e034d2218f8a3f70e91a165"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--13955e77-b527-49c0-91f5-6ff8973c9ef2",
            "hashes": {
                "MD5": "9d685308d3125e14287ecb7fbe5fcd37",
                "SHA-1": "c6dfbb9ff21830fa48e2a4e831908345cab572ca",
                "SHA-256": "71841a1b5ee1b383a9282bf513723b7f1713a0e1ee501db38d64c2db9ba08ec4"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--1cc24091-857b-46da-a65a-13b9f5624809",
            "hashes": {
                "MD5": "20301fdd013c836039b8cfe0d100a1d7",
                "SHA-1": "e8e787b2ab734d07146b48d9bf5263a0e476fb0c",
                "SHA-256": "84edc9b828de54d4bd00959fabf583a1392cb4c3eab3498c52818c96dc554b90"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--93fecab0-bdac-4b17-b7ce-c71ef7cad948",
            "hashes": {
                "MD5": "9c3396aa94083916227201bf1396a2ca",
                "SHA-1": "02133960eeb5dbf136e37d1b1b317306eae85036",
                "SHA-256": "c6c332ae1ccb580ac621d3cf667ce9c017be41f8ad04a94c0c0ea37c4789dd14"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c5736c7b-a5e3-4499-b9b7-e5a9ee58be44",
            "hashes": {
                "MD5": "66b73fba4e47b3184edd75b0ce9cf928",
                "SHA-1": "340b6b0370730a8344bc880c786a4e10fcd961a7",
                "SHA-256": "d62bf83fb5a7b148f326908051b149b77663149d47426ce749e944f7abf5d304"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--65cfd698-81ad-4a43-81bc-3e028c69a117",
            "hashes": {
                "MD5": "48d9e625ea3efbcbef3963c8714544a7",
                "SHA-1": "ad6b7c7b61d662ab653c25fe850e2406f283c919",
                "SHA-256": "cd6a12cc693e98e4f47d2161e9fe99d04895472d964575c749bbdd460f0fefdc"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--def7c403-e51d-47d4-ae3d-5f1ab1967022",
            "hashes": {
                "MD5": "f22db1e3ea74af791e34ad5aa0297664",
                "SHA-1": "16cb3fa3793a57ef54c44b11f94e9b5ba32753bb",
                "SHA-256": "95f1a84103f789d1ae749a3f8a384a29b39d6766e8a13d450b6553c39aba4fd7"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--2bc49d2f-a693-4529-be5c-9d424670bacb",
            "hashes": {
                "MD5": "4de21c3af64b3b605446278de92dfff4",
                "SHA-1": "8180c24445b162ce3338ee2ce77053acc08cda88",
                "SHA-256": "74d6b81565aeb95ee9df37ef7738d10baa9866261fb894d9ee9d67fc7c66badc"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--a418bab8-9ac8-45f9-b28a-a12686941f92",
            "hashes": {
                "MD5": "b02f3881321f0912b2ae3f27498c448f",
                "SHA-1": "de7212b695000dd10d3694de5a1d94348cbe464b",
                "SHA-256": "57224737bfc4514aa90e9ff88626ac112e8c9f80ed54616865a4cc5d7d08f36c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ddc137f6-83a2-41c3-bd0e-266d264cd52d",
            "hashes": {
                "MD5": "11fc4829c2fff9fb240acbd71c60fc67",
                "SHA-1": "63282c2399bde7558163421d624f1d5c0f08010e",
                "SHA-256": "5d91abb9519b260dfef8328fce1db4ec19db79bbe59c1f512d15f32b35db04be"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--11b218cc-6c86-4baf-8d26-6ac0c07db24b",
            "hashes": {
                "MD5": "dc1196876d9a59ab477ebc62d07a255e"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--50807011-2ce0-4f66-9f39-fd3f66c248a4",
            "hashes": {
                "MD5": "bb42e6649d927899c816cc04c2bffc06",
                "SHA-1": "364622ecb02017d72d942d2fadbe10752291b121",
                "SHA-256": "4effd4dacc6d505615c1a6eab28080b8c1941b109df4ec57786e5fb2739a3166"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--3e3cb3b9-b719-437f-a60d-4f3d49db4e6b",
            "hashes": {
                "MD5": "ba89337af43f0b07a35cc892ac95112a",
                "SHA-1": "f8834840c73a944394c26b3b71b9627a2a0c385a",
                "SHA-256": "cd152e2c4796dd4cf82e2824ad6ca6e64ef42ab2ca79cf3417354d6b2e999fb9"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--e1303b24-36af-45d2-95c1-b467efd561b6",
            "hashes": {
                "MD5": "874c0ec36be15fe3403f3abad6ecea75",
                "SHA-1": "17b4e8bf763a6e5c4f04f5c98eb780894140e7b1",
                "SHA-256": "520056eedfaf9d3445ecf8d7aefa0b93d7c35f9a8a2a5da0999530280a9a6438"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--8fa38316-8563-438b-8b37-e24251733579",
            "hashes": {
                "MD5": "08523230e221246bb59cde7c3e8363c7"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--aa8d0551-23b2-4418-93b3-6be5a9f08d7d",
            "hashes": {
                "MD5": "cd705902ea42d0de2a8456b055c3bb87",
                "SHA-1": "d945db08bacd1c2e06ad29c207c7da34edacf965",
                "SHA-256": "04b28c594e96703ed11481847aab936e5ba06280ce947a436e0b64752c86bd14"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b4edb2e8-2b67-4c31-b39e-c40ff9442f58",
            "hashes": {
                "MD5": "74c3011b6980bea23d119822d979a364",
                "SHA-1": "447f08c1fd35a517004987dcbae264cf744a5721",
                "SHA-256": "c9507551a16afacdd8a5dda69c2b4b924cebe97c0ebaae955c6f446a7061f744"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--aa89088c-dc17-4714-877d-d6875e67f7bc",
            "hashes": {
                "MD5": "2fdf23367c604511d019a6914c50bc0b",
                "SHA-1": "38946d24b383efc102121f6fff890fbc52cc9db2",
                "SHA-256": "b0268fc7a405de7878e9793e38b0003068e4ffb99f91d0cfd79182874ea0c615"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--76196fa7-8158-43dd-b93a-3bc1d8ff9d01",
            "hashes": {
                "MD5": "566cc6129dc887629a7131821c7547e5",
                "SHA-1": "7511fd012f081d36e80a4737b8fff96113cf474e",
                "SHA-256": "1ba49a8f8354c4753299fd3936c34b7aae50043b87069391d476f7640c51688f"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--3bba32e5-213b-4e5c-900f-f5ad26d5e832",
            "hashes": {
                "MD5": "a45ba001c3abee03bda49c6816d9a17c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--bbe0d583-aadd-4fba-b999-4762225353ae",
            "hashes": {
                "MD5": "2f26f3a883aeca9a11769664fc7d4750"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ef2dc28e-6735-4cc0-a313-80693511dbcd",
            "hashes": {
                "MD5": "02dae3046d1669a55785ba935b0e3f0b"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--dbef00be-da22-4263-b29b-731f3653a97b",
            "hashes": {
                "MD5": "b49bbc11ed000211a5af7eb35f596886"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--9e646f82-5ca5-4b15-8d73-44cc265f514a",
            "hashes": {
                "MD5": "b7359ae1a83323d3671e7c3a63ce7bf1",
                "SHA-1": "1d4ae71280b51a9c21ddd3c1dd3d9f30bdafa384",
                "SHA-256": "84350ea8e553fdb334335946892feb29dc94979ace4149bfd71980565ece2c38"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--50396340-0bc2-472c-835f-dfb1914355e6",
            "hashes": {
                "MD5": "aea8d3002132094a58d5189a8e886cf8",
                "SHA-1": "c6b6f203225d102fe8173500dd74ab9b3c4b4a13",
                "SHA-256": "8dc6e8eccaaa9ebe77b60ab364e7a56ba81bb00664485d3090b58286df0ca37c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--1d48ce60-20f3-452a-9a22-ba59f14bf966",
            "hashes": {
                "MD5": "0eb739c8faf77dae0546ff447ad06038",
                "SHA-1": "12262afd366b6d123508ef79d5cfc49251f5e368",
                "SHA-256": "9505ee1c9b92390e6f1404648686c524681874e6986bdf6236ca7e0ca5c2693a"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--f0725e05-bd43-43ef-8b89-44a3636d5fc5",
            "hashes": {
                "MD5": "1a082a388a285e7fc4541124794f3910"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--92a44582-3435-488e-9bfd-0cb168adaf16",
            "hashes": {
                "MD5": "95410a32a76aecb099af53255bb90737"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--da641c00-23da-489d-b23b-1942e8b287d2",
            "hashes": {
                "MD5": "0a50827a4897a43a882c8d3c691d943d"
            }
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--d5af21e9-47f6-4d99-8e55-75dd83f26041",
            "value": "human-ad@hanmail.net"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--c5c3fa09-592a-4f18-be61-3b17a0a50bb2",
            "value": "homework.890m.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--3dcaad57-b091-4e0d-b798-0f3e5d6882bc",
            "value": "brave.ru"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--e16e1fc0-220b-492e-b616-dd96a753f134",
            "hashes": {
                "MD5": "6106449779d453be4ae28d89f207e921",
                "SHA-1": "f0e5685c433ddba3a5d7b223cc738d8a7501c977",
                "SHA-256": "55e69e1337af0d93b5a3742d999bf805177c404e7e60e48f303509592ecd0e29"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--8fe8f684-1d58-44ab-8cfe-82116ff9496e",
            "hashes": {
                "MD5": "1dfe826f71c20ff04987a9160c177e46",
                "SHA-1": "592f882c54bb0038d976d6c88d58757aca10e307",
                "SHA-256": "493aadefcf45642c34b4d84a84a41da9ac173b52c3217f62b3e25ece6379bd94"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--04d61588-a94b-4b35-969a-081c101e498f",
            "hashes": {
                "MD5": "8332be776617364c16868c1ad6b4efe7",
                "SHA-1": "618500453c5488e4a2fe43d5647f46eefe01bd56",
                "SHA-256": "5f2ac8672e19310bd532c47d209272bd75075696dea6ffcc47d1d37f18aff141"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--be03fd67-0697-4450-a774-3b82660a5da8",
            "hashes": {
                "MD5": "71ec829db01818d305552ec4ebb1c258",
                "SHA-1": "d1a9dad0b7b1face9869216c863b743bc2b1e3a4",
                "SHA-256": "d9746224143010adada9989bf6b1014bb10e8165615e1ef6b58fd429cd2aa20a"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--263ddcff-992a-4731-b3c2-b419165cb3e3",
            "hashes": {
                "MD5": "242c31d0ce2109fdface788663e90f49",
                "SHA-1": "59c089f8e781f6686dc49776805697f9ad044c15",
                "SHA-256": "12ee511259f7f03e8472efa8baf3e250b64f8da65fe71212cedfdac887f503f4"
            }
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--fcbabcc4-0a43-403e-9748-6f6f4cf269a3",
            "value": "countine.protector.mail@gmail.com"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--0b3a4a7f-fc76-44c9-b783-7568570e4976",
            "hashes": {
                "MD5": "54783422cfd7029a26a3f3f5e9087d8a",
                "SHA-1": "5d379e533acef24ada64dbaf275650093ec790e7",
                "SHA-256": "ba08b13577eef393db69a20d9b881bfd18e86ec37690c25cc2931a7b26dbdc6f"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--e01407cd-919c-4c2e-83dc-e7fe81e016c4",
            "hashes": {
                "MD5": "ab73b1395938c48d62b7eeb5c9f3409d",
                "SHA-1": "ac5ae9d2cee05c08759ca970399bb8bb54fb99cf",
                "SHA-256": "3f30875674917b92584600a47f93a2724f11383fb03efd1ae8c2700dde97f6ac"
            }
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1",
            "created": "2026-10-09T12:00:58.280055Z",
            "modified": "2026-10-09T12:00:58.280055Z",
            "name": "Kimsuky"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--bd4fbedc-f266-4822-be8a-1ede6099f4c8",
            "created_by_ref": "identity--eafdd258-8d1a-438d-bbef-6ca0d4a35852",
            "created": "2026-10-09T12:00:58.280888Z",
            "modified": "2026-10-09T12:00:58.280888Z",
            "name": "Operation Kabar Cobra: Kimsuky \uacf5\uaca9 \uadf8\ub8f9\uc758 \ucd5c\uc2e0 \ud0c0\uae43 \uacf5\uaca9 \uc0ac\ub840 \ubd84\uc11d",
            "published": "2019-03-04T00:00:00Z",
            "object_refs": [
                "identity--eafdd258-8d1a-438d-bbef-6ca0d4a35852",
                "ipv4-addr--4b698ce5-35af-40a5-ab02-3cae6bf7003b",
                "domain-name--c9743928-3e15-4ee3-87bb-d5ab1d7199e5",
                "file--479d8967-cfd3-4d51-8d95-0d09acf546aa",
                "file--13955e77-b527-49c0-91f5-6ff8973c9ef2",
                "file--1cc24091-857b-46da-a65a-13b9f5624809",
                "file--93fecab0-bdac-4b17-b7ce-c71ef7cad948",
                "file--c5736c7b-a5e3-4499-b9b7-e5a9ee58be44",
                "file--65cfd698-81ad-4a43-81bc-3e028c69a117",
                "file--def7c403-e51d-47d4-ae3d-5f1ab1967022",
                "file--2bc49d2f-a693-4529-be5c-9d424670bacb",
                "file--a418bab8-9ac8-45f9-b28a-a12686941f92",
                "file--ddc137f6-83a2-41c3-bd0e-266d264cd52d",
                "file--11b218cc-6c86-4baf-8d26-6ac0c07db24b",
                "file--50807011-2ce0-4f66-9f39-fd3f66c248a4",
                "file--3e3cb3b9-b719-437f-a60d-4f3d49db4e6b",
                "file--e1303b24-36af-45d2-95c1-b467efd561b6",
                "file--8fa38316-8563-438b-8b37-e24251733579",
                "file--aa8d0551-23b2-4418-93b3-6be5a9f08d7d",
                "file--b4edb2e8-2b67-4c31-b39e-c40ff9442f58",
                "file--aa89088c-dc17-4714-877d-d6875e67f7bc",
                "file--76196fa7-8158-43dd-b93a-3bc1d8ff9d01",
                "file--3bba32e5-213b-4e5c-900f-f5ad26d5e832",
                "file--bbe0d583-aadd-4fba-b999-4762225353ae",
                "file--ef2dc28e-6735-4cc0-a313-80693511dbcd",
                "file--dbef00be-da22-4263-b29b-731f3653a97b",
                "file--9e646f82-5ca5-4b15-8d73-44cc265f514a",
                "file--50396340-0bc2-472c-835f-dfb1914355e6",
                "file--1d48ce60-20f3-452a-9a22-ba59f14bf966",
                "file--f0725e05-bd43-43ef-8b89-44a3636d5fc5",
                "file--92a44582-3435-488e-9bfd-0cb168adaf16",
                "file--da641c00-23da-489d-b23b-1942e8b287d2",
                "email-addr--d5af21e9-47f6-4d99-8e55-75dd83f26041",
                "domain-name--c5c3fa09-592a-4f18-be61-3b17a0a50bb2",
                "domain-name--3dcaad57-b091-4e0d-b798-0f3e5d6882bc",
                "file--e16e1fc0-220b-492e-b616-dd96a753f134",
                "file--8fe8f684-1d58-44ab-8cfe-82116ff9496e",
                "file--04d61588-a94b-4b35-969a-081c101e498f",
                "file--be03fd67-0697-4450-a774-3b82660a5da8",
                "file--263ddcff-992a-4731-b3c2-b419165cb3e3",
                "email-addr--fcbabcc4-0a43-403e-9748-6f6f4cf269a3",
                "file--0b3a4a7f-fc76-44c9-b783-7568570e4976",
                "file--e01407cd-919c-4c2e-83dc-e7fe81e016c4",
                "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "http://download.ahnlab.com/kr/site/library/[Analysis_Report]Operation_Kabar_Cobra.pdf"
                }
            ]
        }
    ]
}