{
    "type": "bundle",
    "id": "bundle--146e1c4f-bb05-4c62-8d95-52c9f257ae1b",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--e8d92f95-2fa7-40c6-ae51-176a72b21b1a",
            "created": "2023-03-08T12:51:54.465531Z",
            "modified": "2023-03-08T12:51:54.465608Z",
            "name": "Intezer",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--99e42af6-5cce-4434-978d-e102d1a8d159",
            "hashes": {
                "MD5": "5a2cfede0c7e72af968f34dd9a74f653",
                "SHA-1": "5a09230a0d6ee1613225a2a57364b0f345ca6b46",
                "SHA-256": "d1cf03fbcb6471d44b914c2720821582fb3dd81cb543f325b2780a5e95046395"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--530e4019-12a4-45ea-b746-8e6accda3d6d",
            "hashes": {
                "MD5": "12a7fcced2377abb13b45fcc5d792903",
                "SHA-1": "07a064741d4d37ae735907b8cb414c791471546c",
                "SHA-256": "f4b7b36e9c940937748d5bba3beb82b7c3636f084e5e913c7a5ad3ad623ffbc5"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--960b860e-d856-410e-9405-1488dc5c0a9d",
            "hashes": {
                "MD5": "117da35c6ce3e941d4444c95608c9a80",
                "SHA-1": "1682ff956b0a38319fdb89a9cceda6444a9d32e3",
                "SHA-256": "4915f53221dc7786710a7a82a9cb00cf8468e0d1155a1355c9eb17e8cddfd265"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--64f41088-5295-4c43-8ed0-e8994b71abd4",
            "hashes": {
                "MD5": "301ec309decc84fbabca5f044755c0b7",
                "SHA-1": "3335d44f45134978bb50c6eb93b68920d1af9171",
                "SHA-256": "c62ec66e45098d2c41bfd7a674a5f76248cf4954225c2d3a2cfcd023daa93522"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--82cdc496-1ab5-4fe1-9586-a61ed6fc6623",
            "hashes": {
                "MD5": "7f33668eed8db60c9d4a79acfb6ecd2e",
                "SHA-1": "746af9fdda74273d8717700bcc9e1950bc4bf21a",
                "SHA-256": "458ffcc41959599f8dab1fd4366c9a50efefa376e42971c4a436aa7fd697a396"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--f5f6d049-ad4a-482f-a436-b1dd447c82ba",
            "hashes": {
                "MD5": "58277fa51895a7c62f4129cf5ddc5e9b",
                "SHA-1": "ccf1e8db12370265428c5734af44c6b656e549ce",
                "SHA-256": "ec73fe2ecc2e0425e4aeb1f01581b50c5b1f8e85475c20ea409de798e6469608"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--4d0c7b96-e0eb-48d8-813b-27242fb5911c",
            "hashes": {
                "MD5": "e068a49745f24dc558ecf97cfa297056",
                "SHA-1": "ebc02ef4d3adb0aaa0da6b6f4200d55aeb0dc952",
                "SHA-256": "1b6a1320fba00dd2e56e35cf6f11f941deabcb6e4dba7ea773ded7e3d648ec54"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--2c9c0415-2cbc-4bc8-9d7d-efa3d4622d40",
            "hashes": {
                "MD5": "9c390d3b8e508f0a1b601ba814d7e078",
                "SHA-1": "acce10a6680979dc571110d5b9006a3751eef76b",
                "SHA-256": "926a2e8c2baa90d504d48c0d50ca73e0f400d565ee6e07ad6dafdd0d7b948b0e"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--cbee9d7d-0038-49cd-8896-088496af3260",
            "hashes": {
                "MD5": "70e3d7afd1f7be807f6a720537e6c495",
                "SHA-1": "8ca1882483aa6df273b89ed799a2121495e54598",
                "SHA-256": "068b89e2ec5655d006f2788ea328e5f12bd57ba761ee03c4de2fb0aa01c92c7f"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--e5078750-3b28-42ca-8023-64e0c9b9b38a",
            "value": "http://ready-jetkorea.com/data/file/pop/write_ok.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--8e67934c-a131-40f2-8277-079e4ed94569",
            "value": "http://plsong.com/xe/addons/counter/conf/write_ok.php"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--a216477e-e704-4f01-bd08-af9371f70ad0",
            "value": "ready-jetkorea.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--0cd2c34c-818e-4257-bd28-78be8602113a",
            "value": "plsong.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--b7310525-9a98-4bbe-b26f-2a00e585dfe6",
            "value": "pudn.com"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--0ec2f02e-9b10-4d27-978c-a7cadf324bf0",
            "hashes": {
                "MD5": "a03ae3a480dd17134b04dbc5e62bf57b",
                "SHA-1": "3cafe7d0a200dd577a6e0a31dde4a2315ead156c",
                "SHA-256": "6724c041fe0df61a619006bf1df4a759f4f22a65e2afda32501760ebc9ebe25d"
            }
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b",
            "created": "2026-10-09T12:04:40.668762Z",
            "modified": "2026-10-09T12:04:40.668762Z",
            "name": "Lazarus"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--e02750dc-d850-4ddb-922a-dac8b60d710d",
            "created_by_ref": "identity--e8d92f95-2fa7-40c6-ae51-176a72b21b1a",
            "created": "2026-10-09T12:04:40.669525Z",
            "modified": "2026-10-09T12:04:40.669525Z",
            "name": "Paleontology: The Unknown Origins of Lazarus malware",
            "published": "2018-10-31T00:00:00Z",
            "object_refs": [
                "identity--e8d92f95-2fa7-40c6-ae51-176a72b21b1a",
                "file--99e42af6-5cce-4434-978d-e102d1a8d159",
                "file--530e4019-12a4-45ea-b746-8e6accda3d6d",
                "file--960b860e-d856-410e-9405-1488dc5c0a9d",
                "file--64f41088-5295-4c43-8ed0-e8994b71abd4",
                "file--82cdc496-1ab5-4fe1-9586-a61ed6fc6623",
                "file--f5f6d049-ad4a-482f-a436-b1dd447c82ba",
                "file--4d0c7b96-e0eb-48d8-813b-27242fb5911c",
                "file--2c9c0415-2cbc-4bc8-9d7d-efa3d4622d40",
                "file--cbee9d7d-0038-49cd-8896-088496af3260",
                "url--e5078750-3b28-42ca-8023-64e0c9b9b38a",
                "url--8e67934c-a131-40f2-8277-079e4ed94569",
                "domain-name--a216477e-e704-4f01-bd08-af9371f70ad0",
                "domain-name--0cd2c34c-818e-4257-bd28-78be8602113a",
                "domain-name--b7310525-9a98-4bbe-b26f-2a00e585dfe6",
                "file--0ec2f02e-9b10-4d27-978c-a7cadf324bf0",
                "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.intezer.com/paleontology-the-unknown-origins-of-lazarus-malware/"
                }
            ]
        }
    ]
}