{
    "type": "bundle",
    "id": "bundle--dba5b270-56ce-4d72-ba16-aeee16d6c5d7",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--26d87350-20ca-406f-b0f5-f59b6e0263ab",
            "created": "2023-03-08T12:51:42.796339Z",
            "modified": "2025-02-23T23:31:28.844756Z",
            "name": "Slowmist",
            "identity_class": "organization"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--b7fd86f2-f06a-4695-95c4-a4372d132b9d",
            "value": "166.88.134.75"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ad5b2125-ec30-41b2-af96-9264e9574fa6",
            "hashes": {
                "SHA-256": "515a53291d25d229e1f9fa72e66407e1cfd7e77c91478400b24d5185af68531a"
            }
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--f7e017d4-f292-475a-8ef6-42d16a04b3f5",
            "value": "193.247.144.38"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--0b370ee7-fbd7-44cd-866e-72609a647079",
            "value": "23.27.13.135"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--e0b90d8c-53f3-4695-86fa-78baa09794f7",
            "value": "166.88.73.46"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--58eae032-cb85-4636-885a-e48bf57667d1",
            "value": "166.88.134.62"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--21a5efde-6a09-5457-b095-3687a21fa8b8",
            "created": "2026-09-23T17:08:37.275581Z",
            "modified": "2026-09-23T17:08:37.275581Z",
            "name": "PolinRider"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--b0416a00-2d16-432b-82d8-4071e8f6d3ac",
            "created_by_ref": "identity--26d87350-20ca-406f-b0f5-f59b6e0263ab",
            "created": "2026-09-23T17:08:37.275909Z",
            "modified": "2026-09-23T17:08:37.275909Z",
            "name": "PolinRider Poisons Nova, Using On-Chain Transactions as a C2 Manager",
            "published": "2026-09-21T00:00:00Z",
            "object_refs": [
                "identity--26d87350-20ca-406f-b0f5-f59b6e0263ab",
                "ipv4-addr--b7fd86f2-f06a-4695-95c4-a4372d132b9d",
                "file--ad5b2125-ec30-41b2-af96-9264e9574fa6",
                "ipv4-addr--f7e017d4-f292-475a-8ef6-42d16a04b3f5",
                "ipv4-addr--0b370ee7-fbd7-44cd-866e-72609a647079",
                "ipv4-addr--e0b90d8c-53f3-4695-86fa-78baa09794f7",
                "ipv4-addr--58eae032-cb85-4636-885a-e48bf57667d1",
                "threat-actor--21a5efde-6a09-5457-b095-3687a21fa8b8"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://slowmist.medium.com/threat-intelligence-polinrider-poisons-nova-using-on-chain-transactions-as-a-c2-manager-5357a9d0222e"
                }
            ]
        }
    ]
}