{
    "type": "bundle",
    "id": "bundle--b944c6bc-b807-4492-9584-7b5a80c782dd",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--243c3ae6-45e8-41db-8bdd-4897aaae4670",
            "created": "2023-03-08T12:51:43.142167Z",
            "modified": "2023-05-13T00:24:09.959414Z",
            "name": "PolySwarm",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b868389e-33ef-481d-ab7c-6bf0c3b4d711",
            "hashes": {
                "MD5": "cb675bbebcc4a77cf5a3b341734b84de",
                "SHA-1": "39663e144dc00e3eff004895347a91cb78a6f675",
                "SHA-256": "0e926d8b6fbf6f14a2a19d4d4af843253f9f5f6de337956a12dde279f3321d78"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d856ac0a-027f-4d23-a9d8-cd9a4450c9cb",
            "hashes": {
                "MD5": "4fe698c235d03a271305db8ffdaa9e36",
                "SHA-1": "6811274e3b8dfe43500f14b8144eb92d52980dd2",
                "SHA-256": "852607619f1de73d78b4e0de2cc5f37217cfda62bdc339093fb003e202d3d9e3"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--1e9e021c-156b-43df-b84b-85161b683413",
            "hashes": {
                "MD5": "85e71578ad7fea3c15095b6185b14881",
                "SHA-1": "5d3e6a8d4bd0cf68c3fc3bdf7836c124538f5e8d",
                "SHA-256": "6753933cd54e4eba497c48d63c7418a8946b4b6c44170105d489d29f1fe11494"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--85ddfecf-61ca-47a5-b8f1-72e7526a0a6f",
            "hashes": {
                "MD5": "e233e4da734f75388b40fed1717bfb6a",
                "SHA-1": "d38ed1f834c168e5b8759d534d047e0a40aa9db1",
                "SHA-256": "1e0b5d6b85fca648061fdaf2830c5a90248519e81e78122467c29beeb78daa1e"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7077b722-a268-4381-83c3-1d6057709723",
            "hashes": {
                "MD5": "5a6f56c3eb7d1ec4e6a0924fb3117554",
                "SHA-1": "f58611c93df7c95786840ecde4514eb1fe587357",
                "SHA-256": "240e7bd805bd7f2d17217dd4cebc03ac37ee60b7fb1264655cfd087749db647a"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--af1aedaf-10d1-4e6f-8516-7a9ac7c455eb",
            "hashes": {
                "MD5": "aa8ba9a029fa98b868be66b7d46e927b",
                "SHA-1": "df84ef49d7a50bd04c695489ec5a528155c6caec",
                "SHA-256": "f92297c4efabba98befeb992a009462d1aba6f3c3a11210a7c054ff5377f0753"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--4a446b94-79c8-4276-9233-0947536c96bd",
            "hashes": {
                "MD5": "bf757d55d6b48ec73851540ca7fe9315",
                "SHA-1": "8a50a4ee479d9ba2f5525fa899420b30296e3ed8",
                "SHA-256": "12ecabf01508c40cfea1ebc3958214751acfb1cd79a5bf2a4b42ebf172d7381b"
            }
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--9ecd4caf-04de-50a7-8167-508e0da44c35",
            "created": "2026-10-09T10:48:32.356138Z",
            "modified": "2026-10-09T10:48:32.356138Z",
            "name": "TEMP.Reaper"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--7fa9c491-fa2b-4ddb-9742-f9f3cf156b97",
            "created_by_ref": "identity--243c3ae6-45e8-41db-8bdd-4897aaae4670",
            "created": "2026-10-09T10:48:32.356962Z",
            "modified": "2026-10-09T10:48:32.356962Z",
            "name": "Reaper Uses New TTPs to Drop RokRAT",
            "published": "2023-05-15T00:00:00Z",
            "object_refs": [
                "identity--243c3ae6-45e8-41db-8bdd-4897aaae4670",
                "file--b868389e-33ef-481d-ab7c-6bf0c3b4d711",
                "file--d856ac0a-027f-4d23-a9d8-cd9a4450c9cb",
                "file--1e9e021c-156b-43df-b84b-85161b683413",
                "file--85ddfecf-61ca-47a5-b8f1-72e7526a0a6f",
                "file--7077b722-a268-4381-83c3-1d6057709723",
                "file--af1aedaf-10d1-4e6f-8516-7a9ac7c455eb",
                "file--4a446b94-79c8-4276-9233-0947536c96bd",
                "threat-actor--9ecd4caf-04de-50a7-8167-508e0da44c35"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://blog.polyswarm.io/reaper-uses-new-ttps-to-drop-rokrat"
                }
            ]
        }
    ]
}