{
    "type": "bundle",
    "id": "bundle--c62ea7eb-364b-4789-a9ef-2162472875dc",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--0648e9f1-986a-40ab-8f6c-0495948f69ec",
            "created": "2023-05-23T01:10:41.336415Z",
            "modified": "2024-09-11T13:26:42.312985Z",
            "name": "Genians",
            "identity_class": "organization"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--ed5d9241-d125-4ec1-8fb1-8ec2b29d4db7",
            "value": "leon91729@zoho.com"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c6425693-9101-4541-9829-eb92cc022fed",
            "hashes": {
                "MD5": "443a00feeb3beaea02b2fbcd4302a3c9",
                "SHA-1": "65f79b9fa476e9aafec16a7995b39c72d4c5e341",
                "SHA-256": "ccb6ca4cb385db50dad2e3b7c68a90ddee62398edb0fd41afdb793287cfbe8e6"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--8f4b7c7f-b745-486a-98a0-bf073a1ab17c",
            "hashes": {
                "MD5": "f6d72abf9ca654a20bbaf23ea1c10a55",
                "SHA-1": "543e3b4b74257c3ffcd45dcdd8c842489a82bc07",
                "SHA-256": "90bf1f20f962d04f8ae3f936d0f9046da28a75fa2fb37f267ff0453f272c60a0"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--02e2f1b8-e1eb-428f-ac08-372b2b6e7291",
            "value": "cloud-api.yandex.net"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--da92bfa6-3808-48be-9ffa-a93f3d967e0c",
            "hashes": {
                "MD5": "d5fe744b9623a0cc7f0ef6464c5530da",
                "SHA-1": "b26a769254487129d64e1043a3eb3a9cbc5ac5fc",
                "SHA-256": "41d9b6d8cf0fff85bf35327d4b94db629cd9f754c487672911b7f701fe8c5539"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--701e810a-6007-4eeb-b6be-66e2170dc0a6",
            "hashes": {
                "MD5": "5ed95cde6c29432a4f7dc48602f82734",
                "SHA-1": "a703d7746119a430291a5d1655e09e03d0c645ac",
                "SHA-256": "9eca7ab62e3ad40b79116ad713462e3ae4d9610345952e5dd279f0b481870d4f"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--837bfec8-3670-42f4-95bd-5a78ef18027b",
            "hashes": {
                "MD5": "fd9099005f133f95a5b699ab30a2f79b",
                "SHA-1": "a33f1e3d2691872d6afca0706bf41688238f9bd5",
                "SHA-256": "ca56720610400d6da773ffa4cce5b2447d4a665087604c9c6e1c9e71c048ccfc"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--697e2c8f-898f-4983-9795-7573209f476d",
            "hashes": {
                "MD5": "ae7e18a62abb7f93b657276dcae985b9",
                "SHA-1": "0bdde2951dedd6791e8d51a1e197c9b167286f2c",
                "SHA-256": "7d514021c472e6e17f587ed30555d3f120653e6c7f8dc25d2331514b92ffd7bc"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ce9bdb71-e9be-478e-9534-dadcca041a0c",
            "hashes": {
                "MD5": "e4813c34fe2327de1a94c51e630213d1",
                "SHA-1": "f916595b43c3856225429b75b93845e7b4be19f5",
                "SHA-256": "bf7d5020dcd7777509b7b542255814cd61bfb1599d532dd2fdbb50de2ad70bc5"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--45cf0081-76df-4e28-9958-e028abc3a422",
            "hashes": {
                "MD5": "64d729d0290e2c8ceaa6e38fa68e80e9",
                "SHA-1": "01c99b4ee23ed90bdac7daba789e84a4e46936a6",
                "SHA-256": "7ee4326c5d0e6a30c1a9bdec045d670758fa1b36477992d61b03cb270113b196"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--43cba565-bd4c-4a6b-9c8c-4e8b22b95bc8",
            "hashes": {
                "MD5": "a2ee8d2aa9f79551eb5dd8f9610ad557",
                "SHA-1": "c53bdf6c05c13186a622ed9fd67f9edf2662bd47",
                "SHA-256": "e27467f7fdfa721e917384542ce10cc6108dfd78df14e23872cf8df916e0b8c6"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--565aaefb-a8c1-48d4-af3c-0c4ea6278342",
            "hashes": {
                "MD5": "e13c3a38ca58fb0fa9da753e857dd3d5",
                "SHA-1": "e52ddd741132644f64b84a64fafe5b4e52dee2bd",
                "SHA-256": "6a2d984ef3fa0de9b9feb5f558381201e6dff42ef5efe4867fb24e47c6a2aade"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--4157b14f-e634-458e-b71a-e86eb1e56e1d",
            "hashes": {
                "MD5": "16a8aaaf2e3125668e6bfb1705a065f9",
                "SHA-1": "2fa0027831cf1e73ec74eae66e1fc130824b776d",
                "SHA-256": "3fa06c290c477c133ca58512c7852fc998632721f2dc3a0984f18fbe86451e18"
            }
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--73a19fd4-2617-40dc-a6da-d3ccd2610b81",
            "value": "leon24609@gmail.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--2603dd42-6d47-441a-b5ac-6c00cf501b69",
            "value": "reddy.kappeta@yandex.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--f94875ef-c840-4fe7-98a9-941d4b4e2ee5",
            "value": "nusli.vakil@yandex.com"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--3be555f5-1f0d-5001-b84a-c6c910760fd0",
            "created": "2026-09-19T09:53:01.170775Z",
            "modified": "2026-09-19T09:53:01.170775Z",
            "name": "APT37"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--9f4cee35-dd92-4a8b-9f51-b84034b6253f",
            "created_by_ref": "identity--0648e9f1-986a-40ab-8f6c-0495948f69ec",
            "created": "2026-09-19T09:53:01.171925Z",
            "modified": "2026-09-19T09:53:01.171925Z",
            "name": "RoKRAT Shellcode and Steganographic Threats: Analysis and EDR Response Strategies",
            "published": "2025-08-03T00:00:00Z",
            "object_refs": [
                "identity--0648e9f1-986a-40ab-8f6c-0495948f69ec",
                "email-addr--ed5d9241-d125-4ec1-8fb1-8ec2b29d4db7",
                "file--c6425693-9101-4541-9829-eb92cc022fed",
                "file--8f4b7c7f-b745-486a-98a0-bf073a1ab17c",
                "domain-name--02e2f1b8-e1eb-428f-ac08-372b2b6e7291",
                "file--da92bfa6-3808-48be-9ffa-a93f3d967e0c",
                "file--701e810a-6007-4eeb-b6be-66e2170dc0a6",
                "file--837bfec8-3670-42f4-95bd-5a78ef18027b",
                "file--697e2c8f-898f-4983-9795-7573209f476d",
                "file--ce9bdb71-e9be-478e-9534-dadcca041a0c",
                "file--45cf0081-76df-4e28-9958-e028abc3a422",
                "file--43cba565-bd4c-4a6b-9c8c-4e8b22b95bc8",
                "file--565aaefb-a8c1-48d4-af3c-0c4ea6278342",
                "file--4157b14f-e634-458e-b71a-e86eb1e56e1d",
                "email-addr--73a19fd4-2617-40dc-a6da-d3ccd2610b81",
                "email-addr--2603dd42-6d47-441a-b5ac-6c00cf501b69",
                "email-addr--f94875ef-c840-4fe7-98a9-941d4b4e2ee5",
                "threat-actor--3be555f5-1f0d-5001-b84a-c6c910760fd0"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.genians.co.kr/en/blog/threat_intelligence/rokrat_shellcode_steganographic"
                }
            ]
        }
    ]
}