{
    "type": "bundle",
    "id": "bundle--d5f3f80d-94e5-444b-923e-c6c2363f48a5",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--f8daa8f3-0459-4213-9eb2-9b8d5383653d",
            "created": "2025-07-30T06:14:54.858104Z",
            "modified": "2025-07-30T06:18:16.823006Z",
            "name": "Wiz",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--595c5a45-ab56-4f26-b48f-4d594e68c278",
            "hashes": {
                "MD5": "27ed65f53fddefe531b9209fbd5a2c1a",
                "SHA-1": "ff7e20cf642346bf893f1eca808df82035bb53d0",
                "SHA-256": "74d3447e7cf99c99ea01a16332ec27432dfb0f491e10e67cd118065a60483306"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b7e6ca64-34e0-4472-bd8d-7a5f166481b3",
            "hashes": {
                "MD5": "c0e75cc13246370d339c478aa0732e51",
                "SHA-1": "f4767ad92cb61401fd69139cade563501c39b991",
                "SHA-256": "408ef22050ffc5a67e005802809026b29f297a8019f8fda91a2afa8e877ba434"
            }
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--f834aeac-9cc4-4eb8-abf8-f747a794dcfc",
            "value": "rchaitm@gmail.com"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--bdbaf997-0730-4f56-96b0-9570ee8c97fe",
            "value": "https://23.254.167.107:443/49890878"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--a27d8d15-0410-4068-a654-24f0de5a1802",
            "value": "https://23.254.165.112:443/49890878"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--66498ff4-3212-4524-97b7-89d0a2475c01",
            "value": "https://23.254.165.112:9089/"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--5b204338-b41a-4306-8f27-f6465e660751",
            "value": "hwsrv-798836.hostwindsdns.com"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--e98c2340-6c39-456a-9d7f-eb1391d29b83",
            "value": "23.254.167.107"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--81d93b52-0508-400f-8179-d508121df709",
            "value": "23.254.165.112"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--8d7cbe31-2959-43dc-9276-64e6c68efdae",
            "hashes": {
                "MD5": "0ea14afc05408181cf65195a6eeede04",
                "SHA-1": "fc0fdb978eac72f4484b48db058e4473f1bc516e",
                "SHA-256": "492f2ab86f8d8911adc79c10ec1541704f5311d207d9d799b0d2a57fcc6a4391"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ef93d17d-ecd1-4133-a831-78e7ac9c4c0f",
            "hashes": {
                "MD5": "6cc080d12d8c0cc7b956d3473fb0daff",
                "SHA-1": "f22e3e01e38bcdf001f0d15a2dbfdec5a1cf8eff",
                "SHA-256": "61198155da51b838772eecf5bfaac6cbc4dcc388dccc56658fc28a8e831b34d4"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--88531641-0300-4a04-a6a7-6efe3e071ec5",
            "hashes": {
                "SHA-256": "b5c1b5b0763a8809a644a8f92224653f0aca623a98eecc714d27f74b80fbe436"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--bbe1855d-12a3-48ce-9d35-1883649e7631",
            "hashes": {
                "MD5": "67f79180777949cec783e8c88894ecf9",
                "SHA-1": "1b6992ac12048dff26c716e4f0debebbfcec63ba",
                "SHA-256": "25ad700976873c76af785cb99b33c48db7df8b81f21d1e9e06b3676b9a9373ae"
            }
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--e6b0245a-9e01-402b-a19a-d67c5fd48719",
            "value": "23.254.167.216"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--ad58f665-2d60-592c-9ad6-a6ba3b636760",
            "created": "2026-09-10T10:22:17.028628Z",
            "modified": "2026-09-10T10:22:17.028628Z",
            "name": "SapphireSleet"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--b1fc54ae-4fb3-5833-9e0f-4873d16620f8",
            "created": "2026-09-10T10:22:17.029523Z",
            "modified": "2026-09-10T10:22:17.029523Z",
            "name": "UNC1069"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--269804f9-42e1-4437-a4a9-7e7a64a0383f",
            "created_by_ref": "identity--f8daa8f3-0459-4213-9eb2-9b8d5383653d",
            "created": "2026-09-10T10:22:17.030261Z",
            "modified": "2026-09-10T10:22:17.030261Z",
            "name": "Rust Supply Chain Attack on arrayref: Significant Overlap with DPRK Campaigns",
            "published": "2026-08-20T00:00:00Z",
            "object_refs": [
                "identity--f8daa8f3-0459-4213-9eb2-9b8d5383653d",
                "file--595c5a45-ab56-4f26-b48f-4d594e68c278",
                "file--b7e6ca64-34e0-4472-bd8d-7a5f166481b3",
                "email-addr--f834aeac-9cc4-4eb8-abf8-f747a794dcfc",
                "url--bdbaf997-0730-4f56-96b0-9570ee8c97fe",
                "url--a27d8d15-0410-4068-a654-24f0de5a1802",
                "url--66498ff4-3212-4524-97b7-89d0a2475c01",
                "domain-name--5b204338-b41a-4306-8f27-f6465e660751",
                "ipv4-addr--e98c2340-6c39-456a-9d7f-eb1391d29b83",
                "ipv4-addr--81d93b52-0508-400f-8179-d508121df709",
                "file--8d7cbe31-2959-43dc-9276-64e6c68efdae",
                "file--ef93d17d-ecd1-4133-a831-78e7ac9c4c0f",
                "file--88531641-0300-4a04-a6a7-6efe3e071ec5",
                "file--bbe1855d-12a3-48ce-9d35-1883649e7631",
                "ipv4-addr--e6b0245a-9e01-402b-a19a-d67c5fd48719",
                "threat-actor--ad58f665-2d60-592c-9ad6-a6ba3b636760",
                "threat-actor--b1fc54ae-4fb3-5833-9e0f-4873d16620f8"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.wiz.io/blog/rust-supply-chain-attack-on-arrayref-significant-overlap-with-dprk-campaigns"
                }
            ]
        }
    ]
}