{
    "type": "bundle",
    "id": "bundle--1627cdc3-6a08-4f49-a792-358e919c3406",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--0c5262d6-a544-4758-b214-c1a416d6028e",
            "created": "2023-03-30T22:51:38.926787Z",
            "modified": "2024-09-18T02:59:36.415321Z",
            "name": "Elastic",
            "identity_class": "organization"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--58759f69-01a4-4b05-b858-561d4b264e98",
            "value": "docsend.linkpc.net"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--a86ba73b-454f-49d8-ad54-852cc7a3a3bb",
            "value": "webhostwatto.work.gd"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--462a8eff-5600-41c0-b51a-c537de6ee678",
            "value": "jaicvc.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--4bb7238b-3e88-4f41-b0a0-cb7fdc3a2bf5",
            "value": "crypto.hondchain.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--1772e661-101b-4184-9ed9-504fac8bb16d",
            "value": "starbucls.xyz"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--d481450f-a36d-4713-a050-37aaeed7fe5b",
            "value": "104.168.167.88"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--773c479e-a07d-48fb-8e69-8b77d5e1c37e",
            "hashes": {
                "MD5": "f90b544f89cfbe38aee18024d7c39e40",
                "SHA-1": "182760cbe11fa0316abfb8b7b00b63f83159f5aa",
                "SHA-256": "9ca914b1cfa8c0ba021b9e00bda71f36cad132f27cf16bda6d937badee66c747"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--cbefded5-17b9-4605-87f5-187a0f101f0c",
            "hashes": {
                "SHA-256": "788261d948177acfcfeb1f839053c8ee9f325bd6fb3f07637a7465acdbbef76a"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--5da3dae0-5f5c-41e4-9855-cc1fabc646fb",
            "hashes": {
                "SHA-256": "1031871a8bb920033af87078e4a418ebd30a5d06152cd3c2c257aecdf8203ce6"
            }
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--2cd7143b-2309-4ddc-809e-1589ac93908a",
            "value": "64.44.141.15"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--8346377c-f995-4598-8a67-c5c1e382ea41",
            "hashes": {
                "MD5": "e169d95fffd8ab489f5eae02365d39ca",
                "SHA-1": "ed4f16b36bc47a701814b63e30d8ea7a226ca906",
                "SHA-256": "7887638bcafd57e2896c7c16698e927ce92fd7d409aae698d33cdca3ce8d25b8"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c4d4e92f-a973-44bc-aaef-0101bd1038ee",
            "hashes": {
                "MD5": "029456110598a8fddefbf942d6f50cc4",
                "SHA-1": "69f24956fb75beb9b93ef974d873914500e35601",
                "SHA-256": "fe8c0e881593cc3dfa7a66e314b12b322053c67cbc9b606d5a2c0a12f097ef69"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--fc3432cd-1cec-4ec7-8617-a47ead32c91b",
            "hashes": {
                "MD5": "b7cb512be2f564a77608b4ffd57af9da",
                "SHA-1": "cd8f41b91e8f1d8625e076f0a161e46e32c62bbf",
                "SHA-256": "4f49514ab1794177a61c50c63b93b903c46f9b914c32ebe9c96aa3cbc1f99b16"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--5b05a864-db27-4724-a100-62d8d3d53356",
            "hashes": {
                "MD5": "cdc7ae6934b904c62c942b6803ee31d6",
                "SHA-1": "8a1b32ab8c2a889985e530425ae00f4428c575cc",
                "SHA-256": "de81e5246978775a45f3dbda43e2716aaa1b1c4399fe7d44f918fccecc4dd500"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--847c0496-d4d7-4e6c-8a0a-8f031c37332e",
            "hashes": {
                "MD5": "352715d5770b53768bf9f23d810ad55f",
                "SHA-1": "831dc7bc4a234907d94a889bcb60b7bedf1a1e13",
                "SHA-256": "7fccc871c889a4f4c13a977fdd5f062d6de23c3ffd27e72661c986fae6370387"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--3464221c-21aa-4230-85cd-338c70c6bdb3",
            "hashes": {
                "MD5": "e2699d59c3602893698c5958f485c6c2",
                "SHA-1": "3cc19cef767dee93588525c74fe9c1f1bf6f8007",
                "SHA-256": "ec8f97d5595d92ec678ffbf5ae1f60ce90e620088927f751c76935c46aa7dc41"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--56bded15-af14-4846-8ac7-66274efa4d2e",
            "value": "https://webhostwatto.work.gd"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--f7f0d913-f17b-5632-a48a-76b4eef8a1cb",
            "created": "2026-10-09T18:28:12.523337Z",
            "modified": "2026-10-09T18:28:12.523337Z",
            "name": "Bluenoroff"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--56bbc61a-b6ab-5d88-821d-5dc5619cf909",
            "created": "2026-10-09T18:28:12.524842Z",
            "modified": "2026-10-09T18:28:12.524842Z",
            "name": "REF9135"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--9d0f99fb-ef1f-4880-ad23-b54ac2f422f3",
            "created_by_ref": "identity--0c5262d6-a544-4758-b214-c1a416d6028e",
            "created": "2026-10-09T18:28:12.525116Z",
            "modified": "2026-10-09T18:28:12.525116Z",
            "name": "The DPRK strikes using a new variant of RUSTBUCKET",
            "published": "2023-06-29T00:00:00Z",
            "object_refs": [
                "identity--0c5262d6-a544-4758-b214-c1a416d6028e",
                "domain-name--58759f69-01a4-4b05-b858-561d4b264e98",
                "domain-name--a86ba73b-454f-49d8-ad54-852cc7a3a3bb",
                "domain-name--462a8eff-5600-41c0-b51a-c537de6ee678",
                "domain-name--4bb7238b-3e88-4f41-b0a0-cb7fdc3a2bf5",
                "domain-name--1772e661-101b-4184-9ed9-504fac8bb16d",
                "ipv4-addr--d481450f-a36d-4713-a050-37aaeed7fe5b",
                "file--773c479e-a07d-48fb-8e69-8b77d5e1c37e",
                "file--cbefded5-17b9-4605-87f5-187a0f101f0c",
                "file--5da3dae0-5f5c-41e4-9855-cc1fabc646fb",
                "ipv4-addr--2cd7143b-2309-4ddc-809e-1589ac93908a",
                "file--8346377c-f995-4598-8a67-c5c1e382ea41",
                "file--c4d4e92f-a973-44bc-aaef-0101bd1038ee",
                "file--fc3432cd-1cec-4ec7-8617-a47ead32c91b",
                "file--5b05a864-db27-4724-a100-62d8d3d53356",
                "file--847c0496-d4d7-4e6c-8a0a-8f031c37332e",
                "file--3464221c-21aa-4230-85cd-338c70c6bdb3",
                "url--56bded15-af14-4846-8ac7-66274efa4d2e",
                "threat-actor--f7f0d913-f17b-5632-a48a-76b4eef8a1cb",
                "threat-actor--56bbc61a-b6ab-5d88-821d-5dc5619cf909"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.elastic.co/kr/security-labs/DPRK-strikes-using-a-new-variant-of-rustbucket"
                }
            ]
        }
    ]
}