{
    "type": "bundle",
    "id": "bundle--02f08dd9-dbad-4f8a-8ed0-1c1c5a5494b3",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--5ace95f0-bd6c-4fee-a494-ca40e791918d",
            "created": "2023-03-08T12:51:44.544245Z",
            "modified": "2024-09-09T23:28:33.92829Z",
            "name": "PaloaltoNetworks",
            "identity_class": "organization"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--b1ec4ac3-cb84-4faa-8710-4a6a9a896c85",
            "value": "152.32.138.167"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--5d961abd-fbcd-4b78-9fcc-c750af2e30ab",
            "hashes": {
                "MD5": "9760f489a390665b5e7854429b550c83",
                "SHA-1": "e9a707ed1cc0a98d17a67a53b3220e8581e78fcc",
                "SHA-256": "a173a425d17b6f2362eca3c8ea4de9860b52faba414bbb22162895641dda0dc2"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--5ff746b8-e092-42eb-9f67-b10def1933a0",
            "hashes": {
                "MD5": "e1d683ee1746c08c5fff1c4c2b3b02f0",
                "SHA-1": "65a76ccf28a6c9593683a874df1c9bca514fb9c4",
                "SHA-256": "990b7eec4e0d9a22ec0b5c82df535cf1666d9021f2e417b49dc5110a67228e27"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--225dceee-5ab1-4855-ba09-2feb2aeb51ef",
            "hashes": {
                "MD5": "54c58b72f98cb63c44e7694add551e9d",
                "SHA-1": "35bfaab9d1811f8b6f3126caced09e77fdfafdb9",
                "SHA-256": "c69cd6a9a09405ae5a60acba2f9770c722afde952bd5a227a72393501b4f5343"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d6c94a40-e0e5-42a3-a70b-38b1cd7aabc9",
            "hashes": {
                "MD5": "90946c6358eacd119fe1eb36ec7a0a18",
                "SHA-1": "a5c11cc95a58613ba063522d411e1e5fc9640e13",
                "SHA-256": "faf666019333f4515f241c1d3fcfc25c67532463245e358b90f9e498fe4f6801"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--8530a38d-0d33-44d8-995f-81e7895b043c",
            "hashes": {
                "MD5": "6d6c1b175e435f5564341cc1f2c33ddf",
                "SHA-1": "a5d5263546cd2d67eb7941154cc24e6c64e78599",
                "SHA-256": "2e768cee1c89ad5fc89be9df5061110d2a4953b336309014e0593eb65c75e715"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--7a2e67b1-82e7-42b0-8a9c-5ebe605718bf",
            "value": "http://mail.apollo-page.r-e.kr/wp-content/include.php?_sys_=7"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--e97103b8-ce36-4363-a4b8-e2df87ce6946",
            "value": "http://mail.apollo-page.r-e.kr/plugin/include.php?_sys_=7"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--811cfd61-baf5-4153-96ae-fcec1ba5d052",
            "value": "https://nidlogin.apollo.r-e.kr/cmd/index.php?_idx_=7"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--c112ab57-07b0-4b09-b5eb-1458b2c4c6d9",
            "value": "nidlogin.apollo.r-e.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--7ecc321d-193d-4063-a482-2376176745fc",
            "value": "bitjoker2024.000webhostapp.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--9985ba0b-6825-4d1d-8f16-f169487cdd68",
            "value": "mail.apollo-page.r-e.kr"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--b6d839dd-309c-5248-93ae-966a9739ab15",
            "created": "2026-09-19T08:57:50.632427Z",
            "modified": "2026-09-19T08:57:50.632427Z",
            "name": "SparklingPisces"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--6b4e4462-aa49-4230-9907-0d189ac817df",
            "created_by_ref": "identity--5ace95f0-bd6c-4fee-a494-ca40e791918d",
            "created": "2026-09-19T08:57:50.63365Z",
            "modified": "2026-09-19T08:57:50.63365Z",
            "name": "Unraveling Sparkling Pisces\u2019s Tool Set: KLogEXE and FPSpy",
            "published": "2024-09-26T00:00:00Z",
            "object_refs": [
                "identity--5ace95f0-bd6c-4fee-a494-ca40e791918d",
                "ipv4-addr--b1ec4ac3-cb84-4faa-8710-4a6a9a896c85",
                "file--5d961abd-fbcd-4b78-9fcc-c750af2e30ab",
                "file--5ff746b8-e092-42eb-9f67-b10def1933a0",
                "file--225dceee-5ab1-4855-ba09-2feb2aeb51ef",
                "file--d6c94a40-e0e5-42a3-a70b-38b1cd7aabc9",
                "file--8530a38d-0d33-44d8-995f-81e7895b043c",
                "url--7a2e67b1-82e7-42b0-8a9c-5ebe605718bf",
                "url--e97103b8-ce36-4363-a4b8-e2df87ce6946",
                "url--811cfd61-baf5-4153-96ae-fcec1ba5d052",
                "domain-name--c112ab57-07b0-4b09-b5eb-1458b2c4c6d9",
                "domain-name--7ecc321d-193d-4063-a482-2376176745fc",
                "domain-name--9985ba0b-6825-4d1d-8f16-f169487cdd68",
                "threat-actor--b6d839dd-309c-5248-93ae-966a9739ab15"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://unit42.paloaltonetworks.com/kimsuky-new-keylogger-backdoor-variant/"
                }
            ]
        }
    ]
}