{
    "type": "bundle",
    "id": "bundle--587fd57f-3458-464d-9ca2-98a9f4c78d15",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--e1770d75-00b9-4e7e-bf11-54ca60ca3da1",
            "created": "2023-03-08T12:51:59.981763Z",
            "modified": "2023-03-08T12:51:59.981844Z",
            "name": "Fireeye",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--dccb8c4e-a6a6-4e9d-84a2-2725955576cd",
            "hashes": {
                "MD5": "96986b18a8470f4020ea78df0b3db7d4",
                "SHA-1": "431c792fcc8ba9b58f0ffde5c8fe6fd93066ec45",
                "SHA-256": "2eb447785e5b35c42d842706d593a907d0bdbc50ad9d0327c3591ac4ef17ce6e"
            }
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--47225faa-9119-47d3-a269-7364cd01e9c8",
            "value": "89.34.111.113"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--a720aa9d-f790-4b64-a56c-4a99906555ea",
            "hashes": {
                "MD5": "12def981952667740eb06ee91168e643",
                "SHA-1": "1df08806e39ed6f9f3a5cb228f3be744936e201e",
                "SHA-256": "c7c3d70337336fc183135038ce5d0a4bb83ab6d9f4cc1ad5cf600295e6a41e1b"
            }
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--2d461deb-6bd7-45f3-af22-d6a66ffb6f4c",
            "value": "47.91.56.21"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--368a6f76-38a9-436a-911e-73af63759841",
            "value": "103.225.168.159"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--3fed5002-967c-45d8-ad1c-299996e95ead",
            "hashes": {
                "MD5": "119a0fd733bc1a013b0d4399112b8626",
                "SHA-1": "092e7d2aa0c518a499e8cc5aaf3e827ad3b66512",
                "SHA-256": "87ee131d51929d19afba3bb8d2b2019a7be8782b1db0728f648902e8c8e6b2d0"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b1751a57-67f7-4b9f-85e1-541d551b3282",
            "hashes": {
                "MD5": "062801f6fdbda4dd67b77834c62e82a4",
                "SHA-1": "c02e298f63acb20246683c302f0a71bfd7081f88",
                "SHA-256": "eacc0ee88a0b0db7d89fdf5b76406fe1c4ea409f23a95e7230789b475cf4b0f0"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--5f5b00b9-9b88-4aaa-8d4e-8f3016619529",
            "hashes": {
                "MD5": "97d74671d0489071baa21f38f456eb74",
                "SHA-1": "3bb63aa0b92cc1bde8d027112e5b037cc65ca9cb",
                "SHA-256": "73b43e4aa99f795c29285cab5f7e2e54ce64c22e57b1301cea0125b7797e96c9"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--eefdc47f-c8b7-448c-a1f1-cce1d1c1b26d",
            "hashes": {
                "MD5": "2961c52f04b7fdf7ccf6c01ac259d767",
                "SHA-1": "2c1ff2f2d463fd66bb630e02a4596e42f73f3ea9",
                "SHA-256": "bd89c287b180e04d315b19dc56509e06aca44a7f234c308510376a39f45fb283"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--3e505663-72dc-43a7-8cbb-d1219fbac409",
            "hashes": {
                "MD5": "7dae2d144dae4447a152bef586520ef8"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--e1378d02-245f-46c7-90c2-5b5460afc704",
            "hashes": {
                "MD5": "aac00312a961e81c4af4664c49b4a2b2",
                "SHA-1": "ab4fb9d8f917d2c45f3792c05c29799bf27cdd9f",
                "SHA-256": "a205c5cdc00e83ddb12470793b3eb2310425a06072d67f6f9617650fb55d6b14"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--da4b8792-6fcb-46d6-9fd3-146021916eb5",
            "hashes": {
                "MD5": "9b81b3174c9b699f594d725cf89ffaa4",
                "SHA-1": "c9967af445a3416d0ff3701555e83529ff482ff9",
                "SHA-256": "4d524c271ae0e40e7526ecda9a28bc99e83f5b26d98737f0f8f6b585f05b6d22"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--96ea702d-81af-4a67-bf01-4164abc1633b",
            "hashes": {
                "MD5": "3aabc9767d02c75ef44df6305bc6a41f",
                "SHA-1": "1210766d7137be26f84d1882357559841b698cef",
                "SHA-256": "e0f49bf08b44fb77bc4d305abb698ce8767904a7da7fabb8e3d127eca270b967"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--9fd415ca-036e-408f-81a6-163466d05fc3",
            "hashes": {
                "MD5": "1ba398b0a14328b9604eeb5ebf139b40"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c4981af9-503e-48fe-ae8f-29ce01767e81",
            "hashes": {
                "MD5": "914ac7ecf2557d5836f26a151c1b9b62"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--80dd6b1e-24b6-42b6-b930-b5af32ad9952",
            "hashes": {
                "MD5": "8e067e4cda99299b0bf2481cc1fd8e12",
                "SHA-1": "3a92a121201c209d3e091b795274c22a4ea71963",
                "SHA-256": "e1fe401b73fc449470290c34a26cbd6e6190fd7879fd414bea460fedd2168649"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--9f125d62-0613-4f52-a423-bbef70fe0242",
            "hashes": {
                "MD5": "49419d84076b13e96540fdd911f1c2f0",
                "SHA-1": "35749e82cd605e07b4145b48ef677721a113ae20",
                "SHA-256": "e88fb2337594adbf00f0bc30af3f315056a892f2bad832247b383fe12797fb4b"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--8dd38608-4fef-4e94-a68e-8e2e9673fc79",
            "hashes": {
                "MD5": "9b19753369b6ed1187159b95fc8a81cd",
                "SHA-1": "cafb67eeb2de076e7e6b0143dac87bb11f7134ac",
                "SHA-256": "6f91222109c8556876612c82bfcb50d8a4ee66501e63dc392343e021dd7e563c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--e3e91908-7e41-4e4c-ba6e-b6b26eaa26e8",
            "hashes": {
                "MD5": "1f5fa51ac9517d70f136e187d45f69de",
                "SHA-1": "fddc26459a6c6055a320f282a5ac51d1b74f2fd3",
                "SHA-256": "6f81d88ea10e423034e2c25001640e7b54dc3984c1a8aef1b60c721f331d805f"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--2fba51b6-d3e2-40f2-ac97-172f05c249df",
            "hashes": {
                "MD5": "79b53b4555c1fb39ba3c7b8ce9a4287e",
                "SHA-1": "90764c28ce62b6ea005dd7e616f7ada4fcd170ad",
                "SHA-256": "08df98a999d6f03b46ffe9e030e1cd57469230647222451e438d5918fcda3ddf"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--fed728be-1f15-4485-b6ae-1dc6a9017af0",
            "hashes": {
                "MD5": "8c93e024fc194f520e4e72e761c0942d",
                "SHA-1": "b7dd83d96a480e2f8c653f5339764dd3fe38ce81",
                "SHA-256": "5b5d7d74db59c520b72be1e328563a1ee864e8931a0ae7487d753ee3e166de1c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--66e3df83-414d-40a7-acb2-74ddaa9ddb68",
            "hashes": {
                "MD5": "e9815dfb90776ab449539a2be7c16de5",
                "SHA-1": "178b02f21efd10a7c98f654fc68c88468738042e",
                "SHA-256": "c53bfd9dd25919643baccfcfe1e5f9101830e25b378eeb91f0f3f3573d013a6c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--4aa7892e-ef03-45c8-af2f-96f10d89307b",
            "hashes": {
                "MD5": "dc63d5affde0db95128dac52f9d19578",
                "SHA-1": "539efdad458cf6563d1735632df1fb2c39acfedd",
                "SHA-256": "17b872ba9b1a438e2acf8bdfad21e9c18febcdbd0e14c05bc7482277c98866c6"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--f8e8dc29-118c-4fb4-879d-931d1aed0edd",
            "hashes": {
                "MD5": "0f56b04a4e9a0df94c7f89c1bccf830c",
                "SHA-1": "73895da7b3f1780eeca9750172e1a9545fa63782",
                "SHA-256": "d5d2dfda3e61f26a5c6f173245131dd7c44515ea56a74fc075f614f62593586c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--dd91abf4-0739-4537-9a24-a0730b43da94",
            "hashes": {
                "MD5": "31718d7b9b3261688688bdc4e026db99",
                "SHA-1": "d95168212a8f223f204584cc7d96d26ace4ec80c",
                "SHA-256": "0d10d5ae71292ce0a99603d1810971fd65cb5726199d0d05406917418e261977"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--f78ee590-9d08-44c7-abfd-2e708c2c612b",
            "hashes": {
                "MD5": "eca09fe8dcbc9d1c097277f2b3ef1081",
                "SHA-1": "a4185a50ccac29056e2e56ad85b8d74adc8ec7ac",
                "SHA-256": "83ca0fc98f247b674e7fd535a8483538ed73710d5ce24f5bf1ee483610e418ce"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--43bf5bf3-70bc-403b-8ff4-1310529c516b",
            "hashes": {
                "MD5": "f36404fb24a640b40e2d43c72c18e66b",
                "SHA-1": "ed6b9c876a8a4fe01623972e8733ec2a90177ad1",
                "SHA-256": "6b8e114a7636d87b3de01c4303dfccd54a65f32bae7c964ba496257ec468cfc2"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--acc29e2b-9151-4868-99c3-64910430d1ce",
            "hashes": {
                "MD5": "bcc49643833a4d8545ed4145fb6fdfd2",
                "SHA-1": "a88113c715c8ee254057bc7926d3535ab841e122",
                "SHA-256": "98db913f5793f8c2df6bff01dc9fe7d37279116093e17c2d669ad359466766ad"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--392c3308-bce9-4fc8-825f-2e426cc75388",
            "value": "http://tiny-share.com/direct/7dae2d144dae4447a152bef586520ef8"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--79e09e28-b207-4920-859f-a03af69580f8",
            "value": "tiny-share.com"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--fd6aacfc-7fef-4496-a22a-8da3d88c29fb",
            "value": "31.148.220.53"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--51220ca9-9e7a-4b1d-bdde-7b1cbdec4cce",
            "value": "185.162.131.92"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--3c9b02c9-7991-4641-8824-fa0fb0b79848",
            "value": "185.49.71.101"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--0938d5ad-c6f1-404b-bcf4-f82410a187dd",
            "created_by_ref": "identity--e1770d75-00b9-4e7e-bf11-54ca60ca3da1",
            "created": "2026-10-10T15:03:52.529788Z",
            "modified": "2026-10-10T15:03:52.529788Z",
            "name": "WinRAR Zero-day Abused in Multiple Campaigns",
            "published": "2019-03-26T00:00:00Z",
            "object_refs": [
                "identity--e1770d75-00b9-4e7e-bf11-54ca60ca3da1",
                "file--dccb8c4e-a6a6-4e9d-84a2-2725955576cd",
                "ipv4-addr--47225faa-9119-47d3-a269-7364cd01e9c8",
                "file--a720aa9d-f790-4b64-a56c-4a99906555ea",
                "ipv4-addr--2d461deb-6bd7-45f3-af22-d6a66ffb6f4c",
                "ipv4-addr--368a6f76-38a9-436a-911e-73af63759841",
                "file--3fed5002-967c-45d8-ad1c-299996e95ead",
                "file--b1751a57-67f7-4b9f-85e1-541d551b3282",
                "file--5f5b00b9-9b88-4aaa-8d4e-8f3016619529",
                "file--eefdc47f-c8b7-448c-a1f1-cce1d1c1b26d",
                "file--3e505663-72dc-43a7-8cbb-d1219fbac409",
                "file--e1378d02-245f-46c7-90c2-5b5460afc704",
                "file--da4b8792-6fcb-46d6-9fd3-146021916eb5",
                "file--96ea702d-81af-4a67-bf01-4164abc1633b",
                "file--9fd415ca-036e-408f-81a6-163466d05fc3",
                "file--c4981af9-503e-48fe-ae8f-29ce01767e81",
                "file--80dd6b1e-24b6-42b6-b930-b5af32ad9952",
                "file--9f125d62-0613-4f52-a423-bbef70fe0242",
                "file--8dd38608-4fef-4e94-a68e-8e2e9673fc79",
                "file--e3e91908-7e41-4e4c-ba6e-b6b26eaa26e8",
                "file--2fba51b6-d3e2-40f2-ac97-172f05c249df",
                "file--fed728be-1f15-4485-b6ae-1dc6a9017af0",
                "file--66e3df83-414d-40a7-acb2-74ddaa9ddb68",
                "file--4aa7892e-ef03-45c8-af2f-96f10d89307b",
                "file--f8e8dc29-118c-4fb4-879d-931d1aed0edd",
                "file--dd91abf4-0739-4537-9a24-a0730b43da94",
                "file--f78ee590-9d08-44c7-abfd-2e708c2c612b",
                "file--43bf5bf3-70bc-403b-8ff4-1310529c516b",
                "file--acc29e2b-9151-4868-99c3-64910430d1ce",
                "url--392c3308-bce9-4fc8-825f-2e426cc75388",
                "domain-name--79e09e28-b207-4920-859f-a03af69580f8",
                "ipv4-addr--fd6aacfc-7fef-4496-a22a-8da3d88c29fb",
                "ipv4-addr--51220ca9-9e7a-4b1d-bdde-7b1cbdec4cce",
                "ipv4-addr--3c9b02c9-7991-4641-8824-fa0fb0b79848"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.mandiant.com/resources/blog/winrar-zero-day-abused-multiple-campaigns"
                }
            ]
        }
    ]
}