{
    "type": "bundle",
    "id": "bundle--4c2babc4-839a-4a75-808d-d1afe98612de",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--eafdd258-8d1a-438d-bbef-6ca0d4a35852",
            "created": "2023-03-08T12:51:41.544512Z",
            "modified": "2025-02-04T10:54:04.972936Z",
            "name": "Ahnlab",
            "identity_class": "organization"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--259638d4-8120-4fbd-975e-581d3719b385",
            "value": "http://grace2019.teamernst.net/wp-content/uploads/2011/08/student_2141-800x200.jpg"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--9601249a-4647-4a6b-ba68-2db27dda461e",
            "value": "http://cristiantirira.com/wp-content/uploads/2018/11/03-499x300.png"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--f9d8c3c9-f8e2-4438-91af-4559aca18ca9",
            "value": "https://hesenorm.info/download/pxt2"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--156546c1-8827-4e91-8bf8-e707648ed13d",
            "value": "hansompay2008@yandex.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--51ac4d1a-7302-4e8a-b3ca-e435585762b2",
            "value": "hansom2008@protonmail.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--2c8c3f94-dcca-4e32-9ae7-f4728a2d9a30",
            "value": "ntsgo.name"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--e28f220f-2941-43f2-ac70-c37dcf7950e8",
            "value": "ntsgo-corp.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--456138bc-8ef2-4f00-af5a-cf0a6c6a3cbb",
            "value": "koramate.fun"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--d9e7e23c-06cd-49c6-9d18-358c3e5e1bf8",
            "value": "casinolegit.fun"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--fcf73438-ed59-445b-9cd0-a3cece8a6487",
            "value": "http://desk-azureft.info/wp-include/wpmain.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--e18056f5-a395-4cc5-a31e-91d5037e5f9a",
            "value": "http://casinosec.info/ms/beeLogo.webp"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--06d8b6cd-7aee-4af4-a347-b30cf14c849b",
            "value": "http://casinolegit.info/ms/beeLogo.webp"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d51bca13-1a52-41ae-9b4d-719fac79122e",
            "hashes": {
                "MD5": "08e19a0d516d14e564359ee111ed2586"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--485b5737-9099-4de5-bd69-285f5549e4b9",
            "hashes": {
                "MD5": "07766e6e9d9f86775ad564a65af292c1"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--5c6060a4-b711-49a3-92dd-5a3ae1fa3b5e",
            "hashes": {
                "MD5": "01b58f2ff2c14feed46a0768ea46686d"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--a5f29191-7256-4e64-8de8-99c3c6229f9d",
            "hashes": {
                "MD5": "12391f66ee33d379108fd649a999e1a0"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ba6077b9-f7a1-4467-9cdb-ab3e262226fc",
            "hashes": {
                "MD5": "0d2e61c8a5e6280e065b61e75b848c68"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--6d3e8c15-f782-4c51-ada2-7a5f5fb206b2",
            "value": "https://hesenorm.info/download/xtps"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--a53d75b8-f7de-4555-b474-d760ebe27709",
            "value": "https://hesenorm.info/download/lcpy"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--c3004426-0644-4a65-9eb5-1c92abd2c648",
            "value": "hesenorm.info"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--3e48f327-3b06-4df6-904e-15ef991b5b55",
            "value": "www.fabioluciani.com"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--be949199-89ca-5d89-9fb0-78bb61276214",
            "created": "2026-08-06T16:44:37.607248Z",
            "modified": "2026-08-06T16:44:37.607248Z",
            "name": "Larva-26005"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--86b0c94d-7535-4524-8eb1-89f015e2c95a",
            "created_by_ref": "identity--eafdd258-8d1a-438d-bbef-6ca0d4a35852",
            "created": "2026-08-06T16:44:37.608003Z",
            "modified": "2026-08-06T16:44:37.608003Z",
            "name": "Xctdoor\uc640 \uacfc\uac70 CRAT \uacf5\uaca9 \uc0ac\ub840\uc758 \uc5f0\uad00\uc131 \ubd84\uc11d (Larva-26005)",
            "published": "2026-08-06T00:00:00Z",
            "object_refs": [
                "identity--eafdd258-8d1a-438d-bbef-6ca0d4a35852",
                "url--259638d4-8120-4fbd-975e-581d3719b385",
                "url--9601249a-4647-4a6b-ba68-2db27dda461e",
                "url--f9d8c3c9-f8e2-4438-91af-4559aca18ca9",
                "email-addr--156546c1-8827-4e91-8bf8-e707648ed13d",
                "email-addr--51ac4d1a-7302-4e8a-b3ca-e435585762b2",
                "domain-name--2c8c3f94-dcca-4e32-9ae7-f4728a2d9a30",
                "domain-name--e28f220f-2941-43f2-ac70-c37dcf7950e8",
                "domain-name--456138bc-8ef2-4f00-af5a-cf0a6c6a3cbb",
                "domain-name--d9e7e23c-06cd-49c6-9d18-358c3e5e1bf8",
                "url--fcf73438-ed59-445b-9cd0-a3cece8a6487",
                "url--e18056f5-a395-4cc5-a31e-91d5037e5f9a",
                "url--06d8b6cd-7aee-4af4-a347-b30cf14c849b",
                "file--d51bca13-1a52-41ae-9b4d-719fac79122e",
                "file--485b5737-9099-4de5-bd69-285f5549e4b9",
                "file--5c6060a4-b711-49a3-92dd-5a3ae1fa3b5e",
                "file--a5f29191-7256-4e64-8de8-99c3c6229f9d",
                "file--ba6077b9-f7a1-4467-9cdb-ab3e262226fc",
                "url--6d3e8c15-f782-4c51-ada2-7a5f5fb206b2",
                "url--a53d75b8-f7de-4555-b474-d760ebe27709",
                "domain-name--c3004426-0644-4a65-9eb5-1c92abd2c648",
                "domain-name--3e48f327-3b06-4df6-904e-15ef991b5b55",
                "threat-actor--be949199-89ca-5d89-9fb0-78bb61276214"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://asec.ahnlab.com/ko/94846"
                }
            ]
        }
    ]
}