{
    "type": "bundle",
    "id": "bundle--9c7e655c-858b-409b-afb0-08a65a1f9010",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--dd8b2b1b-4cc4-448d-8f25-852fc2b729bc",
            "created": "2023-03-30T13:44:52.115441Z",
            "modified": "2023-03-30T13:44:52.115462Z",
            "name": "NextronSystems",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--5381049d-2f5d-48c5-b29c-b84311edfe43",
            "hashes": {
                "MD5": "6426fe4dc604c7f1784ed1d48ab4ffc8",
                "SHA-1": "3b88cda62cdd918b62ef5aa8c5a73a46f176d18b",
                "SHA-256": "aa4e398b3bd8645016d8090ffc77d15f926a8e69258642191deb4e68688ff973"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d3ce8fb1-0b15-41ca-bace-1cb376a99851",
            "hashes": {
                "MD5": "27b134af30f4a86f177db2f2555fe01d",
                "SHA-1": "188754814b37927badc988b45b7c7f7d6b4c8dd3",
                "SHA-256": "c485674ee63ec8d4e8fde9800788175a8b02d3f9416d0e763360fff7f8eb4e02"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6e0a9a70-2557-4a9c-8343-d8bd6c671091",
            "hashes": {
                "MD5": "bb915073385dd16a846dfa318afa3c19",
                "SHA-1": "6285ffb5f98d35cd98e78d48b63a05af6e4e4dea",
                "SHA-256": "dde03348075512796241389dfea5560c20a3d2a2eac95c894e7bbed5e85a0acc"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--8956602e-e553-47e1-a44d-93d4a536eef9",
            "hashes": {
                "MD5": "74bc2d0b6680faa1a5a76b27e5479cbc",
                "SHA-1": "bf939c9c261d27ee7bb92325cc588624fca75429",
                "SHA-256": "7986bbaee8940da11ce089383521ab420c443ab7b15ed42aed91fd31ce833896"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--0607368e-7024-4f99-8bbd-6398cb170247",
            "hashes": {
                "MD5": "9833a4779b69b38e3e51f04e395674c6",
                "SHA-1": "8433a94aedb6380ac8d4610af643fb0e5220c5cb",
                "SHA-256": "fad482ded2e25ce9e1dd3d3ecc3227af714bdfbbde04347dbc1b21d6a3670405"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7cc2b5f5-fcfd-40da-aa2c-30e900560253",
            "hashes": {
                "MD5": "0eeb1c0133eb4d571178b2d9d14ce3e9",
                "SHA-1": "bfecb8ce89a312d2ef4afc64a63847ae11c6f69e",
                "SHA-256": "59e1edf4d82fae4978e97512b0331b7eb21dd4b838b850ba46794d9c7a2c0983"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--4d3e9e0a-bd8e-404d-8670-3a4af7e36e7d",
            "hashes": {
                "MD5": "f3d4144860ca10ba60f7ef4d176cc736",
                "SHA-1": "bea77d1e59cf18dce22ad9a2fad52948fd7a9efa",
                "SHA-256": "aa124a4b4df12b34e74ee7f6c683b2ebec4ce9a8edcf9be345823b4fdcf5d868"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--26875ac6-99ac-4bb9-be9b-2487fee000c6",
            "hashes": {
                "MD5": "ca8c0385ce2b8bdd19423c8b98a5924b",
                "SHA-1": "f3487a1324f4c11b35504751a5527bc60eb95382",
                "SHA-256": "b86c695822013483fa4e2dfdf712c5ee777d7b99cbad8c2fa2274b133481eadb"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--5e7bdddb-192e-4552-94fc-f64f40bdbc31",
            "hashes": {
                "MD5": "a267243cc99cd38810f5043158fc8208",
                "SHA-1": "2abc98e004dc5ebb426a3611d7b4a1c2d1c939bd",
                "SHA-256": "51079c7e549cbad25429ff98b6d6ca02dc9234e466dd9b75a5e05b9d7b95af72"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--dfde298e-9cf7-4454-8e1a-8eb3b2e4c759",
            "hashes": {
                "MD5": "f6d63e45fe3b18454462711a97053b5a",
                "SHA-1": "e8d14c5b3bb4290fb028504efac8cfee0bfd15b5",
                "SHA-256": "ac99602999bf9823f221372378f95baa4fc68929bac3a10e8d9a107ec8074eca"
            }
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--aad2d102-73a3-42ae-92a4-e1752dddde69",
            "created_by_ref": "identity--dd8b2b1b-4cc4-448d-8f25-852fc2b729bc",
            "created": "2026-10-09T11:18:37.403917Z",
            "modified": "2026-10-09T11:18:37.403917Z",
            "name": "YARA rule set related to the 3CX incident",
            "published": "2023-03-30T00:00:00Z",
            "object_refs": [
                "identity--dd8b2b1b-4cc4-448d-8f25-852fc2b729bc",
                "file--5381049d-2f5d-48c5-b29c-b84311edfe43",
                "file--d3ce8fb1-0b15-41ca-bace-1cb376a99851",
                "file--6e0a9a70-2557-4a9c-8343-d8bd6c671091",
                "file--8956602e-e553-47e1-a44d-93d4a536eef9",
                "file--0607368e-7024-4f99-8bbd-6398cb170247",
                "file--7cc2b5f5-fcfd-40da-aa2c-30e900560253",
                "file--4d3e9e0a-bd8e-404d-8670-3a4af7e36e7d",
                "file--26875ac6-99ac-4bb9-be9b-2487fee000c6",
                "file--5e7bdddb-192e-4552-94fc-f64f40bdbc31",
                "file--dfde298e-9cf7-4454-8e1a-8eb3b2e4c759"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://github.com/Neo23x0/signature-base/blob/master/yara/gen_mal_3cx_compromise_mar23.yar"
                }
            ]
        }
    ]
}