{
    "type": "bundle",
    "id": "bundle--56d6f468-97db-44a8-b374-482289385810",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--c48c8182-30a2-4ef4-b0ce-54542b87ae11",
            "created": "2023-03-08T12:51:51.955089Z",
            "modified": "2024-11-20T11:35:16.572356Z",
            "name": "NTTSecurity",
            "identity_class": "organization"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--c38ff752-915f-47fd-958c-e828777ba1e1",
            "value": "159.100.13.216"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6de2fa2f-d8ee-4959-8d11-a40ebdf8adc1",
            "hashes": {
                "SHA-256": "01ccbc9ac090be73f12cad8ff83b599b1c689e7ccf9de8102d50512bb767bdec"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--75c4ee73-580a-430a-862d-f2e7041b2911",
            "hashes": {
                "SHA-256": "7d0d673fad1f16f153f586035b24c9eb8f6eb0990a6f05cb84525bc9977c99c0"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--df2701cf-abf7-4baa-976f-c411c1c0aacc",
            "hashes": {
                "SHA-256": "b3f4db35c07f8f8ce903c7a1133f1959b80bb198b994942c67776474170999a0"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--1e2cd514-d7a4-4b02-a846-739c349eb645",
            "hashes": {
                "SHA-256": "4cf87cc8ec18cc288bdebb464ca21e4a03d5a35e5f0d294f33a6791e99640a88"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--bbd7c5f6-fda6-4bb0-be74-fa58e77dc3be",
            "hashes": {
                "SHA-256": "1076743a8e2f650b80c8802f0b196b735ab030ed29471d003f9942ccee494596"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--0010b8da-18b9-46d4-8efe-0b36364be1fd",
            "hashes": {
                "SHA-256": "f4275b0d3c4b6f3a165984b862f4890df14cc346013a22412f7288c9fdc65690"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6572210f-bad5-4557-b369-0ad9b80ae813",
            "hashes": {
                "SHA-256": "cd87f640cb5e020c51d2bf233f85a9768880230f7e848aeb39f11829cbfb832c"
            }
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--811561dc-7eee-4b4a-b219-11983a745427",
            "value": "144.76.109.61"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--87181cd3-9d57-57c9-9e60-46a06a8d12ab",
            "created": "2026-06-24T17:11:50.471781Z",
            "modified": "2026-06-24T17:11:50.471781Z",
            "name": "DarkPlum"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--4eadbc9a-5f13-46fb-9cd1-8cd45f486ea2",
            "created_by_ref": "identity--c48c8182-30a2-4ef4-b0ce-54542b87ae11",
            "created": "2026-06-24T17:11:50.474749Z",
            "modified": "2026-06-24T17:11:50.474749Z",
            "name": "\u6a19\u7684\u578b\u653b\u6483\u30b0\u30eb\u30fc\u30d7DarkPlum\u304c\u4f7f\u7528\u3059\u308bAsyncRAT\u306e\u4e9c\u7a2e\u306b\u3064\u3044\u3066",
            "published": "2024-11-19T00:00:00Z",
            "object_refs": [
                "identity--c48c8182-30a2-4ef4-b0ce-54542b87ae11",
                "ipv4-addr--c38ff752-915f-47fd-958c-e828777ba1e1",
                "file--6de2fa2f-d8ee-4959-8d11-a40ebdf8adc1",
                "file--75c4ee73-580a-430a-862d-f2e7041b2911",
                "file--df2701cf-abf7-4baa-976f-c411c1c0aacc",
                "file--1e2cd514-d7a4-4b02-a846-739c349eb645",
                "file--bbd7c5f6-fda6-4bb0-be74-fa58e77dc3be",
                "file--0010b8da-18b9-46d4-8efe-0b36364be1fd",
                "file--6572210f-bad5-4557-b369-0ad9b80ae813",
                "ipv4-addr--811561dc-7eee-4b4a-b219-11983a745427",
                "threat-actor--87181cd3-9d57-57c9-9e60-46a06a8d12ab"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://jp.security.ntt/tech_blog/darkplum-asyncrat"
                }
            ]
        }
    ]
}