{
    "type": "bundle",
    "id": "bundle--89184efa-50f6-485f-a29e-f2048e547262",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--a8d58fde-d21c-496d-a3ff-84409afef5b4",
            "created": "2023-03-08T12:51:56.363175Z",
            "modified": "2024-08-19T10:06:03.021098Z",
            "name": "Qianxin",
            "identity_class": "organization"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--72ac50cf-ea68-4b33-83a6-6369f2a21187",
            "value": "http://gtfydu.surfnet.ca/index.php"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--e59e3e5c-71c7-43a2-bd4c-0109cde59b87",
            "value": "gtfydu.surfnet.ca"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7a4f295d-65f7-4f48-b143-4a44d9a3d9f2",
            "hashes": {
                "MD5": "e8f5d4bbf96855f7f4ad0ff4d67efe5e"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--8f3e03dc-1780-4eda-a044-dcac1746361e",
            "hashes": {
                "MD5": "920f408fdc80c5697739cda9cf9a4ca7"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--da99b987-545c-4818-a046-c847be85dc59",
            "hashes": {
                "MD5": "a52e10dd48d64372d94f87d8eb7ed8bf"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--885efeb5-ce40-4767-b2c2-3bfc21e6c5dd",
            "hashes": {
                "MD5": "0f06fe847a43108a211233a9c7aa9780"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--de2112f0-b8dc-4a41-9da9-cb2294cf3740",
            "hashes": {
                "MD5": "6efa53232350a76a52c7050b548ffe83"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7b605b1b-d135-4fef-bd94-b689f8b2160a",
            "hashes": {
                "MD5": "d37569b238ec6c073a06a28bc665072c"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--77e63069-6ff5-44a2-94eb-2dcc56e8fd3e",
            "value": "http://sudifo.ftp.sh/index.php"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--9e9cbec2-05ec-408c-923e-8914b06745f4",
            "value": "auth.worksmobile.r-e.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--c7ab8a56-7314-49a8-af27-59349dc1f632",
            "value": "sudifo.ftp.sh"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--d25ce55a-21a6-42e8-8c78-67d8dde16b07",
            "value": "auth.linkedin.r-e.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--2562e95d-e13a-4a13-aa36-526f61f8bd93",
            "value": "secure.navdomain.n-e.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--6a891c5a-82ff-4081-885a-c0e139f311b3",
            "value": "login.hiwork.o-r.kr"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--d91a1433-4485-4b06-9333-fa6e5d8e5409",
            "value": "104.37.184.39"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--421ba00f-4658-5a1b-b6f1-5b34532eaaed",
            "created": "2026-06-24T21:24:31.134384Z",
            "modified": "2026-06-24T21:24:31.134384Z",
            "name": "APT-Q-2"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--eaeefdcc-c387-44c8-9cb9-b04878e1fbb2",
            "created_by_ref": "identity--a8d58fde-d21c-496d-a3ff-84409afef5b4",
            "created": "2026-06-24T21:24:31.138481Z",
            "modified": "2026-06-24T21:24:31.138481Z",
            "name": "\u7591\u4f3cKimsuky\uff08APT-Q-2\uff09\u9488\u5bf9\u97e9\u56fd\u4f01\u4e1a\u53d1\u8d77\u653b\u51fb",
            "published": "2025-04-11T00:00:00Z",
            "object_refs": [
                "identity--a8d58fde-d21c-496d-a3ff-84409afef5b4",
                "url--72ac50cf-ea68-4b33-83a6-6369f2a21187",
                "domain-name--e59e3e5c-71c7-43a2-bd4c-0109cde59b87",
                "file--7a4f295d-65f7-4f48-b143-4a44d9a3d9f2",
                "file--8f3e03dc-1780-4eda-a044-dcac1746361e",
                "file--da99b987-545c-4818-a046-c847be85dc59",
                "file--885efeb5-ce40-4767-b2c2-3bfc21e6c5dd",
                "file--de2112f0-b8dc-4a41-9da9-cb2294cf3740",
                "file--7b605b1b-d135-4fef-bd94-b689f8b2160a",
                "url--77e63069-6ff5-44a2-94eb-2dcc56e8fd3e",
                "domain-name--9e9cbec2-05ec-408c-923e-8914b06745f4",
                "domain-name--c7ab8a56-7314-49a8-af27-59349dc1f632",
                "domain-name--d25ce55a-21a6-42e8-8c78-67d8dde16b07",
                "domain-name--2562e95d-e13a-4a13-aa36-526f61f8bd93",
                "domain-name--6a891c5a-82ff-4081-885a-c0e139f311b3",
                "ipv4-addr--d91a1433-4485-4b06-9333-fa6e5d8e5409",
                "threat-actor--421ba00f-4658-5a1b-b6f1-5b34532eaaed"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247514665&idx=1&sn=37751d5f4cdb6b4d9786010ddd25e751"
                }
            ]
        }
    ]
}