{
    "type": "bundle",
    "id": "bundle--6e4d7048-464c-4ce4-a0a6-3d3e333a1459",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--c7629b37-b59a-4b84-ad04-62fcef23483e",
            "created": "2024-02-21T11:30:43.260582Z",
            "modified": "2024-10-22T11:02:56.205178Z",
            "name": "Logpresso",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--72d2c7b3-4ea4-4261-bafb-c437688bdd79",
            "hashes": {
                "MD5": "7d994b591c2d4fafeb3e71278229566e"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--40048fac-a0d2-47c3-a7b3-f5b9c842e1db",
            "hashes": {
                "MD5": "5f5f868d339aeb58c613fe7eb55e5432"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--1e8c80f5-ddd3-4ee1-b699-2498f5e601a4",
            "hashes": {
                "MD5": "903cec93146327414cbc49068c524292"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--50607c40-c47e-4e26-b117-e71642675277",
            "hashes": {
                "MD5": "d02be241dda3d4027f6fbd84ac015ca8"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--5e9cd216-b56c-4bf8-bb1b-4866ed4f4da0",
            "value": "mail.naverwork.r-e.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--500a37bf-c667-459d-950d-0ab72d04ca26",
            "value": "attach.skyline.r-e.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--ac5a7ea9-0814-4a30-9961-1aeebb3b5831",
            "value": "gwa.wooritg.o-r.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--970d59c7-8077-47e2-aa20-82232ed2e268",
            "value": "rwbcode.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--2b7c9990-4bcd-45de-b0ba-f22e66295303",
            "value": "update.alzip.r-e.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--30f4ae7d-6457-4ef3-aabc-aed0bad52086",
            "value": "image.secuwizvpn.r-e.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--cbfbb052-217e-4ba3-a092-aec756b2e2d9",
            "value": "load.samework.o-r.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--9708ba59-c63b-4e57-9cc1-769e8885ae75",
            "value": "attach.skycloud.o-r.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--8170fb99-41cd-4d4f-a939-2299ea2c4156",
            "value": "mail.naverwork.o-r.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--eaa34bee-510b-4d03-a1c4-b312ffbebf6c",
            "value": "load.rwbcode.com"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--420757e4-d50a-4787-8f98-d84f2b260af8",
            "value": "162.220.11.202"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--88084146-4248-49e3-8a0f-459c239e96a8",
            "value": "http://load.rwbcode.com/index.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--0479912f-b682-4347-a96c-375fb319e4ab",
            "value": "http://load.samework.o-r.kr/index.php"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1",
            "created": "2026-06-24T18:44:46.81005Z",
            "modified": "2026-06-24T18:44:46.81005Z",
            "name": "Kimsuky"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--9abb7b52-3b0c-417d-90e6-64599009b94f",
            "created_by_ref": "identity--c7629b37-b59a-4b84-ad04-62fcef23483e",
            "created": "2026-06-24T18:44:46.811084Z",
            "modified": "2026-06-24T18:44:46.811084Z",
            "name": "\uac74\uac15\uac80\uc9c4 \uc548\ub0b4 \ubb38\uc11c\ub85c \uc704\uc7a5\ud55c \uc545\uc131\ucf54\ub4dc",
            "published": "2025-11-06T00:00:00Z",
            "object_refs": [
                "identity--c7629b37-b59a-4b84-ad04-62fcef23483e",
                "file--72d2c7b3-4ea4-4261-bafb-c437688bdd79",
                "file--40048fac-a0d2-47c3-a7b3-f5b9c842e1db",
                "file--1e8c80f5-ddd3-4ee1-b699-2498f5e601a4",
                "file--50607c40-c47e-4e26-b117-e71642675277",
                "domain-name--5e9cd216-b56c-4bf8-bb1b-4866ed4f4da0",
                "domain-name--500a37bf-c667-459d-950d-0ab72d04ca26",
                "domain-name--ac5a7ea9-0814-4a30-9961-1aeebb3b5831",
                "domain-name--970d59c7-8077-47e2-aa20-82232ed2e268",
                "domain-name--2b7c9990-4bcd-45de-b0ba-f22e66295303",
                "domain-name--30f4ae7d-6457-4ef3-aabc-aed0bad52086",
                "domain-name--cbfbb052-217e-4ba3-a092-aec756b2e2d9",
                "domain-name--9708ba59-c63b-4e57-9cc1-769e8885ae75",
                "domain-name--8170fb99-41cd-4d4f-a939-2299ea2c4156",
                "domain-name--eaa34bee-510b-4d03-a1c4-b312ffbebf6c",
                "ipv4-addr--420757e4-d50a-4787-8f98-d84f2b260af8",
                "url--88084146-4248-49e3-8a0f-459c239e96a8",
                "url--0479912f-b682-4347-a96c-375fb319e4ab",
                "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://logpresso.com/en/blog/2025-11-06-healthcheckup-malware"
                }
            ]
        }
    ]
}