{
    "type": "bundle",
    "id": "bundle--f7d178d2-382f-4ccc-9bf0-121219aa30bc",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--16fdc541-545e-40c4-9896-0b4354ada896",
            "created": "2023-03-08T12:51:41.953788Z",
            "modified": "2023-03-08T13:24:48.498141Z",
            "name": "ESTSecurity",
            "identity_class": "organization"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--373933ff-7ebf-471e-a622-106ad403f410",
            "value": "http://expressionkey.com/list.php?q=%COMPUTERNAME%.txt"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--d28b80f8-b725-419f-8f4a-935e9c87c32d",
            "value": "http://expressionkey.com/upload.php"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--a0f8647e-1175-45dd-92a9-db5b5f35f816",
            "value": "naver.down-files.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--fbef1c44-3204-44fc-aa4b-27cda363ab18",
            "value": "expressionkey.com"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--e477104c-7116-44b7-9b68-b08428f5d20e",
            "hashes": {
                "MD5": "8e15aadf21efdaa67dd0cae6f0df203d"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b2c3b76b-ee12-42bc-a4a6-fb1d0fa38558",
            "hashes": {
                "MD5": "adf8ad0a860ff89a70ca8b94b20c4629"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--8997dc88-1ac8-4d03-b6aa-27aa98cf5153",
            "hashes": {
                "MD5": "3fcdd49ba79cdfcb062f4784b6224939"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--f3311a70-7fb7-4bed-9195-7779abe0ba92",
            "hashes": {
                "MD5": "b12f0a3138b3c8102450814cab077b6f"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--7342a834-5923-498c-be8f-16d0296b7921",
            "value": "https://naver.down-files.com/v2/read/get.php?wp=ln3&zn=10294765.txt"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--a014dfac-e081-5b16-a0b1-fe21d104be8f",
            "created": "2026-06-25T00:02:03.91902Z",
            "modified": "2026-06-25T00:02:03.91902Z",
            "name": "Konni"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--a7915434-71d7-49bb-adc6-e752f7056a6b",
            "created_by_ref": "identity--16fdc541-545e-40c4-9896-0b4354ada896",
            "created": "2026-06-25T00:02:03.920Z",
            "modified": "2026-06-25T00:02:03.920Z",
            "name": "\ubd81 \ud574\ud0b9 \uc870\uc9c1, \uacf5\uc815\uac70\ub798\uc704\uc6d0\ud68c \uc0ac\uce6d \ud53c\uc2f1 \uacf5\uaca9 \uc9c4\ud589\uc911!",
            "published": "2023-02-02T00:00:00Z",
            "object_refs": [
                "identity--16fdc541-545e-40c4-9896-0b4354ada896",
                "url--373933ff-7ebf-471e-a622-106ad403f410",
                "url--d28b80f8-b725-419f-8f4a-935e9c87c32d",
                "domain-name--a0f8647e-1175-45dd-92a9-db5b5f35f816",
                "domain-name--fbef1c44-3204-44fc-aa4b-27cda363ab18",
                "file--e477104c-7116-44b7-9b68-b08428f5d20e",
                "file--b2c3b76b-ee12-42bc-a4a6-fb1d0fa38558",
                "file--8997dc88-1ac8-4d03-b6aa-27aa98cf5153",
                "file--f3311a70-7fb7-4bed-9195-7779abe0ba92",
                "url--7342a834-5923-498c-be8f-16d0296b7921",
                "threat-actor--a014dfac-e081-5b16-a0b1-fe21d104be8f"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://blog.alyac.co.kr/5065"
                }
            ]
        }
    ]
}