{
    "type": "bundle",
    "id": "bundle--36d74f99-54b5-466d-b634-7800ce30dad2",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--16fdc541-545e-40c4-9896-0b4354ada896",
            "created": "2023-03-08T12:51:41.953788Z",
            "modified": "2023-03-08T13:24:48.498141Z",
            "name": "ESTSecurity",
            "identity_class": "organization"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--f43aac0d-60ba-46c9-b38b-f17477476f76",
            "value": "52.177.14.24"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--0b0de706-d4b0-4e98-a7f8-85e8644b1e8d",
            "value": "noticeofpleadings.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--535c287a-d233-4351-af8a-e324f8bf48c4",
            "value": "bigwnet.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--f9e5b1a2-16a2-49f0-9a2d-70345b64a1dd",
            "value": "seoulhobi.biz"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--fd2b96ce-3e15-481c-b4a3-7098abbabf58",
            "value": "helpnaver.com"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--881f0bf9-8c6b-406e-bc5b-1579fb49082d",
            "hashes": {
                "MD5": "6bda04173d5f8491348e33cabc98f1b8"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6b953511-3a15-4094-8848-ad25ec3df2b7",
            "hashes": {
                "MD5": "0ce1648ff7553189e5b5db2252e27fd5"
            }
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--48a29d92-2cae-4a25-a05b-84b199579a3d",
            "value": "p1otnikovan@mail.ru"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--ecfd581f-ff26-436e-8d54-87a89d628f0b",
            "value": "evgeny_varganov@mail.ru"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--c7cc19aa-1fb1-4ea3-bbb8-c3dfb29f6181",
            "value": "motegi21@yahoo.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--97acbc78-f3d2-4f72-9914-4b76dbf19d48",
            "value": "psh1968216@daum.net"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--3158bb8e-7b7b-4fcd-9001-52c27f5ccaa2",
            "value": "evgeny_mono@protonmail.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--0bcd5453-7adf-404c-aaf8-0c8877dcdc43",
            "value": "login.daum-protect.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--c0f932b5-58fd-494a-8d66-7b780e46c1d8",
            "value": "bignaver.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--f2fc4c39-c69e-4591-a54a-66ae28cc047d",
            "value": "un.midsecurity.org"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--a2332c4e-f450-4e20-90e3-8578557c28c1",
            "value": "cloudsecurityservice.net"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--7b44b75f-8528-47f5-ac20-334b7c0cc57b",
            "value": "midsecurity.org"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--6d384cff-c499-4c03-ac70-69511bf745fb",
            "value": "dhfj.naverdns.co"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--0c572a1e-db3d-4b99-bdc0-fbac8fcee56f",
            "value": "daum.midsecurity.org"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--bbb28c41-ef9e-4268-83f9-b7acce9b2e8e",
            "value": "servicenidnaver.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--c6ae30fa-6a77-415b-bc36-21b813ac7be6",
            "value": "naver.midsecurity.org"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--e5e91c4b-6a8c-42fc-886b-341785400054",
            "value": "cloudnaver.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--699258d1-7706-4292-8180-ada12a6e88fa",
            "value": "resetprofile.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--23a5c534-ec6e-4c39-90ec-24f8ce504757",
            "value": "resetpolicy.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--5fd0a46d-68a6-4864-ba94-2dbfb6640074",
            "value": "netsecurityservice.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--3ec74ad6-c220-4460-9f79-7e8092dc083f",
            "value": "nid.daum-protect.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--efa32059-3edc-4bb7-ad19-b0b058bde88e",
            "value": "mail.resetpolicy.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--60ef49d3-609e-4b61-9105-beeb3d2eac3c",
            "value": "mail.servicenidnaver.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--7bb1dc46-8df7-42d8-b841-708d44f979b4",
            "value": "daum.resetprofile.com"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--7b3ec22b-c3c3-4441-8dea-2547d7e76033",
            "value": "211.104.160.84"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--ad836e7c-d280-47ac-bb69-48007ee22774",
            "value": "211.104.160.88"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--68147dc1-ede3-4cb6-82d6-7ce7c6bda93a",
            "value": "211.104.160.79"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--74b3e84f-4778-45b1-8ff9-2ba08d1251e7",
            "value": "27.255.77.110"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--8eea8a4a-8068-4871-ae6d-cde0e8a1e209",
            "hashes": {
                "MD5": "2487a29d1193b5f48d29df02804d8172"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--9f64fa16-8731-422d-837f-bd0af7f50280",
            "hashes": {
                "MD5": "9e9745415793488ecf0774c7477bf2ae"
            }
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--c59ee503-3580-4fa7-8531-7ddbe5c43477",
            "value": "2.56.151.8"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--37a3a5b3-70ba-427c-a271-ca7f38ede1ca",
            "value": "pigcoin2020@hotmail.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--9fa71fe9-d5e8-4a5a-8400-4a9508a5428e",
            "value": "tiger199392@daum.net"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--06fa233d-448d-4355-8e0f-739146b89997",
            "hashes": {
                "MD5": "29506d03bf3f06df62089bed5af58906"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b2d7886c-f5b8-4369-9f6a-c8afe42f3c03",
            "hashes": {
                "MD5": "9c025c3ff6ec04b7e67c9553ef4e2415"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--e4aeff0d-f4b9-4e34-bf40-37f196fd2e61",
            "hashes": {
                "MD5": "c1063cfa402e64882d41f88ada87c8d1"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--33c07c84-00a4-4cb8-b79c-66f0942a87a5",
            "hashes": {
                "MD5": "8384803283c01a529eeaec8128e6a20a"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--458dabb6-9b92-44ff-8d6b-78c476af3aca",
            "hashes": {
                "MD5": "ff9f17fb1dd02186ba461586a1734212"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7f17cd8b-b2bd-4bdf-b8ac-a07c3d347de3",
            "hashes": {
                "MD5": "6c290d6ddbe317844a4dccdc2259c6c1"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b64cc940-a286-4e51-901b-f22d66da9c9c",
            "hashes": {
                "MD5": "d503c3d182a632ac2c009c30e70951f2"
            }
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--ab002b63-f510-4277-9692-d3d6647f67a2",
            "value": "bitcoin024@hanmail.net"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--8ae4ff95-8448-4151-a2c0-69388cc6e848",
            "value": "bitcoin025@hanmail.net"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--700ea3ee-9a1a-4ed6-8545-29715fc40298",
            "value": "bitcoin014@hanmail.net"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--d7891002-a197-4c8a-be72-dd43c7b5f005",
            "value": "bitcoin018@hanmail.net"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--e934cb24-2ecc-4ffd-8348-40ba316136c9",
            "value": "rnaii.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--a1489125-d04a-49bc-b42b-6b2f3e9ac2bb",
            "value": "app-wallet.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--e42f7842-348c-4120-a752-2233f96fdb6e",
            "value": "manage.app-wallet.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--032fa7b4-5b96-4968-84bc-ab5786b77d75",
            "value": "rneail.com"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--b95543ef-9218-4278-9418-2eef5420c833",
            "value": "37.72.175.223"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--9d49d6d6-2cf5-4afd-a753-43c2dfc98697",
            "value": "27.255.79.205"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--a5f9f11f-0148-454a-91e1-991460668ddb",
            "value": "193.148.16.45"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--7c6b95d8-7be2-4520-9f09-1b338d337e09",
            "value": "91.235.116.144"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1",
            "created": "2026-06-24T21:22:39.736551Z",
            "modified": "2026-06-24T21:22:39.736551Z",
            "name": "Kimsuky"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--a014dfac-e081-5b16-a0b1-fe21d104be8f",
            "created": "2026-06-24T21:22:39.739151Z",
            "modified": "2026-06-24T21:22:39.739151Z",
            "name": "Konni"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--757b9a28-b28c-5632-bc07-d04403cb3f6e",
            "created": "2026-06-24T21:22:39.741622Z",
            "modified": "2026-06-24T21:22:39.741622Z",
            "name": "Thallium"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--09b5be3f-f9c9-40fb-95d4-3488b27bd379",
            "created_by_ref": "identity--16fdc541-545e-40c4-9896-0b4354ada896",
            "created": "2026-06-24T21:22:39.742742Z",
            "modified": "2026-06-24T21:22:39.742742Z",
            "name": "\ud0c8\ub968(\uae40\uc218\ud0a4)\uacfc \ucf54\ub2c8 APT \uadf8\ub8f9\uc758 \uc5f0\uad00\uad00\uacc4 \ubd84\uc11d Part3",
            "published": "2020-11-22T00:00:00Z",
            "object_refs": [
                "identity--16fdc541-545e-40c4-9896-0b4354ada896",
                "ipv4-addr--f43aac0d-60ba-46c9-b38b-f17477476f76",
                "domain-name--0b0de706-d4b0-4e98-a7f8-85e8644b1e8d",
                "domain-name--535c287a-d233-4351-af8a-e324f8bf48c4",
                "domain-name--f9e5b1a2-16a2-49f0-9a2d-70345b64a1dd",
                "domain-name--fd2b96ce-3e15-481c-b4a3-7098abbabf58",
                "file--881f0bf9-8c6b-406e-bc5b-1579fb49082d",
                "file--6b953511-3a15-4094-8848-ad25ec3df2b7",
                "email-addr--48a29d92-2cae-4a25-a05b-84b199579a3d",
                "email-addr--ecfd581f-ff26-436e-8d54-87a89d628f0b",
                "email-addr--c7cc19aa-1fb1-4ea3-bbb8-c3dfb29f6181",
                "email-addr--97acbc78-f3d2-4f72-9914-4b76dbf19d48",
                "email-addr--3158bb8e-7b7b-4fcd-9001-52c27f5ccaa2",
                "domain-name--0bcd5453-7adf-404c-aaf8-0c8877dcdc43",
                "domain-name--c0f932b5-58fd-494a-8d66-7b780e46c1d8",
                "domain-name--f2fc4c39-c69e-4591-a54a-66ae28cc047d",
                "domain-name--a2332c4e-f450-4e20-90e3-8578557c28c1",
                "domain-name--7b44b75f-8528-47f5-ac20-334b7c0cc57b",
                "domain-name--6d384cff-c499-4c03-ac70-69511bf745fb",
                "domain-name--0c572a1e-db3d-4b99-bdc0-fbac8fcee56f",
                "domain-name--bbb28c41-ef9e-4268-83f9-b7acce9b2e8e",
                "domain-name--c6ae30fa-6a77-415b-bc36-21b813ac7be6",
                "domain-name--e5e91c4b-6a8c-42fc-886b-341785400054",
                "domain-name--699258d1-7706-4292-8180-ada12a6e88fa",
                "domain-name--23a5c534-ec6e-4c39-90ec-24f8ce504757",
                "domain-name--5fd0a46d-68a6-4864-ba94-2dbfb6640074",
                "domain-name--3ec74ad6-c220-4460-9f79-7e8092dc083f",
                "domain-name--efa32059-3edc-4bb7-ad19-b0b058bde88e",
                "domain-name--60ef49d3-609e-4b61-9105-beeb3d2eac3c",
                "domain-name--7bb1dc46-8df7-42d8-b841-708d44f979b4",
                "ipv4-addr--7b3ec22b-c3c3-4441-8dea-2547d7e76033",
                "ipv4-addr--ad836e7c-d280-47ac-bb69-48007ee22774",
                "ipv4-addr--68147dc1-ede3-4cb6-82d6-7ce7c6bda93a",
                "ipv4-addr--74b3e84f-4778-45b1-8ff9-2ba08d1251e7",
                "file--8eea8a4a-8068-4871-ae6d-cde0e8a1e209",
                "file--9f64fa16-8731-422d-837f-bd0af7f50280",
                "ipv4-addr--c59ee503-3580-4fa7-8531-7ddbe5c43477",
                "email-addr--37a3a5b3-70ba-427c-a271-ca7f38ede1ca",
                "email-addr--9fa71fe9-d5e8-4a5a-8400-4a9508a5428e",
                "file--06fa233d-448d-4355-8e0f-739146b89997",
                "file--b2d7886c-f5b8-4369-9f6a-c8afe42f3c03",
                "file--e4aeff0d-f4b9-4e34-bf40-37f196fd2e61",
                "file--33c07c84-00a4-4cb8-b79c-66f0942a87a5",
                "file--458dabb6-9b92-44ff-8d6b-78c476af3aca",
                "file--7f17cd8b-b2bd-4bdf-b8ac-a07c3d347de3",
                "file--b64cc940-a286-4e51-901b-f22d66da9c9c",
                "email-addr--ab002b63-f510-4277-9692-d3d6647f67a2",
                "email-addr--8ae4ff95-8448-4151-a2c0-69388cc6e848",
                "email-addr--700ea3ee-9a1a-4ed6-8545-29715fc40298",
                "email-addr--d7891002-a197-4c8a-be72-dd43c7b5f005",
                "domain-name--e934cb24-2ecc-4ffd-8348-40ba316136c9",
                "domain-name--a1489125-d04a-49bc-b42b-6b2f3e9ac2bb",
                "domain-name--e42f7842-348c-4120-a752-2233f96fdb6e",
                "domain-name--032fa7b4-5b96-4968-84bc-ab5786b77d75",
                "ipv4-addr--b95543ef-9218-4278-9418-2eef5420c833",
                "ipv4-addr--9d49d6d6-2cf5-4afd-a753-43c2dfc98697",
                "ipv4-addr--a5f9f11f-0148-454a-91e1-991460668ddb",
                "ipv4-addr--7c6b95d8-7be2-4520-9f09-1b338d337e09",
                "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1",
                "threat-actor--a014dfac-e081-5b16-a0b1-fe21d104be8f",
                "threat-actor--757b9a28-b28c-5632-bc07-d04403cb3f6e"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://blog.alyac.co.kr/3390"
                }
            ]
        }
    ]
}