{
    "type": "bundle",
    "id": "bundle--a5272dcb-a6b2-4312-8824-abd3f2c86ddf",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--c7629b37-b59a-4b84-ad04-62fcef23483e",
            "created": "2024-02-21T11:30:43.260582Z",
            "modified": "2024-10-22T11:02:56.205178Z",
            "name": "Logpresso",
            "identity_class": "organization"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--d6bb3c24-e51d-40d4-8f2f-abc7019a68c5",
            "value": "103.67.196.25"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ed537354-efa4-40be-8c2f-e72164e264f4",
            "hashes": {
                "MD5": "bb5040d54135b0999cc491b41a0a45e2",
                "SHA-1": "bff6abac56e84b7487846f0ac04ecc1773cb5e02",
                "SHA-256": "a2269df8913ae0ebc6396cccb6a83a0bff5fcfae02bc938ef86f148f3809c50e"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--67803a9a-5356-4c3e-a4e6-bd10ea7690d5",
            "hashes": {
                "MD5": "cbb059bd691d846e8279d617134d3129",
                "SHA-1": "b44c0508a20a609b296ea7f169ba30d23274e7bd",
                "SHA-256": "845d9049cb45ae1daf089d22fb78819ca2b8686b194f0067ae6058bd6bae3c2a"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--e930868d-255b-488b-954b-6f34665a6e55",
            "hashes": {
                "MD5": "0dd1cf2d9a72fdbef19e77af59ba9d1f",
                "SHA-1": "d7ed1afdf19ffbf3e667d3fcc0ddeb6342a4d5ab",
                "SHA-256": "aedd975e59ffe867bec9be9a33d438b8d34c96e7f42453f7661e2127890aa0e2"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--50c9d3e2-68ab-40fb-9342-07820c6c8671",
            "hashes": {
                "MD5": "b3c90f52e4b86a94ec637fee4354bb84",
                "SHA-1": "95cc996705f5fb8d7947615269101fb4621306d9",
                "SHA-256": "169586b6eb36b17520ef5afd206da86c4de89eb01d6294ba9631414271ba752f"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7f101469-684a-4e89-a6fd-ee4a218615a8",
            "hashes": {
                "MD5": "8301fc2c740f6309864e68b6e429d0f0",
                "SHA-1": "d80650dc75d54100bd9da8f1bb6fb33bd181c05b",
                "SHA-256": "21aeb6f9e509c26d909f10182589f8f20372181fddcf3ae7a251e4981ed13d43"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--60a95ee3-5150-49ea-a592-a06b40836ed5",
            "hashes": {
                "MD5": "471faa43f4811a0250648d586cb3eebf",
                "SHA-1": "1527e74b89c59e6f19f2f082a49098fdee94f329",
                "SHA-256": "dbabe32a48e1aaeaaa761ec09c8bc59e82decf13361e392a8d9b7c4f82d58cd9"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b96b8a5a-2327-4ad0-bbdb-635a0eb8e46c",
            "hashes": {
                "MD5": "a3363e0c22c0356fdbcdc37f502bbcde",
                "SHA-1": "23f9756d593354111beba4b2ff2ebf5bd8154bee",
                "SHA-256": "02d9468af1e2a4be19f3a31549b808e6fd327922eb68d96706122ef8653c9d7a"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--9dd16732-0bcc-4bb9-ad21-f7fedf809398",
            "hashes": {
                "MD5": "3fdce08723365d5c06e1183585164118",
                "SHA-1": "589a5923dfb3ed85301f3ce4a01b4f3351d647dd",
                "SHA-256": "a96a077d02d5fe3524e3416adc88f09f3817099b617e552338f7c736758f242f"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--a8ee193b-8673-43b3-9db8-0d77c614182e",
            "hashes": {
                "MD5": "6869766741b40825e31fd8bbff688bd3",
                "SHA-1": "2ef17de34b258b13fdbf0974c4b73824323b35cf",
                "SHA-256": "7db1dfb77da7f4790df11e6b753e0a3d71749bec57faeaa68043705a584cc5ec"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b9460e5c-31c9-4877-b182-a3c1c7133198",
            "hashes": {
                "MD5": "552ca91696fedd387e1ea47f50f18344",
                "SHA-1": "ae92d30836256fe3e3aff4102c726dde5d4a9f36",
                "SHA-256": "d0e84b6bf4d810da9e177a54c397033b310864ede10eb9f9b7e6b2672daf23f5"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--f6f021b2-fc41-4d20-ab84-60d21e639466",
            "hashes": {
                "MD5": "2689f58b803364bbfba2edb423a3b572",
                "SHA-1": "8466497f417e423d3c29fa42fedc099db30afec7",
                "SHA-256": "e8879c41e383df2be62e3b5c6cb4c92f53a886913eb66d8f60ac071020d633dd"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c68c9357-c329-4dfb-9722-8895fc374408",
            "hashes": {
                "MD5": "c57a8b40d2ca402656ff3d778f42708c",
                "SHA-1": "b21513438ba722758d6438f3872962a3ff01289d",
                "SHA-256": "60aa052dc1cad8a9f39983ffd6a21c97b43f3b9c8925ed1bac8113feaa07bf44"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--63cfd3d4-396d-469b-b2f3-14eac543f3b5",
            "hashes": {
                "MD5": "806fb7876b63ba89d2432cb831be01ba",
                "SHA-1": "d3711cf96242f70968b71343c363062800443232",
                "SHA-256": "4af2b83387e6ab3f4ec461150e1c6930c1d92ee4d5a7d8e39cd8a222127d9df1"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--5062ddae-c48a-4eb2-9ca9-0f3384b76ce1",
            "hashes": {
                "MD5": "c499e415f7e07f513d8319013a8b2e86",
                "SHA-1": "0f692113751a07b5f83f27fd53bc0c069c358f57",
                "SHA-256": "e2caedcaabbcf467a714b62bf94ec70e4e4c7d74245f72bbcf20611cc91c825e"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--446f4a6c-bb4f-4b14-8fa5-835aaaac19ec",
            "hashes": {
                "MD5": "80088af673b0117dbd5cf528021dd970",
                "SHA-1": "0149c5e7d551a180084d933b6096542a4ee529b0",
                "SHA-256": "17fe715f3819baa851126d52af8b70c0016bf9288b0b0ebbc3715053973739e4"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--58b95241-16c7-47be-bd26-ef4344784fcc",
            "value": "https://www.pyrotech.co.kr/common/include/tech/default.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--83c163b8-34a0-4a72-9cdb-9eb605392389",
            "value": "https://raw.githubusercontent.com/brandonleeodd93-blip/doc7/main/view.pdf"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--434ef0b6-bd40-4355-b2a5-4f7d85e758cc",
            "value": "https://raw.githubusercontent.com/brandonleeodd93-blip/doc7/main/1.txt"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--eaf14da6-ed71-42b7-b01f-5444d1cc6308",
            "value": "https://nelark.icu/xftaswx/res/post_proc.php?fpath=scheduler-once"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--e3f8a6ef-2739-4b10-8359-0e908d4d45db",
            "value": "https://nelark.icu/xftaswx/res/post_proc.php?fpath=bpersist.ps1"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--41d0d4d6-9201-4dc1-a873-752422151455",
            "value": "https://nelark.icu/xftaswx/res/post_proc.php?fpath=a.ps1"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--85448e0b-f4d8-42df-8e60-3bfa8f208faa",
            "value": "https://nelark.icu/xftaswx/res/index.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--07e01a2f-f620-4b6c-9037-8cecd7adc0e6",
            "value": "https://nelark.icu/xftaswx/res/bypass.b"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--2a765cb2-85c3-4716-b6ff-f691c44a7c17",
            "value": "http://yespp.co.kr/"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--d2b14160-4580-475d-ad41-5504510272d3",
            "value": "http://103.67.196.25/view1.php?type=apple&seed="
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--805ba690-a939-486f-b4de-a8144ce9c7e4",
            "value": "http://103.67.196.25/payload.dat"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--cab400ff-a900-49cf-8dce-8912d4f973f6",
            "value": "http://103.67.196.25/conf.dat"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--99303ace-39e3-4e21-a4d8-0de909df8aa2",
            "value": "www.pyrotech.co.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--0b1cfd66-e97e-448c-b9f3-7f6d0952de88",
            "value": "nelark.icu"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--2695c45a-7048-4335-b36b-93e143914bfb",
            "hashes": {
                "MD5": "bb9e9c893b170b3774c150b1d0b93a73"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--3676b22a-f139-458d-b454-e88814c0d316",
            "hashes": {
                "MD5": "af7330af68a8f79b5a28fcc242e54a7e",
                "SHA-1": "aa8a9c84858fa4d2cf018f5298c95e71eb44b10a",
                "SHA-256": "bead7a8c1c2c624c2b76917462b36aee59903440016a845c07505f905469cc30"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--eebedacf-84e4-455f-9196-20acbfdcab9b",
            "hashes": {
                "MD5": "aa9d5dd632bb90addca480eaa5ff4382",
                "SHA-1": "5746f3e78351439caebfa3721e8feea36b67263f",
                "SHA-256": "4b0358c7e4afa54bc489a6199cca132b5f4a330892eb15bf06c0c4da9e020df2"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6fb507a0-1587-4c9c-8427-5a9f70df7201",
            "hashes": {
                "MD5": "831d7c614ba32aa5d70ff9b0f259ee1d"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--f9ac6765-4418-481a-b0ab-fecd89953ac8",
            "hashes": {
                "MD5": "5c2857913efc6007b3ee7028a132baa4",
                "SHA-1": "fb4a5849fe2a1bae3fc974fe9bb2f4d87948a885",
                "SHA-256": "016cc33b8ff5dd4c7ef1f585ca782db994a620ed73fa127597723512b68744cd"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7208cfd0-f0ba-431f-9fe5-44624e96cb91",
            "hashes": {
                "MD5": "450774df6785e6eeb6ea906490905888"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d8e2cd1a-8729-4219-8841-312cccd7b4b8",
            "hashes": {
                "MD5": "0331a83b58231cb0cd3bfe319003ed1a"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--366d1d24-156f-4707-8eb0-373c63f10bf9",
            "value": "yespp.co.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--4aa2b410-1bd6-4a36-b777-9fd0e1b57089",
            "value": "www.yespp.co.kr"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--7ab9aa62-6a8f-4652-9d55-90f2b04aa559",
            "value": "https://www.yespp.co.kr/common/include/code/out.php"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--8c5f208f-414f-4c92-8467-8b845e675255",
            "hashes": {
                "MD5": "08160acf08fccecde7b34090db18b321",
                "SHA-1": "df226a702fee389e2186daa405069a3975a44ae7",
                "SHA-256": "23420100260cc80055fbf02f4464212278c0e71a4387537771f3fb50f2f891e5"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--a7649c31-0873-49ac-8151-fb74c03c3630",
            "hashes": {
                "MD5": "9fe43e08c8f446554340f972dac8a68c",
                "SHA-1": "30b4a111ca13426054fd46834a9c6583cf344197",
                "SHA-256": "8b10ac9520a1ef24cf2269ec9ee4554b14d3617051f7650a948a03f534bec0d1"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--9d7c9133-efbc-4465-9e5e-660ca05effb5",
            "hashes": {
                "MD5": "52f1ff082e981cbdfd1f045c6021c63f",
                "SHA-1": "be85ab350916ab4d95048ebc50e748d75d959b6b",
                "SHA-256": "59eb093c10f11f612b8dadab258285aa2020219a0b86d65a5c890c214434809e"
            }
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1",
            "created": "2026-06-24T18:42:54.769798Z",
            "modified": "2026-06-24T18:42:54.769798Z",
            "name": "Kimsuky"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--7d32efe5-7f45-463f-a80b-2a96bfd32f23",
            "created_by_ref": "identity--c7629b37-b59a-4b84-ad04-62fcef23483e",
            "created": "2026-06-24T18:42:54.777245Z",
            "modified": "2026-06-24T18:42:54.777245Z",
            "name": "1\ubd84\uae30 DPRK Operation Kimsuky \ubd84\uc11d",
            "published": "2026-05-15T00:00:00Z",
            "object_refs": [
                "identity--c7629b37-b59a-4b84-ad04-62fcef23483e",
                "ipv4-addr--d6bb3c24-e51d-40d4-8f2f-abc7019a68c5",
                "file--ed537354-efa4-40be-8c2f-e72164e264f4",
                "file--67803a9a-5356-4c3e-a4e6-bd10ea7690d5",
                "file--e930868d-255b-488b-954b-6f34665a6e55",
                "file--50c9d3e2-68ab-40fb-9342-07820c6c8671",
                "file--7f101469-684a-4e89-a6fd-ee4a218615a8",
                "file--60a95ee3-5150-49ea-a592-a06b40836ed5",
                "file--b96b8a5a-2327-4ad0-bbdb-635a0eb8e46c",
                "file--9dd16732-0bcc-4bb9-ad21-f7fedf809398",
                "file--a8ee193b-8673-43b3-9db8-0d77c614182e",
                "file--b9460e5c-31c9-4877-b182-a3c1c7133198",
                "file--f6f021b2-fc41-4d20-ab84-60d21e639466",
                "file--c68c9357-c329-4dfb-9722-8895fc374408",
                "file--63cfd3d4-396d-469b-b2f3-14eac543f3b5",
                "file--5062ddae-c48a-4eb2-9ca9-0f3384b76ce1",
                "file--446f4a6c-bb4f-4b14-8fa5-835aaaac19ec",
                "url--58b95241-16c7-47be-bd26-ef4344784fcc",
                "url--83c163b8-34a0-4a72-9cdb-9eb605392389",
                "url--434ef0b6-bd40-4355-b2a5-4f7d85e758cc",
                "url--eaf14da6-ed71-42b7-b01f-5444d1cc6308",
                "url--e3f8a6ef-2739-4b10-8359-0e908d4d45db",
                "url--41d0d4d6-9201-4dc1-a873-752422151455",
                "url--85448e0b-f4d8-42df-8e60-3bfa8f208faa",
                "url--07e01a2f-f620-4b6c-9037-8cecd7adc0e6",
                "url--2a765cb2-85c3-4716-b6ff-f691c44a7c17",
                "url--d2b14160-4580-475d-ad41-5504510272d3",
                "url--805ba690-a939-486f-b4de-a8144ce9c7e4",
                "url--cab400ff-a900-49cf-8dce-8912d4f973f6",
                "domain-name--99303ace-39e3-4e21-a4d8-0de909df8aa2",
                "domain-name--0b1cfd66-e97e-448c-b9f3-7f6d0952de88",
                "file--2695c45a-7048-4335-b36b-93e143914bfb",
                "file--3676b22a-f139-458d-b454-e88814c0d316",
                "file--eebedacf-84e4-455f-9196-20acbfdcab9b",
                "file--6fb507a0-1587-4c9c-8427-5a9f70df7201",
                "file--f9ac6765-4418-481a-b0ab-fecd89953ac8",
                "file--7208cfd0-f0ba-431f-9fe5-44624e96cb91",
                "file--d8e2cd1a-8729-4219-8841-312cccd7b4b8",
                "domain-name--366d1d24-156f-4707-8eb0-373c63f10bf9",
                "domain-name--4aa2b410-1bd6-4a36-b777-9fd0e1b57089",
                "url--7ab9aa62-6a8f-4652-9d55-90f2b04aa559",
                "file--8c5f208f-414f-4c92-8467-8b845e675255",
                "file--a7649c31-0873-49ac-8151-fb74c03c3630",
                "file--9d7c9133-efbc-4465-9e5e-660ca05effb5",
                "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://logpresso.com/ko/blog/2026-05-15-1Q-Kimsuky-report"
                }
            ]
        }
    ]
}