{
    "type": "bundle",
    "id": "bundle--b7a65254-0127-495b-8425-76dbbea3194b",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--3eebcb51-94b6-4fac-b6a6-a3705fa488fe",
            "created": "2024-09-09T00:20:56.276149Z",
            "modified": "2024-09-09T10:33:59.047954Z",
            "name": "Contagio",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--0d2934be-eb37-4b1f-b832-3677ab69394f",
            "hashes": {
                "SHA-256": "cea22277e0d7fe38a3755bdb8baa9fe203bd54ad4d79c7068116f15a50711b09"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--cb87c8fd-00e8-4c61-ad95-b57541a4d0ba",
            "hashes": {
                "SHA-1": "f4895809cb38fa1f225340e99c05e477a5017111"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--2be2c109-129b-4182-a584-283b8eb6a4cc",
            "hashes": {
                "MD5": "81d224649328a61c899be9403d1de92d"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--51e7ff58-168a-42b8-9d87-51e3e54ffc68",
            "value": "https://0x0.st/Xyl7.txt"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--c897bd7a-470a-4142-832d-db1e8ed57f28",
            "value": "0x0.st"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1",
            "created": "2026-06-24T21:18:04.092189Z",
            "modified": "2026-06-24T21:18:04.092189Z",
            "name": "Kimsuky"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--83429df9-9332-4392-a8df-931c70ad04be",
            "created_by_ref": "identity--3eebcb51-94b6-4fac-b6a6-a3705fa488fe",
            "created": "2026-06-24T21:18:04.095046Z",
            "modified": "2026-06-24T21:18:04.095046Z",
            "name": "2024-09-10 KIMSUKY (North Korean APT) Sample (Sakai @sakaijjan - Terms and Conditions.msc)",
            "published": "2024-09-10T00:00:00Z",
            "object_refs": [
                "identity--3eebcb51-94b6-4fac-b6a6-a3705fa488fe",
                "file--0d2934be-eb37-4b1f-b832-3677ab69394f",
                "file--cb87c8fd-00e8-4c61-ad95-b57541a4d0ba",
                "file--2be2c109-129b-4182-a584-283b8eb6a4cc",
                "url--51e7ff58-168a-42b8-9d87-51e3e54ffc68",
                "domain-name--c897bd7a-470a-4142-832d-db1e8ed57f28",
                "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://contagiodump.blogspot.com/2024/09/2024-09-10-kimsuky-north-korean-apt.html"
                }
            ]
        }
    ]
}