{
    "type": "bundle",
    "id": "bundle--f0a48b96-6341-490e-8912-c1e76b3317a3",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--c39d85f1-5111-42ed-94ed-e9f749dec731",
            "created": "2023-03-08T12:51:58.194913Z",
            "modified": "2026-04-05T07:21:22.57565Z",
            "name": "Fortinet",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c1d4ec8a-0d4c-466e-b1e1-6c3105454c64",
            "hashes": {
                "SHA-256": "a606716355035d4a1ea0b15f3bee30aad41a2c32df28c2d468eafd18361d60d6"
            }
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--ba0b3e46-e54b-4cd4-a06e-9b4c3848f369",
            "value": "175.100.189.174"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--3030e557-9620-41ad-9f06-b537642cc13a",
            "hashes": {
                "SHA-256": "0a118eb23399000d148186b9079fa59caf4c3faa7e7a8f91533e467ac9b6ff41"
            }
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--1fdd1d14-d77e-40ba-a9c3-6194eecd14d1",
            "value": "125.212.132.222"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--144818da-aadb-576a-82f4-f05e15a3bb28",
            "created": "2026-06-24T18:42:02.355881Z",
            "modified": "2026-06-24T18:42:02.355881Z",
            "name": "HiddenCobra"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--23cceb46-9f1c-48c9-87d1-7ae78e3b6452",
            "created_by_ref": "identity--c39d85f1-5111-42ed-94ed-e9f749dec731",
            "created": "2026-06-24T18:42:02.356973Z",
            "modified": "2026-06-24T18:42:02.356973Z",
            "name": "A Deep Dive Analysis of the FALLCHILL Remote Administration Tool",
            "published": "2017-11-28T00:00:00Z",
            "object_refs": [
                "identity--c39d85f1-5111-42ed-94ed-e9f749dec731",
                "file--c1d4ec8a-0d4c-466e-b1e1-6c3105454c64",
                "ipv4-addr--ba0b3e46-e54b-4cd4-a06e-9b4c3848f369",
                "file--3030e557-9620-41ad-9f06-b537642cc13a",
                "ipv4-addr--1fdd1d14-d77e-40ba-a9c3-6194eecd14d1",
                "threat-actor--144818da-aadb-576a-82f4-f05e15a3bb28"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.fortinet.com/blog/threat-research/a-deep-dive-analysis-of-the-fallchill-remote-administration-tool"
                }
            ]
        }
    ]
}