{
    "type": "bundle",
    "id": "bundle--f42adfdb-533f-46c9-856e-8fc94c16a2ac",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--060ec506-eac4-4e64-ac4b-afcd96959671",
            "created": "2025-04-23T08:47:12.848571Z",
            "modified": "2025-04-23T08:47:12.848607Z",
            "name": "navneet",
            "identity_class": "organization"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--a5d891a3-a10a-4318-8631-d1b96c07587b",
            "value": "https://ausbildungsbuddy.de/modules/mod_mail/inc/get.php?ra=iew&zw=lk0100"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--fa7b7a77-04a8-4db0-8923-b4f57f1669b0",
            "value": "https://ausbildungsbuddy.de/modules/mod_mail/src/list.php?f=%COMPUTERNAME%.txt"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--e05c9185-00a2-40e5-9e9c-28d31a60e9e1",
            "value": "https://ausbildungsbuddy.de/modules/mod_mail/src/upload.php"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--40737ebc-d23f-4562-bb4d-2f18a6d52bb2",
            "value": "ausbildungsbuddy.de"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--06509b4c-e375-422e-8cf8-d4133198d481",
            "hashes": {
                "SHA-256": "627ee714b1e4f5bd692061e1c29783191f71c10c91f14c632e405fbe57d4dd3b"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--d768e2a5-447e-45b4-a2b9-617a46072def",
            "value": "https://ausbildungsbuddy.de/"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--b5d26c15-ad46-4ee9-9ee9-63cc5c4feb4c",
            "value": "https://jmarketing.agency/"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--d76f0295-232a-45af-93b6-b9c18713846a",
            "value": "jmarketing.agency"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--1febefe9-4151-4408-a5fa-c0724d0eb2cf",
            "value": "fromausbildungsbuddy.de"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--a014dfac-e081-5b16-a0b1-fe21d104be8f",
            "created": "2026-06-24T21:04:05.024726Z",
            "modified": "2026-06-24T21:04:05.024726Z",
            "name": "Konni"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--22b1195d-7148-4ca9-9333-6b684f7c041e",
            "created_by_ref": "identity--060ec506-eac4-4e64-ac4b-afcd96959671",
            "created": "2026-06-24T21:04:05.044626Z",
            "modified": "2026-06-24T21:04:05.044626Z",
            "name": "A Deep Dive Into a Multi-Stage Malware Campaign Potentially Linked to DPRK\u2019s Konni Group",
            "published": "2025-04-23T00:00:00Z",
            "object_refs": [
                "identity--060ec506-eac4-4e64-ac4b-afcd96959671",
                "url--a5d891a3-a10a-4318-8631-d1b96c07587b",
                "url--fa7b7a77-04a8-4db0-8923-b4f57f1669b0",
                "url--e05c9185-00a2-40e5-9e9c-28d31a60e9e1",
                "domain-name--40737ebc-d23f-4562-bb4d-2f18a6d52bb2",
                "file--06509b4c-e375-422e-8cf8-d4133198d481",
                "url--d768e2a5-447e-45b4-a2b9-617a46072def",
                "url--b5d26c15-ad46-4ee9-9ee9-63cc5c4feb4c",
                "domain-name--d76f0295-232a-45af-93b6-b9c18713846a",
                "domain-name--1febefe9-4151-4408-a5fa-c0724d0eb2cf",
                "threat-actor--a014dfac-e081-5b16-a0b1-fe21d104be8f"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://muff-in.github.io/blog/Malware-Campaign-Potentially-Linked-to-DPRK-Konni-Group/"
                }
            ]
        }
    ]
}