{
    "type": "bundle",
    "id": "bundle--c82fea9b-ff22-441b-bc76-41d5276a1be6",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--6ebb353b-0709-4421-b407-80189354410f",
            "created": "2025-11-21T00:31:44.598616Z",
            "modified": "2025-11-21T00:34:42.149483Z",
            "name": "OrangeCyberdefense",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--47d0c141-de63-4a64-ba83-2e44f007a46d",
            "hashes": {
                "SHA-256": "4eeec453e42c2898e2e9870bbee273834aeb8cdde8c826c036f9a7d0b568a25d"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ae923472-a109-4216-a641-d83bbb76cffb",
            "hashes": {
                "SHA-256": "7b4cb382b364389c3bd1f4736411de17ceb213a7792733ae5dd90c8b01b4191f"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--0d2874c6-318e-4fc0-92e8-02234f7bc982",
            "hashes": {
                "SHA-256": "083d4a4ef6267c9a0ab57f1e5a2ed45ff67a0b4db83bbd43563458a223781120"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--9fb15c43-6ffa-4711-ae6a-fd6763d0e8fa",
            "hashes": {
                "SHA-256": "ec5d14ca011ba8c12f4d51b0d463cf51051feaf1655c7f709dce3ffa625dfcf6"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--cfb28288-0c52-401c-b365-d6c53b06fc97",
            "hashes": {
                "SHA-256": "e3e0a87e18de05c4abb95fc21f22d6c9c367eb207dbbf2dd092673656caf7661"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--808483ac-b435-42fa-b694-6c4e6a5e9034",
            "value": "https://tours-albatros.es/wp-content/plugins/soliloquy-lite/includes/global/skin.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--e8fb7f85-f91a-46d3-8c85-a253f687e5eb",
            "value": "https://kutahyasmmmo.org/wp-content/mu-plugins/natro/external_plugins/easy-wp-smtp/easy-wp-smtp-menu.php"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--8b065524-a551-4928-8b60-55b4a74cc8d9",
            "value": "isiswauitmedu-my.sharepoint.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--bbf32034-b0df-4fc7-8c4e-9c719dbffe44",
            "value": "kutahyasmmmo.org"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--b23269d5-8fcc-41f0-a115-3e41f771ac04",
            "value": "diakoffice-my.sharepoint.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--b81fb090-fa6f-4b40-bda8-0c50f0c6071a",
            "value": "cseabrahamlincoln-my.sharepoint.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--4a1d1500-9fa5-42fa-aee0-f0e9112dabfa",
            "value": "aerm-my.sharepoint.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--e93b1dea-aad2-456d-9fcc-bd9cbd7ea022",
            "value": "alex2moe-my.sharepoint.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--17f7a188-8961-43a1-9648-c6a46e04756f",
            "value": "tours-albatros.es"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--63e66c5a-1bd6-4719-b0da-079e7c46d6cd",
            "hashes": {
                "SHA-256": "aefc12b500b58fbc09ebbf34fe64b34cb32a27513478f4769447280ad23af4d2"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--28ca4fcc-0ad9-4e83-99c4-393087d8dfe6",
            "hashes": {
                "SHA-256": "0fdd97a597380498f6b2d491f8f50da8f903def4ea6e624b89757456c287f92d"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--fffb4335-cc0d-402b-827c-dc5c3f80fe28",
            "value": "https://coralsunmarine.com/wp-content/themes/flatsome/inc/functions/function-hand.php"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--519da21f-79f0-4509-a6b0-f274783ca23e",
            "value": "coralsunmarine.com"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--5be8fa77-82ef-4ed4-8b0a-56d5c5694acb",
            "hashes": {
                "SHA-256": "f5873ecd60390e7b86db5ddaf158ed201b386be26ad80af8a7da3576446520b8"
            }
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--049cf601-7a61-5344-a195-591661b1b2ec",
            "created": "2026-06-24T22:42:10.343489Z",
            "modified": "2026-06-24T22:42:10.343489Z",
            "name": "UNC2970"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--759135ea-7bc2-4b3c-8ef8-87bef4ef81cf",
            "created_by_ref": "identity--6ebb353b-0709-4421-b407-80189354410f",
            "created": "2026-06-24T22:42:10.346065Z",
            "modified": "2026-06-24T22:42:10.346065Z",
            "name": "A Pain in the Mist: Navigating Operation DreamJob\u2019s arsenal",
            "published": "2025-11-20T00:00:00Z",
            "object_refs": [
                "identity--6ebb353b-0709-4421-b407-80189354410f",
                "file--47d0c141-de63-4a64-ba83-2e44f007a46d",
                "file--ae923472-a109-4216-a641-d83bbb76cffb",
                "file--0d2874c6-318e-4fc0-92e8-02234f7bc982",
                "file--9fb15c43-6ffa-4711-ae6a-fd6763d0e8fa",
                "file--cfb28288-0c52-401c-b365-d6c53b06fc97",
                "url--808483ac-b435-42fa-b694-6c4e6a5e9034",
                "url--e8fb7f85-f91a-46d3-8c85-a253f687e5eb",
                "domain-name--8b065524-a551-4928-8b60-55b4a74cc8d9",
                "domain-name--bbf32034-b0df-4fc7-8c4e-9c719dbffe44",
                "domain-name--b23269d5-8fcc-41f0-a115-3e41f771ac04",
                "domain-name--b81fb090-fa6f-4b40-bda8-0c50f0c6071a",
                "domain-name--4a1d1500-9fa5-42fa-aee0-f0e9112dabfa",
                "domain-name--e93b1dea-aad2-456d-9fcc-bd9cbd7ea022",
                "domain-name--17f7a188-8961-43a1-9648-c6a46e04756f",
                "file--63e66c5a-1bd6-4719-b0da-079e7c46d6cd",
                "file--28ca4fcc-0ad9-4e83-99c4-393087d8dfe6",
                "url--fffb4335-cc0d-402b-827c-dc5c3f80fe28",
                "domain-name--519da21f-79f0-4509-a6b0-f274783ca23e",
                "file--5be8fa77-82ef-4ed4-8b0a-56d5c5694acb",
                "threat-actor--049cf601-7a61-5344-a195-591661b1b2ec"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.orangecyberdefense.com/global/blog/cert-news/a-pain-in-the-mist-navigating-operation-dreamjobs-arsenal"
                }
            ]
        }
    ]
}