{
    "type": "bundle",
    "id": "bundle--f456b0c3-97e1-44fc-8b5d-31439e7267f1",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--eafdd258-8d1a-438d-bbef-6ca0d4a35852",
            "created": "2023-03-08T12:51:41.544512Z",
            "modified": "2025-02-04T10:54:04.972936Z",
            "name": "Ahnlab",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--9b4a66ea-58ab-40ef-aad8-5da181c7d91e",
            "hashes": {
                "MD5": "426bb55531e8e3055c942a1a035e46b9"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--834b8767-8e93-4d95-b959-a2053722d52c",
            "hashes": {
                "MD5": "6ab4eb4c23c9e419fbba85884ea141f4"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--a43830a1-bd3e-46d2-a2ad-e2e00660e544",
            "hashes": {
                "MD5": "deae4be61c90ad6d499f5bdac5dad242"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--3c7e9632-a292-40c5-bd5a-711a5badc4e0",
            "hashes": {
                "MD5": "79e474e056b4798e0a3e7c60dd67fd28"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c22a909b-fc47-4376-9556-9f340736d4d1",
            "hashes": {
                "MD5": "bbaee4fe73ccff1097d635422fdc0483"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--de1e1d65-54fb-45e0-bd39-daade9257ce9",
            "hashes": {
                "MD5": "5291aed100cc48415636c4875592f70c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--17325dfd-13ec-4cdb-b085-41d28a49c6ef",
            "hashes": {
                "MD5": "95c276215dcc1bd7606c0cb2be06bf70"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--5142f26b-91ee-40c8-b7d8-17af9655643b",
            "hashes": {
                "MD5": "eb35b75369805e7a6371577b1d2c4531"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--aa6cc2fe-1e73-4d67-8ee3-417391443a7d",
            "hashes": {
                "MD5": "f4795f7aec4389c8323f7f40b50ae46f"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--74f2ca44-69e1-49b2-b960-8b623a6092f8",
            "hashes": {
                "MD5": "cfae52529468034dbbb40c9a985fa504"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ebe10022-ba94-4bcc-b9f0-ac2f5c938b43",
            "hashes": {
                "MD5": "bda0686d02a8b7685adf937cbcd35f46"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--512e1a7a-71c6-4b73-b34d-87a3b35f71c3",
            "hashes": {
                "MD5": "5a3f3f75048b9cec177838fb8b40b945"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--f0ad0052-ec30-484e-89e4-c4ba00f5c5b3",
            "hashes": {
                "MD5": "6de6c27ca8f4e00f0b3e8ff5185a59d1"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ca9c9246-5ddd-42cc-9c74-448d0d3f9ada",
            "hashes": {
                "MD5": "c61a8c4f6f6870c7ca0013e084b893d2"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--f5049a16-339d-4bb2-9fea-b10a8644fe61",
            "hashes": {
                "MD5": "9d7bd0caed10cc002670faff7ca130f5"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--59021d7c-6a39-4009-8ece-717492b4c3ea",
            "hashes": {
                "MD5": "8434cdd34425916be234b19f933ad7ea"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--3746817f-0463-4855-a88f-fd7c9a97edfb",
            "value": "privatemake.bounceme.net"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--466ce39a-6823-4e8e-b8b4-809b8f2dec57",
            "hashes": {
                "MD5": "c892c60817e6399f939987bd2bf5dee0"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--2d1b7a6c-a64c-4981-b822-ce3e5fd753ae",
            "hashes": {
                "MD5": "1ffccc23fef2964e9b1747098c19d956"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--0d548a0f-afa0-4cff-80ca-ec4fddce0e46",
            "hashes": {
                "MD5": "0211a3160cc5871cbcd4e5514449162b"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--42208c97-a3c5-46de-bc31-565b2dd72090",
            "hashes": {
                "MD5": "ac0ada011f1544aa3a1cf27a26f2e288"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--3d616f5e-027f-4736-afcb-5576896c765c",
            "hashes": {
                "MD5": "88a7c84ac7f7ed310b5ee791ec8bd6c5"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6e0183cd-782b-4bac-aa6f-c75ff022e758",
            "hashes": {
                "MD5": "9112efb49cae021abebd3e9a564e6ca4"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--316a6144-4c06-4834-8c08-09366556d296",
            "hashes": {
                "MD5": "bcac28919fa33704a01d7a9e5e3ddf3f"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--583e7a59-5f68-44bb-a775-d91f7bc97f48",
            "hashes": {
                "MD5": "0a09b7f2317b3d5f057180be6b6d0755"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6eb9e1cb-4aa5-47e8-ade1-d4c823f7bc9e",
            "hashes": {
                "MD5": "e5410abaaac69c88db84ab3d0e9485ac"
            }
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--5ae3e184-121d-4081-b971-dcd2052bda91",
            "value": "4.246.149.227"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ce9f819b-d693-452e-94fa-26db9e59bc0a",
            "hashes": {
                "MD5": "01ccce480c60fcdb67b54f4509ffdb56"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ca9b5886-a28b-4927-9ebe-944888794043",
            "hashes": {
                "MD5": "dd7b696b96434d2bf07b34f9c125d51d"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--444cc961-18de-4710-9ab5-eb0dc3e7457d",
            "value": "http://www.ipservice.kro.kr/creditsvc.exe"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--c9b0b322-0ba7-4517-bd27-45cb169fbcff",
            "value": "http://www.ipservice.kro.kr/dataSeq.exe"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--9836b917-0128-434b-8008-f64ebf735e5c",
            "value": "bbs.topigsnorsvin.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--d11036ea-a01e-4121-be88-5c97ef99a360",
            "value": "chinesekungfu.org"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--2cc74dc5-76a3-4f70-aeda-d409f3906fdb",
            "value": "27.102.107.230"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--4191857f-c88b-4fd4-b323-b5a1b3f4c4e4",
            "value": "8.213.128.76"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--832006ba-d63d-48ce-b3a1-eca24626342f",
            "value": "13.76.133.68"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--3584bdea-776f-4027-82b1-f3af424b7083",
            "value": "27.102.107.233"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--9e09fc50-e432-4672-831f-cb6cc7d1d7f1",
            "value": "217.195.153.233"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--a4729f36-d5b8-4716-aad3-ba3aed571a29",
            "value": "27.102.129.196"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--18ce1678-7b3d-4a14-ada9-515694d09d80",
            "value": "27.102.107.235"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--96616b6d-ae30-49e5-a6f4-bead0df09fa5",
            "value": "46.183.223.21"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--00eebfda-0e5e-421d-8f77-931ce1cc0914",
            "value": "109.248.150.179"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--3708e837-25ae-4ecf-a8bd-dc802d06d875",
            "value": "27.102.113.88"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--e9d220ec-6143-46ba-8c68-433750ab2c21",
            "value": "139.177.190.243"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--1813498a-119d-4043-93ff-0fa2c3abdfa9",
            "value": "4.246.144.112"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--39d9f469-3289-4ef1-beeb-ba3ca2c488bc",
            "value": "27.102.107.224"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--463e182d-6f2c-4d5f-bd09-43b34bff00f5",
            "value": "27.102.107.234"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--779b8f52-56c4-5aee-b87a-0e7e139d8eff",
            "created": "2026-06-24T19:51:53.001699Z",
            "modified": "2026-06-24T19:51:53.001699Z",
            "name": "Andariel"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--41785d86-e9e5-4e47-a1a5-0e9275b24e99",
            "created_by_ref": "identity--eafdd258-8d1a-438d-bbef-6ca0d4a35852",
            "created": "2026-06-24T19:51:53.008916Z",
            "modified": "2026-06-24T19:51:53.008916Z",
            "name": "Analysis of Andariel's New Attack Activities",
            "published": "2023-08-31T00:00:00Z",
            "object_refs": [
                "identity--eafdd258-8d1a-438d-bbef-6ca0d4a35852",
                "file--9b4a66ea-58ab-40ef-aad8-5da181c7d91e",
                "file--834b8767-8e93-4d95-b959-a2053722d52c",
                "file--a43830a1-bd3e-46d2-a2ad-e2e00660e544",
                "file--3c7e9632-a292-40c5-bd5a-711a5badc4e0",
                "file--c22a909b-fc47-4376-9556-9f340736d4d1",
                "file--de1e1d65-54fb-45e0-bd39-daade9257ce9",
                "file--17325dfd-13ec-4cdb-b085-41d28a49c6ef",
                "file--5142f26b-91ee-40c8-b7d8-17af9655643b",
                "file--aa6cc2fe-1e73-4d67-8ee3-417391443a7d",
                "file--74f2ca44-69e1-49b2-b960-8b623a6092f8",
                "file--ebe10022-ba94-4bcc-b9f0-ac2f5c938b43",
                "file--512e1a7a-71c6-4b73-b34d-87a3b35f71c3",
                "file--f0ad0052-ec30-484e-89e4-c4ba00f5c5b3",
                "file--ca9c9246-5ddd-42cc-9c74-448d0d3f9ada",
                "file--f5049a16-339d-4bb2-9fea-b10a8644fe61",
                "file--59021d7c-6a39-4009-8ece-717492b4c3ea",
                "domain-name--3746817f-0463-4855-a88f-fd7c9a97edfb",
                "file--466ce39a-6823-4e8e-b8b4-809b8f2dec57",
                "file--2d1b7a6c-a64c-4981-b822-ce3e5fd753ae",
                "file--0d548a0f-afa0-4cff-80ca-ec4fddce0e46",
                "file--42208c97-a3c5-46de-bc31-565b2dd72090",
                "file--3d616f5e-027f-4736-afcb-5576896c765c",
                "file--6e0183cd-782b-4bac-aa6f-c75ff022e758",
                "file--316a6144-4c06-4834-8c08-09366556d296",
                "file--583e7a59-5f68-44bb-a775-d91f7bc97f48",
                "file--6eb9e1cb-4aa5-47e8-ade1-d4c823f7bc9e",
                "ipv4-addr--5ae3e184-121d-4081-b971-dcd2052bda91",
                "file--ce9f819b-d693-452e-94fa-26db9e59bc0a",
                "file--ca9b5886-a28b-4927-9ebe-944888794043",
                "url--444cc961-18de-4710-9ab5-eb0dc3e7457d",
                "url--c9b0b322-0ba7-4517-bd27-45cb169fbcff",
                "domain-name--9836b917-0128-434b-8008-f64ebf735e5c",
                "domain-name--d11036ea-a01e-4121-be88-5c97ef99a360",
                "ipv4-addr--2cc74dc5-76a3-4f70-aeda-d409f3906fdb",
                "ipv4-addr--4191857f-c88b-4fd4-b323-b5a1b3f4c4e4",
                "ipv4-addr--832006ba-d63d-48ce-b3a1-eca24626342f",
                "ipv4-addr--3584bdea-776f-4027-82b1-f3af424b7083",
                "ipv4-addr--9e09fc50-e432-4672-831f-cb6cc7d1d7f1",
                "ipv4-addr--a4729f36-d5b8-4716-aad3-ba3aed571a29",
                "ipv4-addr--18ce1678-7b3d-4a14-ada9-515694d09d80",
                "ipv4-addr--96616b6d-ae30-49e5-a6f4-bead0df09fa5",
                "ipv4-addr--00eebfda-0e5e-421d-8f77-931ce1cc0914",
                "ipv4-addr--3708e837-25ae-4ecf-a8bd-dc802d06d875",
                "ipv4-addr--e9d220ec-6143-46ba-8c68-433750ab2c21",
                "ipv4-addr--1813498a-119d-4043-93ff-0fa2c3abdfa9",
                "ipv4-addr--39d9f469-3289-4ef1-beeb-ba3ca2c488bc",
                "ipv4-addr--463e182d-6f2c-4d5f-bd09-43b34bff00f5",
                "threat-actor--779b8f52-56c4-5aee-b87a-0e7e139d8eff"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://asec.ahnlab.com/en/56405/"
                }
            ]
        }
    ]
}