{
    "type": "bundle",
    "id": "bundle--c8adbd2f-394a-4326-bff3-c21a31f01473",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--59f99ee9-2b33-4e70-a488-4addc93d3d77",
            "created": "2023-03-08T12:51:43.018137Z",
            "modified": "2024-10-23T12:33:11.030915Z",
            "name": "Kaspersky",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ac55b848-2105-4f1c-a3ec-c0410df85f05",
            "hashes": {
                "MD5": "f4d46629ca15313b94992f3798718df7"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--2bb933cc-412f-4774-a7b3-8f00c459a99b",
            "value": "http://mail.sisnet.co.kr/jsp/user/sms/sms_recv.jsp"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--8d7158d6-c987-4018-a00f-1453c3b411b0",
            "value": "http://www.allamwith.com/home/mobile/list.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--31f8adc6-7a72-46ea-9c08-7c5ed9de69f4",
            "value": "http://www.conkorea.com/cshop/banner/list.php"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--675e2f23-3c70-4140-b137-005c46e932b0",
            "value": "mail.sisnet.co.kr"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--9fb6f834-9af2-43a4-81b2-3b79c0ef3481",
            "value": "45.58.112.77"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--0f074dcf-0fa4-4bdf-819b-e7db1d2d37fa",
            "value": "185.208.158.208"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--405f5784-dd36-48a6-8152-f4e7a56772cd",
            "value": "23.229.111.197"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--4225ea73-7d46-45d0-9086-9c38773f6f8c",
            "value": "ddjm.co.kr"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--6845773b-743b-48ad-9a26-2d4d73454f29",
            "value": "http://snum.or.kr/skin_img/skin.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--2ec29c93-ae92-45a8-9825-ec60917cb7f7",
            "value": "http://www.ddjm.co.kr/bbs/icon/skin/skin.php"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--914a8505-bae7-4adb-ae65-14cd6d5ee601",
            "value": "snum.or.kr"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--6dd99b4f-1f02-453d-ba6b-7d21e94fc8b0",
            "value": "http://www.jinjinpig.co.kr/Anyboard/skin/board.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--897208c9-aab6-468f-8eeb-dace89d00caf",
            "value": "http://mail.namusoft.kr/jsp/user/eam/board.jsp"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--0979aa07-ee56-45e5-af77-44d419dfa199",
            "value": "mail.namusoft.kr"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--f0a33d0f-0e2c-4da2-b33a-cf826795046a",
            "hashes": {
                "MD5": "38917e8aa02b58b09401383115ab549e"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--dc1a718a-0872-4215-bde4-e30e66b2162d",
            "hashes": {
                "MD5": "927f0a1090255bc724953e1f5a09a070"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--cc85b8a6-a550-44b5-899d-960a7a7636d9",
            "hashes": {
                "MD5": "33c2e887c3d337eeffbbd8745bfdfc8f"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ebc8eb3c-ec8e-4c66-aea5-79c71564b796",
            "hashes": {
                "MD5": "8b378eabcec13c3c925cc7ca4d191f5f"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b52ef80a-6fe6-42a1-ab94-43be74de3cf2",
            "hashes": {
                "MD5": "df1e7a42c92ecb01290d896dca4e5faa"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--3cfcc8c1-799d-4ffb-ada4-c50327c46955",
            "hashes": {
                "MD5": "fc3c31bbdbeee99aba5f7a735fac7a7e"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6693cf6b-75cf-46ac-87fa-edc8dfd65b57",
            "hashes": {
                "MD5": "67220baf2a415876bee2d43c11f6e9ad"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--0a29de5e-4b03-4315-829b-8320352b6444",
            "hashes": {
                "MD5": "eef723ff0b5c0b10d391955250f781b3"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7319e452-48ec-4b0e-a372-27c8413f61f3",
            "hashes": {
                "MD5": "3bf9b83e00544ac383aaef795e3ded78"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--057287a0-4df2-4187-8c99-8f59a6ae28b7",
            "hashes": {
                "MD5": "3ba4c71c6b087e6d06d668bb22a5b59a"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--8787b1d5-bcf4-4c6a-b6a5-201f56ebeecc",
            "hashes": {
                "MD5": "5b387a9130e9b9782ca4c225c8e641b3"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7d9d3ae1-e484-4189-99c5-17d1eeef0813",
            "hashes": {
                "MD5": "21ec5f03aab696f0a239c6ea5e50c014"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--465c35a2-6348-40f8-8674-411db68ed661",
            "hashes": {
                "MD5": "25c8e057864126e6648c34581e7b4f20"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d2a535db-4a7a-4421-b41d-057f619306f6",
            "hashes": {
                "MD5": "b5648f5e115da778615dfd0dc772b647"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--0c1e8656-1d15-4d15-bee7-48eaf273ad0a",
            "hashes": {
                "MD5": "551c5b3595e9fc1081b5e1f10e3c1a59"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--9eb704a7-dfff-464c-b46d-6d8818c37cc9",
            "hashes": {
                "MD5": "bf4a822f04193b953689e277a9e1f4f1"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d70261b7-0eec-4c70-ae3e-1c85bf354e2a",
            "hashes": {
                "MD5": "d1a99087fa3793fbc4d0adb26e87efce"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b31540a2-6e9c-489e-bff3-84dde8447f3f",
            "hashes": {
                "MD5": "d63bb2c5cd4cfbe8fabf1640b569db6a"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--2e887a9e-53fc-402c-aecb-92fe2fddf5b1",
            "hashes": {
                "MD5": "6e710f6f02fdde1e4adf06935a296fd8"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--42ae93bc-2b4b-47d9-ab80-af4d78ae5a64",
            "hashes": {
                "MD5": "abaeecd83a585ec0c5f1153199938e83"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--946d5817-63b5-4276-97b5-f8fa8c2a0d0c",
            "hashes": {
                "MD5": "145735911e9c8bafa4c9c1d7397199fc"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--0be8c5c2-9d49-452e-a20e-4654bf66079e",
            "hashes": {
                "MD5": "3b1b8702c4d3e2e194c4cc8f09a57d06"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--22fa9981-ff6a-4fe6-b014-072bbd44ce26",
            "hashes": {
                "MD5": "62eae43a36cbc4ed935d8df007f5650b"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--536b10e8-c060-4a8b-a64b-ee1707935d04",
            "hashes": {
                "MD5": "569246a3325effa11cb8ff362428ab2c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--9de7f726-6259-4071-b308-f43a4b78ac8e",
            "hashes": {
                "MD5": "f3fcb306cb93489f999e00a7ef63536b"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d45f3711-8f48-4f71-b3f9-ca70a584526c",
            "hashes": {
                "MD5": "3b494133f1a673b2b04df4f4f996a25d"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--877ade90-42cd-4274-b981-53e2c2de3102",
            "hashes": {
                "MD5": "d96fcd2159643684f4573238f530d03b"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--859b466e-a779-4f3d-a3fc-aa0788a1f8b8",
            "hashes": {
                "MD5": "8d74112c97e98fef4c5d77200f34e4f2"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--fe840a55-93f1-43e3-b615-70d4eeff1444",
            "hashes": {
                "MD5": "159ad2afcab80e83397388e495d215a5"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6aa9dcf1-f3ee-4b9b-81b8-5f6775e5343a",
            "hashes": {
                "MD5": "ef3a6978c7d454f9f6316f2d267f108d"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--13ee139f-5a82-4c0d-8b8c-25897735e86a",
            "hashes": {
                "MD5": "b5874eb1119327be51ae03adcbf4d3e0"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--43a70ea1-94e0-484c-a15a-5e5cccca343d",
            "hashes": {
                "MD5": "fffad123bd6df76f94ffc9b384a067fc"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6dd60220-7017-4c20-8615-f48053994f68",
            "hashes": {
                "MD5": "3703c22e33629abd440483e0f60abf79"
            }
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--f7d8a756-099f-466b-bd63-588ce8be8009",
            "value": "sanjgold847@protonmail.com"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--9f2dfa84-f603-444d-87d2-24c8a10a3002",
            "value": "http://www.allamwith.com/home/css/skin.html"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--18036895-b5e6-4f22-bbac-2175f93de197",
            "value": "http://www.jinjinpig.co.kr/AnyCss/skin.html"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--e68ab634-c7e4-401b-a3e6-2703eb4bd76b",
            "value": "http://ddjm.co.kr/bbs/icon/skin/skin.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--6809ed39-55ce-4c24-9850-6e28b0424cdb",
            "value": "http://www.conkorea.com/cshop/skin/skin.html"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--e9e488a6-b6ad-48b9-a893-274f0bdcee70",
            "value": "http://adame.ypelec.co.kr/customize/ypelec/images/skin.html"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--b4904f64-e14b-49d8-9768-b6a1d96d32ee",
            "value": "http://hivekorea.com/jdboard/member/list.php"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--225bead0-cff6-4b48-a16b-262354ff80ae",
            "value": "hivekorea.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--dc84e380-d530-4316-9431-91042cc57628",
            "value": "adame.ypelec.co.kr"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--652cf10f-7915-4d55-90c4-f26f82872e0b",
            "value": "198.55.119.112"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--9b465f68-3414-45a8-8620-defdcacdaa2f",
            "hashes": {
                "MD5": "ed9aa858ba2c4671ca373496a4dd05d4"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6d476c2d-b09f-4ea5-96ab-a017c19fd2fc",
            "hashes": {
                "MD5": "71759cca8c700646b4976b19b9abd6fe"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--98da7674-d207-4814-b23b-1216e605427d",
            "hashes": {
                "MD5": "118cfa75e386ed45bec297f8865de671"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--3e8e2a46-abae-4bac-9de9-5b60280ddd9e",
            "hashes": {
                "MD5": "0812ce08a75e5fc774a114436e88cd06"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--04f1d7b6-df4c-4cd8-a4d3-af9a35cd192b",
            "hashes": {
                "MD5": "d5e974a3386fc99d2932756ca165a451"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--399d5142-c8d2-45e8-be71-cd813b24b81a",
            "hashes": {
                "MD5": "53648bf8f0121130edb42c626d7c2fc4"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--1fa94ccb-1821-4663-9c9d-a78db43e7c24",
            "hashes": {
                "MD5": "1bb267c96ec2925f6ae3716d831671cf"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--e9dbccbb-fcfa-4b4c-87fa-08d5efce60c4",
            "hashes": {
                "MD5": "4d30612a928faf7643b14bd85d8433cc"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--f1e1e9b2-79a0-4969-8239-2a49b2277c6c",
            "hashes": {
                "MD5": "0ecfa51cd4bf1a9841a07bdb5bfcd0ab"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d0ba7e6c-2c03-403f-a9f3-db3e95ae5265",
            "hashes": {
                "MD5": "9758efcf96343d0ef83854860195c4b4"
            }
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--779b8f52-56c4-5aee-b87a-0e7e139d8eff",
            "created": "2026-06-24T19:51:02.806059Z",
            "modified": "2026-06-24T19:51:02.806059Z",
            "name": "Andariel"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--a2f09b7e-a526-4b6e-ae89-791d1fe6a8c9",
            "created_by_ref": "identity--59f99ee9-2b33-4e70-a488-4addc93d3d77",
            "created": "2026-06-24T19:51:02.834303Z",
            "modified": "2026-06-24T19:51:02.834303Z",
            "name": "Andariel evolves to target South Korea with ransomware",
            "published": "2021-06-15T00:00:00Z",
            "object_refs": [
                "identity--59f99ee9-2b33-4e70-a488-4addc93d3d77",
                "file--ac55b848-2105-4f1c-a3ec-c0410df85f05",
                "url--2bb933cc-412f-4774-a7b3-8f00c459a99b",
                "url--8d7158d6-c987-4018-a00f-1453c3b411b0",
                "url--31f8adc6-7a72-46ea-9c08-7c5ed9de69f4",
                "domain-name--675e2f23-3c70-4140-b137-005c46e932b0",
                "ipv4-addr--9fb6f834-9af2-43a4-81b2-3b79c0ef3481",
                "ipv4-addr--0f074dcf-0fa4-4bdf-819b-e7db1d2d37fa",
                "ipv4-addr--405f5784-dd36-48a6-8152-f4e7a56772cd",
                "domain-name--4225ea73-7d46-45d0-9086-9c38773f6f8c",
                "url--6845773b-743b-48ad-9a26-2d4d73454f29",
                "url--2ec29c93-ae92-45a8-9825-ec60917cb7f7",
                "domain-name--914a8505-bae7-4adb-ae65-14cd6d5ee601",
                "url--6dd99b4f-1f02-453d-ba6b-7d21e94fc8b0",
                "url--897208c9-aab6-468f-8eeb-dace89d00caf",
                "domain-name--0979aa07-ee56-45e5-af77-44d419dfa199",
                "file--f0a33d0f-0e2c-4da2-b33a-cf826795046a",
                "file--dc1a718a-0872-4215-bde4-e30e66b2162d",
                "file--cc85b8a6-a550-44b5-899d-960a7a7636d9",
                "file--ebc8eb3c-ec8e-4c66-aea5-79c71564b796",
                "file--b52ef80a-6fe6-42a1-ab94-43be74de3cf2",
                "file--3cfcc8c1-799d-4ffb-ada4-c50327c46955",
                "file--6693cf6b-75cf-46ac-87fa-edc8dfd65b57",
                "file--0a29de5e-4b03-4315-829b-8320352b6444",
                "file--7319e452-48ec-4b0e-a372-27c8413f61f3",
                "file--057287a0-4df2-4187-8c99-8f59a6ae28b7",
                "file--8787b1d5-bcf4-4c6a-b6a5-201f56ebeecc",
                "file--7d9d3ae1-e484-4189-99c5-17d1eeef0813",
                "file--465c35a2-6348-40f8-8674-411db68ed661",
                "file--d2a535db-4a7a-4421-b41d-057f619306f6",
                "file--0c1e8656-1d15-4d15-bee7-48eaf273ad0a",
                "file--9eb704a7-dfff-464c-b46d-6d8818c37cc9",
                "file--d70261b7-0eec-4c70-ae3e-1c85bf354e2a",
                "file--b31540a2-6e9c-489e-bff3-84dde8447f3f",
                "file--2e887a9e-53fc-402c-aecb-92fe2fddf5b1",
                "file--42ae93bc-2b4b-47d9-ab80-af4d78ae5a64",
                "file--946d5817-63b5-4276-97b5-f8fa8c2a0d0c",
                "file--0be8c5c2-9d49-452e-a20e-4654bf66079e",
                "file--22fa9981-ff6a-4fe6-b014-072bbd44ce26",
                "file--536b10e8-c060-4a8b-a64b-ee1707935d04",
                "file--9de7f726-6259-4071-b308-f43a4b78ac8e",
                "file--d45f3711-8f48-4f71-b3f9-ca70a584526c",
                "file--877ade90-42cd-4274-b981-53e2c2de3102",
                "file--859b466e-a779-4f3d-a3fc-aa0788a1f8b8",
                "file--fe840a55-93f1-43e3-b615-70d4eeff1444",
                "file--6aa9dcf1-f3ee-4b9b-81b8-5f6775e5343a",
                "file--13ee139f-5a82-4c0d-8b8c-25897735e86a",
                "file--43a70ea1-94e0-484c-a15a-5e5cccca343d",
                "file--6dd60220-7017-4c20-8615-f48053994f68",
                "email-addr--f7d8a756-099f-466b-bd63-588ce8be8009",
                "url--9f2dfa84-f603-444d-87d2-24c8a10a3002",
                "url--18036895-b5e6-4f22-bbac-2175f93de197",
                "url--e68ab634-c7e4-401b-a3e6-2703eb4bd76b",
                "url--6809ed39-55ce-4c24-9850-6e28b0424cdb",
                "url--e9e488a6-b6ad-48b9-a893-274f0bdcee70",
                "url--b4904f64-e14b-49d8-9768-b6a1d96d32ee",
                "domain-name--225bead0-cff6-4b48-a16b-262354ff80ae",
                "domain-name--dc84e380-d530-4316-9431-91042cc57628",
                "ipv4-addr--652cf10f-7915-4d55-90c4-f26f82872e0b",
                "file--9b465f68-3414-45a8-8620-defdcacdaa2f",
                "file--6d476c2d-b09f-4ea5-96ab-a017c19fd2fc",
                "file--98da7674-d207-4814-b23b-1216e605427d",
                "file--3e8e2a46-abae-4bac-9de9-5b60280ddd9e",
                "file--04f1d7b6-df4c-4cd8-a4d3-af9a35cd192b",
                "file--399d5142-c8d2-45e8-be71-cd813b24b81a",
                "file--1fa94ccb-1821-4663-9c9d-a78db43e7c24",
                "file--e9dbccbb-fcfa-4b4c-87fa-08d5efce60c4",
                "file--f1e1e9b2-79a0-4969-8239-2a49b2277c6c",
                "file--d0ba7e6c-2c03-403f-a9f3-db3e95ae5265",
                "threat-actor--779b8f52-56c4-5aee-b87a-0e7e139d8eff"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://securelist.com/andariel-evolves-to-target-south-korea-with-ransomware/102811/"
                }
            ]
        }
    ]
}