{
    "type": "bundle",
    "id": "bundle--72e20b49-9935-42a3-9895-544701914263",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--eafdd258-8d1a-438d-bbef-6ca0d4a35852",
            "created": "2023-03-08T12:51:41.544512Z",
            "modified": "2025-02-04T10:54:04.972936Z",
            "name": "Ahnlab",
            "identity_class": "organization"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--3746817f-0463-4855-a88f-fd7c9a97edfb",
            "value": "privatemake.bounceme.net"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--aa1ae506-b53e-471a-8b42-4e9f9f4002b6",
            "hashes": {
                "MD5": "4f1b1124e34894398aa423200a8ab894"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--895c37a6-e669-4f11-bcf2-5e497ebd0d23",
            "hashes": {
                "MD5": "29efd64dd3c7fe1e2b022b7ad73a1ba5"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--432b6306-1dd3-49e8-9596-2df58c6b53c1",
            "hashes": {
                "MD5": "2c69c4786ce663e58a3cc093c6d5b530"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c0f8c7ef-f3ce-42ae-a7e7-5d4dbbd6dd85",
            "hashes": {
                "MD5": "a714b928bbc7cd480fed85e379966f95"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--fc162ce7-3430-493e-bf6f-f54a6f6492f8",
            "value": "http://www.ipservice.kro.kr/modeRead.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--1525d7e4-8f15-49f9-b0ec-5d422e0def01",
            "value": "http://www.mssrv.kro.kr/modeRead.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--eb6de592-7d50-4fbf-bf5c-354866c0fb50",
            "value": "http://www.mssrv.kro.kr/modeWrite.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--57733b6c-e13d-42c7-a505-dd29e0b89795",
            "value": "http://www.ipservice.kro.kr/index.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--46bd3c1b-54f0-422e-9507-5c42a1303eae",
            "value": "http://www.mssrv.kro.kr/modeView.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--96fcd40e-afd7-4581-a46e-39ab2e649fe7",
            "value": "http://panda.ourhome.o-r.kr/modeView.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--c195ccde-5026-432d-9365-13d7ef730b85",
            "value": "http://www.mssrv.kro.kr/view.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--7cb56d47-d130-4974-86dd-dbdcc7c6be6b",
            "value": "http://www.ipservice.kro.kr/view.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--152dc4bd-ecc6-4bfa-ad49-b510c3d10740",
            "value": "http://panda.ourhome.o-r.kr/modeRead.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--aaaa1f79-149f-470e-ac9f-b0d096372299",
            "value": "http://panda.ourhome.o-r.kr/view.php"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--3f5d6968-f6e1-4184-a542-5910b34bbfa3",
            "value": "privacy.hopto.org"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--ff26d9a7-a80e-42cb-8d78-5370cb33554f",
            "value": "panda.ourhome.o-r.kr"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--b779f6f0-ce42-40b5-ac90-00a7417e8552",
            "value": "84.38.129.21"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--779b8f52-56c4-5aee-b87a-0e7e139d8eff",
            "created": "2026-06-24T17:25:52.074681Z",
            "modified": "2026-06-24T17:25:52.074681Z",
            "name": "Andariel"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--f2fffe43-d0bf-474f-b9d2-afa372700e4e",
            "created_by_ref": "identity--eafdd258-8d1a-438d-bbef-6ca0d4a35852",
            "created": "2026-06-24T17:25:52.080079Z",
            "modified": "2026-06-24T17:25:52.080079Z",
            "name": "Andariel Group Exploiting Korean Asset Management Solutions (MeshAgent)",
            "published": "2024-03-19T00:00:00Z",
            "object_refs": [
                "identity--eafdd258-8d1a-438d-bbef-6ca0d4a35852",
                "domain-name--3746817f-0463-4855-a88f-fd7c9a97edfb",
                "file--aa1ae506-b53e-471a-8b42-4e9f9f4002b6",
                "file--895c37a6-e669-4f11-bcf2-5e497ebd0d23",
                "file--432b6306-1dd3-49e8-9596-2df58c6b53c1",
                "file--c0f8c7ef-f3ce-42ae-a7e7-5d4dbbd6dd85",
                "url--fc162ce7-3430-493e-bf6f-f54a6f6492f8",
                "url--1525d7e4-8f15-49f9-b0ec-5d422e0def01",
                "url--eb6de592-7d50-4fbf-bf5c-354866c0fb50",
                "url--57733b6c-e13d-42c7-a505-dd29e0b89795",
                "url--46bd3c1b-54f0-422e-9507-5c42a1303eae",
                "url--96fcd40e-afd7-4581-a46e-39ab2e649fe7",
                "url--c195ccde-5026-432d-9365-13d7ef730b85",
                "url--7cb56d47-d130-4974-86dd-dbdcc7c6be6b",
                "url--152dc4bd-ecc6-4bfa-ad49-b510c3d10740",
                "url--aaaa1f79-149f-470e-ac9f-b0d096372299",
                "domain-name--3f5d6968-f6e1-4184-a542-5910b34bbfa3",
                "domain-name--ff26d9a7-a80e-42cb-8d78-5370cb33554f",
                "ipv4-addr--b779f6f0-ce42-40b5-ac90-00a7417e8552",
                "threat-actor--779b8f52-56c4-5aee-b87a-0e7e139d8eff"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://asec.ahnlab.com/en/63192/"
                }
            ]
        }
    ]
}