{
    "type": "bundle",
    "id": "bundle--a81cc102-9b1f-4985-9871-afa3cb92c442",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--1b2e4fa5-1dfa-4915-86ec-a2fa45d88f2f",
            "created": "2023-05-17T06:45:31.091598Z",
            "modified": "2023-05-17T06:45:31.091643Z",
            "name": "DCSO",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--06490595-698f-4a88-9217-e30fbb5ac43e",
            "hashes": {
                "SHA-256": "c28bb61de4a6ad1c5e225ad9ec2eaf4a6c8ccfff40cf45a640499c0adb0d8740"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--595efaf5-b93e-4ee9-bde7-1b828471f733",
            "hashes": {
                "SHA-256": "34d5a5d8bec893519f204b573c33d54537b093c52df01b3d8c518af08ee94947"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--abffdc26-8663-4565-8272-c73c90fb12ac",
            "hashes": {
                "SHA-256": "aa29bf4292b68d197f4d8ca026b97ec7785796edcb644db625a8f8b66733ab54"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c5a9ff6f-19f7-4655-8c05-e97d25d1178f",
            "hashes": {
                "SHA-256": "772b06f34facf6a2ce351b8679ff957cf601ef3ad29645935cb050b4184c8d51"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ee4d46b8-13c1-4904-9546-8481baa64979",
            "hashes": {
                "SHA-256": "9a5504dcfb7e664259bfa58c46cfd33e554225daf1cedea2ec2a9d83bbbfe238"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--fa786c95-1dca-415b-998d-d3a218cc874c",
            "hashes": {
                "SHA-256": "664f8d19af3400a325998b332343a9304f03bab9738ddab1530869eff13dae54"
            }
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--fa8c8214-4a94-4f3f-a173-c0fddbba3b5b",
            "value": "40.121.90.194"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--d394fd2e-1d52-49d5-a97d-66b65b96ee26",
            "value": "http://projectcell.niv.co.in/non_scientific/service.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--632bb024-4f0d-4a6f-b66e-9db953ffe843",
            "value": "http://sora.bz/xoops_root_path/templates_c/login.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--abdf40b9-28de-457c-a59b-b942e9fef480",
            "value": "http://sora.bz/xoops_root_path/uploads/information/about.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--bb861f50-442b-4d9d-a298-0878ad0d55b3",
            "value": "http://eflow.co.kr/member_image/about.php"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--8c75b560-b4db-4364-ac36-d9656a4d5a16",
            "value": "niv.co"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--a3acf862-fdda-4bc6-a092-9628efb0d643",
            "value": "ns.iknowledgefactory.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--61a455bb-2401-4942-aa31-ef2ff7d202a9",
            "value": "projectcell.niv.co"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--6ff3170a-b56d-471a-a50e-dd764729483a",
            "value": "eflow.co.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--1a5a4173-3e95-4c2a-aac4-0d81ba5163d9",
            "value": "projectcell.niv.co.in"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--2bb9580b-1d88-4356-8249-d2a8e0eafb9c",
            "value": "sora.bz"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--98be0d53-db9e-4f89-99a9-63a8b3c1c00b",
            "value": "niv.icmr.org"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--8b68ea68-45c9-4559-bcfb-2e90c36a6c8c",
            "value": "103.73.189.76"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--6e699db8-9a83-4132-a071-26f1766a1414",
            "value": "3.89.226.234"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--a4627a2f-4efa-4dbe-b66e-a852fabfe1bd",
            "value": "173.249.44.87"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--bb08d9f8-7a11-4221-85b6-f45963e7bcdd",
            "value": "173.249.33.80"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--779b8f52-56c4-5aee-b87a-0e7e139d8eff",
            "created": "2026-06-24T21:04:31.713687Z",
            "modified": "2026-06-24T21:04:31.713687Z",
            "name": "Andariel"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--6aa7627b-b181-4aa8-8e4b-a6336e54db65",
            "created_by_ref": "identity--1b2e4fa5-1dfa-4915-86ec-a2fa45d88f2f",
            "created": "2026-06-24T21:04:31.716732Z",
            "modified": "2026-06-24T21:04:31.716732Z",
            "name": "Andariel\u2019s \u201cJupiter\u201d malware and the case of the curious C2",
            "published": "2023-05-16T00:00:00Z",
            "object_refs": [
                "identity--1b2e4fa5-1dfa-4915-86ec-a2fa45d88f2f",
                "file--06490595-698f-4a88-9217-e30fbb5ac43e",
                "file--595efaf5-b93e-4ee9-bde7-1b828471f733",
                "file--abffdc26-8663-4565-8272-c73c90fb12ac",
                "file--c5a9ff6f-19f7-4655-8c05-e97d25d1178f",
                "file--ee4d46b8-13c1-4904-9546-8481baa64979",
                "file--fa786c95-1dca-415b-998d-d3a218cc874c",
                "ipv4-addr--fa8c8214-4a94-4f3f-a173-c0fddbba3b5b",
                "url--d394fd2e-1d52-49d5-a97d-66b65b96ee26",
                "url--632bb024-4f0d-4a6f-b66e-9db953ffe843",
                "url--abdf40b9-28de-457c-a59b-b942e9fef480",
                "url--bb861f50-442b-4d9d-a298-0878ad0d55b3",
                "domain-name--8c75b560-b4db-4364-ac36-d9656a4d5a16",
                "domain-name--a3acf862-fdda-4bc6-a092-9628efb0d643",
                "domain-name--61a455bb-2401-4942-aa31-ef2ff7d202a9",
                "domain-name--6ff3170a-b56d-471a-a50e-dd764729483a",
                "domain-name--1a5a4173-3e95-4c2a-aac4-0d81ba5163d9",
                "domain-name--2bb9580b-1d88-4356-8249-d2a8e0eafb9c",
                "domain-name--98be0d53-db9e-4f89-99a9-63a8b3c1c00b",
                "ipv4-addr--8b68ea68-45c9-4559-bcfb-2e90c36a6c8c",
                "ipv4-addr--6e699db8-9a83-4132-a071-26f1766a1414",
                "ipv4-addr--a4627a2f-4efa-4dbe-b66e-a852fabfe1bd",
                "ipv4-addr--bb08d9f8-7a11-4221-85b6-f45963e7bcdd",
                "threat-actor--779b8f52-56c4-5aee-b87a-0e7e139d8eff"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://medium.com/@DCSO_CyTec/andariels-jupiter-malware-and-the-case-of-the-curious-c2-dbfe29f57499"
                }
            ]
        }
    ]
}