{
    "type": "bundle",
    "id": "bundle--718c9b5a-cda9-4f06-8b09-fdc1dfcf9089",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--16fdc541-545e-40c4-9896-0b4354ada896",
            "created": "2023-03-08T12:51:41.953788Z",
            "modified": "2023-03-08T13:24:48.498141Z",
            "name": "ESTSecurity",
            "identity_class": "organization"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--1dbe5ddd-8297-41e2-94cc-2fff475053cd",
            "value": "sariwon.co.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--c9743928-3e15-4ee3-87bb-d5ab1d7199e5",
            "value": "my-homework.890m.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--1b733081-b147-4cfc-bf13-27a98a0dd277",
            "value": "ondol.inodea.co.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--29a7ac07-2fdf-4b89-87c7-6146cd588e39",
            "value": "gyjmc.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--4d367bf1-5ede-46d6-af10-b9d97ed2fbee",
            "value": "fighiting1013.org"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--9ff72abd-6dd9-457f-83fd-7f7062f8929f",
            "value": "103.249.31.159"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--76ae550d-cf26-4206-a1b2-34400ad8aa7b",
            "hashes": {
                "MD5": "c616893e73cfa2a5456deb578725f1e7"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--de2421e8-1744-49b4-942d-5481b1911512",
            "hashes": {
                "MD5": "3dcd31490846e235bc17cbfdac0a9484"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--25122869-13ac-4471-9fbf-47adbd9c4e0c",
            "hashes": {
                "MD5": "b5d9d194e1bea5889096460172673081"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--607f5b66-8029-4377-bda8-a49f2133cd3b",
            "hashes": {
                "MD5": "dfe2f5fc4579f5cb56a76702a61e692a"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6f17c82b-7b70-440b-8774-7b61650addd8",
            "hashes": {
                "MD5": "87e00dede257d234d2558ed2ae0d7ec2"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6125a1c8-d454-4098-aa08-11037224f502",
            "hashes": {
                "MD5": "49b3c5975c8717da0606ec060b4271a2"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c4ed1d92-6cb4-4b36-a385-a46e5bbfc2d3",
            "hashes": {
                "MD5": "2614bd5b8177ef93efaa9b06beda2398"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6f65ad76-2453-448a-9a51-66ec5cbe07d1",
            "hashes": {
                "MD5": "b9ba36607ea379da4b6620c4e3fce2ca"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--4a246dc9-c513-44e0-b781-a5411788fff3",
            "value": "http://www.jejuseongahn.org/hboard4/data/file/AccountChooser/confirm"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--e77d3d05-78cd-4e98-8b29-1fed626444f8",
            "value": "http://naoei3-tosma.96.lt/1"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--33691e0e-5616-4bb4-95b8-934dcd58d1a8",
            "value": "http://fighiting1013.org/2"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--3e70c937-cb3c-4ea9-9d83-d3f273dbd4a3",
            "value": "http://rotcian.com/host/img/jpg/download.php?filename=Base64("
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--c2860b88-efca-456f-a092-1bc3d8948fc8",
            "value": "http://naoei3-tosma.96.lt/3"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--2f33a9c1-8a0c-4168-9513-1f34f593cf8a",
            "value": "http://ago2.co.kr/bbs/data/dir"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--29b44e78-1ce3-4cdc-aa91-605a4f2fbe66",
            "value": "http://ago2.co.kr/data/file/AccountChooser/download"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--9d57aeee-5d6e-4304-ade9-a9b517c8446c",
            "value": "oeks39402.890m.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--fa9a55b9-50b9-4eb2-8962-0aa80e9b64c8",
            "value": "rotcian.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--2ec855d2-5afc-41dd-b45e-e9c67e98cd5a",
            "value": "naiei-aldiel.16mb.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--68700a54-a028-4654-b1b9-48924a515ed3",
            "value": "mailout05.yourhostingaccount.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--18f4ac95-e4ff-46ea-8d08-7397fb58fd7f",
            "value": "walcustweb0403.yourhostingaccount.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--e4949edf-7f0f-489c-b4eb-a5a7d193ed8b",
            "value": "naoei3-tosma.96.lt"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--d885d272-ce63-4cf5-aeb3-92d60a8a2467",
            "value": "carolie-svr-v1.16mb.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--62ccf448-b40a-4823-b63f-079c9a13a672",
            "value": "upgradesrv.890m.com"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--7bff7972-c902-45ae-a52d-2468134c7112",
            "value": "175.167.138.222"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--554955b7-700e-436f-ae2e-30cb007e7295",
            "value": "65.254.254.73"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--0f36aa04-5643-47c0-8517-715c17b22edc",
            "value": "202.168.155.156"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--a269f99e-aca4-4242-97ff-2bd33ecf4b2d",
            "value": "175.167.130.236"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--3007870b-9a9d-4c87-b4b4-21fad6156eac",
            "value": "175.167.138.225"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--89bb04a2-451d-4c77-981e-f96ed7e4b86f",
            "value": "124.217.209.11"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--4319d1d6-a35c-4d50-b239-f85e0bf54635",
            "value": "175.167.146.58"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--588e8244-dd48-431a-afc4-46986997f7e9",
            "value": "kuku675.site11.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--6b410d00-a5ad-442a-a40b-cb6f7b8b64eb",
            "value": "kuku79.herobo.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--8ba1f6d3-70cc-4be5-b869-0b20db7202b7",
            "value": "jejuseongahn.org"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--0b00259f-a3f8-41ee-8fed-e10c2b49566c",
            "value": "ago2.co.kr"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--00c7f91e-9f9f-4488-b798-00e63e3efc2d",
            "hashes": {
                "MD5": "0eb6090397c74327cd4d47819f724953"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d36fb813-82f5-4c37-b8a9-fa1f14c2495e",
            "hashes": {
                "MD5": "2bfbf8ce47585aa86b1ab90ff109fd57"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--59b35dd0-0937-42b5-8b26-9db2db079d17",
            "value": "filer2.1apps.com"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--e5caa04e-98c4-46ce-932f-2a92701015c9",
            "value": "http://filer1.1apps.com/1.txt"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--5f0518a0-87ef-431a-857d-2e9d18175c65",
            "value": "filer1.1apps.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--0e34560a-878c-45c6-90f7-3e0c065fb20c",
            "value": "gmall.com"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1",
            "created": "2026-06-24T21:13:29.809564Z",
            "modified": "2026-06-24T21:13:29.809564Z",
            "name": "Kimsuky"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--a014dfac-e081-5b16-a0b1-fe21d104be8f",
            "created": "2026-06-24T21:13:29.811953Z",
            "modified": "2026-06-24T21:13:29.811953Z",
            "name": "Konni"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--ce8e5c0d-1887-42f9-b589-c24c19cd1be6",
            "created_by_ref": "identity--16fdc541-545e-40c4-9896-0b4354ada896",
            "created": "2026-06-24T21:13:29.813024Z",
            "modified": "2026-06-24T21:13:29.813024Z",
            "name": "APT \ucea0\ud398\uc778 'Konni' & 'Kimsuky' \uc870\uc9c1\uc758 \uacf5\ud1b5\uc810 \ubc1c\uacac",
            "published": "2019-06-10T00:00:00Z",
            "object_refs": [
                "identity--16fdc541-545e-40c4-9896-0b4354ada896",
                "domain-name--1dbe5ddd-8297-41e2-94cc-2fff475053cd",
                "domain-name--c9743928-3e15-4ee3-87bb-d5ab1d7199e5",
                "domain-name--1b733081-b147-4cfc-bf13-27a98a0dd277",
                "domain-name--29a7ac07-2fdf-4b89-87c7-6146cd588e39",
                "domain-name--4d367bf1-5ede-46d6-af10-b9d97ed2fbee",
                "ipv4-addr--9ff72abd-6dd9-457f-83fd-7f7062f8929f",
                "file--76ae550d-cf26-4206-a1b2-34400ad8aa7b",
                "file--de2421e8-1744-49b4-942d-5481b1911512",
                "file--25122869-13ac-4471-9fbf-47adbd9c4e0c",
                "file--607f5b66-8029-4377-bda8-a49f2133cd3b",
                "file--6f17c82b-7b70-440b-8774-7b61650addd8",
                "file--6125a1c8-d454-4098-aa08-11037224f502",
                "file--c4ed1d92-6cb4-4b36-a385-a46e5bbfc2d3",
                "file--6f65ad76-2453-448a-9a51-66ec5cbe07d1",
                "url--4a246dc9-c513-44e0-b781-a5411788fff3",
                "url--e77d3d05-78cd-4e98-8b29-1fed626444f8",
                "url--33691e0e-5616-4bb4-95b8-934dcd58d1a8",
                "url--3e70c937-cb3c-4ea9-9d83-d3f273dbd4a3",
                "url--c2860b88-efca-456f-a092-1bc3d8948fc8",
                "url--2f33a9c1-8a0c-4168-9513-1f34f593cf8a",
                "url--29b44e78-1ce3-4cdc-aa91-605a4f2fbe66",
                "domain-name--9d57aeee-5d6e-4304-ade9-a9b517c8446c",
                "domain-name--fa9a55b9-50b9-4eb2-8962-0aa80e9b64c8",
                "domain-name--2ec855d2-5afc-41dd-b45e-e9c67e98cd5a",
                "domain-name--68700a54-a028-4654-b1b9-48924a515ed3",
                "domain-name--18f4ac95-e4ff-46ea-8d08-7397fb58fd7f",
                "domain-name--e4949edf-7f0f-489c-b4eb-a5a7d193ed8b",
                "domain-name--d885d272-ce63-4cf5-aeb3-92d60a8a2467",
                "domain-name--62ccf448-b40a-4823-b63f-079c9a13a672",
                "ipv4-addr--7bff7972-c902-45ae-a52d-2468134c7112",
                "ipv4-addr--554955b7-700e-436f-ae2e-30cb007e7295",
                "ipv4-addr--0f36aa04-5643-47c0-8517-715c17b22edc",
                "ipv4-addr--a269f99e-aca4-4242-97ff-2bd33ecf4b2d",
                "ipv4-addr--3007870b-9a9d-4c87-b4b4-21fad6156eac",
                "ipv4-addr--89bb04a2-451d-4c77-981e-f96ed7e4b86f",
                "ipv4-addr--4319d1d6-a35c-4d50-b239-f85e0bf54635",
                "domain-name--588e8244-dd48-431a-afc4-46986997f7e9",
                "domain-name--6b410d00-a5ad-442a-a40b-cb6f7b8b64eb",
                "domain-name--8ba1f6d3-70cc-4be5-b869-0b20db7202b7",
                "domain-name--0b00259f-a3f8-41ee-8fed-e10c2b49566c",
                "file--00c7f91e-9f9f-4488-b798-00e63e3efc2d",
                "file--d36fb813-82f5-4c37-b8a9-fa1f14c2495e",
                "domain-name--59b35dd0-0937-42b5-8b26-9db2db079d17",
                "url--e5caa04e-98c4-46ce-932f-2a92701015c9",
                "domain-name--5f0518a0-87ef-431a-857d-2e9d18175c65",
                "domain-name--0e34560a-878c-45c6-90f7-3e0c065fb20c",
                "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1",
                "threat-actor--a014dfac-e081-5b16-a0b1-fe21d104be8f"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://blog.alyac.co.kr/2347"
                }
            ]
        }
    ]
}