{
    "type": "bundle",
    "id": "bundle--0258035a-ae7a-47da-b78e-ef8f347628b9",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--ee04b1b6-877a-4d67-b5f3-7c4468b711de",
            "created": "2023-06-19T05:35:05.871307Z",
            "modified": "2023-06-19T05:35:05.871329Z",
            "name": "StrangerealIntel",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--0ab6cdb2-03b2-485e-b6b4-863517ceff1b",
            "hashes": {
                "SHA-256": "1fcd9892532813a27537f4e1a1c21ec0c110d6b3929602750ed77bbba7caa426"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--0fe4a060-4745-4260-8b45-39d65ee82cf9",
            "value": "http://mybobo.mygamesonline.org/flower01/flower01.ps1"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--cb1ceea2-5b88-4d70-8bd1-22dfc5738870",
            "value": "mybobo.mygamesonline.org"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--ce17305d-6965-430c-bbaf-3ce3ddf816d8",
            "value": "185.176.43.82"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--8ff9d31b-60c3-45b6-bfd5-f5e9395a7b4f",
            "value": "mireene.com"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--c16917fd-45d0-4dab-a279-d412e81d78cb",
            "value": "http://schemas.openxmlformats.org/officeDocument/2006/relationships/attachedTemplate"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--a2c6613a-10c4-444d-891b-b543e5f96f68",
            "value": "nhpurumy.mireene.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--6a8d9471-c5ac-4ed2-8ece-0caf671367a0",
            "value": "vnext.mireene.com"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--184307a1-cf72-467b-a8fb-6238eb523ccb",
            "hashes": {
                "SHA-256": "828a5527e25e3cab4e97ed25ec2b3d2d7cdf22f868101a33802598cc974d6db4"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7b0df198-31e7-4e22-96c4-456603e4be69",
            "hashes": {
                "MD5": "757a71f0fbd6b3d993be2a213338d1f2"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--16549828-52a5-49af-9c7e-9d95bfff5d00",
            "hashes": {
                "SHA-256": "0588510dddbd802a5a95fa299d8fa7235b0c270236cbaf51e5b57536222226bf"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--8b9014a0-1c7f-4f41-a486-a557320a071c",
            "hashes": {
                "SHA-256": "7d2b9f391588cc07d9ba78d652819d32d3d79e5a74086b527c32126ad88b5015"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c59f31dd-8540-4da9-9e19-debdc22ee4e0",
            "hashes": {
                "SHA-256": "7f83912127f5b9680ff57581fc40123c21257bd8e186d7cab4c838a867bb137f"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--fd0469b2-6a21-448d-8f7e-de67f47f3646",
            "hashes": {
                "MD5": "5f2d3ed67a577526fcbd9a154f522cce"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--5ab5641b-8f40-4377-8a8a-e7a70b97dcc2",
            "hashes": {
                "MD5": "a4388c4d0588cd3d8a607594347663e0"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--64012437-7375-4b6d-83e1-9a41a0e80844",
            "value": "http://crphone.mireene.com/plugin/editor/Templates/filedown.php?name=v60"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--7151f664-fce5-4647-9220-61279fce7283",
            "value": "http://crphone.mireene.com/plugin/editor/Templates/filedown.php?name=normal"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--206e49b3-1c32-4c7f-a892-ef277c5846cb",
            "value": "http://crphone.mireene.com/plugin/editor/Templates/upload.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--5d4cd348-a310-415b-a4ea-8e8d6af4a0a4",
            "value": "http://crphone.mireene.com/plugin/editor/Templates/filedown.php?name=v1"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--49a0f7db-4857-4cb1-a9fa-9c95d2acbef5",
            "value": "http://mybobo.mygamesonline.org/flower01/post.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--8d14aed1-63d1-4537-8916-fde225e063b0",
            "value": "http://mybobo.mygamesonline.org/flower01/"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--8ec45db1-6d0a-4f9f-9a8c-b02a3dda631f",
            "value": "http://crphone.mireene.com/plugin/editor/Templates/filedown.php?name=new"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--efb6cc68-e2de-4cf4-9fc1-6a68782d38ff",
            "value": "http://crphone.mireene.com/plugin/editor/Templates/normal.php?name=web"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--30020209-ef38-494f-8fd5-10874c97826b",
            "value": "crphone.mireene.com"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--320b199a-cf89-4a4e-b954-d53087fc34c9",
            "value": "101.79.5.222"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1",
            "created": "2026-06-24T19:16:06.705966Z",
            "modified": "2026-06-24T19:16:06.705966Z",
            "name": "Kimsuky"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--dd1958ab-77f2-478b-b453-65f2d1742128",
            "created_by_ref": "identity--ee04b1b6-877a-4d67-b5f3-7c4468b711de",
            "created": "2026-06-24T19:16:06.715049Z",
            "modified": "2026-06-24T19:16:06.715049Z",
            "name": "apt-get install kimsuky",
            "published": "2020-03-20T00:00:00Z",
            "object_refs": [
                "identity--ee04b1b6-877a-4d67-b5f3-7c4468b711de",
                "file--0ab6cdb2-03b2-485e-b6b4-863517ceff1b",
                "url--0fe4a060-4745-4260-8b45-39d65ee82cf9",
                "domain-name--cb1ceea2-5b88-4d70-8bd1-22dfc5738870",
                "ipv4-addr--ce17305d-6965-430c-bbaf-3ce3ddf816d8",
                "domain-name--8ff9d31b-60c3-45b6-bfd5-f5e9395a7b4f",
                "url--c16917fd-45d0-4dab-a279-d412e81d78cb",
                "domain-name--a2c6613a-10c4-444d-891b-b543e5f96f68",
                "domain-name--6a8d9471-c5ac-4ed2-8ece-0caf671367a0",
                "file--184307a1-cf72-467b-a8fb-6238eb523ccb",
                "file--7b0df198-31e7-4e22-96c4-456603e4be69",
                "file--16549828-52a5-49af-9c7e-9d95bfff5d00",
                "file--8b9014a0-1c7f-4f41-a486-a557320a071c",
                "file--c59f31dd-8540-4da9-9e19-debdc22ee4e0",
                "file--fd0469b2-6a21-448d-8f7e-de67f47f3646",
                "file--5ab5641b-8f40-4377-8a8a-e7a70b97dcc2",
                "url--64012437-7375-4b6d-83e1-9a41a0e80844",
                "url--7151f664-fce5-4647-9220-61279fce7283",
                "url--206e49b3-1c32-4c7f-a892-ef277c5846cb",
                "url--5d4cd348-a310-415b-a4ea-8e8d6af4a0a4",
                "url--49a0f7db-4857-4cb1-a9fa-9c95d2acbef5",
                "url--8d14aed1-63d1-4537-8916-fde225e063b0",
                "url--8ec45db1-6d0a-4f9f-9a8c-b02a3dda631f",
                "url--efb6cc68-e2de-4cf4-9fc1-6a68782d38ff",
                "domain-name--30020209-ef38-494f-8fd5-10874c97826b",
                "ipv4-addr--320b199a-cf89-4a4e-b954-d53087fc34c9",
                "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://github.com/StrangerealIntel/CyberThreatIntel/blob/master/North%20Korea/APT/Kimsuky/2020-03-20/Analysis.md"
                }
            ]
        }
    ]
}