{
    "type": "bundle",
    "id": "bundle--28ca5764-fc40-483e-9dbf-36431cc7d249",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--0648e9f1-986a-40ab-8f6c-0495948f69ec",
            "created": "2023-05-23T01:10:41.336415Z",
            "modified": "2024-09-11T13:26:42.312985Z",
            "name": "Genians",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ef94f9fc-8a6a-4903-9a29-6fe83fef2dd4",
            "hashes": {
                "MD5": "28d0143718153bf04c1919a26bb70c2d"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--70081b60-ee66-4a82-b6e2-5f051c69629a",
            "hashes": {
                "MD5": "c681fe3f42e82e9240afe97c23971cbc"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c19bfd62-ea61-4dd0-b375-a3abab57c169",
            "hashes": {
                "MD5": "36be2cbb59cd1c3f745d5f80f9aee21c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6f7efd55-49c7-40fc-b449-8f12b0994835",
            "hashes": {
                "MD5": "d44a22d2c969988a65c7d927e22364c8"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--333ed131-e570-4eba-b73e-9bec100f2b72",
            "hashes": {
                "MD5": "c637b3e7d74c2d678663454d16311b15"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--4cb88e5d-fc03-4ef3-a110-b4949abd897d",
            "hashes": {
                "MD5": "085128b4e96633c82beb2101f5c525e4"
            }
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--d5329f9b-82a6-4ba6-aaaf-41c85dcbe782",
            "value": "scott.snyder@zoho.com"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--511bce00-1ef0-4a90-9528-029c548b624b",
            "value": "http://japanroom.com/board/DATA/1288247428101.jpg"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--f55cb488-2fae-4008-9a0f-ccd0e60e479c",
            "value": "japanroom.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--ed5d9241-d125-4ec1-8fb1-8ec2b29d4db7",
            "value": "leon91729@zoho.com"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--04e7b1c4-3211-40d1-aa31-eb8c007c8df7",
            "value": "38.32.68.195"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--ab07c4d1-0bb6-401e-bbf3-107ba9345396",
            "value": "222.122.49.15"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--3be555f5-1f0d-5001-b84a-c6c910760fd0",
            "created": "2026-06-24T21:03:32.183769Z",
            "modified": "2026-06-24T21:03:32.183769Z",
            "name": "APT37"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--50dbe20e-e521-49f4-bd0b-9d38ba0fc050",
            "created_by_ref": "identity--0648e9f1-986a-40ab-8f6c-0495948f69ec",
            "created": "2026-06-24T21:03:32.184865Z",
            "modified": "2026-06-24T21:03:32.184865Z",
            "name": "APT37\u2019s Pretexting-Based Targeted Intrusion: Analysis of Facebook Reconnaissance and Software Tampering Attacks",
            "published": "2026-04-12T00:00:00Z",
            "object_refs": [
                "identity--0648e9f1-986a-40ab-8f6c-0495948f69ec",
                "file--ef94f9fc-8a6a-4903-9a29-6fe83fef2dd4",
                "file--70081b60-ee66-4a82-b6e2-5f051c69629a",
                "file--c19bfd62-ea61-4dd0-b375-a3abab57c169",
                "file--6f7efd55-49c7-40fc-b449-8f12b0994835",
                "file--333ed131-e570-4eba-b73e-9bec100f2b72",
                "file--4cb88e5d-fc03-4ef3-a110-b4949abd897d",
                "email-addr--d5329f9b-82a6-4ba6-aaaf-41c85dcbe782",
                "url--511bce00-1ef0-4a90-9528-029c548b624b",
                "domain-name--f55cb488-2fae-4008-9a0f-ccd0e60e479c",
                "email-addr--ed5d9241-d125-4ec1-8fb1-8ec2b29d4db7",
                "ipv4-addr--04e7b1c4-3211-40d1-aa31-eb8c007c8df7",
                "ipv4-addr--ab07c4d1-0bb6-401e-bbf3-107ba9345396",
                "threat-actor--3be555f5-1f0d-5001-b84a-c6c910760fd0"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.genians.co.kr/en/blog/threat_intelligence/pretexting"
                }
            ]
        }
    ]
}