{
    "type": "bundle",
    "id": "bundle--80fe0a21-fbd6-430a-aaff-2368b7b4da6c",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--8668d146-eeac-4e79-a044-f0e8f62445be",
            "created": "2023-03-08T12:51:46.256897Z",
            "modified": "2023-03-09T23:01:57.67829Z",
            "name": "ESET",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--0478cf65-b75c-450e-ae91-18883821ccfd",
            "hashes": {
                "SHA-1": "1e3785fc4fe5ab8dab31dddd68257f9a7fc5bf59"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--aad8c57b-d321-4e1e-accd-61aa84940bfb",
            "hashes": {
                "SHA-1": "69529eed679b0c7f1acc1fd782a4b443cec0cf83"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--2cb23694-2b3a-4b22-835d-0636d87523c2",
            "hashes": {
                "SHA-1": "bf98ea1326e5f8c351e68c79b5d1e0164c7be728"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--858ff7be-3219-44f7-867f-1dbfb64cb26b",
            "hashes": {
                "SHA-1": "66d17344a7ce55d05a324e1c6be2ecd817e72680"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--65b6a059-40d7-4b60-b281-fb87d4de1a77",
            "hashes": {
                "SHA-1": "dad50ad3682a3f20b2f35be2a94b89e2b1a73067"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--77199b25-e46c-4573-b95f-27b3409955b8",
            "hashes": {
                "SHA-1": "92f5469dbefdcee1343934be149afc1241cc8497"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--94565515-0e29-4d4d-8a72-6f14a6136f58",
            "hashes": {
                "SHA-1": "043addfb93a10d187dde4999d78096077f26e9fd"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--1b3f9e66-fd96-4bef-9ade-113236d94865",
            "hashes": {
                "SHA-1": "4d7add8145cb096359ebc3e4d44e19c2735e0377"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--bc9c55d9-493a-4850-b0f5-3364fec61d87",
            "hashes": {
                "SHA-1": "a5ce1df767c89bf29d40dc4fa6eaecc9c8979552"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--65511734-a9b8-4ce7-b65b-bdd874fac0b7",
            "value": "cwwpxpxuswo7b6tr.onion"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--44a51224-406a-4c0a-a7dd-8b90589d7512",
            "value": "4bjt2rceijktwedi.onion"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b",
            "created": "2026-06-24T22:44:10.104071Z",
            "modified": "2026-06-24T22:44:10.104071Z",
            "name": "Lazarus"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--fc797d19-614a-42db-8b8f-2f4c021dc1c8",
            "created_by_ref": "identity--8668d146-eeac-4e79-a044-f0e8f62445be",
            "created": "2026-06-24T22:44:10.105161Z",
            "modified": "2026-06-24T22:44:10.105161Z",
            "name": "(Are you) afreight of the dark? Watch out for Vyveva, new Lazarus backdoor",
            "published": "2021-04-08T00:00:00Z",
            "object_refs": [
                "identity--8668d146-eeac-4e79-a044-f0e8f62445be",
                "file--0478cf65-b75c-450e-ae91-18883821ccfd",
                "file--aad8c57b-d321-4e1e-accd-61aa84940bfb",
                "file--2cb23694-2b3a-4b22-835d-0636d87523c2",
                "file--858ff7be-3219-44f7-867f-1dbfb64cb26b",
                "file--65b6a059-40d7-4b60-b281-fb87d4de1a77",
                "file--77199b25-e46c-4573-b95f-27b3409955b8",
                "file--94565515-0e29-4d4d-8a72-6f14a6136f58",
                "file--1b3f9e66-fd96-4bef-9ade-113236d94865",
                "file--bc9c55d9-493a-4850-b0f5-3364fec61d87",
                "domain-name--65511734-a9b8-4ce7-b65b-bdd874fac0b7",
                "domain-name--44a51224-406a-4c0a-a7dd-8b90589d7512",
                "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.welivesecurity.com/2021/04/08/are-you-afreight-dark-watch-out-vyveva-new-lazarus-backdoor/"
                }
            ]
        }
    ]
}