{
    "type": "bundle",
    "id": "bundle--21207cca-b9c7-4647-96ce-889de77508ca",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--b1c3d8b9-33cb-40a5-b4af-c4ca272ed26e",
            "created": "2023-03-08T12:51:51.028682Z",
            "modified": "2023-03-08T12:51:51.028777Z",
            "name": "Clearskysec",
            "identity_class": "organization"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--e3631f07-4513-48d1-bf16-b8ca9bc38098",
            "value": "googleexplore.net"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--f7c87998-ab27-4c7a-924c-bbacc52dc9c7",
            "value": "twosigma.publicvm.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--dee5239a-64f9-4bda-98d7-c9d5f42465cd",
            "value": "googledrive.publicvm.com"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--905e545c-e2a2-46f7-b06b-751a51414b84",
            "hashes": {
                "SHA-256": "8b6887c5ec6fadaefee78f089e9a347a539bcedf52f5827f866a49a1839f8c4b"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6c5bbfa4-ed46-4407-903d-6d15f3990d27",
            "hashes": {
                "MD5": "feccea47b97e78f2d6c4271da3f565c4"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--f0cbdd56-d124-4f42-a6d1-36bdf6433615",
            "hashes": {
                "MD5": "d7b8c3c986495a814c9b8bd10d3f5eef"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--66ac5eab-181a-4a34-896e-a4450f5267d4",
            "hashes": {
                "MD5": "83bac6075fe0d21eea6c9942b2738a1e"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ab6d96b1-0fc1-4143-8918-11d7981555c9",
            "hashes": {
                "MD5": "7d5c259d422310218a8888ec1ce65e92"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--505dcafd-577a-4c97-8d5d-6900d5b1bc8a",
            "hashes": {
                "MD5": "629f6a17bea4c386aee3dfec2ed6ec2c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--2d4fca7a-03bb-4afb-9842-1c0b10f7534a",
            "hashes": {
                "MD5": "3e9b52e3b90ac45ac5ddb9c91615c7ae"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ad99605e-fde8-4031-9c3f-4aacb4d12e32",
            "hashes": {
                "MD5": "1439d13eee4b43501bfadbe40da1e1f6"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--cdb20596-ebed-431e-bec3-2fec8de3c1af",
            "hashes": {
                "MD5": "2d27e4aa3315c7b49ce5edd1a3fb5485"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--eeadef67-9b06-419a-bf33-b470e4ce9a87",
            "hashes": {
                "MD5": "d0c500c37ae9f9e3657d26272722b997"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--0a226abe-80c6-4db2-9646-057d43d2fe16",
            "hashes": {
                "MD5": "ee15bec0e9ba39f186d721515efd6a00"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--809b4d3b-f397-4074-aa62-8dd2ba1e69c1",
            "hashes": {
                "MD5": "b8406b91b0eb57267f192a1aee6d3ee0"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b7b0348f-344c-421f-85b4-4b4ea39857dd",
            "hashes": {
                "MD5": "db3c54038e0b2db2c058a5e9761e4819"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ba94f969-b499-4575-8936-37646dcd2fef",
            "hashes": {
                "MD5": "d3d32225bf893ccc62dee9d833fe04f2"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--a9bf285e-a55a-44f8-9132-29cf9364df85",
            "hashes": {
                "MD5": "17d97dca939836fe4eeb61eac371960f"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--de00e556-d0e3-4637-a7a2-40e64a7c6c33",
            "hashes": {
                "MD5": "cd0a391331c1d4268bd622080ba68bce"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--dada885e-4a43-47f2-8593-f920fb8adc05",
            "hashes": {
                "MD5": "c869b0fe739d0626e4474eea980dd018"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--592365f9-4842-4687-8dc4-9b0519e06712",
            "hashes": {
                "MD5": "a9c5355fce2bd42e5cb3cd1fe6c375f1"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--4acd0a1b-c3e9-49d2-b231-54f0b29892fd",
            "hashes": {
                "MD5": "45123dac5e13cebe1dc7fc95afd9c63e"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--e6334401-42e3-4c3e-b241-f792e97bd63d",
            "hashes": {
                "MD5": "c509890d250d6e986e3c3654aa5cea26"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--458dbcd8-1c98-4bbc-bbb2-000d896a2f3a",
            "hashes": {
                "MD5": "c5d9a6478b9b68c213301cb81cbd3833"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--4bb02276-7bb0-4e81-98d7-52c931a1c86b",
            "hashes": {
                "MD5": "5bb049c31f5fb8c4a076def3efb91177"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--c190a14b-2fd6-4d81-8018-da7c999d561e",
            "value": "googleupdate.publicvm.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--0596afda-71b9-40cc-a215-7e4d6f037a6d",
            "value": "chromeupdate.publicvm.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--5a937f19-3fba-4b95-a200-6df5b1183014",
            "value": "1driv.org"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--9b9bc0f9-b282-4594-ac15-685ef5f77212",
            "value": "onedriveupdate.publicvm.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--dca2b2a5-0b80-4dbf-b875-b0fde1ce2006",
            "value": "uploadsfiles.xyz"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--121524d7-e11a-4bc2-9939-f6c7f6ca7f7d",
            "value": "66.181.166.15"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--69153373-fdda-435c-a3be-ce0e6395d6c4",
            "value": "drivegooglshare.xyz"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--b33132d0-0961-46c9-8a6f-bad7c96d9b63",
            "value": "msupdatepms.xyz"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--de7554fc-6c21-42ee-9633-1639834a742d",
            "value": "mskpupdate.publicvm.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--d8bce0de-2499-4959-85c4-153b5f1d96f6",
            "value": "drivegoogle.publicvm.com"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--eb483ad8-9d49-4680-972c-8ea910b7f4f1",
            "hashes": {
                "MD5": "bbd703f0d6b1cad4ff8f3d2ee3cc073c"
            }
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--f9b73b11-e500-54c0-bf96-296bdf6d9355",
            "created": "2026-06-24T19:49:44.040197Z",
            "modified": "2026-06-24T19:49:44.040197Z",
            "name": "CryptoCore"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b",
            "created": "2026-06-24T19:49:44.043865Z",
            "modified": "2026-06-24T19:49:44.043865Z",
            "name": "Lazarus"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--c053f405-5d25-4ff8-83ef-8f0e5475c0fc",
            "created_by_ref": "identity--b1c3d8b9-33cb-40a5-b4af-c4ca272ed26e",
            "created": "2026-06-24T19:49:44.044956Z",
            "modified": "2026-06-24T19:49:44.044956Z",
            "name": "Attributing CryptoCore Attacks Against Crypto Exchanges to LAZARUS (North Korea)",
            "published": "2021-05-24T00:00:00Z",
            "object_refs": [
                "identity--b1c3d8b9-33cb-40a5-b4af-c4ca272ed26e",
                "domain-name--e3631f07-4513-48d1-bf16-b8ca9bc38098",
                "domain-name--f7c87998-ab27-4c7a-924c-bbacc52dc9c7",
                "domain-name--dee5239a-64f9-4bda-98d7-c9d5f42465cd",
                "file--905e545c-e2a2-46f7-b06b-751a51414b84",
                "file--6c5bbfa4-ed46-4407-903d-6d15f3990d27",
                "file--f0cbdd56-d124-4f42-a6d1-36bdf6433615",
                "file--66ac5eab-181a-4a34-896e-a4450f5267d4",
                "file--ab6d96b1-0fc1-4143-8918-11d7981555c9",
                "file--505dcafd-577a-4c97-8d5d-6900d5b1bc8a",
                "file--2d4fca7a-03bb-4afb-9842-1c0b10f7534a",
                "file--ad99605e-fde8-4031-9c3f-4aacb4d12e32",
                "file--cdb20596-ebed-431e-bec3-2fec8de3c1af",
                "file--eeadef67-9b06-419a-bf33-b470e4ce9a87",
                "file--0a226abe-80c6-4db2-9646-057d43d2fe16",
                "file--809b4d3b-f397-4074-aa62-8dd2ba1e69c1",
                "file--b7b0348f-344c-421f-85b4-4b4ea39857dd",
                "file--ba94f969-b499-4575-8936-37646dcd2fef",
                "file--a9bf285e-a55a-44f8-9132-29cf9364df85",
                "file--de00e556-d0e3-4637-a7a2-40e64a7c6c33",
                "file--dada885e-4a43-47f2-8593-f920fb8adc05",
                "file--592365f9-4842-4687-8dc4-9b0519e06712",
                "file--4acd0a1b-c3e9-49d2-b231-54f0b29892fd",
                "file--e6334401-42e3-4c3e-b241-f792e97bd63d",
                "file--458dbcd8-1c98-4bbc-bbb2-000d896a2f3a",
                "file--4bb02276-7bb0-4e81-98d7-52c931a1c86b",
                "domain-name--c190a14b-2fd6-4d81-8018-da7c999d561e",
                "domain-name--0596afda-71b9-40cc-a215-7e4d6f037a6d",
                "domain-name--5a937f19-3fba-4b95-a200-6df5b1183014",
                "domain-name--9b9bc0f9-b282-4594-ac15-685ef5f77212",
                "domain-name--dca2b2a5-0b80-4dbf-b875-b0fde1ce2006",
                "ipv4-addr--121524d7-e11a-4bc2-9939-f6c7f6ca7f7d",
                "domain-name--69153373-fdda-435c-a3be-ce0e6395d6c4",
                "domain-name--b33132d0-0961-46c9-8a6f-bad7c96d9b63",
                "domain-name--de7554fc-6c21-42ee-9633-1639834a742d",
                "domain-name--d8bce0de-2499-4959-85c4-153b5f1d96f6",
                "file--eb483ad8-9d49-4680-972c-8ea910b7f4f1",
                "threat-actor--f9b73b11-e500-54c0-bf96-296bdf6d9355",
                "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.clearskysec.com/wp-content/uploads/2021/05/CryptoCore-Lazarus-Clearsky.pdf"
                }
            ]
        }
    ]
}