{
    "type": "bundle",
    "id": "bundle--e39d758a-f980-4053-bc68-379ba2bbaabf",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--49cc63f3-b5a1-4d5c-be95-7453281b704f",
            "created": "2024-07-15T12:08:31.764005Z",
            "modified": "2025-06-30T05:06:50.380749Z",
            "name": "Darkatlas",
            "identity_class": "organization"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--1edef0a4-94a7-47ff-b643-4762e5a60fe4",
            "value": "198.54.117.242"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--36af8359-edce-4396-afe0-321c1e8c81af",
            "value": "156.154.132.200"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--d4290dce-e595-4d4d-aec2-dd84bb15e6bb",
            "value": "192.119.116.231"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--08492059-4b91-4f88-a459-1a85edae096a",
            "value": "104.168.151.116"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--29382a81-88ca-4a7c-a5fd-8f92111de4ad",
            "hashes": {
                "SHA-256": "dbe48dc08216850e93082b4d27868a7ca51656d9e55366f2642fc5106e3af980"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--4f964be8-0598-4c7b-bf7b-afb711a8c533",
            "value": "socialsuport.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--669697c6-a65b-46d1-929b-b05b83a3bc23",
            "value": "bellezalatam.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--a3e2668b-a3f7-4671-8552-d053acc093d7",
            "value": "hwsrv-587720.hostwindsdns.com"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--6c7b5004-2432-408c-bca5-db3d4926624c",
            "value": "140.82.20.246"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--eddb5e68-63d7-429f-adaf-f4f8f45b8cba",
            "value": "192.64.119.169"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--3b4a2a58-aacd-4c42-af1d-6f63560681ab",
            "value": "104.168.136.24"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--a423992e-1a75-46b8-9480-24f85c470a57",
            "value": "198.57.247.218"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--f7f0d913-f17b-5632-a48a-76b4eef8a1cb",
            "created": "2026-06-24T17:27:57.813339Z",
            "modified": "2026-06-24T17:27:57.813339Z",
            "name": "Bluenoroff"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--f4c637a3-d93e-49d7-a7a1-f3ff2cf3ea7e",
            "created_by_ref": "identity--49cc63f3-b5a1-4d5c-be95-7453281b704f",
            "created": "2026-06-24T17:27:57.814376Z",
            "modified": "2026-06-24T17:27:57.814376Z",
            "name": "Bluenoroff (APT38) Live Infrastructure Hunting",
            "published": "2025-06-23T00:00:00Z",
            "object_refs": [
                "identity--49cc63f3-b5a1-4d5c-be95-7453281b704f",
                "ipv4-addr--1edef0a4-94a7-47ff-b643-4762e5a60fe4",
                "ipv4-addr--36af8359-edce-4396-afe0-321c1e8c81af",
                "ipv4-addr--d4290dce-e595-4d4d-aec2-dd84bb15e6bb",
                "ipv4-addr--08492059-4b91-4f88-a459-1a85edae096a",
                "file--29382a81-88ca-4a7c-a5fd-8f92111de4ad",
                "domain-name--4f964be8-0598-4c7b-bf7b-afb711a8c533",
                "domain-name--669697c6-a65b-46d1-929b-b05b83a3bc23",
                "domain-name--a3e2668b-a3f7-4671-8552-d053acc093d7",
                "ipv4-addr--6c7b5004-2432-408c-bca5-db3d4926624c",
                "ipv4-addr--eddb5e68-63d7-429f-adaf-f4f8f45b8cba",
                "ipv4-addr--3b4a2a58-aacd-4c42-af1d-6f63560681ab",
                "ipv4-addr--a423992e-1a75-46b8-9480-24f85c470a57",
                "threat-actor--f7f0d913-f17b-5632-a48a-76b4eef8a1cb"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://darkatlas.io/blog/bluenoroff-apt38-live-infrastructure-hunting"
                }
            ]
        }
    ]
}