{
    "type": "bundle",
    "id": "bundle--96f8157b-3a17-4d9c-8e0c-5a2188d9f6ef",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--018ab958-b94d-441e-991f-a101a5144848",
            "created": "2023-03-08T12:51:42.869471Z",
            "modified": "2024-11-07T23:01:18.079469Z",
            "name": "SentinelOne",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--5e7e1ca2-64d0-4069-a5c6-e1e97ff1a37d",
            "hashes": {
                "SHA-1": "7e07765bf8ee2d0b2233039623016d6dfb610a6d"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--c44352a5-ddf8-458b-89fe-06d3cc8d4e4a",
            "value": "matuaner.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--ab43bc8d-ad84-4fc7-8ccd-25ba47fe8012",
            "value": "buy2x.com"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ff0f07c7-af88-4c9e-bd82-7640bbd3b044",
            "hashes": {
                "SHA-1": "baf4da6b89b7d7cbf24c9deef5984ef9dfd52e6a"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--fec1d212-1886-4b14-9cb0-45398956d7b7",
            "hashes": {
                "SHA-1": "05c178891ca1e65af53bbcfdbec573da3f74d176"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--519d4bed-c8d7-41f8-a602-32e99f8927d7",
            "hashes": {
                "SHA-1": "e5d97afa5f1501b3d5ec1a471dc8a3b8e2a84fdb"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7f6764a8-a0c7-40fb-9948-3c078d8159f6",
            "hashes": {
                "SHA-1": "3f17c5a7d1e7fd138163d8039e614b8a967a56cb"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--c03adf1d-91c9-4ea3-8f2c-409980bd7688",
            "value": "arkinvst.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--32ac2ef7-066f-4e2f-85f2-1a19f8892238",
            "value": "analysis.arkinvst.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--adc17b92-c116-439d-9a2b-72e9b671aa8c",
            "value": "maelstromfund.org"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--864c7b13-833a-4192-91fc-e2aa4c958d20",
            "value": "atajerefoods.com"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--53bd31cf-910d-4b94-bb59-4095d39b46c9",
            "value": "23.254.253.75"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--dce4b1c4-efd9-4f26-b555-430173764daa",
            "value": "144.172.74.23"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--942afbba-9e4a-4849-b6a4-265e9064b47e",
            "value": "144.172.74.141"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--3567c372-f84e-42ec-8e28-0b728b755036",
            "value": "172.86.108.47"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--ec6083e6-9375-47b8-872b-37a8bd9d067a",
            "value": "45.61.135.105"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--83f1bc70-2c82-426b-bc90-229743dd7fab",
            "value": "45.61.128.122"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--b730c154-95d9-467e-bbd3-97701360a28d",
            "value": "45.61.140.26"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--c50d42cc-fefc-4c66-be9d-fd75d4eca007",
            "value": "216.107.136.10"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--0d9b0022-6e8a-4def-9c5e-4c5f5999f85b",
            "value": "meet.selinicapital.xyz"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--2e102c83-38df-42c1-8602-1e6668e74d9d",
            "value": "meeting.sellinicapital.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--c38fd341-2b1a-473d-a260-4487bb94f60a",
            "value": "info.customer-app.xyz"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--8c06e8c7-da32-4940-9521-ea2a2beb7af9",
            "value": "sellinicapital.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--44806121-dba4-40f9-a7c7-3bb6c6e8eec8",
            "value": "verify.selinicapital.info"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--3ae1b847-70f6-4e01-81d3-64655884836b",
            "value": "email.sellinicapital.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--f1f8af41-f236-44af-88f9-4cbbe5089fa5",
            "value": "info.ankanimatoka.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--d08ae95f-59c3-46c8-aaa1-8137af8a36da",
            "value": "sendmailed.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--2139bf7c-1fb2-42c1-8498-934b7f3f5e15",
            "value": "tvdhoenn.net"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--8c70537b-7607-4ebb-9664-3108bafa2546",
            "value": "doc.solanalab.org"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--cbb7932d-1287-487f-ba69-85fd223c30eb",
            "value": "meeting.zoom-client.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--dce4f8b8-0a7e-4844-84fa-570475d8e653",
            "value": "selinicapital.info"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--948cd9f8-1256-4e5b-9223-4a11f6e70e58",
            "value": "customer-app.xyz"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--5224ff45-dad0-4dda-b041-39545d9c6651",
            "value": "drogueriasanjose.net"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--82b163d1-4d42-42e1-92d6-ec6ee989e5ea",
            "value": "xu10.1056.uk"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--75d73c41-a6b5-47c3-bf43-26c1790fbab8",
            "value": "pixelmonmmo.net"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--6917d33d-25e9-4f66-8105-c900f3bae172",
            "value": "selincapital.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--8256ff05-9fb7-4acf-80c5-d53be1addbd7",
            "value": "mc.tvdhoenn.net"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--2a72d4b0-f469-43a4-93f9-7019c51fc09a",
            "value": "meet.selinicapital.info"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--dcda810d-8cf0-4607-bf4e-ab54d95a24e1",
            "value": "online.selinicapital.info"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--cefe39ca-c27d-4747-8289-76a1170175bc",
            "value": "zoom-client.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--dd3d8f75-eb3d-4c7e-b8be-8c3fe693e340",
            "value": "sendmailer.org"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--16a6700f-f6c7-47e1-8d50-198024a46068",
            "value": "nodnote.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--105f2dab-65f1-437c-86fc-f4da24b4cc99",
            "value": "kalpadvisory.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--adb8cf6c-fae0-4110-87b4-0508772c8c9b",
            "value": "dourolab.xyz"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--828b3db7-f0bf-4165-9d9b-c804090d4c31",
            "value": "mg21.1056.uk"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--ae4fc0ac-07ea-4898-b3f1-6298cf389ec9",
            "value": "shh5.baranftw.xyz"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--28fa681a-82fd-4cdf-bb4a-92b95c93326f",
            "value": "cardiagnostic.net"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--01914759-f0cd-4546-90f5-f1b56e3195c4",
            "value": "online.zoom-client.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--f0a2bcda-d77f-4d61-a4b7-3a0b7d4ac400",
            "value": "meet.sellinicapital.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--6924b226-33b0-49d3-80d2-659d9a421355",
            "value": "community.selincapital.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--0040aba8-0409-4b37-a343-b93bc6082e6d",
            "value": "evalaskatours.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--4c21858e-8e11-4e69-a46b-7f47339fc407",
            "value": "delphidigital.org"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--2099996e-ed1c-4408-b783-296e635981d4",
            "value": "meet.caladangroup.xyz"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--91c6db41-d5da-4c6b-b648-e3eb785be651",
            "value": "hwsrv-1225327.hostwindsdns.com"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--f7f0d913-f17b-5632-a48a-76b4eef8a1cb",
            "created": "2026-06-24T22:43:41.188393Z",
            "modified": "2026-06-24T22:43:41.188393Z",
            "name": "Bluenoroff"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--c9845f46-b336-4638-955f-cb9f80744272",
            "created_by_ref": "identity--018ab958-b94d-441e-991f-a101a5144848",
            "created": "2026-06-24T22:43:41.192371Z",
            "modified": "2026-06-24T22:43:41.192371Z",
            "name": "BlueNoroff Hidden Risk | Threat Actor Targets Macs with Fake Crypto News and Novel Persistence",
            "published": "2024-11-07T00:00:00Z",
            "object_refs": [
                "identity--018ab958-b94d-441e-991f-a101a5144848",
                "file--5e7e1ca2-64d0-4069-a5c6-e1e97ff1a37d",
                "domain-name--c44352a5-ddf8-458b-89fe-06d3cc8d4e4a",
                "domain-name--ab43bc8d-ad84-4fc7-8ccd-25ba47fe8012",
                "file--ff0f07c7-af88-4c9e-bd82-7640bbd3b044",
                "file--fec1d212-1886-4b14-9cb0-45398956d7b7",
                "file--519d4bed-c8d7-41f8-a602-32e99f8927d7",
                "file--7f6764a8-a0c7-40fb-9948-3c078d8159f6",
                "domain-name--c03adf1d-91c9-4ea3-8f2c-409980bd7688",
                "domain-name--32ac2ef7-066f-4e2f-85f2-1a19f8892238",
                "domain-name--adc17b92-c116-439d-9a2b-72e9b671aa8c",
                "domain-name--864c7b13-833a-4192-91fc-e2aa4c958d20",
                "ipv4-addr--53bd31cf-910d-4b94-bb59-4095d39b46c9",
                "ipv4-addr--dce4b1c4-efd9-4f26-b555-430173764daa",
                "ipv4-addr--942afbba-9e4a-4849-b6a4-265e9064b47e",
                "ipv4-addr--3567c372-f84e-42ec-8e28-0b728b755036",
                "ipv4-addr--ec6083e6-9375-47b8-872b-37a8bd9d067a",
                "ipv4-addr--83f1bc70-2c82-426b-bc90-229743dd7fab",
                "ipv4-addr--b730c154-95d9-467e-bbd3-97701360a28d",
                "ipv4-addr--c50d42cc-fefc-4c66-be9d-fd75d4eca007",
                "domain-name--0d9b0022-6e8a-4def-9c5e-4c5f5999f85b",
                "domain-name--2e102c83-38df-42c1-8602-1e6668e74d9d",
                "domain-name--c38fd341-2b1a-473d-a260-4487bb94f60a",
                "domain-name--8c06e8c7-da32-4940-9521-ea2a2beb7af9",
                "domain-name--44806121-dba4-40f9-a7c7-3bb6c6e8eec8",
                "domain-name--3ae1b847-70f6-4e01-81d3-64655884836b",
                "domain-name--f1f8af41-f236-44af-88f9-4cbbe5089fa5",
                "domain-name--d08ae95f-59c3-46c8-aaa1-8137af8a36da",
                "domain-name--2139bf7c-1fb2-42c1-8498-934b7f3f5e15",
                "domain-name--8c70537b-7607-4ebb-9664-3108bafa2546",
                "domain-name--cbb7932d-1287-487f-ba69-85fd223c30eb",
                "domain-name--dce4f8b8-0a7e-4844-84fa-570475d8e653",
                "domain-name--948cd9f8-1256-4e5b-9223-4a11f6e70e58",
                "domain-name--5224ff45-dad0-4dda-b041-39545d9c6651",
                "domain-name--82b163d1-4d42-42e1-92d6-ec6ee989e5ea",
                "domain-name--75d73c41-a6b5-47c3-bf43-26c1790fbab8",
                "domain-name--6917d33d-25e9-4f66-8105-c900f3bae172",
                "domain-name--8256ff05-9fb7-4acf-80c5-d53be1addbd7",
                "domain-name--2a72d4b0-f469-43a4-93f9-7019c51fc09a",
                "domain-name--dcda810d-8cf0-4607-bf4e-ab54d95a24e1",
                "domain-name--cefe39ca-c27d-4747-8289-76a1170175bc",
                "domain-name--dd3d8f75-eb3d-4c7e-b8be-8c3fe693e340",
                "domain-name--16a6700f-f6c7-47e1-8d50-198024a46068",
                "domain-name--105f2dab-65f1-437c-86fc-f4da24b4cc99",
                "domain-name--adb8cf6c-fae0-4110-87b4-0508772c8c9b",
                "domain-name--828b3db7-f0bf-4165-9d9b-c804090d4c31",
                "domain-name--ae4fc0ac-07ea-4898-b3f1-6298cf389ec9",
                "domain-name--28fa681a-82fd-4cdf-bb4a-92b95c93326f",
                "domain-name--01914759-f0cd-4546-90f5-f1b56e3195c4",
                "domain-name--f0a2bcda-d77f-4d61-a4b7-3a0b7d4ac400",
                "domain-name--6924b226-33b0-49d3-80d2-659d9a421355",
                "domain-name--0040aba8-0409-4b37-a343-b93bc6082e6d",
                "domain-name--4c21858e-8e11-4e69-a46b-7f47339fc407",
                "domain-name--2099996e-ed1c-4408-b783-296e635981d4",
                "domain-name--91c6db41-d5da-4c6b-b648-e3eb785be651",
                "threat-actor--f7f0d913-f17b-5632-a48a-76b4eef8a1cb"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.sentinelone.com/labs/bluenoroff-hidden-risk-threat-actor-targets-macs-with-fake-crypto-news-and-novel-persistence/"
                }
            ]
        }
    ]
}