{
    "type": "bundle",
    "id": "bundle--62f9e702-71e5-451e-a6ef-2a6fedbec28f",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--018ab958-b94d-441e-991f-a101a5144848",
            "created": "2023-03-08T12:51:42.869471Z",
            "modified": "2024-11-07T23:01:18.079469Z",
            "name": "SentinelOne",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--773c479e-a07d-48fb-8e69-8b77d5e1c37e",
            "hashes": {
                "SHA-1": "182760cbe11fa0316abfb8b7b00b63f83159f5aa"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d7465d54-82cf-4a1d-939d-67b57fc6b6cf",
            "hashes": {
                "SHA-1": "7e69cb4f9c37fad13de85e91b5a05a816d14f490"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--847c0496-d4d7-4e6c-8a0a-8f031c37332e",
            "hashes": {
                "SHA-1": "831dc7bc4a234907d94a889bcb60b7bedf1a1e13"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--a6281ae2-3320-4630-a951-87f787db85e1",
            "hashes": {
                "SHA-1": "5304031dc990790a26184b05b3019b2c5fa7022a"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--0665a39a-1473-48cd-a3f1-1b0245a085b8",
            "hashes": {
                "SHA-1": "7f8f43326f1ce505a8cd9f469a2ded81fa5c81be"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--808a55bb-eb2e-45bc-8278-0286ec19be35",
            "hashes": {
                "SHA-1": "89301dfdc5361f1650796fecdac30b7d86c65122"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--3464221c-21aa-4230-85cd-338c70c6bdb3",
            "hashes": {
                "SHA-1": "3cc19cef767dee93588525c74fe9c1f1bf6f8007"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--73f460b8-47ec-47d4-9997-92a5216feb12",
            "hashes": {
                "SHA-1": "5933f1a20117d48985b60b10b5e42416ac00e018"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--8346377c-f995-4598-8a67-c5c1e382ea41",
            "hashes": {
                "SHA-1": "ed4f16b36bc47a701814b63e30d8ea7a226ca906"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--757eb651-5545-4811-abc6-ccd5b9757532",
            "hashes": {
                "SHA-1": "d9f1392fb7ed010a0ecc4f819782c179efde9687"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--04090670-81c9-494e-bc7b-761d6c84adf8",
            "hashes": {
                "SHA-1": "0df7e1d3b3d54336d986574441778c827ff84bf2"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--aaa4bcf5-4eb0-4e22-81a1-47497af4f04b",
            "hashes": {
                "SHA-1": "72167ec09d62cdfb04698c3f96a6131dceb24a9c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--2ed870ce-c645-4968-8185-ae78ee7a84de",
            "hashes": {
                "SHA-1": "7a5d57c7e2b0c8ab7d60f7a7c7f4649f33fea8aa"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--db2b7dd0-0c96-4e14-a48d-f2f0b373c971",
            "hashes": {
                "SHA-1": "d5971e8a3e8577dbb6f5a9aad248c842a33e7a26"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--17a66ca7-7f4c-47b5-bfaa-ce47ba6d8154",
            "hashes": {
                "SHA-1": "8e7b4a0d9a73ec891edf5b2839602ccab4af5bdf"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c4d4e92f-a973-44bc-aaef-0101bd1038ee",
            "hashes": {
                "SHA-1": "69f24956fb75beb9b93ef974d873914500e35601"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--f54c9af8-d63e-4e68-a868-28e5b23cba86",
            "hashes": {
                "SHA-1": "dabb4372050264f389b8adcf239366860662ac52"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--740d9476-8885-4074-b353-6c241f9c80ae",
            "hashes": {
                "SHA-1": "ac08406818bbf4fe24ea04bfd72f747c89174bdb"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d05478da-13f2-4132-9117-3b03ec09f682",
            "hashes": {
                "SHA-1": "9121509d674091ce1f5f30e9a372b5dcf9bcd257"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--f17b36da-55d6-4104-a3b9-b5b3551fa237",
            "hashes": {
                "SHA-1": "e7158bb75adf27262ec3b0f2ca73c802a6222379"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--e92a0147-fc87-423f-80b2-90d707212bc7",
            "hashes": {
                "SHA-1": "963a86aab1e450b03d51628797572fe9da8410a2"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d4b5dff9-3d00-4468-b146-9b869ad9ddfd",
            "hashes": {
                "SHA-1": "27b101707b958139c32388eb4fd79fcd133ed880"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--0840cbc9-82f6-4e6b-ba3c-af6278f95a62",
            "hashes": {
                "SHA-1": "a7f5bf893efa3f6b489efe24195c05ff87585fe3"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7b0ad354-1a8b-4153-b645-f815388aa001",
            "hashes": {
                "SHA-1": "9676f0758c8e8d0e0d203c75b922bcd0aeaa0873"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--fd609ebc-2602-4f27-9647-6d05c19d39cd",
            "hashes": {
                "SHA-1": "fd1cef5abe3e0c275671916a1f3a566f13489416"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d28a76dd-d27d-451a-ab7e-dd8426845d55",
            "hashes": {
                "SHA-1": "b02922869e86ad06ff6380e8ec0be8db38f5002b"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--f2036c53-1a66-4d35-885a-f3ac3ed20369",
            "hashes": {
                "SHA-1": "469236d0054a270e117a2621f70f2a494e7fb823"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--46e9b213-5f43-49b4-857a-3dc300a1e692",
            "hashes": {
                "SHA-1": "a1a85cba1bc4ac9f6eafc548b1454f57b4dff7e0"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--19096ff6-36bb-40ae-9340-2fcf960c060c",
            "hashes": {
                "SHA-1": "338af1d91b846f2238d5a518f951050f90693488"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--fc3432cd-1cec-4ec7-8617-a47ead32c91b",
            "hashes": {
                "SHA-1": "cd8f41b91e8f1d8625e076f0a161e46e32c62bbf"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--33c3ee6f-228d-40c3-b5f4-3401e456d3ee",
            "hashes": {
                "SHA-1": "acf1b5b47789badb519ff60dc93afa9e43bbb376"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b261a9ff-a3d6-42b1-b602-2c91d483e266",
            "hashes": {
                "SHA-1": "9a5f6a641cc170435f52c6a759709a62ad5757c7"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--5b05a864-db27-4724-a100-62d8d3d53356",
            "hashes": {
                "SHA-1": "8a1b32ab8c2a889985e530425ae00f4428c575cc"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--de4d36b1-a516-4794-a74d-1469144c64dc",
            "hashes": {
                "SHA-1": "b74702c9b82f23ebf76805f1853bc72236bee57c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--cd739a7f-c13e-4697-b335-4e47c2832ff9",
            "hashes": {
                "SHA-1": "be234cb6819039d6a1d3b1a205b9f74b6935bbcc"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--9b06bd00-96cc-44ec-9cf7-d5ee245706f3",
            "hashes": {
                "SHA-1": "0738687206a88ecbee176e05e0518effa4ca4166"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--3c2feb23-96ba-445e-b54a-f9f5cf0e98e9",
            "hashes": {
                "SHA-1": "7e1870a5b24c78a5e357568969aae3a5e7ab857d"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--767056cd-cf09-4fce-9d75-0372f8f18873",
            "hashes": {
                "SHA-1": "e2bcdfbda85c55a4d6070c18723ba4adb7631807"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--39e795fa-2f17-4843-bf3e-409b8926c43b",
            "hashes": {
                "SHA-1": "7f9694b46227a8ebc67745e533bc0c5f38fdfa59"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--9f51f5f7-19fd-4e19-ab01-8524e9126e5b",
            "hashes": {
                "SHA-1": "574bbb76ef147b95dfdf11069aaaa90df968e542"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--4bb7238b-3e88-4f41-b0a0-cb7fdc3a2bf5",
            "value": "crypto.hondchain.com"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--2508205f-86e1-40d7-aca2-ede13dc9c70f",
            "hashes": {
                "SHA-1": "e0e42ac374443500c236721341612865cd3d1eec"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--4831b205-3bf0-4249-a3c7-77939e77f035",
            "hashes": {
                "SHA-1": "ca59874172660e6180af2815c3a42c85169aa0b2"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c74d1bbf-a2a6-429c-bc66-42f6b18058d7",
            "hashes": {
                "SHA-1": "0be69bb9836b2a266bfd9a8b93bb412b6e4ce1be"
            }
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--f7f0d913-f17b-5632-a48a-76b4eef8a1cb",
            "created": "2026-06-24T23:51:04.814482Z",
            "modified": "2026-06-24T23:51:04.814482Z",
            "name": "Bluenoroff"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--d8c86d9a-7bd7-4c18-bcd7-5185aa31ace0",
            "created_by_ref": "identity--018ab958-b94d-441e-991f-a101a5144848",
            "created": "2026-06-24T23:51:04.81855Z",
            "modified": "2026-06-24T23:51:04.81855Z",
            "name": "BlueNoroff | How DPRK\u2019s macOS RustBucket Seeks to Evade Analysis and Detection",
            "published": "2023-07-05T00:00:00Z",
            "object_refs": [
                "identity--018ab958-b94d-441e-991f-a101a5144848",
                "file--773c479e-a07d-48fb-8e69-8b77d5e1c37e",
                "file--d7465d54-82cf-4a1d-939d-67b57fc6b6cf",
                "file--847c0496-d4d7-4e6c-8a0a-8f031c37332e",
                "file--a6281ae2-3320-4630-a951-87f787db85e1",
                "file--0665a39a-1473-48cd-a3f1-1b0245a085b8",
                "file--808a55bb-eb2e-45bc-8278-0286ec19be35",
                "file--3464221c-21aa-4230-85cd-338c70c6bdb3",
                "file--73f460b8-47ec-47d4-9997-92a5216feb12",
                "file--8346377c-f995-4598-8a67-c5c1e382ea41",
                "file--757eb651-5545-4811-abc6-ccd5b9757532",
                "file--04090670-81c9-494e-bc7b-761d6c84adf8",
                "file--aaa4bcf5-4eb0-4e22-81a1-47497af4f04b",
                "file--2ed870ce-c645-4968-8185-ae78ee7a84de",
                "file--db2b7dd0-0c96-4e14-a48d-f2f0b373c971",
                "file--17a66ca7-7f4c-47b5-bfaa-ce47ba6d8154",
                "file--c4d4e92f-a973-44bc-aaef-0101bd1038ee",
                "file--f54c9af8-d63e-4e68-a868-28e5b23cba86",
                "file--740d9476-8885-4074-b353-6c241f9c80ae",
                "file--d05478da-13f2-4132-9117-3b03ec09f682",
                "file--f17b36da-55d6-4104-a3b9-b5b3551fa237",
                "file--e92a0147-fc87-423f-80b2-90d707212bc7",
                "file--d4b5dff9-3d00-4468-b146-9b869ad9ddfd",
                "file--0840cbc9-82f6-4e6b-ba3c-af6278f95a62",
                "file--7b0ad354-1a8b-4153-b645-f815388aa001",
                "file--fd609ebc-2602-4f27-9647-6d05c19d39cd",
                "file--d28a76dd-d27d-451a-ab7e-dd8426845d55",
                "file--f2036c53-1a66-4d35-885a-f3ac3ed20369",
                "file--46e9b213-5f43-49b4-857a-3dc300a1e692",
                "file--19096ff6-36bb-40ae-9340-2fcf960c060c",
                "file--fc3432cd-1cec-4ec7-8617-a47ead32c91b",
                "file--33c3ee6f-228d-40c3-b5f4-3401e456d3ee",
                "file--b261a9ff-a3d6-42b1-b602-2c91d483e266",
                "file--5b05a864-db27-4724-a100-62d8d3d53356",
                "file--de4d36b1-a516-4794-a74d-1469144c64dc",
                "file--cd739a7f-c13e-4697-b335-4e47c2832ff9",
                "file--9b06bd00-96cc-44ec-9cf7-d5ee245706f3",
                "file--3c2feb23-96ba-445e-b54a-f9f5cf0e98e9",
                "file--767056cd-cf09-4fce-9d75-0372f8f18873",
                "file--39e795fa-2f17-4843-bf3e-409b8926c43b",
                "file--9f51f5f7-19fd-4e19-ab01-8524e9126e5b",
                "domain-name--4bb7238b-3e88-4f41-b0a0-cb7fdc3a2bf5",
                "file--2508205f-86e1-40d7-aca2-ede13dc9c70f",
                "file--4831b205-3bf0-4249-a3c7-77939e77f035",
                "file--c74d1bbf-a2a6-429c-bc66-42f6b18058d7",
                "threat-actor--f7f0d913-f17b-5632-a48a-76b4eef8a1cb"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.sentinelone.com/blog/bluenoroff-how-dprks-macos-rustbucket-seeks-to-evade-analysis-and-detection/"
                }
            ]
        }
    ]
}