{
    "type": "bundle",
    "id": "bundle--836ee1bc-53d7-4608-b08e-b64616244198",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--c7e51838-39bb-4a48-83bd-ce30af0c9402",
            "created": "2024-03-05T10:56:29.07593Z",
            "modified": "2024-10-29T23:27:51.306863Z",
            "name": "Hunt.io",
            "identity_class": "organization"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--9915c9bf-525f-4f00-a266-524e57912f79",
            "value": "sfrclak.com"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--31724907-c57a-4919-88b7-9fb153f4aff3",
            "hashes": {
                "SHA-256": "f7d335205b8d7b20208fb3ef93ee6dc817905dc3ae0c10a0b164f4e7d07121cd"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--e1c69ddd-9282-4fea-8b19-56289e7e718e",
            "hashes": {
                "SHA-256": "e10b1fa84f1d6481625f741b69892780140d4e0e7769e7491e5f4d894c2e0e09"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--105a272f-f352-424d-86e8-78f26d8fda9c",
            "value": "http://sfrclak.com:8000/"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--113f928b-46fb-459a-85b4-12ac83442552",
            "hashes": {
                "SHA-256": "617b67a8e1210e4fc87c92d1d1da45a2f311c08d26e89b12307cf583c900d101"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--cc0c5258-18ba-44b5-be20-97036b027b84",
            "hashes": {
                "SHA-256": "fcb81618bb15edfdedfb638b4c08a2af9cac9ecfa551af135a8402bf980375cf"
            }
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--80e7e8d8-7edf-47e2-af5e-d83f1479276b",
            "value": "ifstap@proton.me"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--663d1619-80f7-43b5-87d1-12d1ccbfc38c",
            "value": "nrwise@proton.me"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--15d803c1-f248-4623-af7b-f379f2a36962",
            "value": "http://sfrclak.com:8000/6202033"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--794180bf-52c3-45df-bf94-6810144b7a2f",
            "value": "142.11.206.73"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--e6b0245a-9e01-402b-a19a-d67c5fd48719",
            "value": "23.254.167.216"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6737405d-c322-4e76-ae32-fe116853ac3e",
            "hashes": {
                "SHA-1": "d6f3f62fd3b9f5432f5782b62d8cfd5247d5ee71"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c163df48-c7da-4467-938a-996dfe8d0f46",
            "hashes": {
                "SHA-1": "07d889e2dadce6f3910dcbc253317d28ca61c766"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ffc9c641-6a8b-46d3-b49b-a6f116019e3d",
            "hashes": {
                "SHA-256": "506690fcbd10fbe6f2b85b49a1fffa9d984c376c25ef6b73f764f670e932cab4"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--f6dcb83f-cf27-4c17-b4fc-1ed480e14765",
            "hashes": {
                "SHA-256": "e1f6b7f621a391a9d26e9a196974f3e2cc1ce8b4d8f73a14b2e8cb0f2a40289f"
            }
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--d7e0746e-887c-464d-be18-1396128e898c",
            "value": "108.174.194.196"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--cfc1ed39-7719-47d7-a3da-8fb1e1adef16",
            "value": "108.174.194.44"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--adcc8e95-a44f-55f4-953b-224a76d65b44",
            "created": "2026-06-24T16:06:29.275289Z",
            "modified": "2026-06-24T16:06:29.275289Z",
            "name": "TA444"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--f7f0d913-f17b-5632-a48a-76b4eef8a1cb",
            "created": "2026-06-24T16:06:29.277766Z",
            "modified": "2026-06-24T16:06:29.277766Z",
            "name": "Bluenoroff"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--7af7170c-a87c-49f1-8fce-fd623dc0e2ef",
            "created_by_ref": "identity--c7e51838-39bb-4a48-83bd-ce30af0c9402",
            "created": "2026-06-24T16:06:29.298099Z",
            "modified": "2026-06-24T16:06:29.298099Z",
            "name": "Breaking Down the Axios Supply Chain Attack: Dropper, Cross-Platform RATs, and BlueNoroff/TA444",
            "published": "2026-04-01T00:00:00Z",
            "object_refs": [
                "identity--c7e51838-39bb-4a48-83bd-ce30af0c9402",
                "domain-name--9915c9bf-525f-4f00-a266-524e57912f79",
                "file--31724907-c57a-4919-88b7-9fb153f4aff3",
                "file--e1c69ddd-9282-4fea-8b19-56289e7e718e",
                "url--105a272f-f352-424d-86e8-78f26d8fda9c",
                "file--113f928b-46fb-459a-85b4-12ac83442552",
                "file--cc0c5258-18ba-44b5-be20-97036b027b84",
                "email-addr--80e7e8d8-7edf-47e2-af5e-d83f1479276b",
                "email-addr--663d1619-80f7-43b5-87d1-12d1ccbfc38c",
                "url--15d803c1-f248-4623-af7b-f379f2a36962",
                "ipv4-addr--794180bf-52c3-45df-bf94-6810144b7a2f",
                "ipv4-addr--e6b0245a-9e01-402b-a19a-d67c5fd48719",
                "file--6737405d-c322-4e76-ae32-fe116853ac3e",
                "file--c163df48-c7da-4467-938a-996dfe8d0f46",
                "file--ffc9c641-6a8b-46d3-b49b-a6f116019e3d",
                "file--f6dcb83f-cf27-4c17-b4fc-1ed480e14765",
                "ipv4-addr--d7e0746e-887c-464d-be18-1396128e898c",
                "ipv4-addr--cfc1ed39-7719-47d7-a3da-8fb1e1adef16",
                "threat-actor--adcc8e95-a44f-55f4-953b-224a76d65b44",
                "threat-actor--f7f0d913-f17b-5632-a48a-76b4eef8a1cb"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://hunt.io/blog/axios-supply-chain-attack-ta444-bluenoroff"
                }
            ]
        }
    ]
}