{
    "type": "bundle",
    "id": "bundle--8bb1e29a-dfdb-4fa4-b34c-4e4896c69154",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--483c1127-0f26-473b-8bf2-e2f7ab2c0c1f",
            "created": "2023-03-08T12:52:00.332108Z",
            "modified": "2025-02-23T23:00:11.709116Z",
            "name": "Checkpoint",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b868389e-33ef-481d-ab7c-6bf0c3b4d711",
            "hashes": {
                "SHA-256": "0e926d8b6fbf6f14a2a19d4d4af843253f9f5f6de337956a12dde279f3321d78"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--fe9554bf-21fd-4dc3-918a-1c68fb64544c",
            "hashes": {
                "SHA-256": "5a3f1d14b9cc4890db64fbc41818d7039f25b0120574dcdec4e20d13e6b2740c"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--0cfe75e7-3dce-4731-856b-d3a4c1cdc14b",
            "value": "naver-file.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--b58bdbba-49fa-4bc5-814e-b5b7ca8af7b2",
            "value": "naver-storage.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--5742599d-af59-4b03-8e2e-84b2185537b6",
            "value": "daum-store.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--6e5c4af2-ec54-4b7c-83c8-94ca35eaafcf",
            "value": "nate-download.com"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--30d618d9-b7e1-4c0b-bea5-ed4103b1b968",
            "value": "https://1drv.ms/u/s!AhQMP6eg8aRFb7LU1COCf3xNo"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--36a5870c-5524-49d2-9596-b0e206c9b0cc",
            "value": "https://1drv.ms/u/s!AjQNLvEE_CUObPWg-xOdo1EqX"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--2ca9cade-597f-485a-926d-58d5033111ec",
            "value": "https://api.onedrive.com/v1.0/shares/u!aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBalFOTHZFRV9DVU9iUFdnLXhPZG8xRXFYckU_ZT1BM1QwV2Q/root/content"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--85ddfecf-61ca-47a5-b8f1-72e7526a0a6f",
            "hashes": {
                "SHA-256": "1e0b5d6b85fca648061fdaf2830c5a90248519e81e78122467c29beeb78daa1e"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--1cf4ad02-d383-4add-9df9-f5196c8f6055",
            "value": "https://1drv.ms/i/s!AhXEXLJSNMPTbfzgUMxNbInC6"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--94113e29-da44-4222-b736-b16c241086f8",
            "hashes": {
                "SHA-256": "6753933cd54e4eba497c48d63c7418a8946b4b6c44170105d489d29f1fe11494"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--5084eb0a-bc51-4644-b406-a55a2b577d2a",
            "hashes": {
                "SHA-256": "cb4c7037c7620e4ce3f8f43161b0ec67018c09e71ae4cea3018104153fbed286"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7077b722-a268-4381-83c3-1d6057709723",
            "hashes": {
                "SHA-256": "240e7bd805bd7f2d17217dd4cebc03ac37ee60b7fb1264655cfd087749db647a"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--af1aedaf-10d1-4e6f-8516-7a9ac7c455eb",
            "hashes": {
                "SHA-256": "f92297c4efabba98befeb992a009462d1aba6f3c3a11210a7c054ff5377f0753"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--39d73c85-616c-4aa4-aff6-cb29a4640afd",
            "hashes": {
                "SHA-256": "06431a5d8f6262cc3db39d911a920f793fa6c648be94daf789c11cc5514d0c3d"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--bf557b2a-0bc9-4cab-a1e2-7b29eb0ddedf",
            "hashes": {
                "SHA-256": "1c5b9409243bfb81a5924881cc05f63a301a3a7ce214830c7a83aeb2485cc5c3"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--5adfbad8-21d0-4715-8c5d-a1c80211aa6a",
            "hashes": {
                "SHA-256": "00d88009fa50bfab849593291cce20f8b2f2e2cf2428d9728e06c69fced55ed5"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--0ce01b32-20c8-417a-a469-f4be1180cad3",
            "value": "https://1drv.ms/u/s!Au2my1xh6t8XgR2Mzms8nhRwo-6B?e=jHHC6y"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--4a446b94-79c8-4276-9233-0947536c96bd",
            "hashes": {
                "SHA-256": "12ecabf01508c40cfea1ebc3958214751acfb1cd79a5bf2a4b42ebf172d7381b"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--732f5187-f66e-4091-a20c-4b01615fa3c9",
            "value": "https://1drv.ms/u/s!Au2my1xh6t8XdIJlymxomZlWv"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--62194a73-a1fc-493b-8b91-d7ed3c2ddfc9",
            "hashes": {
                "SHA-256": "6234ef67435dfcb65bd661b5f3bb0b77b82fe6cdd2109b6dfb9dea1b65a17d5d"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6c2f0d25-583f-400f-bb17-108f98878cb2",
            "hashes": {
                "SHA-256": "050c65d45e5f21018aa940f0188c4aa1318ac3df865d901f8643ed7ce4a4b52c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--961624b9-180d-443d-b94c-27b74f8a3666",
            "hashes": {
                "SHA-256": "c5c05f9df89fc803884fed2bd20a3824eae95eeb34a1827bf5210e4ac17beadd"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--2a155c87-1783-4e7f-bbef-af88e20a8251",
            "hashes": {
                "SHA-256": "70f9216f0c5badb24120f74270dbbc5100b07c4fc6eb45f6652b00882290a73c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d63e4996-b549-41e5-a496-5d16e65f6e26",
            "hashes": {
                "SHA-256": "eb03f8b8e41b3ad27ccdecb092111e2c3c010436ad59add42755e2af04762b67"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7fa0c7a0-5f63-4031-90c4-a10c9d09489e",
            "hashes": {
                "SHA-256": "9a4c61cdf0e291dc364c568aa161f744f59065efeafc72a3f892e12cbf88fc5b"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ab355a04-64f5-4b81-8d1b-95fa69366442",
            "hashes": {
                "SHA-256": "c4029a2f1d0c07ae2b388b5a4076fba41e57af0dd0d2d0f86844464f22d63861"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--8ff52fdf-572f-4a59-b113-367ed55ab752",
            "hashes": {
                "SHA-256": "732fca9be66ba2c40c5d05845540207b9e1480e609d767aff63895bf49d33a81"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ce646701-6228-49be-990d-922d0a64c452",
            "hashes": {
                "SHA-256": "479894be4c5dec0992ad3c5b21fb1423643996d80d59dcca76386bb325dc811e"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--c8fb3fec-ae73-4a23-82e9-d4e7277ab3aa",
            "value": "1erluw.bl.files.1drv.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--68acfcbe-0912-45c1-a0ca-f478e334eaf3",
            "value": "u9izog.dm.files.1drv.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--1c2ff955-b411-4591-b215-e27f34f76012",
            "value": "qb3oaq.bl.files.1drv.com"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--a4893397-f8b7-450d-a265-aa53243594bc",
            "hashes": {
                "SHA-256": "3252345b2640efc44cdd98667dbd25806ee2316d1e01eec488fd678e885aa960"
            }
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--3be555f5-1f0d-5001-b84a-c6c910760fd0",
            "created": "2026-06-24T19:17:19.90466Z",
            "modified": "2026-06-24T19:17:19.90466Z",
            "name": "APT37"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--1939f2a9-aa63-439c-8129-3266e8c1303c",
            "created_by_ref": "identity--483c1127-0f26-473b-8bf2-e2f7ab2c0c1f",
            "created": "2026-06-24T19:17:19.908636Z",
            "modified": "2026-06-24T19:17:19.908636Z",
            "name": "CHAIN REACTION: ROKRAT\u2019S MISSING LINK",
            "published": "2023-05-01T00:00:00Z",
            "object_refs": [
                "identity--483c1127-0f26-473b-8bf2-e2f7ab2c0c1f",
                "file--b868389e-33ef-481d-ab7c-6bf0c3b4d711",
                "file--fe9554bf-21fd-4dc3-918a-1c68fb64544c",
                "domain-name--0cfe75e7-3dce-4731-856b-d3a4c1cdc14b",
                "domain-name--b58bdbba-49fa-4bc5-814e-b5b7ca8af7b2",
                "domain-name--5742599d-af59-4b03-8e2e-84b2185537b6",
                "domain-name--6e5c4af2-ec54-4b7c-83c8-94ca35eaafcf",
                "url--30d618d9-b7e1-4c0b-bea5-ed4103b1b968",
                "url--36a5870c-5524-49d2-9596-b0e206c9b0cc",
                "url--2ca9cade-597f-485a-926d-58d5033111ec",
                "file--85ddfecf-61ca-47a5-b8f1-72e7526a0a6f",
                "url--1cf4ad02-d383-4add-9df9-f5196c8f6055",
                "file--94113e29-da44-4222-b736-b16c241086f8",
                "file--5084eb0a-bc51-4644-b406-a55a2b577d2a",
                "file--7077b722-a268-4381-83c3-1d6057709723",
                "file--af1aedaf-10d1-4e6f-8516-7a9ac7c455eb",
                "file--39d73c85-616c-4aa4-aff6-cb29a4640afd",
                "file--bf557b2a-0bc9-4cab-a1e2-7b29eb0ddedf",
                "file--5adfbad8-21d0-4715-8c5d-a1c80211aa6a",
                "url--0ce01b32-20c8-417a-a469-f4be1180cad3",
                "file--4a446b94-79c8-4276-9233-0947536c96bd",
                "url--732f5187-f66e-4091-a20c-4b01615fa3c9",
                "file--62194a73-a1fc-493b-8b91-d7ed3c2ddfc9",
                "file--6c2f0d25-583f-400f-bb17-108f98878cb2",
                "file--961624b9-180d-443d-b94c-27b74f8a3666",
                "file--2a155c87-1783-4e7f-bbef-af88e20a8251",
                "file--d63e4996-b549-41e5-a496-5d16e65f6e26",
                "file--7fa0c7a0-5f63-4031-90c4-a10c9d09489e",
                "file--ab355a04-64f5-4b81-8d1b-95fa69366442",
                "file--8ff52fdf-572f-4a59-b113-367ed55ab752",
                "file--ce646701-6228-49be-990d-922d0a64c452",
                "domain-name--c8fb3fec-ae73-4a23-82e9-d4e7277ab3aa",
                "domain-name--68acfcbe-0912-45c1-a0ca-f478e334eaf3",
                "domain-name--1c2ff955-b411-4591-b215-e27f34f76012",
                "file--a4893397-f8b7-450d-a265-aa53243594bc",
                "threat-actor--3be555f5-1f0d-5001-b84a-c6c910760fd0"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://research.checkpoint.com/2023/chain-reaction-rokrats-missing-link/"
                }
            ]
        }
    ]
}