{
    "type": "bundle",
    "id": "bundle--092675cf-65fe-4f62-b132-2cf8a1a8f70d",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--a361b290-d09a-4e0e-a13d-681ca0c3dcc7",
            "created": "2023-03-08T12:51:43.404685Z",
            "modified": "2024-08-31T04:09:59.408166Z",
            "name": "Microsoft",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--e24e3c27-b385-4b3e-ab49-7486921beaeb",
            "hashes": {
                "MD5": "0a08d3601636378f0a7d64fd09e4a13b"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--41236e28-fb2b-4430-bd91-385c4772d722",
            "hashes": {
                "SHA-256": "915c2495e03ff7408f11a2a197f23344004c533ff87db4b807cc937f80c217a1"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--f4560a88-8388-418d-982e-40d8da5790c6",
            "hashes": {
                "SHA-256": "166d1a6ddcde4e859a89c2c825cd3c8c953a86bfa92b343de7e5bfbfb5afb8be"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--3f228f03-d576-4fae-97c5-00601aabb3ca",
            "hashes": {
                "SHA-1": "8aa3877ab68ba56dabc2f2802e813dc36678aef4"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--beafa9e5-ea27-4611-bb39-eec04345ae26",
            "hashes": {
                "SHA-256": "089573b3a1167f387dcdad5e014a5132e998b2c89bff29bcf8b06dd497d4e63d"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--05946dea-8ce8-4802-8e86-837a9cb3ae4f",
            "value": "https://cldownloader.github.io/logo.png"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--6e3248d5-4171-49c8-9e89-f7210265aca1",
            "value": "https://mantis.jancom.pl/bluemantis/image/addon/addin.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--bb27ab37-23a1-4756-94af-4091c652f076",
            "value": "https://i.stack.imgur.com/NDTUM.png"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--d87c3d4c-f972-4fa9-b5cd-f6161e2b9b31",
            "value": "https://zeduzeventos.busqueabuse.com/wp-admin/js/widgets/sub/wids.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--de9380ae-0f6b-477e-a07c-29fbf9d850ec",
            "value": "https://www.webville.net/images/CL202966126.png"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--2ddc0523-3ae1-4971-8201-7326dfdc531b",
            "value": "https://zeduzeventos.busqueabuse.com/wpadmin/js/widgets/sub/wids.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--0758a52e-4215-4fd3-b3b8-2b77c80a5861",
            "value": "https://update.cyberlink.com/Retail/Patch/Promeo/DL/RDZCMSFY1ELY/Cyb"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--5f31d602-6504-47d6-ac20-78a2edfefc32",
            "value": "https://update.cyberlink.com/Retail/Promeo/RDZCMSFY1ELY/CyberLink_Pr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--5b426dda-d4bf-4476-aeb5-9f725e2e32d6",
            "value": "cldownloader.github.io"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--d11ad1b7-b918-4179-9eb7-a27795461389",
            "value": "update.cyberlink.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--ed037ada-4d82-4c14-844b-a61a9b172601",
            "value": "zeduzeventos.busqueabuse.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--29fd1421-182f-451a-9dcc-51987ad76d46",
            "value": "mantis.jancom.pl"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--d8cfcdb7-8df3-4563-8405-b3d9cfc1444e",
            "value": "i.stack.imgur.com"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--7e17b02a-817f-58ff-8489-aac76b0f02a4",
            "created": "2026-06-24T18:21:05.631813Z",
            "modified": "2026-06-24T18:21:05.631813Z",
            "name": "DiamondSleet"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--1d1d2efd-ca19-496b-bb8d-9372f87f2f24",
            "created_by_ref": "identity--a361b290-d09a-4e0e-a13d-681ca0c3dcc7",
            "created": "2026-06-24T18:21:05.636012Z",
            "modified": "2026-06-24T18:21:05.636012Z",
            "name": "Diamond Sleet supply chain compromise distributes a modified CyberLink installer",
            "published": "2023-11-22T00:00:00Z",
            "object_refs": [
                "identity--a361b290-d09a-4e0e-a13d-681ca0c3dcc7",
                "file--e24e3c27-b385-4b3e-ab49-7486921beaeb",
                "file--41236e28-fb2b-4430-bd91-385c4772d722",
                "file--f4560a88-8388-418d-982e-40d8da5790c6",
                "file--3f228f03-d576-4fae-97c5-00601aabb3ca",
                "file--beafa9e5-ea27-4611-bb39-eec04345ae26",
                "url--05946dea-8ce8-4802-8e86-837a9cb3ae4f",
                "url--6e3248d5-4171-49c8-9e89-f7210265aca1",
                "url--bb27ab37-23a1-4756-94af-4091c652f076",
                "url--d87c3d4c-f972-4fa9-b5cd-f6161e2b9b31",
                "url--de9380ae-0f6b-477e-a07c-29fbf9d850ec",
                "url--2ddc0523-3ae1-4971-8201-7326dfdc531b",
                "url--0758a52e-4215-4fd3-b3b8-2b77c80a5861",
                "url--5f31d602-6504-47d6-ac20-78a2edfefc32",
                "domain-name--5b426dda-d4bf-4476-aeb5-9f725e2e32d6",
                "domain-name--d11ad1b7-b918-4179-9eb7-a27795461389",
                "domain-name--ed037ada-4d82-4c14-844b-a61a9b172601",
                "domain-name--29fd1421-182f-451a-9dcc-51987ad76d46",
                "domain-name--d8cfcdb7-8df3-4563-8405-b3d9cfc1444e",
                "threat-actor--7e17b02a-817f-58ff-8489-aac76b0f02a4"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.microsoft.com/en-us/security/blog/2023/11/22/diamond-sleet-supply-chain-compromise-distributes-a-modified-cyberlink-installer/"
                }
            ]
        }
    ]
}