{
    "type": "bundle",
    "id": "bundle--9b4eccef-f819-49e9-81d0-4b52b6b0359e",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--59f99ee9-2b33-4e70-a488-4addc93d3d77",
            "created": "2023-03-08T12:51:43.018137Z",
            "modified": "2024-10-23T12:33:11.030915Z",
            "name": "Kaspersky",
            "identity_class": "organization"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--6aa093d4-ae07-4f50-b649-2dea89de6d1e",
            "value": "load.erasecloud.n-e.kr"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--58b95241-16c7-47be-bd26-ef4344784fcc",
            "value": "https://www.pyrotech.co.kr/common/include/tech/default.php"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--99303ace-39e3-4e21-a4d8-0de909df8aa2",
            "value": "www.pyrotech.co.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--4aa2b410-1bd6-4a36-b777-9fd0e1b57089",
            "value": "www.yespp.co.kr"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--7ab9aa62-6a8f-4652-9d55-90f2b04aa559",
            "value": "https://www.yespp.co.kr/common/include/code/out.php"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--93329d5a-48b2-4704-8956-1a36be545c4b",
            "value": "node484265.dwservice.net"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--a7acf6ef-6802-46b7-bfe4-f0ce1099e641",
            "value": "node828765.dwservice.net"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--4bcbcef6-9251-4f9d-9d98-1074038fec08",
            "value": "node896147.dwservice.net"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--2096bbcb-c4f9-4450-a12b-08872631e8bc",
            "value": "http://newjo-imd.com/common/include/library/default.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--0e4d49f6-523a-4120-8cd2-32144465ad87",
            "value": "https://file.bigcloud.n-e.kr/index.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--a1da7c4a-620a-4b75-b5db-84fd059e12b2",
            "value": "http://female-disorder-beta-metropolitan.trycloudflare.com/index.php"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--0941f2b7-3a4d-48f9-9521-cfaf90172c12",
            "value": "female-disorder-beta-metropolitan.trycloudflare.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--a6735d36-77ae-452c-9928-775ea9fb0207",
            "value": "file.bigcloud.n-e.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--f79bc257-190f-4284-929f-167c31a0add4",
            "value": "erp.spaceme.p-e.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--9be7347d-5913-4370-83f4-7ff7e3f40bc8",
            "value": "cms.spaceyou.o-r.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--1a5d6da3-a4dd-48a3-a83d-440b65abcd94",
            "value": "load.supershop.o-r.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--43d92cbf-bcc7-479f-a7ed-900e7e5218d4",
            "value": "attach.docucloud.o-r.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--5e89b208-7bfb-42a0-86b0-639be8601244",
            "value": "load.yju.o-r.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--6a22e9fb-9e24-434b-b691-f2154aa3af80",
            "value": "load.ssangyongcne.o-r.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--07c32dd9-910e-42b5-a31a-5c57cd5d0a03",
            "value": "morames.r-e.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--82fc3b5c-e2da-43ab-8ded-477a3801c321",
            "value": "opedromos1.r-e.kr"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7f845442-47ef-449f-b866-dcb3ecd35d93",
            "hashes": {
                "MD5": "678fb1a87af525c33ba2492552d5c0e2"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--cfff16bd-5d4e-4d8d-880a-e95fb4e9e1e6",
            "hashes": {
                "MD5": "9ca5f93a732f404bbb2cee848f5bbda0"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--bd83ff8e-5675-41c3-a42d-91262f689834",
            "hashes": {
                "MD5": "c42ae004badddd3017adadbdd1421e00",
                "SHA-1": "51b208cac103dc28cdbee14b18021ccd85a6e063",
                "SHA-256": "62aac86f38f26700cf534c0a316d31882ffb74488bd1d87a3caeef604fc3a124"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ad725dd3-7b82-4da3-b736-006a7f0ad151",
            "hashes": {
                "MD5": "94faed9af49c98a89c8acc55e97276c9"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--8c5f208f-414f-4c92-8467-8b845e675255",
            "hashes": {
                "MD5": "08160acf08fccecde7b34090db18b321",
                "SHA-1": "df226a702fee389e2186daa405069a3975a44ae7",
                "SHA-256": "23420100260cc80055fbf02f4464212278c0e71a4387537771f3fb50f2f891e5"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--887e6063-59f9-4136-a9e5-426f8ecb3904",
            "hashes": {
                "MD5": "7e0825019d0de0c1c4a1673f94043ddb"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7bbb107e-1e40-4968-96c8-4888d496337e",
            "hashes": {
                "MD5": "f73ba062116ea9f37d072aa41c7f5108"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--196cda78-1794-471c-b9a3-2f7933c21014",
            "hashes": {
                "MD5": "58ac2f65e335922be3f60e57099dc8a3",
                "SHA-1": "415cd98b9353b098382bb1d38dd57a10b9db208e",
                "SHA-256": "2d597c3a726970927b302bf015cec4e37cdc974959cb846dbcb23cdb46386a6c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--8567887f-f610-45d6-a649-38048bf5635c",
            "hashes": {
                "MD5": "5c373c2116ab4a615e622f577e22e9be",
                "SHA-1": "ea940cc09b54b9ec060e65d9ccc3a00c3cb00921",
                "SHA-256": "0845f218a588f7619169787c4db69ce9de0c84143b100400b6476d7289a1c493"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d8ab85d3-7c48-4eba-a55f-922d6cb153b9",
            "hashes": {
                "MD5": "f4465403f9693939fe9c439f0ab33610",
                "SHA-1": "dcc95dba4433867edb00898e59ffe171d4cb07bb",
                "SHA-256": "929dbf16ee3a1b088d09dac820058c02d639b45912b02b334384754d073a581f"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--fcb9a3c7-8ca6-42b5-8ee5-b46a18373d64",
            "hashes": {
                "MD5": "a7f0a18ac87e982d6f32f7a715e12532",
                "SHA-1": "b145b873625c1333e61c1254cfcb65ef918739ac",
                "SHA-256": "410a58e4799e7af4408ab5ba917d93c5f5a4477e11b6fca6f6c4c4e0679f761b"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ecba05bf-82c6-4f1f-b47f-2edb5c2f2152",
            "hashes": {
                "MD5": "8983ffa6da23e0b99ccc58c17b9788c7",
                "SHA-1": "01cb397c7f056516be83bef2719925d281a10858",
                "SHA-256": "d0912a47413338a1a79eef767aa33135f1e3ac66dfb6f6d1c8dbec72c892b985"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--af163763-c414-4756-a621-ae71c1807a06",
            "hashes": {
                "MD5": "c19aeaedbbfc4e029f7e9bdface495b9"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--481f07a6-a42a-4cd1-8dad-525f2ce31127",
            "hashes": {
                "MD5": "65fc9f06de5603e2c1af9b4f288bb22c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b45b6447-c1fa-4669-b698-53dbeb736185",
            "hashes": {
                "MD5": "8e15c4d4f71bdd9dbc48cd2cabc87806",
                "SHA-1": "13e2753bbebf5180b6fba4b234d9a08c953c0e01",
                "SHA-256": "38537c172dec2b985bd7e81d8a8aae7d760896cc2baf7ab25fff7ba9c4c36d3e"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--a7649c31-0873-49ac-8151-fb74c03c3630",
            "hashes": {
                "MD5": "9fe43e08c8f446554340f972dac8a68c",
                "SHA-1": "30b4a111ca13426054fd46834a9c6583cf344197",
                "SHA-256": "8b10ac9520a1ef24cf2269ec9ee4554b14d3617051f7650a948a03f534bec0d1"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--9d7c9133-efbc-4465-9e5e-660ca05effb5",
            "hashes": {
                "MD5": "52f1ff082e981cbdfd1f045c6021c63f",
                "SHA-1": "be85ab350916ab4d95048ebc50e748d75d959b6b",
                "SHA-256": "59eb093c10f11f612b8dadab258285aa2020219a0b86d65a5c890c214434809e"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--5c04bf74-1de1-47cf-9d75-855c0881fe42",
            "hashes": {
                "MD5": "995a0a49ae4b244928b3f67e2bfd7a6e",
                "SHA-1": "426089f3348abd9ae4d8a4844e9c44cd783d1d77",
                "SHA-256": "db284cc9b6536ab6f956a45ce9e5905716c7547f5e8dc572dc07aa125d27819e"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--bfe5030d-41b2-4cb1-af55-7d46add43781",
            "value": "newjo-imd.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--2e9cdba9-3776-4835-90ac-a5bc1ea8285b",
            "value": "load.auraria.org"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--4e965460-c722-4556-8d49-03eb996f6933",
            "hashes": {
                "MD5": "d1ec20144c83bba921243e72c517da5e"
            }
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1",
            "created": "2026-06-24T16:05:17.110899Z",
            "modified": "2026-06-24T16:05:17.110899Z",
            "name": "Kimsuky"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--98745c2b-0829-5825-903b-bc3d49555baa",
            "created": "2026-06-24T16:05:17.117937Z",
            "modified": "2026-06-24T16:05:17.117937Z",
            "name": "BlackBanshee"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--cfd4e85d-785b-559b-9448-0187296dde0f",
            "created": "2026-06-24T16:05:17.120298Z",
            "modified": "2026-06-24T16:05:17.120298Z",
            "name": "VelvetChollima"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--4c934d09-fa90-5876-9872-8dfa3eed0ac2",
            "created": "2026-06-24T16:05:17.125811Z",
            "modified": "2026-06-24T16:05:17.125811Z",
            "name": "APT43"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--19afa647-d401-5f70-bac5-74f86cbeb5f1",
            "created": "2026-06-24T16:05:17.128222Z",
            "modified": "2026-06-24T16:05:17.128222Z",
            "name": "RubySleet"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--3f7744af-e1ae-5d69-aedc-778d8e923792",
            "created": "2026-06-24T16:05:17.130654Z",
            "modified": "2026-06-24T16:05:17.130654Z",
            "name": "Springtail"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--b6d839dd-309c-5248-93ae-966a9739ab15",
            "created": "2026-06-24T16:05:17.135868Z",
            "modified": "2026-06-24T16:05:17.135868Z",
            "name": "SparklingPisces"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--67127cf8-abe9-4d34-9a3a-e53f146a6227",
            "created_by_ref": "identity--59f99ee9-2b33-4e70-a488-4addc93d3d77",
            "created": "2026-06-24T16:05:17.159166Z",
            "modified": "2026-06-24T16:05:17.159166Z",
            "name": "Disclosing new PebbleDash-based tools by Kimsuky",
            "published": "2026-05-14T00:00:00Z",
            "object_refs": [
                "identity--59f99ee9-2b33-4e70-a488-4addc93d3d77",
                "domain-name--6aa093d4-ae07-4f50-b649-2dea89de6d1e",
                "url--58b95241-16c7-47be-bd26-ef4344784fcc",
                "domain-name--99303ace-39e3-4e21-a4d8-0de909df8aa2",
                "domain-name--4aa2b410-1bd6-4a36-b777-9fd0e1b57089",
                "url--7ab9aa62-6a8f-4652-9d55-90f2b04aa559",
                "domain-name--93329d5a-48b2-4704-8956-1a36be545c4b",
                "domain-name--a7acf6ef-6802-46b7-bfe4-f0ce1099e641",
                "domain-name--4bcbcef6-9251-4f9d-9d98-1074038fec08",
                "url--2096bbcb-c4f9-4450-a12b-08872631e8bc",
                "url--0e4d49f6-523a-4120-8cd2-32144465ad87",
                "url--a1da7c4a-620a-4b75-b5db-84fd059e12b2",
                "domain-name--0941f2b7-3a4d-48f9-9521-cfaf90172c12",
                "domain-name--a6735d36-77ae-452c-9928-775ea9fb0207",
                "domain-name--f79bc257-190f-4284-929f-167c31a0add4",
                "domain-name--9be7347d-5913-4370-83f4-7ff7e3f40bc8",
                "domain-name--1a5d6da3-a4dd-48a3-a83d-440b65abcd94",
                "domain-name--43d92cbf-bcc7-479f-a7ed-900e7e5218d4",
                "domain-name--5e89b208-7bfb-42a0-86b0-639be8601244",
                "domain-name--6a22e9fb-9e24-434b-b691-f2154aa3af80",
                "domain-name--07c32dd9-910e-42b5-a31a-5c57cd5d0a03",
                "domain-name--82fc3b5c-e2da-43ab-8ded-477a3801c321",
                "file--7f845442-47ef-449f-b866-dcb3ecd35d93",
                "file--cfff16bd-5d4e-4d8d-880a-e95fb4e9e1e6",
                "file--bd83ff8e-5675-41c3-a42d-91262f689834",
                "file--ad725dd3-7b82-4da3-b736-006a7f0ad151",
                "file--8c5f208f-414f-4c92-8467-8b845e675255",
                "file--887e6063-59f9-4136-a9e5-426f8ecb3904",
                "file--7bbb107e-1e40-4968-96c8-4888d496337e",
                "file--196cda78-1794-471c-b9a3-2f7933c21014",
                "file--8567887f-f610-45d6-a649-38048bf5635c",
                "file--d8ab85d3-7c48-4eba-a55f-922d6cb153b9",
                "file--fcb9a3c7-8ca6-42b5-8ee5-b46a18373d64",
                "file--ecba05bf-82c6-4f1f-b47f-2edb5c2f2152",
                "file--af163763-c414-4756-a621-ae71c1807a06",
                "file--481f07a6-a42a-4cd1-8dad-525f2ce31127",
                "file--b45b6447-c1fa-4669-b698-53dbeb736185",
                "file--a7649c31-0873-49ac-8151-fb74c03c3630",
                "file--9d7c9133-efbc-4465-9e5e-660ca05effb5",
                "file--5c04bf74-1de1-47cf-9d75-855c0881fe42",
                "domain-name--bfe5030d-41b2-4cb1-af55-7d46add43781",
                "domain-name--2e9cdba9-3776-4835-90ac-a5bc1ea8285b",
                "file--4e965460-c722-4556-8d49-03eb996f6933",
                "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1",
                "threat-actor--98745c2b-0829-5825-903b-bc3d49555baa",
                "threat-actor--cfd4e85d-785b-559b-9448-0187296dde0f",
                "threat-actor--4c934d09-fa90-5876-9872-8dfa3eed0ac2",
                "threat-actor--19afa647-d401-5f70-bac5-74f86cbeb5f1",
                "threat-actor--3f7744af-e1ae-5d69-aedc-778d8e923792",
                "threat-actor--b6d839dd-309c-5248-93ae-966a9739ab15"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://securelist.com/kimsuky-appleseed-pebbledash-campaigns/119785/"
                }
            ]
        }
    ]
}