{
    "type": "bundle",
    "id": "bundle--2b4431c8-7eb0-474a-9ded-3ad8f26940ea",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--a361b290-d09a-4e0e-a13d-681ca0c3dcc7",
            "created": "2023-03-08T12:51:43.404685Z",
            "modified": "2024-08-31T04:09:59.408166Z",
            "name": "Microsoft",
            "identity_class": "organization"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--7e661c1e-abfb-4ae3-96f2-26612b12556c",
            "value": "83.136.210.180"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--4a2974a6-44ce-4160-8b42-4ba5b7990474",
            "value": "check02id.com"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--0085aeac-5fe7-413f-81c0-e6d00e5a5622",
            "value": "83.136.209.22"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--cff26c12-ab46-45de-983a-273ba98c382d",
            "value": "83.136.208.246"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--9f09d49f-5595-4aee-9644-3249a16bf133",
            "value": "104.145.210.107"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--61a535fb-df28-4083-949b-d524ace01d83",
            "hashes": {
                "SHA-256": "5fbbca2d72840feb86b6ef8a1abb4fe2f225d84228a714391673be2719c73ac7"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6fb75a8b-3c75-410b-a172-05e0b417e0f1",
            "hashes": {
                "SHA-256": "8fd5b8db10458ace7e4ed335eb0c66527e1928ad87a3c688595804f72b205e8c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--583cb663-53e2-466d-bbb6-edac2f15d26b",
            "hashes": {
                "SHA-256": "05e1761b535537287e7b72d103a29c4453742725600f59a34a4831eafc0b8e53"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--113fc68c-5c46-4746-8b3a-77a6bb85f1f0",
            "hashes": {
                "SHA-256": "5e581f22f56883ee13358f73fabab00fcf9313a053210eb12ac18e66098346e5"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b931b12e-bc32-476c-a614-40d620648634",
            "hashes": {
                "SHA-256": "95e893e7cdde19d7d16ff5a5074d0b369abd31c1a30962656133caa8153e8d63"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6bc48066-3c21-4af9-970d-7c1bba50ccc4",
            "hashes": {
                "SHA-256": "a05400000843fbad6b28d2b76fc201c3d415a72d88d8dc548fafd8bae073c640"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--db569fad-c4f2-4b0f-823f-e717c2826099",
            "hashes": {
                "SHA-256": "2075fd1a1362d188290910a8c55cf30c11ed5955c04af410c481410f538da419"
            }
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--95cd38e2-0367-434e-8187-f5f637d9f14e",
            "value": "83.136.208.48"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--0dc5b1ba-7d8f-430e-ac15-6942e252a4f7",
            "value": "188.227.196.252"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--ad58f665-2d60-592c-9ad6-a6ba3b636760",
            "created": "2026-06-24T17:28:16.820227Z",
            "modified": "2026-06-24T17:28:16.820227Z",
            "name": "SapphireSleet"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--ee85c424-4455-46e8-b401-b41d5a956ebc",
            "created_by_ref": "identity--a361b290-d09a-4e0e-a13d-681ca0c3dcc7",
            "created": "2026-06-24T17:28:16.821315Z",
            "modified": "2026-06-24T17:28:16.821315Z",
            "name": "Dissecting Sapphire Sleet\u2019s macOS intrusion from lure to compromise",
            "published": "2026-04-16T00:00:00Z",
            "object_refs": [
                "identity--a361b290-d09a-4e0e-a13d-681ca0c3dcc7",
                "ipv4-addr--7e661c1e-abfb-4ae3-96f2-26612b12556c",
                "domain-name--4a2974a6-44ce-4160-8b42-4ba5b7990474",
                "ipv4-addr--0085aeac-5fe7-413f-81c0-e6d00e5a5622",
                "ipv4-addr--cff26c12-ab46-45de-983a-273ba98c382d",
                "ipv4-addr--9f09d49f-5595-4aee-9644-3249a16bf133",
                "file--61a535fb-df28-4083-949b-d524ace01d83",
                "file--6fb75a8b-3c75-410b-a172-05e0b417e0f1",
                "file--583cb663-53e2-466d-bbb6-edac2f15d26b",
                "file--113fc68c-5c46-4746-8b3a-77a6bb85f1f0",
                "file--b931b12e-bc32-476c-a614-40d620648634",
                "file--6bc48066-3c21-4af9-970d-7c1bba50ccc4",
                "file--db569fad-c4f2-4b0f-823f-e717c2826099",
                "ipv4-addr--95cd38e2-0367-434e-8187-f5f637d9f14e",
                "ipv4-addr--0dc5b1ba-7d8f-430e-ac15-6942e252a4f7",
                "threat-actor--ad58f665-2d60-592c-9ad6-a6ba3b636760"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.microsoft.com/en-us/security/blog/2026/04/16/dissecting-sapphire-sleets-macos-intrusion-from-lure-to-compromise/"
                }
            ]
        }
    ]
}