{
    "type": "bundle",
    "id": "bundle--491ec6cd-9370-45c6-b482-a3717d114899",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--b5bcf025-fdd8-486e-85fe-9d23c45827d6",
            "created": "2026-02-26T23:33:02.446066Z",
            "modified": "2026-02-26T23:33:02.446113Z",
            "name": "Kmsec",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--234fb689-fcf9-477a-979d-f6df3aef62a8",
            "hashes": {
                "SHA-256": "85c6cebb22bc2e5abc27aac9b1bbcf4f39af9901f422a69180b54c5a62211458"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6bed62e8-150e-457a-8113-fe029ef2d42f",
            "hashes": {
                "SHA-1": "addbf305fe29949810b536456987e1185dc9a3c0"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7fd0848c-47d4-40fe-85ff-d49397f699e8",
            "hashes": {
                "SHA-256": "2a7e7b76a3e8070410adce9b6a2b9cf112687922792c91be563c20fbf6a4a82f"
            }
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--ed7b1811-1e33-4d08-8192-916498f99bbe",
            "value": "nwokejitimoth00@gmail.com"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--1d227bee-f26c-5f74-a3f8-5bdb18774b64",
            "created": "2026-06-24T21:00:34.025782Z",
            "modified": "2026-06-24T21:00:34.025782Z",
            "name": "FamousChollima"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--d1dc479e-4329-476d-b5cc-41af61bb8989",
            "created_by_ref": "identity--b5bcf025-fdd8-486e-85fe-9d23c45827d6",
            "created": "2026-06-24T21:00:34.026821Z",
            "modified": "2026-06-24T21:00:34.026821Z",
            "name": "DPRK tests Google Drive as a malware stager",
            "published": "2026-02-21T00:00:00Z",
            "object_refs": [
                "identity--b5bcf025-fdd8-486e-85fe-9d23c45827d6",
                "file--234fb689-fcf9-477a-979d-f6df3aef62a8",
                "file--6bed62e8-150e-457a-8113-fe029ef2d42f",
                "file--7fd0848c-47d4-40fe-85ff-d49397f699e8",
                "email-addr--ed7b1811-1e33-4d08-8192-916498f99bbe",
                "threat-actor--1d227bee-f26c-5f74-a3f8-5bdb18774b64"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://kmsec.uk/blog/dprk-gdrive-stager/"
                }
            ]
        }
    ]
}