{
    "type": "bundle",
    "id": "bundle--d08ec5da-e5ab-44c9-b4bf-5000c03e641c",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--a1631500-aa42-4976-be94-1c6fb4ada9ef",
            "created": "2025-12-09T04:44:34.295508Z",
            "modified": "2025-12-09T04:45:23.187309Z",
            "name": "Sysdig",
            "identity_class": "organization"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--6b3b7147-2c83-496e-ba2a-68bc998b9857",
            "value": "https://grabify.link/SEFKGU"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--33530f65-b1b6-42ce-ab40-eeac1b2d7d5f",
            "value": "https://webhook.site/63575795-ee27-4b29-a15d-e977e7dc8361"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--d9b25b47-58cb-4fa8-b226-569adf79fc95",
            "value": "grabify.link"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--6706f51d-16d9-4430-a4f7-80354d747fe1",
            "value": "legitimate-site.com"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--07ffa025-006a-4c09-bde2-33e8e1025b5e",
            "value": "173.249.8.102"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--bb14be57-1e0e-451c-8f24-982b75ee5b2d",
            "value": "91.215.85.42"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--be773ee2-60d3-49d3-8cb4-f351a8128e3e",
            "value": "193.24.123.68"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--34e81d6a-a62d-4368-8601-3f12ae23e0a4",
            "created_by_ref": "identity--a1631500-aa42-4976-be94-1c6fb4ada9ef",
            "created": "2026-06-24T19:22:01.591754Z",
            "modified": "2026-06-24T19:22:01.591754Z",
            "name": "EtherRAT dissected: How a React2Shell implant delivers 5 payloads through blockchain C2",
            "published": "2025-12-16T00:00:00Z",
            "object_refs": [
                "identity--a1631500-aa42-4976-be94-1c6fb4ada9ef",
                "url--6b3b7147-2c83-496e-ba2a-68bc998b9857",
                "url--33530f65-b1b6-42ce-ab40-eeac1b2d7d5f",
                "domain-name--d9b25b47-58cb-4fa8-b226-569adf79fc95",
                "domain-name--6706f51d-16d9-4430-a4f7-80354d747fe1",
                "ipv4-addr--07ffa025-006a-4c09-bde2-33e8e1025b5e",
                "ipv4-addr--bb14be57-1e0e-451c-8f24-982b75ee5b2d",
                "ipv4-addr--be773ee2-60d3-49d3-8cb4-f351a8128e3e"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.sysdig.com/blog/etherrat-dissected-how-a-react2shell-implant-delivers-5-payloads-through-blockchain-c2"
                }
            ]
        }
    ]
}