{
    "type": "bundle",
    "id": "bundle--19ed60cb-5e5b-4aa5-9de2-81e0e6fd3519",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--2b55834f-c58d-4a3a-9740-af8333c86d5e",
            "created": "2023-10-24T11:28:20.610044Z",
            "modified": "2023-10-24T11:29:09.958473Z",
            "name": "Hawkeye",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--895b2316-7a30-4e53-b892-2eee7a332b09",
            "hashes": {
                "SHA-1": "b1880340818a1feda156abd272255bcc018f8bef"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--2bfa41ab-651c-45b1-8f37-a3937efea646",
            "hashes": {
                "SHA-1": "5e026885bcf4b67993aefa4e992153f6d81c11da"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--87a07af4-49cf-4624-bf0d-d08b9eb09396",
            "hashes": {
                "SHA-1": "049cc8d88a086c8fc69b51d76b6c0c4c2a66fa08"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ba95efcc-d219-4d0b-a4c3-2115d27c3ed3",
            "hashes": {
                "SHA-1": "321363f11464208ee24e56a700ad5d26154df4bd"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d83c5931-4c98-4c30-8e62-8a69e485a73a",
            "hashes": {
                "SHA-1": "2c72edf29d5bca22525d612c94f1ee323c47be0c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--9e7a8671-a8bf-47f1-ba71-f03c12317009",
            "hashes": {
                "SHA-1": "859f5b0af717fca9f890dcba0b87ac63be469033"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b67d7bc2-79d2-47a6-939b-1560f54bf31e",
            "hashes": {
                "SHA-1": "bbb1e2ac1d243b8db922a23821de570702140145"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7321f0df-6eb7-47af-b7e1-0a1321b42b77",
            "hashes": {
                "SHA-1": "e3545b2c53c2cb8f012f0badc1bf452badfee341"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--039601ce-35c7-40f8-8dec-956f6b23cac3",
            "hashes": {
                "SHA-1": "89c05ecd388c5f168704c5a8e1d37f72a7f0f0f4"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7e071bce-fb49-4a11-b2f5-c7277ba24bfb",
            "hashes": {
                "SHA-1": "e063b210b50ca1426da45afa430d87c53b2ef5d2"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--33c6a6d7-d99d-40f0-9469-6f4dc6679580",
            "hashes": {
                "SHA-1": "aeeb445216a205abd770546dfa8d03f8b94515a1"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--a0207d8d-11f0-430b-b363-a41d1a704a75",
            "hashes": {
                "SHA-1": "39e9859f0cf85a0c8361e042e8316d4e185d1cfb"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--22b9ff92-67a4-4766-bc79-111c1b240c84",
            "hashes": {
                "SHA-1": "fdea182ffe7c04c28f28f88ceb9624732bb36bdc"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--f1f8424e-7db2-45b6-9120-f029e177f057",
            "hashes": {
                "SHA-1": "9b8eefa1d7ee348c2b1b4c350028df5c2707c3d8"
            }
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--d4510b15-3b76-4aaf-9fc0-9c1e04eebfb8",
            "value": "45.61.136.133"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--55251590-ffcd-40d6-9fb0-9f3055b0aa67",
            "hashes": {
                "SHA-1": "dbc14c3ac0528a8aeb6edba8a0b2792dab131102"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--5a7ccaaa-490f-4577-82c3-449e024ae209",
            "hashes": {
                "SHA-1": "9a276ca3678898f5596166416f7e709a2064e95c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--bf20b5fe-77a1-4d26-865d-cacaa967a8d4",
            "hashes": {
                "SHA-1": "67226da423ab4a2c97b2d008dec45280aaa5fdf5"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b022a372-9474-417e-86a5-6de69eff387b",
            "hashes": {
                "SHA-1": "0b7b4444f820e9990dfeb5e2080321b5f25a9785"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ae675435-223b-497f-a5f9-22ecbd2787b4",
            "hashes": {
                "SHA-1": "0eb79e80c51c0e14be3620dfb237f7b53160a292"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--a3519a94-b190-47af-ad5b-0724d7198f7d",
            "hashes": {
                "SHA-1": "0dc723e77a5b97183a90eaecb62c9b7341e483ed"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--8813ef42-dfa9-4958-b1b3-b4d29bb798f1",
            "hashes": {
                "SHA-1": "2ff1b3aa2dbff6d87447b250a8d19241e7853ab0"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--f793da63-a2ce-480f-81db-cc6d12e68985",
            "hashes": {
                "SHA-1": "e531121b137182453f0d120be860ad882d2dc0a7"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--fe869a9f-0ce2-4cfd-a5bd-348482cbaf59",
            "hashes": {
                "SHA-1": "9588affaf9d85e2141b9d76b914d9f89a8292574"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--4652239b-4107-461c-ab82-2fe9b8f03cda",
            "hashes": {
                "SHA-1": "de4e9efeace6ff76dc00a166dca152dc3021d799"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--699f613f-7339-4ba3-b008-284d709cca15",
            "hashes": {
                "SHA-1": "b1f2d50be0aca0672475488d77c6f71a1b0633f8"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7003348e-73a0-49f7-a0d9-8f542ee23ae8",
            "hashes": {
                "SHA-1": "664f0913a5952eeb77373f83e090fab7e94aa45e"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--05a16c55-2176-4853-a9a7-eef439647227",
            "hashes": {
                "SHA-1": "bc2d48d6d9eeaf0b29625683942e90dfd2b75723"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6363da8c-7060-439b-bfec-371b46544ceb",
            "hashes": {
                "SHA-1": "d404a55f1f7fbcd8b3156a84ebcf97c57ba24b95"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--0503bfc7-b480-496e-8fd9-1a6db2b5fd2f",
            "hashes": {
                "SHA-1": "19684554e4905bb3cf354a5d5a0f00d696f38926"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--a94ee88d-d9d0-4912-ade1-0e492ccd366b",
            "hashes": {
                "SHA-1": "bd7ba47f730c2bc33afa67a39d9cbe3768f62426"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c41909ee-0a24-4d63-b022-040c47986257",
            "hashes": {
                "SHA-1": "658605988c7afd9adf437fb64ff682cb4190f144"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--768f9497-d109-4f99-a4ac-3987594c1464",
            "hashes": {
                "SHA-1": "6bf76b01bd17f370cd3f9947135bf250597d1ac1"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--197b4a3b-d78a-4693-9042-cffcc61e0b71",
            "hashes": {
                "SHA-1": "a1b039f88c385f5c5eec2ef1701251c7341b1fcd"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b404985e-9680-4bf6-ac43-60521b64222f",
            "hashes": {
                "SHA-1": "5f03b73d56528ecbc3f24b8e7daec6b3d3370834"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7c3e57f3-b29e-4ab7-8100-86c8fb6b77ad",
            "hashes": {
                "SHA-1": "146942c5dbaba55be174b1bfb127410e332caa03"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--0d62f55f-9a87-46c6-babb-41819a599ba2",
            "hashes": {
                "SHA-1": "497df2fd2dba324be04cc57f50a3170b532aa70c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d350e96f-037a-4b16-b672-a6980ce30154",
            "hashes": {
                "SHA-1": "e6494b9a91862191556d77022e5577ddbe749ef4"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--42b28791-d2c7-42ca-89ce-5fc655e910c1",
            "hashes": {
                "SHA-1": "b0095f149951241c6e11e0d1be1f74e8cdfbdbb2"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--2e368309-c765-4197-95fe-46dfff4ac687",
            "value": "deliworkshopexpress.xyz"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--b98db1b6-06c9-44bb-b4cf-e1e0269676c5",
            "value": "45.61.139.219"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--4ee77ed0-b5b4-4e90-8822-562bd6e52eb2",
            "created_by_ref": "identity--2b55834f-c58d-4a3a-9740-af8333c86d5e",
            "created": "2026-06-24T22:21:40.429561Z",
            "modified": "2026-06-24T22:21:40.429561Z",
            "name": "Evidence Leads to Lazarus as the VMConnect Supply Chain Attack Continues",
            "published": "2023-10-24T00:00:00Z",
            "object_refs": [
                "identity--2b55834f-c58d-4a3a-9740-af8333c86d5e",
                "file--895b2316-7a30-4e53-b892-2eee7a332b09",
                "file--2bfa41ab-651c-45b1-8f37-a3937efea646",
                "file--87a07af4-49cf-4624-bf0d-d08b9eb09396",
                "file--ba95efcc-d219-4d0b-a4c3-2115d27c3ed3",
                "file--d83c5931-4c98-4c30-8e62-8a69e485a73a",
                "file--9e7a8671-a8bf-47f1-ba71-f03c12317009",
                "file--b67d7bc2-79d2-47a6-939b-1560f54bf31e",
                "file--7321f0df-6eb7-47af-b7e1-0a1321b42b77",
                "file--039601ce-35c7-40f8-8dec-956f6b23cac3",
                "file--7e071bce-fb49-4a11-b2f5-c7277ba24bfb",
                "file--33c6a6d7-d99d-40f0-9469-6f4dc6679580",
                "file--a0207d8d-11f0-430b-b363-a41d1a704a75",
                "file--22b9ff92-67a4-4766-bc79-111c1b240c84",
                "file--f1f8424e-7db2-45b6-9120-f029e177f057",
                "ipv4-addr--d4510b15-3b76-4aaf-9fc0-9c1e04eebfb8",
                "file--55251590-ffcd-40d6-9fb0-9f3055b0aa67",
                "file--5a7ccaaa-490f-4577-82c3-449e024ae209",
                "file--bf20b5fe-77a1-4d26-865d-cacaa967a8d4",
                "file--b022a372-9474-417e-86a5-6de69eff387b",
                "file--ae675435-223b-497f-a5f9-22ecbd2787b4",
                "file--a3519a94-b190-47af-ad5b-0724d7198f7d",
                "file--8813ef42-dfa9-4958-b1b3-b4d29bb798f1",
                "file--f793da63-a2ce-480f-81db-cc6d12e68985",
                "file--fe869a9f-0ce2-4cfd-a5bd-348482cbaf59",
                "file--4652239b-4107-461c-ab82-2fe9b8f03cda",
                "file--699f613f-7339-4ba3-b008-284d709cca15",
                "file--7003348e-73a0-49f7-a0d9-8f542ee23ae8",
                "file--05a16c55-2176-4853-a9a7-eef439647227",
                "file--6363da8c-7060-439b-bfec-371b46544ceb",
                "file--0503bfc7-b480-496e-8fd9-1a6db2b5fd2f",
                "file--a94ee88d-d9d0-4912-ade1-0e492ccd366b",
                "file--c41909ee-0a24-4d63-b022-040c47986257",
                "file--768f9497-d109-4f99-a4ac-3987594c1464",
                "file--197b4a3b-d78a-4693-9042-cffcc61e0b71",
                "file--b404985e-9680-4bf6-ac43-60521b64222f",
                "file--7c3e57f3-b29e-4ab7-8100-86c8fb6b77ad",
                "file--0d62f55f-9a87-46c6-babb-41819a599ba2",
                "file--d350e96f-037a-4b16-b672-a6980ce30154",
                "file--42b28791-d2c7-42ca-89ce-5fc655e910c1",
                "domain-name--2e368309-c765-4197-95fe-46dfff4ac687",
                "ipv4-addr--b98db1b6-06c9-44bb-b4cf-e1e0269676c5"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.hawk-eye.io/2023/10/evidence-leads-to-lazarus-as-the-vmconnect-supply-chain-attack-continues/"
                }
            ]
        }
    ]
}