{
    "type": "bundle",
    "id": "bundle--71b0bfb6-3b09-4e69-8ff1-1e98bf9ab8d2",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--bcb29b32-2b0d-42ab-86fa-0bcdbcd3e3c9",
            "created": "2025-04-02T06:08:58.840846Z",
            "modified": "2025-04-02T06:12:41.556595Z",
            "name": "DtexSystems",
            "identity_class": "organization"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--a014dfac-e081-5b16-a0b1-fe21d104be8f",
            "created": "2026-06-24T19:42:55.805669Z",
            "modified": "2026-06-24T19:42:55.805669Z",
            "name": "Konni"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--8a41ce71-b2d4-5fc7-9a01-40a7672a1fc9",
            "created": "2026-06-24T19:42:55.807958Z",
            "modified": "2026-06-24T19:42:55.807958Z",
            "name": "TraderTraitor"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--3be555f5-1f0d-5001-b84a-c6c910760fd0",
            "created": "2026-06-24T19:42:55.810432Z",
            "modified": "2026-06-24T19:42:55.810432Z",
            "name": "APT37"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--f9b73b11-e500-54c0-bf96-296bdf6d9355",
            "created": "2026-06-24T19:42:55.814046Z",
            "modified": "2026-06-24T19:42:55.814046Z",
            "name": "CryptoCore"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--1606607e-9551-57f2-9093-3384040c739e",
            "created": "2026-06-24T19:42:55.816243Z",
            "modified": "2026-06-24T19:42:55.816243Z",
            "name": "TEMP.Hermit"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--4c934d09-fa90-5876-9872-8dfa3eed0ac2",
            "created": "2026-06-24T19:42:55.818477Z",
            "modified": "2026-06-24T19:42:55.818477Z",
            "name": "APT43"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--19afa647-d401-5f70-bac5-74f86cbeb5f1",
            "created": "2026-06-24T19:42:55.820698Z",
            "modified": "2026-06-24T19:42:55.820698Z",
            "name": "RubySleet"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--03550cfe-1db3-5bcf-b290-8a1a27da993d",
            "created": "2026-06-24T19:42:55.82416Z",
            "modified": "2026-06-24T19:42:55.82416Z",
            "name": "MoonstoneSleet"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--3abc509b-0270-5349-8de3-7d2b74a1b6de",
            "created": "2026-06-24T19:42:55.826437Z",
            "modified": "2026-06-24T19:42:55.826437Z",
            "name": "APT45"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--d27b27a0-9050-5c2e-96b4-66a266797f50",
            "created": "2026-06-24T19:42:55.828662Z",
            "modified": "2026-06-24T19:42:55.828662Z",
            "name": "GwisinGang"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--7aaddc37-62b2-4e3d-81c0-2e0175b32579",
            "created_by_ref": "identity--bcb29b32-2b0d-42ab-86fa-0bcdbcd3e3c9",
            "created": "2026-06-24T19:42:55.829655Z",
            "modified": "2026-06-24T19:42:55.829655Z",
            "name": "Exposing DPRK\u2019s Cyber Underworld",
            "published": "2025-05-14T00:00:00Z",
            "object_refs": [
                "identity--bcb29b32-2b0d-42ab-86fa-0bcdbcd3e3c9",
                "threat-actor--a014dfac-e081-5b16-a0b1-fe21d104be8f",
                "threat-actor--8a41ce71-b2d4-5fc7-9a01-40a7672a1fc9",
                "threat-actor--3be555f5-1f0d-5001-b84a-c6c910760fd0",
                "threat-actor--f9b73b11-e500-54c0-bf96-296bdf6d9355",
                "threat-actor--1606607e-9551-57f2-9093-3384040c739e",
                "threat-actor--4c934d09-fa90-5876-9872-8dfa3eed0ac2",
                "threat-actor--19afa647-d401-5f70-bac5-74f86cbeb5f1",
                "threat-actor--03550cfe-1db3-5bcf-b290-8a1a27da993d",
                "threat-actor--3abc509b-0270-5349-8de3-7d2b74a1b6de",
                "threat-actor--d27b27a0-9050-5c2e-96b4-66a266797f50"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.dtexsystems.com/blog/exposing-dprks-cyber-underworld/"
                }
            ]
        }
    ]
}