{
    "type": "bundle",
    "id": "bundle--b8aac3de-b785-4cc5-aed6-3eccf793966c",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--ce8142ae-2b8c-4be0-a950-ac1f10f17ff4",
            "created": "2025-01-06T10:26:42.005435Z",
            "modified": "2025-01-06T10:28:52.147724Z",
            "name": "PicusSecurity",
            "identity_class": "organization"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--f1b99616-9160-4cfd-acb7-2e59d0c98b4e",
            "value": "bk.ru"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--0bc8562a-c29e-4683-82ea-aa77b20c13f0",
            "hashes": {
                "SHA-256": "081804b491c70bfa63ecdbe9fd4618d3570706ad8b71dba13e234069648e5e48"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--0ebf8538-b281-41e8-a65f-b67637e040e0",
            "hashes": {
                "SHA-256": "689cfaa9319f3f7529a31472ecf6b2e0ca6891b736de009e0b6c2ebac958cc94"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--81e15b0d-8d0f-49bd-84e0-54434be33453",
            "hashes": {
                "SHA-256": "2360a69e5fd7217e977123c81d3dbb60bf4763a9dae6949bc1900234f7762df1"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--f9c4a0d3-0f52-44a7-aa16-a55a03a81276",
            "hashes": {
                "SHA-256": "973f7939ea03fd2c9663dafc21bb968f56ed1b9a56b0284acf73c3ee141c053c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--732d8ec8-b53c-4241-a66d-f623ed76fe8a",
            "hashes": {
                "SHA-256": "5e40d106977017b1ed235419b1e59ff090e1f43ac57da1bb5d80d66ae53b1df8"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--acda07f0-835c-4194-8cab-ef9ce0f78e52",
            "hashes": {
                "SHA-256": "63fb47c3b4693409ebadf8a5179141af5cf45a46d1e98e5f763ca0d7d64fb17c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--11e132a7-7c59-4c6e-b7f8-5ecb6697b7ad",
            "hashes": {
                "SHA-256": "d8565d58ad8e4f5558b5cd70df0ad12be9cf44e32ad07aaac6f65b816edbf414"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--4583d771-81eb-48a4-a56b-e1d17250f0d0",
            "hashes": {
                "SHA-256": "3c8dbfcbb4fccbaf924f9a650a04cb4715f4a58d51ef49cc75bfcef0ac258a3e"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--31610b73-61b5-41d9-b1bc-3904614da1cf",
            "hashes": {
                "SHA-256": "cbf4cfa2d3c3fb04fe349161e051a8cf9b6a29f8af0c3d93db953e5b5dc39c86"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--55ef2c9a-9ba8-4d8e-8cf9-93d02f9c7c74",
            "hashes": {
                "SHA-256": "0b5db31e47b0dccfdec46e74c0e70c6a1684768dbacc9eacbb4fd2ef851994c7"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--70aa8f0e-4e0d-4df6-bd24-deb9c0ef0423",
            "hashes": {
                "SHA-256": "3ea2ead8f3cec030906dcbffe3efd5c5d77d5d375d4a54cca03bfe8a6cb59940"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--3807bddf-0db2-4dcf-83f6-09e839373da1",
            "hashes": {
                "SHA-256": "c83c7b000a955f2b8cb92bb112ed606ffd9fbebbe3422f80d90d06b167f2f37b"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ef31970f-77a2-4e42-8db7-d538a4e5b38b",
            "hashes": {
                "SHA-256": "a03d13c9825e150810e6e6aaf053d71ec5a53b86581414dd982a74d4a8bc5475"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--016cbb67-995a-42de-bfa7-d9cf64f831a7",
            "hashes": {
                "SHA-256": "99dbc6fe3c3e465052fcefa1642861747dc9e069eeb244589b605bd710b1e0d1"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--9120f82a-4810-40a4-afa3-ebfb79753177",
            "hashes": {
                "SHA-256": "7667d1b8fcc4f712084e3e3f8b4ab505ab150c52aea7b219249ec508b4b0e224"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--be168b8a-e093-45e4-887b-45e1c3dd0b9e",
            "hashes": {
                "SHA-256": "15d53bb839e00405a34a8b690ec181f5555fc4f891b8248ae7fa72bad28315a9"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--3a72ed22-cbb7-4c2e-a04c-7efb659a4dae",
            "hashes": {
                "SHA-256": "5c907b722c53a5be256dc5f96b755bc9e0b032cc30973a52d984d4174bace456"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--8a360f8e-79cf-44b4-b65c-93d15fd030b6",
            "hashes": {
                "SHA-256": "c6a48365c3db9761bd60981bdcdd87aced23d8e60067caa30fee501bf4b47b84"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--1f056116-8d0f-49f1-9cab-f278bf62a567",
            "hashes": {
                "SHA-256": "bfd74b4a1b413fa785a49ca4a9c0594441a3e01983fc7f86125376fdbd4acf6b"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d2d64a4c-3548-4297-bf68-44441048570d",
            "hashes": {
                "SHA-256": "f1713afaf5958bdf3e975ebbab8245a98a84e03f8ce52175ef1568de208116e0"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--4346e2c4-6ae1-4b1b-871e-ed92868e12e2",
            "hashes": {
                "SHA-256": "2546d239a262c24a6f8ea01d890cbc459a22db79b379b6ec3b24fbb56efb5381"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6832bb46-fc2a-4ca9-9952-771f23a89b69",
            "hashes": {
                "SHA-256": "bce1eb513aaac344b5b8f7a9ba9c9e36fc89926d327ee5cc095fb4a895a12f80"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--9271880c-0207-459b-a310-068530af9c99",
            "hashes": {
                "SHA-256": "f3b0da965a4050ab00fce727bb31e0f889a9c05d68d777a8068cfc15a71d3703"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--032ca669-5743-4f2d-b79b-6a9d7fa8250b",
            "hashes": {
                "SHA-256": "479038eb12ed07893ee0dcc04fbdcf182489bbb271f5a4f90f83874881a80ce3"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--32190ea7-8d08-452e-bb88-95c364042c1f",
            "hashes": {
                "SHA-256": "927b3564c1cf884d2a05e1d7bd24362ce8563a1e9b85be776190ab7f8af192f6"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--48c8381f-2eaf-4d3a-8983-a82f2008e74e",
            "hashes": {
                "SHA-256": "89cad9a57985cc0ab3b7403a943ad0aa7b167dc7a3c38557417fedea67a77b87"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--75cbe60c-138c-49a1-bb76-f37141b56eb7",
            "hashes": {
                "SHA-256": "60666cacdd6806ed05771f32eaa719e3efd2f4db55f28a447d383c3eac1dc72e"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--64c595c1-70d7-4bcc-9164-6bfed4f1f710",
            "hashes": {
                "SHA-256": "b72caab78d164637fea0937d7a94fc470579ec6bb4fa87dadb6f0fa7826e217c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ca140f42-9158-4ec2-b16d-8376d4e4e354",
            "hashes": {
                "SHA-256": "f262588c48d2902992ffd275d2be6362fe7f02e2f00a44ab8c75ac1a2827c6e9"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--8d9c6ccb-5633-4a00-af62-605e75c25348",
            "hashes": {
                "SHA-256": "69c917ea96db28dbd5b67073ca0aac234d25651a849171b45f20979eafa05a1c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--504b5364-ae03-4861-bb6d-0cfda5e0f885",
            "hashes": {
                "SHA-256": "1b75f70c226c9ada8e79c3fdd987277b0199928800c51e5a1e55ff01246701db"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--93504d45-8b8a-4e3a-8ead-21a7f3723293",
            "hashes": {
                "SHA-256": "1617587ccdf5b0344089559ecf8fe7d39f6e07a6a64f74f2b44bfa2c8cb67983"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--43ca9011-bff5-4f6d-a7bc-4e473cb04524",
            "hashes": {
                "SHA-256": "46a5d54c264152ce915792af31c75824a558af7d7340d78b34e146d8c6249e79"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--225559fa-2bf4-4f7e-93a1-5cf3e6103601",
            "hashes": {
                "SHA-256": "c7f4aa77be7f7afe9d0665d3e705dbf7794bc479bb9c44488c7bf4169f8d14fe"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--18bc8e30-6c58-4ba6-bcae-de596e157ed5",
            "hashes": {
                "SHA-256": "c9a7b42c7b29ca948160f95f017e9e9ae781f3b981ecf6edbac943e52c63ffc8"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--6b704352-e42e-482c-a157-05ab10f566fb",
            "value": "https://niscarea.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--63d7aa5d-03b3-49ed-9292-f0eeddd4f0a0",
            "value": "niscarea.com"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--49ed03bb-d838-4b41-b827-652e13c9b8da",
            "hashes": {
                "SHA-256": "8bfa4fe0534c0062393b6a2597c3491f7df3bf2eabfe06544c53bdf1f38db6d4"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--a83e9e3f-1ee4-4356-9491-cfd0d8c96eff",
            "value": "http://00701111.000webhostapp.com/wp-extra/show.php?query=50"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--3d1740de-bbe4-4ba4-9dd3-b6d8573ed750",
            "value": "00701111.000webhostapp.com"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--26332748-6cfb-4723-8d2e-138de58fdef6",
            "hashes": {
                "SHA-256": "db6a9934570fa98a93a979e7e0e218e0c9710e5a787b18c6948f2eedd9338984"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--37d150e6-44d7-4903-b56d-d14b3e88dcd6",
            "hashes": {
                "SHA-256": "6c121f2b2efa6592c2c22b29218157ec9e63f385e7a1d7425857d603ddef8c59"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--e68ed59b-3df0-4b87-8eca-7149f5cac720",
            "hashes": {
                "SHA-256": "492a643bd1efdaca4ca125ade1b606e7bbf00e995ac9115ac84d1c4c59cb66dd"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--a18257f1-808d-4ceb-9d02-2df104c53bb1",
            "hashes": {
                "SHA-256": "a64fa9f1c76457ecc58402142a8728ce34ccba378c17318b3340083eeb7acc67"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c3e04b5b-6d8a-4920-9af7-efefcf42d567",
            "hashes": {
                "SHA-256": "5009c7d1590c1f8c05827122172583ddf924c53b55a46826abf66da46725505a"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--dfc600bc-f837-45ed-bf8a-072d528b4945",
            "hashes": {
                "SHA-256": "fee4f9dabc094df24d83ec1a8c4e4ff573e5d9973caa676f58086c99561382d7"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--9de80e52-d03d-4b1e-81ab-25f4863c6259",
            "hashes": {
                "SHA-256": "87c5d0c93b80acf61d24e7aaf0faae231ab507ca45483ad3d441b5d1acebc43c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--2e6afb58-6238-4cc3-aeed-d95b8332679b",
            "hashes": {
                "SHA-256": "e6bbc33815b9f20b0cf832d7401dd893fbc467c800728b5891336706da0dbcec"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--9dae6e7d-eb7d-4886-b924-ede5bb366542",
            "hashes": {
                "SHA-256": "91eaf215be336eae983d069de16630cc3580e222c427f785e0da312d0692d0fd"
            }
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1",
            "created": "2026-06-24T17:29:13.361911Z",
            "modified": "2026-06-24T17:29:13.361911Z",
            "name": "Kimsuky"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--7dfa0ef2-2e89-4dd7-b240-b651907e1068",
            "created_by_ref": "identity--ce8142ae-2b8c-4be0-a950-ac1f10f17ff4",
            "created": "2026-06-24T17:29:13.393761Z",
            "modified": "2026-06-24T17:29:13.393761Z",
            "name": "Exposing the Steps of the Kimsuky APT Group",
            "published": "2024-12-27T00:00:00Z",
            "object_refs": [
                "identity--ce8142ae-2b8c-4be0-a950-ac1f10f17ff4",
                "domain-name--f1b99616-9160-4cfd-acb7-2e59d0c98b4e",
                "file--0bc8562a-c29e-4683-82ea-aa77b20c13f0",
                "file--0ebf8538-b281-41e8-a65f-b67637e040e0",
                "file--81e15b0d-8d0f-49bd-84e0-54434be33453",
                "file--f9c4a0d3-0f52-44a7-aa16-a55a03a81276",
                "file--732d8ec8-b53c-4241-a66d-f623ed76fe8a",
                "file--acda07f0-835c-4194-8cab-ef9ce0f78e52",
                "file--11e132a7-7c59-4c6e-b7f8-5ecb6697b7ad",
                "file--4583d771-81eb-48a4-a56b-e1d17250f0d0",
                "file--31610b73-61b5-41d9-b1bc-3904614da1cf",
                "file--55ef2c9a-9ba8-4d8e-8cf9-93d02f9c7c74",
                "file--70aa8f0e-4e0d-4df6-bd24-deb9c0ef0423",
                "file--3807bddf-0db2-4dcf-83f6-09e839373da1",
                "file--ef31970f-77a2-4e42-8db7-d538a4e5b38b",
                "file--016cbb67-995a-42de-bfa7-d9cf64f831a7",
                "file--9120f82a-4810-40a4-afa3-ebfb79753177",
                "file--be168b8a-e093-45e4-887b-45e1c3dd0b9e",
                "file--3a72ed22-cbb7-4c2e-a04c-7efb659a4dae",
                "file--8a360f8e-79cf-44b4-b65c-93d15fd030b6",
                "file--1f056116-8d0f-49f1-9cab-f278bf62a567",
                "file--d2d64a4c-3548-4297-bf68-44441048570d",
                "file--4346e2c4-6ae1-4b1b-871e-ed92868e12e2",
                "file--6832bb46-fc2a-4ca9-9952-771f23a89b69",
                "file--9271880c-0207-459b-a310-068530af9c99",
                "file--032ca669-5743-4f2d-b79b-6a9d7fa8250b",
                "file--32190ea7-8d08-452e-bb88-95c364042c1f",
                "file--48c8381f-2eaf-4d3a-8983-a82f2008e74e",
                "file--75cbe60c-138c-49a1-bb76-f37141b56eb7",
                "file--64c595c1-70d7-4bcc-9164-6bfed4f1f710",
                "file--ca140f42-9158-4ec2-b16d-8376d4e4e354",
                "file--8d9c6ccb-5633-4a00-af62-605e75c25348",
                "file--504b5364-ae03-4861-bb6d-0cfda5e0f885",
                "file--93504d45-8b8a-4e3a-8ead-21a7f3723293",
                "file--43ca9011-bff5-4f6d-a7bc-4e473cb04524",
                "file--225559fa-2bf4-4f7e-93a1-5cf3e6103601",
                "file--18bc8e30-6c58-4ba6-bcae-de596e157ed5",
                "url--6b704352-e42e-482c-a157-05ab10f566fb",
                "domain-name--63d7aa5d-03b3-49ed-9292-f0eeddd4f0a0",
                "file--49ed03bb-d838-4b41-b827-652e13c9b8da",
                "url--a83e9e3f-1ee4-4356-9491-cfd0d8c96eff",
                "domain-name--3d1740de-bbe4-4ba4-9dd3-b6d8573ed750",
                "file--26332748-6cfb-4723-8d2e-138de58fdef6",
                "file--37d150e6-44d7-4903-b56d-d14b3e88dcd6",
                "file--e68ed59b-3df0-4b87-8eca-7149f5cac720",
                "file--a18257f1-808d-4ceb-9d02-2df104c53bb1",
                "file--c3e04b5b-6d8a-4920-9af7-efefcf42d567",
                "file--dfc600bc-f837-45ed-bf8a-072d528b4945",
                "file--9de80e52-d03d-4b1e-81ab-25f4863c6259",
                "file--2e6afb58-6238-4cc3-aeed-d95b8332679b",
                "file--9dae6e7d-eb7d-4886-b924-ede5bb366542",
                "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.picussecurity.com/resource/blog/exposing-the-steps-of-the-kimsuky-apt-group"
                }
            ]
        }
    ]
}