{
    "type": "bundle",
    "id": "bundle--a1525647-0280-4ce4-943f-f1051d0151f8",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--cb540de6-3c37-4758-8314-36c1b8c47629",
            "created": "2023-03-08T12:51:48.869722Z",
            "modified": "2025-06-03T14:10:08.451994Z",
            "name": "CrowdStrike",
            "identity_class": "organization"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--dcc76c02-2ee9-40ba-9159-18d78b6981f2",
            "value": "xxlvbrloxvriy2c5.onion"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--930aef32-ca6e-4a3e-852b-fa0d2bc95540",
            "value": "cwwnhwhlz52maqm7.onion"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--8542d8a3-effb-4777-8904-921b58acd264",
            "value": "gx7ekbenv2riucmf.onion"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--8849aeef-6154-42f0-9a57-5fc6279fa738",
            "value": "76jdd2ir2embyv47.onion"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--4d1c7e60-88a7-48a5-86e6-045102bb58c8",
            "value": "57g7spgrzlojinas.onion"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--b4869681-6d43-4fa6-9b62-bccfd13c2976",
            "created_by_ref": "identity--cb540de6-3c37-4758-8314-36c1b8c47629",
            "created": "2026-06-24T19:47:09.466454Z",
            "modified": "2026-06-24T19:47:09.466454Z",
            "name": "Falcon Report: CrowdStrike Falcon Prevents the Attack",
            "published": "2017-05-12T00:00:00Z",
            "object_refs": [
                "identity--cb540de6-3c37-4758-8314-36c1b8c47629",
                "domain-name--dcc76c02-2ee9-40ba-9159-18d78b6981f2",
                "domain-name--930aef32-ca6e-4a3e-852b-fa0d2bc95540",
                "domain-name--8542d8a3-effb-4777-8904-921b58acd264",
                "domain-name--8849aeef-6154-42f0-9a57-5fc6279fa738",
                "domain-name--4d1c7e60-88a7-48a5-86e6-045102bb58c8"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.crowdstrike.com/blog/falcon-intelligence-report-wanna-ransomware-spreads-rapidly-continually-encrypts-victim-files/"
                }
            ]
        }
    ]
}