{
    "type": "bundle",
    "id": "bundle--e4e7af2c-0395-4bf8-952a-098486e9cd65",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--e41faa1c-9eaf-4179-9979-7d1e2d325532",
            "created": "2023-03-08T12:52:01.32117Z",
            "modified": "2024-10-02T10:44:39.622712Z",
            "name": "Symantec",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--448c23a3-2bd5-46e4-8673-75eec620e23a",
            "hashes": {
                "SHA-256": "3a5ba44f140821849de2d82d5a137c3bb5a736130dddb86b296d94e6b421594c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--e7a6054d-8f61-4dd2-af47-39c37a5ffdff",
            "hashes": {
                "SHA-256": "10ac312c8dd02e417dd24d53c99525c29d74dcbc84730351ad7a4e0a4b1a0eba"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--008f8d87-c2cd-4558-8cff-26f84a515086",
            "hashes": {
                "SHA-256": "d465637518024262c063f4a82d799a4e40ff3381014972f24ea18bc23c3b27ee"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--a8f0fae6-90e0-42e2-9b9a-b11844627e9c",
            "hashes": {
                "SHA-256": "ca9ab48d293cc84092e8db8f0ca99cb155b30c61d32a1da7cd3687de454fe86c"
            }
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b",
            "created": "2026-06-24T23:57:20.907293Z",
            "modified": "2026-06-24T23:57:20.907293Z",
            "name": "Lazarus"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--33bf68ab-800a-4ea6-a7d7-7e847db92068",
            "created_by_ref": "identity--e41faa1c-9eaf-4179-9979-7d1e2d325532",
            "created": "2026-06-24T23:57:20.908271Z",
            "modified": "2026-06-24T23:57:20.908271Z",
            "name": "FASTCash: How the Lazarus Group is Emptying Millions from ATMs",
            "published": "2018-11-08T00:00:00Z",
            "object_refs": [
                "identity--e41faa1c-9eaf-4179-9979-7d1e2d325532",
                "file--448c23a3-2bd5-46e4-8673-75eec620e23a",
                "file--e7a6054d-8f61-4dd2-af47-39c37a5ffdff",
                "file--008f8d87-c2cd-4558-8cff-26f84a515086",
                "file--a8f0fae6-90e0-42e2-9b9a-b11844627e9c",
                "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.symantec.com/blogs/threat-intelligence/fastcash-lazarus-atm-malware"
                }
            ]
        }
    ]
}