{
    "type": "bundle",
    "id": "bundle--bf66321b-5f3c-4ad6-846d-438f80d254ed",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--b5bcf025-fdd8-486e-85fe-9d23c45827d6",
            "created": "2026-02-26T23:33:02.446066Z",
            "modified": "2026-02-26T23:33:02.446113Z",
            "name": "Kmsec",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7a9faf48-0093-4603-bcf3-495867ea6bf9",
            "hashes": {
                "SHA-256": "323ba89ec7410656629f8a1e7890d3025739adcbb8497f1c737a7465c13eb1fd"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7367f77a-2dc3-44eb-835c-c5bb7710dc03",
            "hashes": {
                "SHA-256": "0be2375362227f846c56c4de2db4d3113e197f0c605c297a7e0e0c154e94464e"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--1cf5f56a-9a02-420b-90bb-0ecddabbce96",
            "value": "https://malicanbur.pro"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--61be4848-e58e-4e48-a181-d086bd183370",
            "value": "https://malicanbur.pro/winnmrepair_ml2j.release"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--6e7c29fb-dbc8-47b4-9d0c-816d98def77e",
            "value": "malicanbur.pro"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--261a25df-c5d4-4bb5-8f55-96a45d26d516",
            "value": "173.211.46.22"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--1d227bee-f26c-5f74-a3f8-5bdb18774b64",
            "created": "2026-06-24T17:27:36.842745Z",
            "modified": "2026-06-24T17:27:36.842745Z",
            "name": "FamousChollima"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--db52cd40-bd7f-4eb1-b014-09e5e0dfea04",
            "created_by_ref": "identity--b5bcf025-fdd8-486e-85fe-9d23c45827d6",
            "created": "2026-06-24T17:27:36.845364Z",
            "modified": "2026-06-24T17:27:36.845364Z",
            "name": "First instance of PylangGhost RAT observed on npm",
            "published": "2026-03-13T00:00:00Z",
            "object_refs": [
                "identity--b5bcf025-fdd8-486e-85fe-9d23c45827d6",
                "file--7a9faf48-0093-4603-bcf3-495867ea6bf9",
                "file--7367f77a-2dc3-44eb-835c-c5bb7710dc03",
                "url--1cf5f56a-9a02-420b-90bb-0ecddabbce96",
                "url--61be4848-e58e-4e48-a181-d086bd183370",
                "domain-name--6e7c29fb-dbc8-47b4-9d0c-816d98def77e",
                "ipv4-addr--261a25df-c5d4-4bb5-8f55-96a45d26d516",
                "threat-actor--1d227bee-f26c-5f74-a3f8-5bdb18774b64"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://kmsec.uk/blog/pylangghost-npm/"
                }
            ]
        }
    ]
}