{
    "type": "bundle",
    "id": "bundle--cde5c7e2-00e0-487c-8b9d-b68d417f64f4",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--5d199e7e-198c-47e8-ad62-397e3bd362e2",
            "created": "2023-03-08T12:51:51.400428Z",
            "modified": "2024-08-19T23:43:12.521753Z",
            "name": "Group-IB",
            "identity_class": "organization"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--44dd15ba-6ee0-4932-859d-cce03bb77f20",
            "value": "95.164.17.24"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--54fa35c4-d57e-43a6-8463-28213d33c572",
            "value": "185.235.241.208"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--331a5876-6eb1-4cc2-aed3-4310f44e3bcd",
            "hashes": {
                "MD5": "8ebca0b7ef7dbfc14da3ee39f478e880"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--bfd49962-8bbc-42e6-afc7-eb8252a702e9",
            "hashes": {
                "MD5": "ed60b3913e6694f4a0ed2fe25551bd1f"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--21d0b202-ba39-4af5-a569-05a75d3a4276",
            "hashes": {
                "MD5": "dc77044fe8d35882015eaa99ca31f826"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d4bd0c84-9b9d-4a38-9f79-8c181ec41009",
            "hashes": {
                "MD5": "b9693b6541a22d01b100b867375279e6"
            }
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b",
            "created": "2026-06-24T21:09:49.526414Z",
            "modified": "2026-06-24T21:09:49.526414Z",
            "name": "Lazarus"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--5c270689-1dc1-469d-a34a-1b3602b30b5e",
            "created_by_ref": "identity--5d199e7e-198c-47e8-ad62-397e3bd362e2",
            "created": "2026-06-24T21:09:49.52745Z",
            "modified": "2026-06-24T21:09:49.52745Z",
            "name": "Group-IB researchers noticed a Windows version of BeaverTail, which was attributed to Lazarus",
            "published": "2024-08-13T00:00:00Z",
            "object_refs": [
                "identity--5d199e7e-198c-47e8-ad62-397e3bd362e2",
                "ipv4-addr--44dd15ba-6ee0-4932-859d-cce03bb77f20",
                "ipv4-addr--54fa35c4-d57e-43a6-8463-28213d33c572",
                "file--331a5876-6eb1-4cc2-aed3-4310f44e3bcd",
                "file--bfd49962-8bbc-42e6-afc7-eb8252a702e9",
                "file--21d0b202-ba39-4af5-a569-05a75d3a4276",
                "file--d4bd0c84-9b9d-4a38-9f79-8c181ec41009",
                "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://archive.is/4xEa8"
                }
            ]
        }
    ]
}