{
    "type": "bundle",
    "id": "bundle--69790982-30f5-4ccd-941b-159496c87afc",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--18a3a1f0-eb3d-4bbc-904e-ee52948913a7",
            "created": "2023-03-08T12:51:43.431426Z",
            "modified": "2023-03-08T12:51:43.431505Z",
            "name": "Malwarebytes",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d3ce750a-b5ea-4025-a5e0-6cc4be47b4ce",
            "hashes": {
                "SHA-256": "a5a0964b1308fdb0aeb8bd5b2a0f306c99997c7c076d66eb3ebcdd68405b1da2"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--9320c3fd-dcf3-4b70-90e5-b9383cf77beb",
            "hashes": {
                "MD5": "237eee069c1df7b69cee2cc63dee24e6"
            }
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--bc9c0da1-1e58-43cb-bbc1-9da00ed8c055",
            "value": "pretty040782@gmail.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--d7893bca-5415-4ec2-b0e0-bb3b733724ec",
            "value": "pretty040782@keemail.me"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--84dbdd90-261e-4d0a-8b8a-eff130c29cec",
            "value": "name.secondadvertisements.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--b86c60df-f909-457d-8853-2f630c119090",
            "value": "bannerssale.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--3039c15f-8902-405b-9e3f-c52d4e5aefdf",
            "value": "hunting.bannerexposure.info"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--1434f744-db8d-4a1a-96ab-5b579755a443",
            "value": "switzerland.innovativebanner.info"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--20edebee-9fc9-4bbb-99c0-4ff57831f8ab",
            "value": "accompanied.bannerexposure.info"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--4c4047a3-9424-480c-af65-1b5ca179ec1f",
            "value": "technologies.roadadvertisements.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--62a0e213-bccd-433b-b5e9-19a517fd40c5",
            "value": "keemail.me"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--42159da0-9a69-43d7-806b-ade5a1551e6f",
            "value": "staradvertsment.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--26f5b1e4-74e4-4b22-b806-95e69ff1d89b",
            "value": "aquaadvertisement.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--faec4fcf-42de-477b-8e3d-199dc1777aab",
            "value": "marketing.roadadvertisements.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--2ef16f78-0b12-43b4-a87b-936030e97794",
            "value": "assessed.secondadvertisements.com"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--278dc8cb-ddae-4cea-9032-f0222abbeffa",
            "value": "207.148.104.5"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--04af9734-44e0-4ef5-9641-19658c307d31",
            "value": "159.65.131.94"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--39a1e565-3f71-40bc-9b53-66fed3603016",
            "value": "28.0.0.137"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--d9b661c5-48f6-4691-a059-8e1be58d6419",
            "created_by_ref": "identity--18a3a1f0-eb3d-4bbc-904e-ee52948913a7",
            "created": "2026-06-24T18:42:02.775485Z",
            "modified": "2026-06-24T18:42:02.775485Z",
            "name": "Hermes ransomware distributed to South Koreans via recent Flash zero-day",
            "published": "2018-03-14T00:00:00Z",
            "object_refs": [
                "identity--18a3a1f0-eb3d-4bbc-904e-ee52948913a7",
                "file--d3ce750a-b5ea-4025-a5e0-6cc4be47b4ce",
                "file--9320c3fd-dcf3-4b70-90e5-b9383cf77beb",
                "email-addr--bc9c0da1-1e58-43cb-bbc1-9da00ed8c055",
                "email-addr--d7893bca-5415-4ec2-b0e0-bb3b733724ec",
                "domain-name--84dbdd90-261e-4d0a-8b8a-eff130c29cec",
                "domain-name--b86c60df-f909-457d-8853-2f630c119090",
                "domain-name--3039c15f-8902-405b-9e3f-c52d4e5aefdf",
                "domain-name--1434f744-db8d-4a1a-96ab-5b579755a443",
                "domain-name--20edebee-9fc9-4bbb-99c0-4ff57831f8ab",
                "domain-name--4c4047a3-9424-480c-af65-1b5ca179ec1f",
                "domain-name--62a0e213-bccd-433b-b5e9-19a517fd40c5",
                "domain-name--42159da0-9a69-43d7-806b-ade5a1551e6f",
                "domain-name--26f5b1e4-74e4-4b22-b806-95e69ff1d89b",
                "domain-name--faec4fcf-42de-477b-8e3d-199dc1777aab",
                "domain-name--2ef16f78-0b12-43b4-a87b-936030e97794",
                "ipv4-addr--278dc8cb-ddae-4cea-9032-f0222abbeffa",
                "ipv4-addr--04af9734-44e0-4ef5-9641-19658c307d31",
                "ipv4-addr--39a1e565-3f71-40bc-9b53-66fed3603016"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://blog.malwarebytes.com/threat-analysis/2018/03/hermes-ransomware-distributed-to-south-koreans-via-recent-flash-zero-day/"
                }
            ]
        }
    ]
}