{
    "type": "bundle",
    "id": "bundle--3362efb3-f6d3-4e01-b5f5-8e1b3c88a6e3",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--ee1af7fe-c2db-446e-ab28-bdb4b4e29c1c",
            "created": "2023-03-08T12:51:42.067091Z",
            "modified": "2023-03-10T04:35:51.526813Z",
            "name": "USCISA",
            "identity_class": "organization"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--107b1230-c013-4d68-89c5-5f3e671b0153",
            "created": "2026-06-24T19:55:49.530016Z",
            "modified": "2026-06-24T19:55:49.530016Z",
            "name": "YARA Rule",
            "pattern": "rule volgmer\r\n{\r\nmeta:\r\ndescription = \"Malformed User Agent\"\r\nstrings:\r\n$s = \"Mozillar/\"\r\ncondition:\r\n(uint16(0) == 0x5A4D and uint16(uint32(0x3c)) == 0x4550) and $s\r\n}",
            "pattern_type": "yara",
            "valid_from": "2017-11-14T00:00:00Z"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--144818da-aadb-576a-82f4-f05e15a3bb28",
            "created": "2026-06-24T19:55:49.53404Z",
            "modified": "2026-06-24T19:55:49.53404Z",
            "name": "HiddenCobra"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--b4e8cb04-6c16-4986-b785-a5e3f39689fa",
            "created_by_ref": "identity--ee1af7fe-c2db-446e-ab28-bdb4b4e29c1c",
            "created": "2026-06-24T19:55:49.536696Z",
            "modified": "2026-06-24T19:55:49.536696Z",
            "name": "HIDDEN COBRA \u2013 North Korean Trojan: Volgmer",
            "published": "2017-11-14T00:00:00Z",
            "object_refs": [
                "identity--ee1af7fe-c2db-446e-ab28-bdb4b4e29c1c",
                "indicator--107b1230-c013-4d68-89c5-5f3e671b0153",
                "threat-actor--144818da-aadb-576a-82f4-f05e15a3bb28"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.us-cert.gov/ncas/alerts/TA17-318B"
                }
            ]
        }
    ]
}