{
    "type": "bundle",
    "id": "bundle--0651429f-5083-4b6e-b43a-a714ab1dc701",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--2e82fa50-d8f7-4f37-9b24-2cf68aac249c",
            "created": "2025-10-21T23:54:25.441062Z",
            "modified": "2025-10-21T23:54:25.441096Z",
            "name": "DerivTech",
            "identity_class": "organization"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--44dd15ba-6ee0-4932-859d-cce03bb77f20",
            "value": "95.164.17.24"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d31175e4-68de-4dd9-b055-ca7e4c9fc1f1",
            "hashes": {
                "MD5": "e43673a2a77ed68fa6e8074167350f8f"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c27ad202-2c09-486c-8307-cbb74ebd59b4",
            "hashes": {
                "MD5": "351535afd2d98b9a3a0e14905a60a345"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b7764dca-51d4-426d-9ab4-e7cfa4edda8d",
            "hashes": {
                "SHA-256": "967adedce518105664c46e21fd4edb02270506a307ea7242fa78c1cf80baec9d"
            }
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--69c71fb0-3955-4d89-b36f-ea654aa46c82",
            "value": "88.218.0.78"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--18d42973-ae2d-4798-b17c-fa3598d74d76",
            "value": "ip-api.com"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--e5817ddd-ca07-4ce0-8a99-c2b22bdaa7c5",
            "hashes": {
                "SHA-256": "99502507bfa92aee6d6b0220346410412be6cfd1ca1b28378b9e0958bd697342"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--1bea3eb3-c0c8-4810-8185-471d956b2ba1",
            "hashes": {
                "MD5": "3e5fd7fdc21c6cfd419cc84fa67b869e"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--cce0278d-a9d5-41c1-b2b6-d8996db7b80f",
            "hashes": {
                "SHA-256": "ffed818b35b249db723741d3ec1cb7bc5a8e3e47821feb030d4a424717cd670e"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--e7c86453-49d4-4ce3-af35-65b6205ea4e5",
            "hashes": {
                "SHA-256": "9daa4de89ea95bf5f7f97815ecee0d7435f03b1d50ff2222973bcc517daee160"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--db19db9b-1a61-4d54-9716-dbff8b2c6022",
            "hashes": {
                "SHA-256": "006c6a04a741ba75e66d460b441c8984bad00c2566b262a9b579a86c649e788f"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--92c5e8d3-b925-4c8f-8b30-5e7f4147fe23",
            "hashes": {
                "SHA-256": "b59187e77c19f5fcd9fdb14663fbdd91cf7110bfec1267676a61b5a85583bf58"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--61407722-310f-4019-8f59-b48362771f1d",
            "value": "http://loopsoft.tech:6168/defy/v8"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--ebbf38f9-279b-45c2-a35e-a83628507db2",
            "value": "172.86.89.10"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--29f5f774-d42d-446e-8392-ea2f323aa422",
            "value": "loopsoft.tech"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--6059efa1-8dc2-4ef7-b320-f58d1e8e2fe0",
            "created_by_ref": "identity--2e82fa50-d8f7-4f37-9b24-2cf68aac249c",
            "created": "2026-06-24T21:17:22.355945Z",
            "modified": "2026-06-24T21:17:22.355945Z",
            "name": "How a fake AI recruiter delivers five staged malware disguised as a dream job",
            "published": "2025-10-20T00:00:00Z",
            "object_refs": [
                "identity--2e82fa50-d8f7-4f37-9b24-2cf68aac249c",
                "ipv4-addr--44dd15ba-6ee0-4932-859d-cce03bb77f20",
                "file--d31175e4-68de-4dd9-b055-ca7e4c9fc1f1",
                "file--c27ad202-2c09-486c-8307-cbb74ebd59b4",
                "file--b7764dca-51d4-426d-9ab4-e7cfa4edda8d",
                "ipv4-addr--69c71fb0-3955-4d89-b36f-ea654aa46c82",
                "domain-name--18d42973-ae2d-4798-b17c-fa3598d74d76",
                "file--e5817ddd-ca07-4ce0-8a99-c2b22bdaa7c5",
                "file--1bea3eb3-c0c8-4810-8185-471d956b2ba1",
                "file--cce0278d-a9d5-41c1-b2b6-d8996db7b80f",
                "file--e7c86453-49d4-4ce3-af35-65b6205ea4e5",
                "file--db19db9b-1a61-4d54-9716-dbff8b2c6022",
                "file--92c5e8d3-b925-4c8f-8b30-5e7f4147fe23",
                "url--61407722-310f-4019-8f59-b48362771f1d",
                "ipv4-addr--ebbf38f9-279b-45c2-a35e-a83628507db2",
                "domain-name--29f5f774-d42d-446e-8392-ea2f323aa422"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://medium.com/deriv-tech/how-a-fake-ai-recruiter-delivers-five-staged-malware-disguised-as-a-dream-job-64cc68fec263"
                }
            ]
        }
    ]
}