{
    "type": "bundle",
    "id": "bundle--42dc8916-f8f4-4ebd-b832-2c949e5a6971",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--2342bca0-000a-4032-97a0-cb95698d25a8",
            "created": "2024-07-15T23:02:15.401989Z",
            "modified": "2025-01-16T23:06:04.025947Z",
            "name": "Validin",
            "identity_class": "organization"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--a487436d-8929-46d4-9998-212edb239314",
            "value": "104.168.165.203"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--1836ccdd-b973-4b33-afd0-ec45331c55d8",
            "value": "104.168.157.45"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--80a3ab76-bebf-47f6-9d8b-f672ba15e73b",
            "hashes": {
                "SHA-1": "8edc64bd3deaa4397af5453aee893fa6704dfabf"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--693ca1bd-44e7-4891-944a-0b15fc75cb54",
            "value": "internal-meet.xyz"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--be5fe130-7eae-490b-af82-2f34cc091de5",
            "value": "108.174.194.10"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--26ffc0f9-de71-4bad-8153-b5a198d42383",
            "value": "104.168.203.159"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--752e3868-e293-4149-8cb8-919e16bb4930",
            "value": "104.168.165.173"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--1ab457d1-b860-49ac-9d1a-b22556dd7023",
            "value": "104.168.165.165"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--18fafc3e-0d04-4c45-b90d-2e9ca7b05dfe",
            "value": "104.168.203.161"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--7c1fe6e3-72d8-43a4-884a-eac92f4cc22b",
            "value": "104.168.137.21"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b",
            "created": "2026-06-24T22:42:00.591479Z",
            "modified": "2026-06-24T22:42:00.591479Z",
            "name": "Lazarus"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--6049bdbc-2bbc-4f9e-9706-bce7285acc61",
            "created_by_ref": "identity--2342bca0-000a-4032-97a0-cb95698d25a8",
            "created": "2026-06-24T22:42:00.592553Z",
            "modified": "2026-06-24T22:42:00.592553Z",
            "name": "Hunting Lazarus: Expanding Indicators with Historic DNS",
            "published": "2024-07-15T00:00:00Z",
            "object_refs": [
                "identity--2342bca0-000a-4032-97a0-cb95698d25a8",
                "ipv4-addr--a487436d-8929-46d4-9998-212edb239314",
                "ipv4-addr--1836ccdd-b973-4b33-afd0-ec45331c55d8",
                "file--80a3ab76-bebf-47f6-9d8b-f672ba15e73b",
                "domain-name--693ca1bd-44e7-4891-944a-0b15fc75cb54",
                "ipv4-addr--be5fe130-7eae-490b-af82-2f34cc091de5",
                "ipv4-addr--26ffc0f9-de71-4bad-8153-b5a198d42383",
                "ipv4-addr--752e3868-e293-4149-8cb8-919e16bb4930",
                "ipv4-addr--1ab457d1-b860-49ac-9d1a-b22556dd7023",
                "ipv4-addr--18fafc3e-0d04-4c45-b90d-2e9ca7b05dfe",
                "ipv4-addr--7c1fe6e3-72d8-43a4-884a-eac92f4cc22b",
                "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.validin.com/blog/hunting-lazarus-dns-history-host-responses/"
                }
            ]
        }
    ]
}