{
    "type": "bundle",
    "id": "bundle--e877749a-82e9-4db7-acd1-495b4e86384a",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--26f043d6-2bd6-459a-b07f-6d4d79229bfc",
            "created": "2026-01-13T04:01:05.551348Z",
            "modified": "2026-01-13T04:03:03.479042Z",
            "name": "RedAsgard",
            "identity_class": "organization"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--002b0dca-4eb2-4e71-b115-0e385c52d002",
            "value": "polygon-rpc.com"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--3c508568-d8f4-42c9-9eb3-b07b70bc9500",
            "value": "87.236.177.9"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--40e51da8-8f94-47bb-96ab-cb8a75e03402",
            "value": "147.124.213.232"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--7962d30f-4cba-4822-a940-f0badf0c8fe3",
            "value": "45.59.163.55"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--3867b0a2-c55b-4bb2-ba2f-e0d6e1a1aeb4",
            "value": "66.235.168.238"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--90b6cab1-89a0-4246-b056-a06ef9195ea5",
            "value": "147.124.212.125"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--362b4c76-effa-4164-9dee-3d3df1817172",
            "hashes": {
                "SHA-256": "3e2d9bcf6ff5ae441493df87e8c46b68c12985d88152cd4ab047b236a77dd30d"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--33042e72-5ac5-45ce-9e27-187594d494f0",
            "hashes": {
                "SHA-256": "43223ce324e65b694bb8dd6bbf7992e29f75605a366532fe993bfdd924193f84"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--1eb852a5-5600-4583-b6cf-7763053a770c",
            "hashes": {
                "SHA-256": "e695f6628abade062d5a2310e16c5b2d1707795c0214b939d328e0772a776fea"
            }
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--d112702a-7a1b-48d2-b151-d327f8aeabb2",
            "value": "11.34.242.92"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b",
            "created": "2026-06-24T23:56:23.575594Z",
            "modified": "2026-06-24T23:56:23.575594Z",
            "name": "Lazarus"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--fa7d40fe-5f18-4a7e-83b5-56dd5c68b92a",
            "created_by_ref": "identity--26f043d6-2bd6-459a-b07f-6d4d79229bfc",
            "created": "2026-06-24T23:56:23.586268Z",
            "modified": "2026-06-24T23:56:23.586268Z",
            "name": "Hunting Lazarus Part II: When the Dead Drop Moved to the Blockchain",
            "published": "2026-01-23T00:00:00Z",
            "object_refs": [
                "identity--26f043d6-2bd6-459a-b07f-6d4d79229bfc",
                "domain-name--002b0dca-4eb2-4e71-b115-0e385c52d002",
                "ipv4-addr--3c508568-d8f4-42c9-9eb3-b07b70bc9500",
                "ipv4-addr--40e51da8-8f94-47bb-96ab-cb8a75e03402",
                "ipv4-addr--7962d30f-4cba-4822-a940-f0badf0c8fe3",
                "ipv4-addr--3867b0a2-c55b-4bb2-ba2f-e0d6e1a1aeb4",
                "ipv4-addr--90b6cab1-89a0-4246-b056-a06ef9195ea5",
                "file--362b4c76-effa-4164-9dee-3d3df1817172",
                "file--33042e72-5ac5-45ce-9e27-187594d494f0",
                "file--1eb852a5-5600-4583-b6cf-7763053a770c",
                "ipv4-addr--d112702a-7a1b-48d2-b151-d327f8aeabb2",
                "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://redasgard.com/blog/hunting-lazarus-part2-blockchain-dead-drop"
                }
            ]
        }
    ]
}