{
    "type": "bundle",
    "id": "bundle--8983c572-b6e5-4d19-83db-630aaf028127",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--26f043d6-2bd6-459a-b07f-6d4d79229bfc",
            "created": "2026-01-13T04:01:05.551348Z",
            "modified": "2026-01-13T04:03:03.479042Z",
            "name": "RedAsgard",
            "identity_class": "organization"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--40e51da8-8f94-47bb-96ab-cb8a75e03402",
            "value": "147.124.213.232"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--0cafb877-26cd-4bc8-852d-f1e017bfe398",
            "value": "216.250.251.87"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--7962d30f-4cba-4822-a940-f0badf0c8fe3",
            "value": "45.59.163.55"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--3867b0a2-c55b-4bb2-ba2f-e0d6e1a1aeb4",
            "value": "66.235.168.238"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--0e5825dd-04be-4c35-84e5-aacc1b8c5529",
            "value": "172.86.105.40"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--90b6cab1-89a0-4246-b056-a06ef9195ea5",
            "value": "147.124.212.125"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--3ad05408-73a6-4bf1-9428-57960f84cd89",
            "value": "144.172.104.117"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--76e814ac-d2f3-4d26-be36-7630b0a468cf",
            "value": "172.86.116.178"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--83df27ce-11c3-4041-8b02-b685d59d9122",
            "value": "86.106.85.234"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--e703ebd7-120a-4771-83d7-6d11a6815da9",
            "value": "144.172.101.45"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--0f09ca01-e47b-4e71-b6d3-d6876dad9cf7",
            "value": "147.124.214.129"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ac510348-c284-4d57-b05d-2fc7788015ae",
            "hashes": {
                "MD5": "4a3703430a2ec2ae30f362b29e994f77"
            }
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b",
            "created": "2026-06-24T22:31:41.363974Z",
            "modified": "2026-06-24T22:31:41.363974Z",
            "name": "Lazarus"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--4291d35f-da31-4650-b6b9-252d1335d1cd",
            "created_by_ref": "identity--26f043d6-2bd6-459a-b07f-6d4d79229bfc",
            "created": "2026-06-24T22:31:41.396227Z",
            "modified": "2026-06-24T22:31:41.396227Z",
            "name": "Hunting Lazarus Part III: The Infrastructure That Was Too Perfect",
            "published": "2026-02-01T00:00:00Z",
            "object_refs": [
                "identity--26f043d6-2bd6-459a-b07f-6d4d79229bfc",
                "ipv4-addr--40e51da8-8f94-47bb-96ab-cb8a75e03402",
                "ipv4-addr--0cafb877-26cd-4bc8-852d-f1e017bfe398",
                "ipv4-addr--7962d30f-4cba-4822-a940-f0badf0c8fe3",
                "ipv4-addr--3867b0a2-c55b-4bb2-ba2f-e0d6e1a1aeb4",
                "ipv4-addr--0e5825dd-04be-4c35-84e5-aacc1b8c5529",
                "ipv4-addr--90b6cab1-89a0-4246-b056-a06ef9195ea5",
                "ipv4-addr--3ad05408-73a6-4bf1-9428-57960f84cd89",
                "ipv4-addr--76e814ac-d2f3-4d26-be36-7630b0a468cf",
                "ipv4-addr--83df27ce-11c3-4041-8b02-b685d59d9122",
                "ipv4-addr--e703ebd7-120a-4771-83d7-6d11a6815da9",
                "ipv4-addr--0f09ca01-e47b-4e71-b6d3-d6876dad9cf7",
                "file--ac510348-c284-4d57-b05d-2fc7788015ae",
                "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://redasgard.com/blog/hunting-lazarus-part3-infrastructure-too-perfect"
                }
            ]
        }
    ]
}