{
    "type": "bundle",
    "id": "bundle--8468fb4e-a79b-47ff-8ea2-44b7c4bd3b51",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--20a4ef27-77f5-49c6-bc1b-4f99bbc0c316",
            "created": "2025-06-22T23:37:44.639939Z",
            "modified": "2025-06-22T23:37:44.639974Z",
            "name": "LCSC-IE",
            "identity_class": "organization"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--60b73194-749a-4ffa-a6e8-32422c12e849",
            "value": "158.247.192.226"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--6fdf0c77-ee17-4091-adf0-1e37eabe834f",
            "value": "158.247.242.206"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--9d5b553c-acb1-479f-9f40-37e380a7d311",
            "value": "158.247.215.121"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--8471f81a-da6c-4f01-8d86-66f5f35acbac",
            "value": "158.247.204.137"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--4a828611-6c2a-4b6a-bbf0-6d05536ea4d9",
            "hashes": {
                "SHA-256": "26ba5b01f614a215b948a5700338575412dcff2df972b7696b2c8c3f3b74a723"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--4868381f-7419-4aa7-b427-261b4e42011e",
            "hashes": {
                "SHA-256": "9947d3f5c4ea436c15a94373cb36e46ada68438d19e5f5fdb1c9bb55e9d140ff"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--cf0aad5e-8458-4455-a5c2-9d6509c3b2a7",
            "hashes": {
                "SHA-256": "04d14da053c42397c48a54fe61850ddc3a38156514f03759df59473383453042"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--9afd5b43-9b2d-4bd5-bae1-bb27561cad4a",
            "value": "login.online-mexc.kro.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--32eba6ac-6332-438c-af22-e86f93f332bb",
            "value": "coupick.co.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--6df2ea36-1641-4712-8356-d49180564495",
            "value": "nts.departmentedoc.r-e.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--64d29eef-24b7-4ea5-9a88-3499b69a321e",
            "value": "nid.policegoalsvc.p-e.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--8841d6f2-8270-4a49-81b1-79a47471e128",
            "value": "hometx.taxdepartmentsvc.kro.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--7de6c557-6261-4890-89f4-375691752532",
            "value": "brownsix.com"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--7b4db757-c896-401f-a0ff-3098272d2998",
            "value": "141.164.51.224"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--18411066-e025-43c5-8ecb-f558b014f242",
            "value": "141.164.55.2"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--df295a39-dd11-43df-ac86-8a92f132b7cf",
            "value": "158.247.247.157"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--0bb14ae8-c79a-4474-96bf-3059a0872901",
            "hashes": {
                "SHA-256": "9b43f670273b6a12b2b6894a9e29157c1859717594e98ccc5fb3eea05e71f4ed"
            }
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1",
            "created": "2026-06-24T21:01:32.392684Z",
            "modified": "2026-06-24T21:01:32.392684Z",
            "name": "Kimsuky"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--5cd5ffb6-86f4-457c-8ca9-587c2faac8f2",
            "created_by_ref": "identity--20a4ef27-77f5-49c6-bc1b-4f99bbc0c316",
            "created": "2026-06-24T21:01:32.393698Z",
            "modified": "2026-06-24T21:01:32.393698Z",
            "name": "Identifying North Korean Kimsuky (APT43) Infrastructure",
            "published": "2025-06-17T00:00:00Z",
            "object_refs": [
                "identity--20a4ef27-77f5-49c6-bc1b-4f99bbc0c316",
                "ipv4-addr--60b73194-749a-4ffa-a6e8-32422c12e849",
                "ipv4-addr--6fdf0c77-ee17-4091-adf0-1e37eabe834f",
                "ipv4-addr--9d5b553c-acb1-479f-9f40-37e380a7d311",
                "ipv4-addr--8471f81a-da6c-4f01-8d86-66f5f35acbac",
                "file--4a828611-6c2a-4b6a-bbf0-6d05536ea4d9",
                "file--4868381f-7419-4aa7-b427-261b4e42011e",
                "file--cf0aad5e-8458-4455-a5c2-9d6509c3b2a7",
                "domain-name--9afd5b43-9b2d-4bd5-bae1-bb27561cad4a",
                "domain-name--32eba6ac-6332-438c-af22-e86f93f332bb",
                "domain-name--6df2ea36-1641-4712-8356-d49180564495",
                "domain-name--64d29eef-24b7-4ea5-9a88-3499b69a321e",
                "domain-name--8841d6f2-8270-4a49-81b1-79a47471e128",
                "domain-name--7de6c557-6261-4890-89f4-375691752532",
                "ipv4-addr--7b4db757-c896-401f-a0ff-3098272d2998",
                "ipv4-addr--18411066-e025-43c5-8ecb-f558b014f242",
                "ipv4-addr--df295a39-dd11-43df-ac86-8a92f132b7cf",
                "file--0bb14ae8-c79a-4474-96bf-3059a0872901",
                "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://medium.com/@LCSC-IE/identifying-north-korean-kimsuky-apt43-infrastructure-b6817a58a65b"
                }
            ]
        }
    ]
}