{
    "type": "bundle",
    "id": "bundle--4bbf9ecc-c065-4ebc-851a-ca2ee9236936",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--5ace95f0-bd6c-4fee-a494-ca40e791918d",
            "created": "2023-03-08T12:51:44.544245Z",
            "modified": "2024-09-09T23:28:33.92829Z",
            "name": "PaloaltoNetworks",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--2ee912de-544c-4fe9-8e2e-74037ced9344",
            "hashes": {
                "SHA-256": "49a665d51e0f17c6554f11be7abcdcc98b94a68f6041fd02a74291540fc05a79"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ca5003fe-5003-4526-8fb9-501e497bd9a9",
            "hashes": {
                "MD5": "c89a97b99063a74eeea8b7288196cb96"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--15dac731-7c92-443b-a579-14f27aeaa916",
            "hashes": {
                "SHA-1": "01635c842f4cee4e5a97fba2341207b1372a4559"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7ab8b101-517e-4ee6-a9df-43de8f953957",
            "hashes": {
                "MD5": "f6f3d7264f7478b472894b90a66ea2a2"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d9b9dc96-f1fb-4dd7-92d9-644348e68039",
            "hashes": {
                "MD5": "285352cad75dc32baae10abf68005397"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--393f8676-12a3-42f6-9acc-524761ba5d96",
            "hashes": {
                "SHA-1": "1b86a66a0a0d6a619d8f2cd1e2904ef7395b3f81"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--aba36ffe-5745-4fd6-bd31-3c2bea766e2e",
            "hashes": {
                "MD5": "29289c19c414cf79e61e095c1500938a"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--881eb0b2-5f66-459b-b22d-2a0c399e939d",
            "hashes": {
                "MD5": "23637a57ea2f984afaf991d4e90e3f4a"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--290739cd-731a-4ddd-ac4c-5f4eb9115ac1",
            "hashes": {
                "SHA-1": "6270129b7ee49aef969e8c18fad584e7cb2e512e"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--1d400cf0-f1c3-49c5-adb3-3923d3786caf",
            "hashes": {
                "SHA-1": "6c53a43acfb8f3a1c7b37eb614cbd89dd7e70dfe"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--2c0b18db-b84b-4858-9d13-295e8b9bb48b",
            "hashes": {
                "SHA-1": "7315e7fd14518b8a27750d5f717a9fa6bba71880"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--65e8729e-d42f-4b30-9fd9-56faaa672f53",
            "hashes": {
                "SHA-1": "8bb8e4193ed7a115b97046afaa6cf371f237885f"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--cb4e44f3-5fb5-473d-bba8-2bffc29dc911",
            "hashes": {
                "SHA-256": "ee878a8adee367371242d624f79531fcb81850a25af0a46b1f82cfb5975f1c89"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7a33a3fb-0154-4ee8-a6d8-80b74fa1e958",
            "hashes": {
                "SHA-1": "0ef3ec648b63badadb6ba947e4f90f12c2c8b7e8"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--31561178-7f00-431b-98a7-2e84d5912661",
            "hashes": {
                "SHA-256": "a10cf8b278af1bbc93e03e29908202197365792fcb0add8d02a1e0bdbf94121e"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--876b2498-845e-4225-bf18-bbe23c7f89e5",
            "hashes": {
                "SHA-1": "25d283bea4136f07c13ff3902821a207a9f67a7f"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--3d22a249-5e5d-4e0a-8fb3-0dda9d372fb7",
            "hashes": {
                "MD5": "56c9bb7a7f3af5f55f4e4fa94e8c6acc"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7c057f8c-4609-4819-9b2c-3bb8e51a0873",
            "hashes": {
                "SHA-256": "2356db510c8c2d5f72945d3d0b9b826da55ad93c4cd2461961888468ec2f1591"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7137f8f0-8228-42f8-922c-8b1cf7ba2a18",
            "hashes": {
                "SHA-256": "3e9bfa7f4efd3b5687872feae62138fab14e4af48e2a018c8113325c3d79d6cb"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--e7cb8eb9-40bd-4c57-bfd7-7ab65119bcde",
            "hashes": {
                "MD5": "b67638c91eae7db255e41f7cc0cce46b"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--85d2a154-b48d-4258-bf38-cc0b0807455c",
            "hashes": {
                "SHA-256": "e64443e3f3d86d0ab86daeb0b9e51d2ada44b23cebee68af9889c8ac72d2ed97"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--30429569-b125-49ef-a7a7-54a29dcd2502",
            "value": "http://mcm-yachtmanagement.com/installx/install_ok.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--5c73b9dc-4e6e-4412-bb13-8f7fdd0d35e8",
            "value": "http://www.junfac.com/tires/skin/tires.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--1bd10af9-c541-45db-b261-0fe9d581c8bd",
            "value": "http://www.combra.eu/includes/images/logo.jpg"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--8b51d1fd-3e1e-4d7c-8d49-ef68994353f6",
            "hashes": {
                "SHA-256": "43eb1b6bf1707e55a39e87985eda455fb322afae3d2a57339c5e29054fb52042"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--5f2cc07f-0570-4292-8416-084adef58878",
            "hashes": {
                "SHA-256": "a02e1cb1efbe8f3551cc3a4b452c2b7f93565860cde44d26496aabd0d3296444"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--3c77b4a5-a3a5-444d-89f3-c3936856f45a",
            "value": "mcm-yachtmanagement.com"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--9c9b7c23-e7d7-4dd3-80c2-78904dc1c92e",
            "created_by_ref": "identity--5ace95f0-bd6c-4fee-a494-ca40e791918d",
            "created": "2026-06-24T18:42:18.135986Z",
            "modified": "2026-06-24T18:42:18.135986Z",
            "name": "Inside TDrop2: Technical Analysis of new Dark Seoul Malware",
            "published": "2015-11-23T00:00:00Z",
            "object_refs": [
                "identity--5ace95f0-bd6c-4fee-a494-ca40e791918d",
                "file--2ee912de-544c-4fe9-8e2e-74037ced9344",
                "file--ca5003fe-5003-4526-8fb9-501e497bd9a9",
                "file--15dac731-7c92-443b-a579-14f27aeaa916",
                "file--7ab8b101-517e-4ee6-a9df-43de8f953957",
                "file--d9b9dc96-f1fb-4dd7-92d9-644348e68039",
                "file--393f8676-12a3-42f6-9acc-524761ba5d96",
                "file--aba36ffe-5745-4fd6-bd31-3c2bea766e2e",
                "file--881eb0b2-5f66-459b-b22d-2a0c399e939d",
                "file--290739cd-731a-4ddd-ac4c-5f4eb9115ac1",
                "file--1d400cf0-f1c3-49c5-adb3-3923d3786caf",
                "file--2c0b18db-b84b-4858-9d13-295e8b9bb48b",
                "file--65e8729e-d42f-4b30-9fd9-56faaa672f53",
                "file--cb4e44f3-5fb5-473d-bba8-2bffc29dc911",
                "file--7a33a3fb-0154-4ee8-a6d8-80b74fa1e958",
                "file--31561178-7f00-431b-98a7-2e84d5912661",
                "file--876b2498-845e-4225-bf18-bbe23c7f89e5",
                "file--3d22a249-5e5d-4e0a-8fb3-0dda9d372fb7",
                "file--7c057f8c-4609-4819-9b2c-3bb8e51a0873",
                "file--7137f8f0-8228-42f8-922c-8b1cf7ba2a18",
                "file--e7cb8eb9-40bd-4c57-bfd7-7ab65119bcde",
                "file--85d2a154-b48d-4258-bf38-cc0b0807455c",
                "url--30429569-b125-49ef-a7a7-54a29dcd2502",
                "url--5c73b9dc-4e6e-4412-bb13-8f7fdd0d35e8",
                "url--1bd10af9-c541-45db-b261-0fe9d581c8bd",
                "file--8b51d1fd-3e1e-4d7c-8d49-ef68994353f6",
                "file--5f2cc07f-0570-4292-8416-084adef58878",
                "domain-name--3c77b4a5-a3a5-444d-89f3-c3936856f45a"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://researchcenter.paloaltonetworks.com/2015/11/inside-tdrop2-technical-analysis-of-new-dark-seoul-malware/"
                }
            ]
        }
    ]
}