{
    "type": "bundle",
    "id": "bundle--b2ace479-a0ac-4561-be9a-f0e5e1082a13",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--703b0d0d-f70a-4de2-bff5-d252e8d966f9",
            "created": "2023-03-08T12:51:48.041368Z",
            "modified": "2025-01-30T02:20:08.905936Z",
            "name": "Google",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--605066b1-55ab-4224-b9d9-ef7d4bcd2617",
            "hashes": {
                "SHA-256": "c49b4d370ad0dcd1e28ee8f525ac8e3c12a34cfcf62ebb733ec74cca59b29f82"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--728d99c2-b1ca-4d75-9db1-4fed2ef00310",
            "hashes": {
                "SHA-256": "08f93351d0d3905bee5b0c2b9215d448abb0d3cf49c0f8b666c46df4fcc007cb"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--9b85fcdb-44d0-488b-8671-e3fce0becac2",
            "hashes": {
                "SHA-256": "af5fb99d3ff18bc625fb63f792ed7cd955171ab509c2f8e7c7ee44515e09cebf"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--2c38268e-2850-4765-871f-e9886b68d968",
            "hashes": {
                "SHA-256": "926a947ea2b59d3e9a5a6875b4de2bd071b15260370f4da5e2a60ece3517a32f"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--0e982a51-48d4-44c3-b5d1-565ac9a1a00b",
            "hashes": {
                "SHA-256": "56ca24b57c4559f834c190d50b0fe89dd4a4040a078ca1f267d0bbc7849e9ed7"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--dd0ec655-d3bb-493f-bf80-4ed503d17988",
            "hashes": {
                "SHA-256": "3bff571823421c013e79cc10793f238f4252f7d7ac91f9ef41435af0a8c09a39"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--060c8a81-dd1f-4ced-a58f-2d163c824415",
            "value": "template-openxml.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--f5b34916-a119-4896-8ec9-a1fb44617db4",
            "value": "word-template.net"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--3dc3ed64-299c-43f5-99d0-f4cae3cfc2fc",
            "value": "ms-offices.com"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--3be555f5-1f0d-5001-b84a-c6c910760fd0",
            "created": "2026-06-24T18:20:58.016295Z",
            "modified": "2026-06-24T18:20:58.016295Z",
            "name": "APT37"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--18dd3a1f-9ae5-4cd2-99a6-239fb753672d",
            "created_by_ref": "identity--703b0d0d-f70a-4de2-bff5-d252e8d966f9",
            "created": "2026-06-24T18:20:58.019742Z",
            "modified": "2026-06-24T18:20:58.019742Z",
            "name": "Internet Explorer 0-day exploited by North Korean actor APT37",
            "published": "2022-12-07T00:00:00Z",
            "object_refs": [
                "identity--703b0d0d-f70a-4de2-bff5-d252e8d966f9",
                "file--605066b1-55ab-4224-b9d9-ef7d4bcd2617",
                "file--728d99c2-b1ca-4d75-9db1-4fed2ef00310",
                "file--9b85fcdb-44d0-488b-8671-e3fce0becac2",
                "file--2c38268e-2850-4765-871f-e9886b68d968",
                "file--0e982a51-48d4-44c3-b5d1-565ac9a1a00b",
                "file--dd0ec655-d3bb-493f-bf80-4ed503d17988",
                "domain-name--060c8a81-dd1f-4ced-a58f-2d163c824415",
                "domain-name--f5b34916-a119-4896-8ec9-a1fb44617db4",
                "domain-name--3dc3ed64-299c-43f5-99d0-f4cae3cfc2fc",
                "threat-actor--3be555f5-1f0d-5001-b84a-c6c910760fd0"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://blog.google/threat-analysis-group/internet-explorer-0-day-exploited-by-north-korean-actor-apt37"
                }
            ]
        }
    ]
}