{
    "type": "bundle",
    "id": "bundle--aa0bdfa9-3b73-417c-a099-88653c3a7047",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--2b96b5d7-2075-4d96-9706-4b67d615e67c",
            "created": "2023-03-08T12:51:44.657627Z",
            "modified": "2024-09-04T07:23:22.792387Z",
            "name": "Mandiant",
            "identity_class": "organization"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--84d5b601-5423-4f42-b419-b402266e9fd1",
            "value": "https://turnscor.com/wp-includes/contacts.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--a057d0dc-5782-4f5c-9d4c-4cc7a2dea73a",
            "value": "https://hurricanepub.com/include/include.php"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--76e41c78-845f-449d-8ab8-f558f47b7dd8",
            "value": "hurricanepub.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--95f647a5-370c-4bd2-ab5a-4e71082ab904",
            "value": "turnscor.com"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--fd2d5734-a375-409e-8937-ed0e236b78e3",
            "hashes": {
                "SHA-256": "8cc60b628bded497b11dbc04facc7b5d7160294cbe521764df1a9ccb219bba6b"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--da98e4a8-7c6c-405c-9c6f-1c258c8e9b45",
            "hashes": {
                "SHA-256": "e03da0530a961a784fbba93154e9258776160e1394555d0752ac787f0182d3c0"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--072ba07d-43f2-4312-af46-8c3b7b97e40b",
            "hashes": {
                "SHA-256": "cf22964951352c62d553b228cf4d2d9efe1ccb51729418c45dc48801d36f69b4"
            }
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--2c8ca0de-4075-4616-8ba0-a42edf2e18bf",
            "value": "137.184.15.189"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--aca4e0a4-d373-4f66-8d56-2ef1b7390f44",
            "hashes": {
                "SHA-256": "aaad412aeb0f98c2c27bb817682f08673902a48b65213091534f96fe6f5494d9"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--9ca70db3-6bb4-4d83-9c87-39e8496b80f1",
            "hashes": {
                "SHA-256": "1492fa04475b89484b5b0a02e6ba3e52544c264c294b57210404b96b65e63266"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b325c745-c1f0-40bd-98d8-3b5015e20258",
            "hashes": {
                "MD5": "6d1a88fefd03f20d4180414e199eb23a"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--5acf9026-d7b2-41e3-993b-a6104368f450",
            "hashes": {
                "MD5": "c650b716f9eb0bd6b92b0784719081cd"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--9d98e061-e381-46c4-af33-184bcffa30b9",
            "hashes": {
                "MD5": "4914bcbbe36dfa9d718d02f162de3da1"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--074dddd9-d33a-4d91-b97f-5b0c7167e142",
            "hashes": {
                "MD5": "8368bb5c714202b27d7c493c9c0306d7"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--dd891f6d-8ba4-45c4-bf9b-ac95d25ada55",
            "hashes": {
                "SHA-256": "3ac82652cf969a890345db1862deff4ea8885fe72fb987904c0283a2d5e6aac4"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--41ccca62-92f5-47c2-aa9f-88fcaf46788d",
            "hashes": {
                "MD5": "18c873c498f5b90025a3c33b17031223"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--e49cbe26-bd9d-4c24-aa57-fc48095b4ced",
            "hashes": {
                "MD5": "90adcfdaead2fda42b9353d44f7a8ceb"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--d6a49a5c-058f-4039-934d-7e152506bfb3",
            "value": "https://www.elite4print.com/support/support.asp"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--e1f394f2-b4ab-5533-942a-1581cf892154",
            "created": "2026-06-24T23:58:34.649016Z",
            "modified": "2026-06-24T23:58:34.649016Z",
            "name": "UNC4034"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--fdd98258-5d8d-4e89-87a9-4f2c7759ccb2",
            "created_by_ref": "identity--2b96b5d7-2075-4d96-9706-4b67d615e67c",
            "created": "2026-06-24T23:58:34.672723Z",
            "modified": "2026-06-24T23:58:34.672723Z",
            "name": "It's Time to PuTTY! DPRK Job Opportunity Phishing via WhatsApp",
            "published": "2022-09-14T00:00:00Z",
            "object_refs": [
                "identity--2b96b5d7-2075-4d96-9706-4b67d615e67c",
                "url--84d5b601-5423-4f42-b419-b402266e9fd1",
                "url--a057d0dc-5782-4f5c-9d4c-4cc7a2dea73a",
                "domain-name--76e41c78-845f-449d-8ab8-f558f47b7dd8",
                "domain-name--95f647a5-370c-4bd2-ab5a-4e71082ab904",
                "file--fd2d5734-a375-409e-8937-ed0e236b78e3",
                "file--da98e4a8-7c6c-405c-9c6f-1c258c8e9b45",
                "file--072ba07d-43f2-4312-af46-8c3b7b97e40b",
                "ipv4-addr--2c8ca0de-4075-4616-8ba0-a42edf2e18bf",
                "file--aca4e0a4-d373-4f66-8d56-2ef1b7390f44",
                "file--9ca70db3-6bb4-4d83-9c87-39e8496b80f1",
                "file--b325c745-c1f0-40bd-98d8-3b5015e20258",
                "file--5acf9026-d7b2-41e3-993b-a6104368f450",
                "file--9d98e061-e381-46c4-af33-184bcffa30b9",
                "file--074dddd9-d33a-4d91-b97f-5b0c7167e142",
                "file--dd891f6d-8ba4-45c4-bf9b-ac95d25ada55",
                "file--41ccca62-92f5-47c2-aa9f-88fcaf46788d",
                "file--e49cbe26-bd9d-4c24-aa57-fc48095b4ced",
                "url--d6a49a5c-058f-4039-934d-7e152506bfb3",
                "threat-actor--e1f394f2-b4ab-5533-942a-1581cf892154"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.mandiant.com/resources/blog/dprk-whatsapp-phishing"
                }
            ]
        }
    ]
}