{
    "type": "bundle",
    "id": "bundle--f4411e29-b37a-4eab-9128-de8687efc83f",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--16363f54-8083-4870-9305-b143404645ec",
            "created": "2026-04-12T08:09:47.339292Z",
            "modified": "2026-04-12T08:15:27.290605Z",
            "name": "Panther",
            "identity_class": "organization"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--03acca99-3c88-4e21-92c8-a6de87a4c27f",
            "value": "144.172.110.132"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b009235e-1797-4f21-bbfd-bb4127d7a704",
            "hashes": {
                "SHA-256": "fdb582f16475cb79bebd0dffc48d610430cae2e39e9a3e2abd373b3413691838"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c6b090be-91b9-4ad5-8cd7-18539fc18e49",
            "hashes": {
                "SHA-256": "d81e48769a830cd3384a4b8977ade12e5ab7583eb7cca84e7ab966d15871bd71"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7d97ea3c-7c22-4dbe-9a09-09700b78a05d",
            "hashes": {
                "MD5": "25b9435bd5fd17500199c47ecaf38a8e"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--49562155-004b-4b58-b8c2-50db4863e58a",
            "hashes": {
                "SHA-256": "0939feeda737b0951f6e37d690d65ecfdc5482ae1e1486734aaf59fb2497fcef"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6f477c0f-cf27-42ad-8cad-0f9b0cb18485",
            "hashes": {
                "SHA-256": "1c777a65a337b48318f3cfff9cee9ffdecc2f7867f7365f53c7e0af492add2a4"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7612b14a-6232-4be6-8913-ae5f748d383d",
            "hashes": {
                "SHA-256": "5f2d8aec684e79cb983af79d29fddf7e7ecf1e36474baf1422e77c9b79caee23"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--504b7062-5563-496e-96b5-bc1b2763715e",
            "hashes": {
                "SHA-256": "baa5f96044388ff17a9c84a01ce50ee399cf0c9b146d5c7491e4a23a9eb095b6"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--5ff2e605-1d45-4e12-a1d9-8d23e9732ac5",
            "hashes": {
                "SHA-256": "70f8deb4d35ab7db47845f6b6666ae6c0a22814eca580a10e7a0ba09f9ece5f8"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--085fddd8-baca-4385-84d1-9fce44281467",
            "hashes": {
                "MD5": "30a007ce18f8aacd54cb26b2f79de5e0"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--efb88665-f4bf-444c-b06e-62da9dbef81c",
            "hashes": {
                "SHA-256": "fde9503ee61d16371c43e76cbcfc83bb414e24d0ae5aefca32c36f5c5786a397"
            }
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--d4443d91-5a72-4180-9446-2c5e3a0ea02e",
            "value": "mexowoj971@izkat.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--8ad7e50e-1153-4b08-860e-d4e8728808e9",
            "value": "thyfaultkathy4263@hotmail.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--ae5749ea-a1f8-4db2-ad4b-94f6d28d2aeb",
            "value": "andjghff@smartretireway.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--d08dbe7e-60f4-40de-b720-ebdae9d5eec1",
            "value": "borire8128@jsncos.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--f423cac3-4196-436f-80f4-ee1527d7d9b8",
            "value": "hello@jsonspack.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--93370d87-7aa8-491f-a048-45427bde6224",
            "value": "clustermwai2005@officecombine.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--fbabe4a8-9c2a-48b4-ba66-d0441da2c319",
            "value": "wovon16983@marvetos.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--b7e66ea8-3795-427f-b765-1b3388cae428",
            "value": "feedcorvettdan1963@inlook.cloud"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--7c04a826-5378-4dd4-ba17-27314f5476ce",
            "value": "https://jsonkeeper.com/b/FAWPU"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--40f75512-051a-4b25-9f49-f9d87bb48403",
            "value": "http://api.npoint.io/001bf7a1f01639123dc1"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--e0903ef0-b57d-4170-b493-539f7dcb02db",
            "value": "http://api.npoint.io/0a01c9a76266efbbbaf1"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--a107e64c-2a2d-431f-9c23-fb80ac548452",
            "value": "https://jsonkeeper.com/b/BADC6"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--88bdf363-3920-4c53-b347-11a284892551",
            "value": "https://api.npoint.io/2cc8f9fa09a141aafc03"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--dffd754a-0b55-4c06-9f27-df0a65b9d25a",
            "value": "http://server-check-genimi.vercel.app"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--a2425b1d-4d01-4ad8-be7b-5e049995133b",
            "value": "http://server-check-genimi.vercel.app/defy/v3"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--bb5fa37f-749e-44c8-929a-8f0f69996655",
            "value": "smartretireway.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--c2efa761-bee9-4aa9-8a86-e39dcd04dfa4",
            "value": "marvetos.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--832ea846-8cbb-4582-9b88-b16f44c86c4a",
            "value": "isillegion.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--b424614a-4bd1-41a3-aefc-3c425d4c3604",
            "value": "officecombine.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--2e1dd18a-e1de-45c6-8ce1-b8cef6389814",
            "value": "izkat.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--9b57e9dc-af3b-4343-9f2f-7377da67b33c",
            "value": "jsonspack.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--45712059-7fde-467a-a64b-f1f46ae12777",
            "value": "jsncos.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--5cc264fa-7ac8-4a2b-a96c-58355b718b05",
            "value": "chosejsonspack.com"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--4312da31-09fd-4f4c-a64c-479da1de3afa",
            "value": "https://jsonkeeper.com/b/XRGF3"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--da4d582d-1908-4cf2-bd2b-bc7f574fcb11",
            "value": "https://jsonkeeper.com/b/4NAKK"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--1d227bee-f26c-5f74-a3f8-5bdb18774b64",
            "created": "2026-06-24T16:05:34.460977Z",
            "modified": "2026-06-24T16:05:34.460977Z",
            "name": "FamousChollima"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--80b335f8-e21c-4b96-9ebd-f0633dda9ca9",
            "created_by_ref": "identity--16363f54-8083-4870-9305-b143404645ec",
            "created": "2026-06-24T16:05:34.472544Z",
            "modified": "2026-06-24T16:05:34.472544Z",
            "name": "jsonspack: Multi-Tenant Node.js RAT \u00e2 DPRK Supply Chain Campaign",
            "published": "2026-04-03T00:00:00Z",
            "object_refs": [
                "identity--16363f54-8083-4870-9305-b143404645ec",
                "ipv4-addr--03acca99-3c88-4e21-92c8-a6de87a4c27f",
                "file--b009235e-1797-4f21-bbfd-bb4127d7a704",
                "file--c6b090be-91b9-4ad5-8cd7-18539fc18e49",
                "file--7d97ea3c-7c22-4dbe-9a09-09700b78a05d",
                "file--49562155-004b-4b58-b8c2-50db4863e58a",
                "file--6f477c0f-cf27-42ad-8cad-0f9b0cb18485",
                "file--7612b14a-6232-4be6-8913-ae5f748d383d",
                "file--504b7062-5563-496e-96b5-bc1b2763715e",
                "file--5ff2e605-1d45-4e12-a1d9-8d23e9732ac5",
                "file--085fddd8-baca-4385-84d1-9fce44281467",
                "file--efb88665-f4bf-444c-b06e-62da9dbef81c",
                "email-addr--d4443d91-5a72-4180-9446-2c5e3a0ea02e",
                "email-addr--8ad7e50e-1153-4b08-860e-d4e8728808e9",
                "email-addr--ae5749ea-a1f8-4db2-ad4b-94f6d28d2aeb",
                "email-addr--d08dbe7e-60f4-40de-b720-ebdae9d5eec1",
                "email-addr--f423cac3-4196-436f-80f4-ee1527d7d9b8",
                "email-addr--93370d87-7aa8-491f-a048-45427bde6224",
                "email-addr--fbabe4a8-9c2a-48b4-ba66-d0441da2c319",
                "email-addr--b7e66ea8-3795-427f-b765-1b3388cae428",
                "url--7c04a826-5378-4dd4-ba17-27314f5476ce",
                "url--40f75512-051a-4b25-9f49-f9d87bb48403",
                "url--e0903ef0-b57d-4170-b493-539f7dcb02db",
                "url--a107e64c-2a2d-431f-9c23-fb80ac548452",
                "url--88bdf363-3920-4c53-b347-11a284892551",
                "url--dffd754a-0b55-4c06-9f27-df0a65b9d25a",
                "url--a2425b1d-4d01-4ad8-be7b-5e049995133b",
                "domain-name--bb5fa37f-749e-44c8-929a-8f0f69996655",
                "domain-name--c2efa761-bee9-4aa9-8a86-e39dcd04dfa4",
                "domain-name--832ea846-8cbb-4582-9b88-b16f44c86c4a",
                "domain-name--b424614a-4bd1-41a3-aefc-3c425d4c3604",
                "domain-name--2e1dd18a-e1de-45c6-8ce1-b8cef6389814",
                "domain-name--9b57e9dc-af3b-4343-9f2f-7377da67b33c",
                "domain-name--45712059-7fde-467a-a64b-f1f46ae12777",
                "domain-name--5cc264fa-7ac8-4a2b-a96c-58355b718b05",
                "url--4312da31-09fd-4f4c-a64c-479da1de3afa",
                "url--da4d582d-1908-4cf2-bd2b-bc7f574fcb11",
                "threat-actor--1d227bee-f26c-5f74-a3f8-5bdb18774b64"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://panther.com/blog/jsonspack-multi-tenant-node.js-rat-%E2%80%94-dprk-supply-chain-campaign"
                }
            ]
        }
    ]
}