{
    "type": "bundle",
    "id": "bundle--cc959703-2929-4144-a623-0b28df4ac3b3",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--d6060d27-a078-4b68-808e-0f825436ce05",
            "created": "2025-02-20T01:00:01.713031Z",
            "modified": "2025-02-20T01:01:57.020342Z",
            "name": "ENKI",
            "identity_class": "organization"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--e3860e3e-c83c-47c3-a17a-2745c448e6d8",
            "value": "appview.imagetemplate.com"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--54a6a972-7bb0-4147-a54b-e2930ea2942a",
            "hashes": {
                "MD5": "b18118f61a4dcb51df5e189c40dd3280",
                "SHA-1": "c4c9a1dc528d41ac1988f65db62f9ca922fbe711",
                "SHA-256": "9de541b039cfdb96c7810df49efd958b28cc2df73e314f67c1a91469a2b19796"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--055d0377-eb7a-42c5-a653-c8123098db02",
            "hashes": {
                "MD5": "1efaf988fded55cd3b974c66f4ca8f7e"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--768ca543-e08f-4a27-bc93-4088b6f78ea4",
            "hashes": {
                "MD5": "bd8e948a6e61436532cd2ed2b62db3f3"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--8d1343df-94b6-43bf-ae68-6a848f0f1bfd",
            "hashes": {
                "MD5": "39e091e981d9daab56e680927508bd1f",
                "SHA-1": "81b1537f604d5785e04100a76d32417484219028",
                "SHA-256": "a762d65c0d6f6345541485aeef35a3b331b1f69bace8452cf55026b301e963bd"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--3df56d88-e669-47f2-9f46-3bbffd29c555",
            "hashes": {
                "MD5": "3369b911cf3706a2660d2af9b3c35f9a"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--85a78a61-fccf-49ea-8de0-fe0d09641a0b",
            "hashes": {
                "MD5": "f57a9e973e1cecd6b361467041e464f4",
                "SHA-1": "b44e800436b2892f7c8f9fbd93e5e17a2e1fde04",
                "SHA-256": "ca42cba2782a0b6952dd0425fa08cbd4de65f77fcc00e965ee97c39bea42eb18"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--8b6fd12d-29ab-4536-a5d2-89f02dd2e8f3",
            "hashes": {
                "MD5": "dd47c97b44408e0a5ecd8f482fcd0dbc",
                "SHA-1": "2acb22d5edc73db031d94ec7224c33ff649aef39",
                "SHA-256": "1d8e50ec756e88025c5248cfaa6ee707348310b38671ab05b27d9194a609f96d"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--58faa9c1-c9df-4fb9-b9ab-0cb96826cd65",
            "hashes": {
                "MD5": "fcaf03060e34a73fe499b906492d9f13"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--040fc797-981e-4349-946b-525c1a80f6a7",
            "hashes": {
                "MD5": "d09c0744273355b6da719fdb62923bed",
                "SHA-1": "364cc871e66afe65e1845205105c3f53f34afc01",
                "SHA-256": "c089457d5f4b22313b927bb36a320f8d7a1ddb6d5b82293dc2374dcfd4b1b8b2"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c43ac3eb-14fe-458d-96bf-9cc63b6a690f",
            "hashes": {
                "MD5": "8833a270ddef0f464d5916958b6778e6"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6fb41cdf-293c-4465-879a-5886b4a3d0b2",
            "hashes": {
                "MD5": "be978477fe7c179cb9607a6e08a05dff"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--9401deb3-1647-4bef-8d86-f04d9647e045",
            "hashes": {
                "MD5": "9df5ca76ac085b89c1ddcb3963e9fe97"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--f0becdd7-3be9-4da7-b7e2-7d818156c021",
            "hashes": {
                "MD5": "a581fdea0970f8a5b6cfec4853c802d7",
                "SHA-1": "c124f019ddaef2606a7394b0b9bf7ae1a05ecda4",
                "SHA-256": "784d9273c75e983f2b4730d1f2198cc44e9599709f4a5519a2bd3049095dc9d5"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--9f7f6952-7cb1-4c72-a5bc-87382e27ecab",
            "hashes": {
                "MD5": "50f619aaba1d28882022ced135b13a07"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--2c8890b1-56aa-4dcb-b8d2-dda31b87e742",
            "hashes": {
                "MD5": "c6de1be41dcfbad9cae76c58eae7f5a3"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--78e21177-9f78-49b1-8850-276fefdfcda5",
            "hashes": {
                "MD5": "c61a6efe1a169c6c1d8595af3ff0dd74"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d9546513-bfdf-4d1f-8f7e-949597a9d8d6",
            "hashes": {
                "MD5": "be31a38bab026f229afd5e3174c363f7"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--bf8da209-67c9-4152-8161-b8ff4429dc00",
            "hashes": {
                "MD5": "b4dd4c76d7deef4cf532e240b7f84c9d"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--98851f38-034f-4e25-a404-8533dba5903a",
            "hashes": {
                "MD5": "6d2dfd7ca77530afec000a197d6b8677"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--5ce61e58-7f4e-4d88-89af-dc7edbf814b7",
            "hashes": {
                "MD5": "0d07fb6d1a3736ea543ab8364115e435"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--9bd66697-c41e-4033-aa3f-c66871f513fb",
            "hashes": {
                "MD5": "ea5f32e1273ec93d43ee09a337fb60e1"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ee75dd30-87ec-4056-83a5-af16d046bd09",
            "hashes": {
                "MD5": "bea602695d58cbf25fff058834e36c1d"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--dad17b28-091d-4c2c-8815-50499a59ef17",
            "hashes": {
                "MD5": "97b4c2e67e5e18b70949690a69820c2a",
                "SHA-1": "3e019112dc00c4a1f14474ea6db68f35674a6efa",
                "SHA-256": "144f303504538fb7d65e2f103ab23381a3d8a2751207106a4537c49730ffd23a"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--26ead2e6-b7af-4290-b36d-5ceebc615a15",
            "hashes": {
                "MD5": "cc837d2b2af4bd9c1c3faf61cefeb848"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--76504a77-a133-47a2-9dd1-069d1534f927",
            "hashes": {
                "MD5": "00f957b7dafd8d210e717041add02eab",
                "SHA-1": "ade12bc8b28984f080b799d2e9616a64c8d5856f",
                "SHA-256": "9fd46aa45ac8539cd288b744730661b3b27b00047bbb994e6a12b8da82d2b3e3"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c925524c-397d-4847-963d-e69ab3a2f380",
            "hashes": {
                "MD5": "4a476abcf741323b367eda0ec49f8c38"
            }
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--8b052c67-9efd-4af1-9eac-dec313f7ab24",
            "value": "27.102.113.106"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--52e9dc9b-831d-448d-b5dc-280ad3343440",
            "value": "157.250.202.123"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--b7b34442-52f1-410e-bc87-303379278534",
            "value": "bigfile.jaycloudlab.com"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--3834fb48-e82e-4034-8a1f-589567860e06",
            "value": "https://bigfile.jaycloudlab.com/download.php?id=745896"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--6aa093d4-ae07-4f50-b649-2dea89de6d1e",
            "value": "load.erasecloud.n-e.kr"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--e1608d90-f1a2-4b91-819c-c70bff02c10e",
            "value": "https://load.erasecloud.n-e.kr/login.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--28cfb7f5-cf40-4da3-9426-c95164f4af1d",
            "value": "https://pipeline.embeddedonline.org/download3.php?sessid=54126&user-token=gateless"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--49ad8838-5cd6-42dd-bb1b-97603ef81e29",
            "value": "pipeline.embeddedonline.org"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--5e94a85c-8f24-4fed-81fd-5c6a112fc701",
            "value": "https://pipeline.embeddedonline.org/check.php?x-csrf-token=gateless"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--9eb067ae-5c14-4c5e-b0a3-5767a8a40e7e",
            "value": "hdrgdrfes.chickenkiller.com"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--cbecfa0d-9df7-41e2-a5e8-2ecc317b1620",
            "value": "http://hdrgdrfes.chickenkiller.com/index.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--b97a55a8-f644-4e66-adfd-c78c993af921",
            "value": "https://download.birdriver.org/download.php?id=393156"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--8d4e708a-0b97-444b-8c49-137b68bedafa",
            "value": "download.birdriver.org"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--49b4010a-5bb9-40f2-8c4a-45f7e28d88b6",
            "value": "https://download.birdriver.org/download.php?id=425623"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--3e5f28a7-8375-4899-8da9-b27e72ba7e5f",
            "value": "conference.birdriver.org"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--1141970e-4bc4-4cc8-9bfd-8060b7471a9c",
            "value": "https://conference.birdriver.org/"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--21fb2b92-2eb8-471d-bb63-b25e57d3e344",
            "value": "load.serverpit.com"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--2f2a172a-93c9-4e06-b39c-f3a6ee0718ca",
            "value": "https://load.serverpit.com/fwrite.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--6bf86816-48bb-447d-8660-b307ae9c06a4",
            "value": "https://www.ibizplus.n-e.kr/download.php?id=30382121"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560b276c-fbda-4180-8e3d-c963af514b68",
            "value": "https://www.ibizplus.n-e.kr/download.php?id=30382120"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--1519f997-a2b3-41b3-864d-7faf1a449097",
            "value": "https://www.ibizplus.n-e.kr/download.php?id=30382119"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--fdf1d6c5-d5b7-402b-b945-a30ffdfe4265",
            "value": "ibizplus.n-e.kr"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--7927ba1b-1861-44d6-a8d9-96f91618a690",
            "value": "https://www.ibizplus.n-e.kr/install.html"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1",
            "created": "2026-06-24T16:14:03.801279Z",
            "modified": "2026-06-24T16:14:03.801279Z",
            "name": "Kimsuky"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--be645d94-8e80-4c8a-ab5b-0b64324d3ad8",
            "created_by_ref": "identity--d6060d27-a078-4b68-808e-0f825436ce05",
            "created": "2026-06-24T16:14:03.830792Z",
            "modified": "2026-06-24T16:14:03.830792Z",
            "name": "Kimsuky\uc758 \uace0\ub3c4\ud654\ub41c \uacf5\uaca9 \uae30\ubc95 \ubd84\uc11d: JSONPing, Webex \uc0ac\uce6d, \uadf8\ub9ac\uace0 \uc0c8\ub85c\uc6b4 HttpSpy \ubcc0\uc885",
            "published": "2026-05-27T00:00:00Z",
            "object_refs": [
                "identity--d6060d27-a078-4b68-808e-0f825436ce05",
                "domain-name--e3860e3e-c83c-47c3-a17a-2745c448e6d8",
                "file--54a6a972-7bb0-4147-a54b-e2930ea2942a",
                "file--055d0377-eb7a-42c5-a653-c8123098db02",
                "file--768ca543-e08f-4a27-bc93-4088b6f78ea4",
                "file--8d1343df-94b6-43bf-ae68-6a848f0f1bfd",
                "file--3df56d88-e669-47f2-9f46-3bbffd29c555",
                "file--85a78a61-fccf-49ea-8de0-fe0d09641a0b",
                "file--8b6fd12d-29ab-4536-a5d2-89f02dd2e8f3",
                "file--58faa9c1-c9df-4fb9-b9ab-0cb96826cd65",
                "file--040fc797-981e-4349-946b-525c1a80f6a7",
                "file--c43ac3eb-14fe-458d-96bf-9cc63b6a690f",
                "file--6fb41cdf-293c-4465-879a-5886b4a3d0b2",
                "file--9401deb3-1647-4bef-8d86-f04d9647e045",
                "file--f0becdd7-3be9-4da7-b7e2-7d818156c021",
                "file--9f7f6952-7cb1-4c72-a5bc-87382e27ecab",
                "file--2c8890b1-56aa-4dcb-b8d2-dda31b87e742",
                "file--78e21177-9f78-49b1-8850-276fefdfcda5",
                "file--d9546513-bfdf-4d1f-8f7e-949597a9d8d6",
                "file--bf8da209-67c9-4152-8161-b8ff4429dc00",
                "file--98851f38-034f-4e25-a404-8533dba5903a",
                "file--5ce61e58-7f4e-4d88-89af-dc7edbf814b7",
                "file--9bd66697-c41e-4033-aa3f-c66871f513fb",
                "file--ee75dd30-87ec-4056-83a5-af16d046bd09",
                "file--dad17b28-091d-4c2c-8815-50499a59ef17",
                "file--26ead2e6-b7af-4290-b36d-5ceebc615a15",
                "file--76504a77-a133-47a2-9dd1-069d1534f927",
                "file--c925524c-397d-4847-963d-e69ab3a2f380",
                "ipv4-addr--8b052c67-9efd-4af1-9eac-dec313f7ab24",
                "ipv4-addr--52e9dc9b-831d-448d-b5dc-280ad3343440",
                "domain-name--b7b34442-52f1-410e-bc87-303379278534",
                "url--3834fb48-e82e-4034-8a1f-589567860e06",
                "domain-name--6aa093d4-ae07-4f50-b649-2dea89de6d1e",
                "url--e1608d90-f1a2-4b91-819c-c70bff02c10e",
                "url--28cfb7f5-cf40-4da3-9426-c95164f4af1d",
                "domain-name--49ad8838-5cd6-42dd-bb1b-97603ef81e29",
                "url--5e94a85c-8f24-4fed-81fd-5c6a112fc701",
                "domain-name--9eb067ae-5c14-4c5e-b0a3-5767a8a40e7e",
                "url--cbecfa0d-9df7-41e2-a5e8-2ecc317b1620",
                "url--b97a55a8-f644-4e66-adfd-c78c993af921",
                "domain-name--8d4e708a-0b97-444b-8c49-137b68bedafa",
                "url--49b4010a-5bb9-40f2-8c4a-45f7e28d88b6",
                "domain-name--3e5f28a7-8375-4899-8da9-b27e72ba7e5f",
                "url--1141970e-4bc4-4cc8-9bfd-8060b7471a9c",
                "domain-name--21fb2b92-2eb8-471d-bb63-b25e57d3e344",
                "url--2f2a172a-93c9-4e06-b39c-f3a6ee0718ca",
                "url--6bf86816-48bb-447d-8660-b307ae9c06a4",
                "url--560b276c-fbda-4180-8e3d-c963af514b68",
                "url--1519f997-a2b3-41b3-864d-7faf1a449097",
                "domain-name--fdf1d6c5-d5b7-402b-b945-a30ffdfe4265",
                "url--7927ba1b-1861-44d6-a8d9-96f91618a690",
                "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.enki.co.kr/media-center/blog/kimsuky-s-advanced-attack-techniques-jsonping-webex-spoofing-and-a-new-httpspy-variant"
                }
            ]
        }
    ]
}