{
    "type": "bundle",
    "id": "bundle--581c1561-8819-4061-9302-e6cc31747422",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--5eb6a718-92a2-4bb1-b833-13e0c9d4b3fb",
            "created": "2024-11-21T11:00:36.171375Z",
            "modified": "2024-11-21T11:04:05.727162Z",
            "name": "SecAI",
            "identity_class": "organization"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--017fa299-6c80-47b9-aee0-2964427a8c43",
            "value": "o-r.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--cb709de6-361c-440f-b1ce-ab4d788f910e",
            "value": "r-e.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--2f68aa74-9e4f-458c-9fa4-ebb70c088a23",
            "value": "n-e.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--a73a3f63-5466-45e4-a6e4-aaf33f968e95",
            "value": "p-e.kr"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b29e49ad-1e72-4937-9e8a-4489226742ec",
            "hashes": {
                "SHA-256": "7d766cbd60b2184b4181eb83562d5a406b848adddfa20842a073c25d3f1fe853"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--cd5cee4f-dd8e-4352-ae36-7c5a9700d85a",
            "hashes": {
                "SHA-256": "6263530f1bde08b13872252fa1e90efc0ac5c8d433db6931316c8eb7322d23c4"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--1cfb34c9-1204-49e6-a94a-9b2d2ab12766",
            "hashes": {
                "SHA-256": "5d25e53b59bd2dcf234c6819f8cd294efe6d943d04625b9d575002362794e74a"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--541570bb-75ff-45cd-b502-8f782a15bd32",
            "hashes": {
                "SHA-256": "ea332de382c843e4d862323466fee3d94c3722e3e9e61c00bf2bdf379a7087af"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--438abf34-28c6-4dcb-93e8-2f7387f8f695",
            "hashes": {
                "SHA-256": "1099a77b2de97f26605b32e25e806b636e36103a3b8d601e1e30b15c922de578"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--9d351cff-1b7c-4487-b4cc-dcc5e5a77a93",
            "hashes": {
                "SHA-256": "8028b918d06cf3635e7e77d29cb0a4622d8cf4ee30881fb297435f7328ff45e4"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--5e42271f-70c8-4e78-a4d5-b5978e5e3554",
            "hashes": {
                "SHA-256": "06e2ab3fe5afc927642244644dfddb0f920ff1ab11c5e5631e26dbd62ed6978a"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d0e434a6-b136-40fa-8d57-600a9b130e72",
            "hashes": {
                "SHA-256": "30584f13c0a9d0c86562c803de350432d5a0607a06b24481ad4d92cdf7288213"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b2d85bdb-d50a-41c7-a846-048e1d730be4",
            "hashes": {
                "SHA-256": "35ddb63c0729a7e3019c026865ea195607a51943d8867607a26c006f0df6e594"
            }
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1",
            "created": "2026-06-24T18:41:38.525006Z",
            "modified": "2026-06-24T18:41:38.525006Z",
            "name": "Kimsuky"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--8b095d92-7689-4a52-b238-1621807574dd",
            "created_by_ref": "identity--5eb6a718-92a2-4bb1-b833-13e0c9d4b3fb",
            "created": "2026-06-24T18:41:38.529026Z",
            "modified": "2026-06-24T18:41:38.529026Z",
            "name": "Kimsuky Arsenal Exposure: Multi-format Trojan Analysis",
            "published": "2024-11-20T00:00:00Z",
            "object_refs": [
                "identity--5eb6a718-92a2-4bb1-b833-13e0c9d4b3fb",
                "domain-name--017fa299-6c80-47b9-aee0-2964427a8c43",
                "domain-name--cb709de6-361c-440f-b1ce-ab4d788f910e",
                "domain-name--2f68aa74-9e4f-458c-9fa4-ebb70c088a23",
                "domain-name--a73a3f63-5466-45e4-a6e4-aaf33f968e95",
                "file--b29e49ad-1e72-4937-9e8a-4489226742ec",
                "file--cd5cee4f-dd8e-4352-ae36-7c5a9700d85a",
                "file--1cfb34c9-1204-49e6-a94a-9b2d2ab12766",
                "file--541570bb-75ff-45cd-b502-8f782a15bd32",
                "file--438abf34-28c6-4dcb-93e8-2f7387f8f695",
                "file--9d351cff-1b7c-4487-b4cc-dcc5e5a77a93",
                "file--5e42271f-70c8-4e78-a4d5-b5978e5e3554",
                "file--d0e434a6-b136-40fa-8d57-600a9b130e72",
                "file--b2d85bdb-d50a-41c7-a846-048e1d730be4",
                "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.secai.ai/blog/latest_research/Kimsuky_Arsenal_Exposure"
                }
            ]
        }
    ]
}