{
    "type": "bundle",
    "id": "bundle--d933eba0-ed3c-4318-b6f9-a69ffbe9c47c",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--018ab958-b94d-441e-991f-a101a5144848",
            "created": "2023-03-08T12:51:42.869471Z",
            "modified": "2024-11-07T23:01:18.079469Z",
            "name": "SentinelOne",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--dbc5d982-02ae-49ee-b1a1-0ad41f158b33",
            "hashes": {
                "SHA-1": "c8f54cb73c240a1904030eb36bb2baa7db6aeb01"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--4904b5e8-66fa-4023-8ecf-2eb5c7c70576",
            "hashes": {
                "SHA-1": "86a025e282495584eabece67e4e2a43dca28e505"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--8756deb1-20d6-4785-9459-568a9f26a988",
            "value": "https://mitmail.tech/gorgon/r.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--1cfa4b73-aa68-4308-8d28-6c40d23fefb9",
            "value": "https://rfa.ink/bio/ca.php?na=videop.gif"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--6c9383a3-5e1f-499a-846d-0d2b22bb9563",
            "value": "https://rfa.ink/bio/ca.php?na=video.gif"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--695fa65d-e52e-40b1-a2fb-f673d9cae0c5",
            "value": "https://rfa.ink/bio/d.php?na=vbtmp"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--2eb2034f-74b1-44d5-b769-d43751e75e95",
            "value": "https://rfa.ink/bio/ca.php?na=vbs_esen.gif"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--8fc14cd9-bb34-4dec-837c-19432114baeb",
            "value": "https://rfa.ink/bio/ca.php?na=start4.gif"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--4733989c-34b9-48eb-a364-3fdb9e60adc3",
            "value": "https://mitmail.tech/gorgon/ca.php?na=videop.gif"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--d2dbc7af-f901-432c-8919-1e8e8b37c1e7",
            "value": "https://mitmail.tech/gorgon/ca.php?na=dot_v3.gif"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--5e192585-d6f5-48c9-bfc8-9ce0f43d6019",
            "value": "https://rfa.ink/bio/ca.php?na=dot_eset.gif"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--ad32acf5-6cc1-46a3-b63b-2e773fd9a537",
            "value": "https://rfa.ink/bio/ca.php?na=vbs.gif"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--1f041230-16e6-4d88-9ac1-4828f8e5ec41",
            "value": "https://rfa.ink/bio/ca.php?na=reg.gif"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--1454ed3e-7bd9-4613-85ea-d882c3eedac4",
            "value": "https://mitmail.tech/gorgon/t1.hta"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--945a17ce-4165-4ca7-953a-911907f95259",
            "value": "https://newshare.online/lee/ca.php?na=secur32.gif"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--12e8cfb7-1154-4009-8cb9-9417c25cb491",
            "value": "https://rfa.ink/bio/ca.php?na=start3.gif"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--a9465836-a9e2-453f-933c-8dafeaf2510d",
            "value": "https://mitmail.tech/gorgon/ca.php?na=vbs_esen.gif"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--e7dd677c-d9be-4609-8c1f-808bcfa7a427",
            "value": "http://rfa.ink/bio/ca.php?na=dot_avg.gif"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--db4b5e72-4eaf-4137-8a34-bcf33c94be64",
            "value": "https://mitmail.tech/gorgon/ca.php?na=start3.gif"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--9d412f2e-1ea7-49eb-b7bc-2d45a12ac375",
            "value": "https://mitmail.tech/gorgon/ca.php?na=video.gif"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--8e040e94-6b09-4024-ba64-7f118d042f95",
            "value": "https://rfa.ink/bio/ca.php?na=start2.gif"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--c90c6011-4e1b-49a2-b47b-761f9a4cc7a0",
            "value": "https://mitmail.tech/gorgon/ca.php?na=dot_avg.gif"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--9f1e08d9-c5d2-4e87-85d0-aaabad5e2ae9",
            "value": "https://rfa.ink/bio/ca.php?na=start1.gif"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--af9e4bfe-d7b2-4cec-9b1d-2cadb6af944b",
            "value": "https://mitmail.tech/gorgon/ca.php?na=start1.gif"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--d8e0710a-c42e-4020-bbf8-eead04f740d7",
            "value": "https://mitmail.tech/gorgon/ca.php?na=start2.gif"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--f4e23d45-cc3c-4f65-b4b7-9cd4ad81a4f3",
            "value": "https://mitmail.tech/gorgon/ca.php?na=vbs.gif"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--fdb63fe6-3af1-43f7-aff5-65db096888ee",
            "value": "https://mitmail.tech/gorgon/ca.php?na=secur32.gif"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--e1c3741e-d532-492d-a842-5af8eb538cb7",
            "value": "https://rfa.ink/bio/d.php?na=battmp"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--8d456ddd-7dcf-4ff0-955b-f15c54dd1470",
            "value": "https://rfa.ink/bio/ca.php?na=dot_esen.gif"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--d39ca567-8de5-4827-99d5-47e8a7ea97bc",
            "value": "https://rfa.ink"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--4555a1a4-9329-4313-b95b-a4206f0c319f",
            "value": "https://rfa.ink/bio/ca.php?na=dot_kasp.gif"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--bb36d257-b1fa-4a60-ae9c-8e73b044a8d2",
            "value": "https://mitmail.tech/gorgon/ca.php?na=start4.gif"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--55fc7237-c7ba-4913-8045-c1b94550383b",
            "value": "https://rfa.ink/bio/ca.php?na=dot_v3.gif"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--05d07bea-feb4-4271-8026-d65fe0f82146",
            "value": "https://mitmail.tech/gorgon/ca.php?na=dot_kasp.gif"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--9a33676d-91ac-47ad-bf3d-c7c99147b4e9",
            "value": "https://rfa.ink/bio/t1.hta"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--3357a252-0818-4db1-9e1b-f7305d1d9807",
            "value": "https://rfa.ink/bio/r.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--9a388e3f-784a-4318-9ffd-5305611f69ed",
            "value": "https://rfa.ink/bio/ca.php?na=start0.gif"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--ced74aaf-4ced-45bf-9ab9-32daa7287198",
            "value": "https://rfa.ink/bio/ca.php?na=secur32.gif"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--f3cf44df-e3d1-4738-afd8-8bbf6c7da68c",
            "value": "https://mitmail.tech/gorgon/ca.php?na=dot_eset.gif"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--80970df7-b93d-4507-9c2d-f25908c3e502",
            "value": "https://mitmail.tech/gorgon/ca.php?na=start0.gif"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--edf4d4d8-c2ef-4587-a7d6-dded5f8eabe1",
            "value": "https://mitmail.tech/gorgon/ca.php?na=reg.gif"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--f76256fa-d4f1-4868-bbc2-5f95f24695d3",
            "value": "https://mitmail.tech/gorgon/ca.php?na=dot_esen.gif"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--46d7591f-17b3-43e1-8886-b29609eb7bc7",
            "value": "logmes.lives.com-change.info"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--cec3e219-606c-4a2e-8bcf-f45d33090ea1",
            "value": "accounts.lives.com-change.info"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--0708bf1f-e058-474c-b19f-da41aebc585e",
            "value": "cashsentinel.com-change.info"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--2974e1dc-171a-4e1c-ae34-44b3083a6c26",
            "value": "logrns.lives.com-change.info"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--f51e0495-d5ec-43e1-8dec-36788491c561",
            "value": "microsoft.loginsaa.gmail.com-change.info"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--46e18905-c3fe-4b24-bfbf-d936797fedd5",
            "value": "cashsentinel.navor.com-change.info"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--5019a7f5-f9d4-40ec-8acf-a942694c74b7",
            "value": "cashsentinel.live.com-change.info"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--0e1b823f-995a-4201-876c-e2bbc05bc33b",
            "value": "paypal.com-change.info"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--a40eae64-55fd-4643-ac92-c2d069b1cda8",
            "value": "publiccloud.navor.com-change.info"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--0940903f-41a8-4b24-a361-ef2260cb147f",
            "value": "microsoft.loginsaa.grnail.com-change.info"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--0ece0b17-d9d0-4141-8490-870174367efb",
            "value": "naver.com-change.info"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--bce2f7fc-9f1f-445b-9cbc-a4ed9902f33d",
            "value": "lives.com-change.info"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--c12ba70b-5415-4563-b67a-34d11aab3923",
            "value": "downmail.navor.com-change.info"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--a9fb5c2a-0f01-45f5-af3c-ecc4f0bd552e",
            "value": "mainchksrh.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--88a4c233-22f2-468a-8450-c24bb655695a",
            "value": "loginsaa.gmail.com-change.info"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--7bff21fb-c2fd-4d85-ab0b-4a65a3294481",
            "value": "newshare.online"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--1076e3cf-30a2-4e34-bdf4-789f5fdfadee",
            "value": "live.com-change.info"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--f69c128e-01ba-4b20-9590-3c6ab7a4abce",
            "value": "outlock.com-change.info"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--e2c9af6d-15d4-4dc7-8182-287c414020cc",
            "value": "cloud.navor.com-change.info"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--fd299c84-5853-49c0-803d-0b050f10c3d2",
            "value": "cashsentinel.naver.com-change.info"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--38febda9-4925-4bd1-8c44-61b48c36da5e",
            "value": "rfa.ink"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--e4433f95-f3ca-4cd3-8a59-bbeebabf0d1f",
            "value": "accounts.live.com-change.info"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--ca32c1bb-8124-4250-96c3-95c987a24666",
            "value": "outlook.com-change.info"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--08435769-4cdb-4be6-ad8c-038922101919",
            "value": "loges.lives.com-change.info"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--13453d9f-157d-4036-a962-71dfa68f1d59",
            "value": "cashsentinel.microsoft.com-change.info"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--20f179cf-8052-4397-94c8-82bdcf8c7519",
            "value": "grnail.com-change.info"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--06b25d68-a59c-4fff-8b7d-6418f6f7494e",
            "value": "hotrnail.com-change.info"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--8fc9a97f-26f3-4c02-be15-f3e9c25c5775",
            "value": "cashsentinel.lives.com-change.info"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--29bd890c-cf99-435b-a36a-eb7c0f75baf7",
            "value": "navers.com-change.info"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--2a84ec26-2111-4bd9-a3a7-0a12511435cd",
            "value": "cashsentinel.outlock.com-change.info"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--ac147a11-e3f9-4976-936e-8e9e2a75a549",
            "value": "gmail.com-change.info"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--25d9aa7a-81e2-4823-98f8-6153534f68e7",
            "value": "cashsentinel.outlook.com-change.info"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--ac1a75e6-69b2-4550-a47e-a713c70f80a6",
            "value": "loginsaa.grnail.com-change.info"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--9cc8bb48-9e3a-4702-aa49-6118b7e49040",
            "value": "navor.com-change.info"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--06b95ab7-5e21-422e-b3f3-dc8969e8ecb9",
            "value": "microsoft.com-change.info"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--80634840-3cd8-4a41-8687-a6e277baea1d",
            "value": "skjflkjsjflejlkjieiieieiei.lives.com-change.info"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--50ec9cb4-973a-4456-a263-58e650c125d4",
            "value": "nlds.navor.com-change.info"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--3e539599-e467-48b1-958c-7191685e93d5",
            "value": "com-change.info"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--a75a0d6b-a355-4f31-87b7-7ba628aa1091",
            "value": "cashsentinel.navers.com-change.info"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--ae958f6d-e9cf-4747-b44b-8330d9720e18",
            "value": "cashsentinel.hotrnail.com-change.info"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--eb98b1e7-775c-47f1-b94f-eea2faed60b3",
            "value": "hotmail.com-change.info"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--b680014d-7348-47f6-8991-02fe442b4c7b",
            "value": "mitmail.tech"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--864e58c0-ea3c-4a92-b0bb-22b67ffa5125",
            "value": "naver.loginsaa.gmail.com-change.info"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--2d211ab1-5954-4168-9dcf-d9339c33a5ef",
            "value": "logws.lives.com-change.info"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--8c87cbb0-c0fe-41f0-972c-c7bbbae719c0",
            "value": "cashsentinel.hotmail.com-change.info"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--c8042e77-2933-4413-a40c-cc8e9b8383ef",
            "value": "aaaaawwqwdqkidoemsk.lives.com-change.info"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1",
            "created": "2026-06-24T19:51:01.547246Z",
            "modified": "2026-06-24T19:51:01.547246Z",
            "name": "Kimsuky"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--332fbff9-89ec-4289-9a6b-fca1c5158a9c",
            "created_by_ref": "identity--018ab958-b94d-441e-991f-a101a5144848",
            "created": "2026-06-24T19:51:01.550059Z",
            "modified": "2026-06-24T19:51:01.550059Z",
            "name": "Kimsuky Evolves Reconnaissance Capabilities in New Global Campaign",
            "published": "2023-05-04T00:00:00Z",
            "object_refs": [
                "identity--018ab958-b94d-441e-991f-a101a5144848",
                "file--dbc5d982-02ae-49ee-b1a1-0ad41f158b33",
                "file--4904b5e8-66fa-4023-8ecf-2eb5c7c70576",
                "url--8756deb1-20d6-4785-9459-568a9f26a988",
                "url--1cfa4b73-aa68-4308-8d28-6c40d23fefb9",
                "url--6c9383a3-5e1f-499a-846d-0d2b22bb9563",
                "url--695fa65d-e52e-40b1-a2fb-f673d9cae0c5",
                "url--2eb2034f-74b1-44d5-b769-d43751e75e95",
                "url--8fc14cd9-bb34-4dec-837c-19432114baeb",
                "url--4733989c-34b9-48eb-a364-3fdb9e60adc3",
                "url--d2dbc7af-f901-432c-8919-1e8e8b37c1e7",
                "url--5e192585-d6f5-48c9-bfc8-9ce0f43d6019",
                "url--ad32acf5-6cc1-46a3-b63b-2e773fd9a537",
                "url--1f041230-16e6-4d88-9ac1-4828f8e5ec41",
                "url--1454ed3e-7bd9-4613-85ea-d882c3eedac4",
                "url--945a17ce-4165-4ca7-953a-911907f95259",
                "url--12e8cfb7-1154-4009-8cb9-9417c25cb491",
                "url--a9465836-a9e2-453f-933c-8dafeaf2510d",
                "url--e7dd677c-d9be-4609-8c1f-808bcfa7a427",
                "url--db4b5e72-4eaf-4137-8a34-bcf33c94be64",
                "url--9d412f2e-1ea7-49eb-b7bc-2d45a12ac375",
                "url--8e040e94-6b09-4024-ba64-7f118d042f95",
                "url--c90c6011-4e1b-49a2-b47b-761f9a4cc7a0",
                "url--9f1e08d9-c5d2-4e87-85d0-aaabad5e2ae9",
                "url--af9e4bfe-d7b2-4cec-9b1d-2cadb6af944b",
                "url--d8e0710a-c42e-4020-bbf8-eead04f740d7",
                "url--f4e23d45-cc3c-4f65-b4b7-9cd4ad81a4f3",
                "url--fdb63fe6-3af1-43f7-aff5-65db096888ee",
                "url--e1c3741e-d532-492d-a842-5af8eb538cb7",
                "url--8d456ddd-7dcf-4ff0-955b-f15c54dd1470",
                "url--d39ca567-8de5-4827-99d5-47e8a7ea97bc",
                "url--4555a1a4-9329-4313-b95b-a4206f0c319f",
                "url--bb36d257-b1fa-4a60-ae9c-8e73b044a8d2",
                "url--55fc7237-c7ba-4913-8045-c1b94550383b",
                "url--05d07bea-feb4-4271-8026-d65fe0f82146",
                "url--9a33676d-91ac-47ad-bf3d-c7c99147b4e9",
                "url--3357a252-0818-4db1-9e1b-f7305d1d9807",
                "url--9a388e3f-784a-4318-9ffd-5305611f69ed",
                "url--ced74aaf-4ced-45bf-9ab9-32daa7287198",
                "url--f3cf44df-e3d1-4738-afd8-8bbf6c7da68c",
                "url--80970df7-b93d-4507-9c2d-f25908c3e502",
                "url--edf4d4d8-c2ef-4587-a7d6-dded5f8eabe1",
                "url--f76256fa-d4f1-4868-bbc2-5f95f24695d3",
                "domain-name--46d7591f-17b3-43e1-8886-b29609eb7bc7",
                "domain-name--cec3e219-606c-4a2e-8bcf-f45d33090ea1",
                "domain-name--0708bf1f-e058-474c-b19f-da41aebc585e",
                "domain-name--2974e1dc-171a-4e1c-ae34-44b3083a6c26",
                "domain-name--f51e0495-d5ec-43e1-8dec-36788491c561",
                "domain-name--46e18905-c3fe-4b24-bfbf-d936797fedd5",
                "domain-name--5019a7f5-f9d4-40ec-8acf-a942694c74b7",
                "domain-name--0e1b823f-995a-4201-876c-e2bbc05bc33b",
                "domain-name--a40eae64-55fd-4643-ac92-c2d069b1cda8",
                "domain-name--0940903f-41a8-4b24-a361-ef2260cb147f",
                "domain-name--0ece0b17-d9d0-4141-8490-870174367efb",
                "domain-name--bce2f7fc-9f1f-445b-9cbc-a4ed9902f33d",
                "domain-name--c12ba70b-5415-4563-b67a-34d11aab3923",
                "domain-name--a9fb5c2a-0f01-45f5-af3c-ecc4f0bd552e",
                "domain-name--88a4c233-22f2-468a-8450-c24bb655695a",
                "domain-name--7bff21fb-c2fd-4d85-ab0b-4a65a3294481",
                "domain-name--1076e3cf-30a2-4e34-bdf4-789f5fdfadee",
                "domain-name--f69c128e-01ba-4b20-9590-3c6ab7a4abce",
                "domain-name--e2c9af6d-15d4-4dc7-8182-287c414020cc",
                "domain-name--fd299c84-5853-49c0-803d-0b050f10c3d2",
                "domain-name--38febda9-4925-4bd1-8c44-61b48c36da5e",
                "domain-name--e4433f95-f3ca-4cd3-8a59-bbeebabf0d1f",
                "domain-name--ca32c1bb-8124-4250-96c3-95c987a24666",
                "domain-name--08435769-4cdb-4be6-ad8c-038922101919",
                "domain-name--13453d9f-157d-4036-a962-71dfa68f1d59",
                "domain-name--20f179cf-8052-4397-94c8-82bdcf8c7519",
                "domain-name--06b25d68-a59c-4fff-8b7d-6418f6f7494e",
                "domain-name--8fc9a97f-26f3-4c02-be15-f3e9c25c5775",
                "domain-name--29bd890c-cf99-435b-a36a-eb7c0f75baf7",
                "domain-name--2a84ec26-2111-4bd9-a3a7-0a12511435cd",
                "domain-name--ac147a11-e3f9-4976-936e-8e9e2a75a549",
                "domain-name--25d9aa7a-81e2-4823-98f8-6153534f68e7",
                "domain-name--ac1a75e6-69b2-4550-a47e-a713c70f80a6",
                "domain-name--9cc8bb48-9e3a-4702-aa49-6118b7e49040",
                "domain-name--06b95ab7-5e21-422e-b3f3-dc8969e8ecb9",
                "domain-name--80634840-3cd8-4a41-8687-a6e277baea1d",
                "domain-name--50ec9cb4-973a-4456-a263-58e650c125d4",
                "domain-name--3e539599-e467-48b1-958c-7191685e93d5",
                "domain-name--a75a0d6b-a355-4f31-87b7-7ba628aa1091",
                "domain-name--ae958f6d-e9cf-4747-b44b-8330d9720e18",
                "domain-name--eb98b1e7-775c-47f1-b94f-eea2faed60b3",
                "domain-name--b680014d-7348-47f6-8991-02fe442b4c7b",
                "domain-name--864e58c0-ea3c-4a92-b0bb-22b67ffa5125",
                "domain-name--2d211ab1-5954-4168-9dcf-d9339c33a5ef",
                "domain-name--8c87cbb0-c0fe-41f0-972c-c7bbbae719c0",
                "domain-name--c8042e77-2933-4413-a40c-cc8e9b8383ef",
                "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.sentinelone.com/labs/kimsuky-evolves-reconnaissance-capabilities-in-new-global-campaign/"
                }
            ]
        }
    ]
}