{
    "type": "bundle",
    "id": "bundle--67ec3b0e-b9da-49cf-9f5a-2870891d518d",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--eafdd258-8d1a-438d-bbef-6ca0d4a35852",
            "created": "2023-03-08T12:51:41.544512Z",
            "modified": "2025-02-04T10:54:04.972936Z",
            "name": "Ahnlab",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--9991a084-1d2e-434f-aa2b-8a3cf17be8a7",
            "hashes": {
                "MD5": "d9b15979e76dd5d18c31e62ab9ff7dae"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--09405b1e-f8d3-4882-9f72-4bb293a3eab5",
            "hashes": {
                "MD5": "0054bdfe4cac0cb7a717749f8c08f5f3"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--448814a0-4062-49fb-b5e6-e856870480d3",
            "hashes": {
                "MD5": "4ef5e3ce535f84f975a8212f5630bfe8"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--dacfbd53-b056-4c0d-b57b-f57a95972b09",
            "hashes": {
                "MD5": "a1c59fec34fec1156e7db27ec16121a7"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--8ede55e0-17c0-4c50-9b3b-2af297c86a15",
            "hashes": {
                "MD5": "c7b82b4bafb677bf0f4397b0b88ccfa2"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--2ac79b24-722d-410d-964e-176a1b7a2c96",
            "value": "http://aa.olixa.p-e.kr/index.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--6e2d2e59-a39f-445f-9f46-97b3b6d6292a",
            "value": "http://app.seoul.minia.ml/kinsa.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--230584cb-4c3d-4c14-b328-4ca47b837fde",
            "value": "http://users.nya.pub/index.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--e1708f43-40a4-4475-97ba-01d08b38c93c",
            "value": "http://ai.hyyeo.p-e.kr/index.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--7f048512-6c83-445b-a609-7ce173f0d0be",
            "value": "http://uo.zosua.o-r.kr/index.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--04b4a92d-2757-4aba-9636-dd77e835c403",
            "value": "http://go.ktspace.p-e.kr/index.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--9ff6df8b-bf34-44be-ba4f-71b604f14266",
            "value": "http://on.ktspace.p-e.kr/index.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--7c5e8e92-273a-4d79-bcc5-adde2605517a",
            "value": "http://jp.hyyeo.p-e.kr/index.php"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--b3ebe6ad-907b-4001-9336-ed61074c1b3e",
            "value": "ai.hyyeo.p-e.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--0f61b12b-b4e0-4e3c-9e49-faa9b2e38285",
            "value": "go.ktspace.p-e.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--6be04479-4840-4418-83b3-7f23896752a6",
            "value": "jp.hyyeo.p-e.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--a9a9097a-3581-428c-8f63-32cc7c025e2c",
            "value": "on.ktspace.p-e.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--420636a6-0363-4621-9532-cc22e8c76954",
            "value": "users.nya.pub"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--f850a1e6-7bfa-4ccf-9415-a35fdcc867c1",
            "value": "app.seoul.minia.ml"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--423cec95-f1c2-4801-812d-a767442ac821",
            "value": "uo.zosua.o-r.kr"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1",
            "created": "2026-06-24T18:41:04.507302Z",
            "modified": "2026-06-24T18:41:04.507302Z",
            "name": "Kimsuky"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--f74cc87c-59ad-4faf-9da7-891d74a7544c",
            "created_by_ref": "identity--eafdd258-8d1a-438d-bbef-6ca0d4a35852",
            "created": "2026-06-24T18:41:04.509946Z",
            "modified": "2026-06-24T18:41:04.509946Z",
            "name": "Kimsuky Group's New Backdoor Appears (HappyDoor)",
            "published": "2024-07-05T00:00:00Z",
            "object_refs": [
                "identity--eafdd258-8d1a-438d-bbef-6ca0d4a35852",
                "file--9991a084-1d2e-434f-aa2b-8a3cf17be8a7",
                "file--09405b1e-f8d3-4882-9f72-4bb293a3eab5",
                "file--448814a0-4062-49fb-b5e6-e856870480d3",
                "file--dacfbd53-b056-4c0d-b57b-f57a95972b09",
                "file--8ede55e0-17c0-4c50-9b3b-2af297c86a15",
                "url--2ac79b24-722d-410d-964e-176a1b7a2c96",
                "url--6e2d2e59-a39f-445f-9f46-97b3b6d6292a",
                "url--230584cb-4c3d-4c14-b328-4ca47b837fde",
                "url--e1708f43-40a4-4475-97ba-01d08b38c93c",
                "url--7f048512-6c83-445b-a609-7ce173f0d0be",
                "url--04b4a92d-2757-4aba-9636-dd77e835c403",
                "url--9ff6df8b-bf34-44be-ba4f-71b604f14266",
                "url--7c5e8e92-273a-4d79-bcc5-adde2605517a",
                "domain-name--b3ebe6ad-907b-4001-9336-ed61074c1b3e",
                "domain-name--0f61b12b-b4e0-4e3c-9e49-faa9b2e38285",
                "domain-name--6be04479-4840-4418-83b3-7f23896752a6",
                "domain-name--a9a9097a-3581-428c-8f63-32cc7c025e2c",
                "domain-name--420636a6-0363-4621-9532-cc22e8c76954",
                "domain-name--f850a1e6-7bfa-4ccf-9415-a35fdcc867c1",
                "domain-name--423cec95-f1c2-4801-812d-a767442ac821",
                "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://asec.ahnlab.com/en/67660/"
                }
            ]
        }
    ]
}