{
    "type": "bundle",
    "id": "bundle--3079bf73-1474-4bfe-ad53-a8fd3a619200",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--ce40c63e-51d4-4ec5-a85b-2d76cd5ec7d1",
            "created": "2023-03-08T12:52:07.036238Z",
            "modified": "2025-06-18T12:58:21.951363Z",
            "name": "CiscoTalos",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6395b3df-51a6-4b79-8b6c-09a6ab4179fd",
            "hashes": {
                "SHA-256": "3de491de3f39c599954bdbf08bba3bab9e4a1d2c64141b03a866c08ef867c9d1"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d672ad06-65a8-49f9-bfdd-3d8238ab0ddc",
            "hashes": {
                "SHA-256": "94113c9968db13e3412c1b9c1c882592481c559c0613dbccfed2fcfc80e77dc5"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--62a94f41-01e6-49f8-9cf4-993021f45a62",
            "hashes": {
                "SHA-256": "44150350727e2a42f66d50015e98de462d362af8a9ae33d1f5124f1703179ab9"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b67f8781-5637-4514-ad87-8d13a31f0caf",
            "hashes": {
                "SHA-256": "553a475f72819b295927e469c7bf9aef774783f3ae8c34c794f35702023317cc"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--0fce2964-39b1-499d-9607-c9cea4777390",
            "hashes": {
                "SHA-256": "dd730cc8fcbb979eb366915397b8535ce3b6cfdb01be2235797d9783661fc84d"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d1ebe406-ce1b-4e70-91b9-3dc2aafdb3c2",
            "hashes": {
                "SHA-256": "640477943ad77fb2a74752f4650707ea616c3c022359d7b2e264a63495abe45e"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--0dcbb2d6-5550-4d4f-b227-4f85022f37cd",
            "hashes": {
                "SHA-256": "413772d81e4532fec5119e9dce5e2bf90b7538be33066cf9a6ff796254a5225f"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--5e7f48e1-ad64-4003-8a7b-ffe8bb2f3ac4",
            "hashes": {
                "SHA-256": "92600679bb183c1897e7e1e6446082111491a42aa65a3a48bd0fceae0db7244f"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--341f4361-f657-423d-9304-8fd2bee41900",
            "hashes": {
                "SHA-256": "39bc918f0080603ac80fe1ec2edfd3099a88dc04322106735bc08188838b2635"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--17f1f244-d53a-46e2-b2ee-fd17ddfc531f",
            "hashes": {
                "SHA-256": "56f159cde3a55ae6e9270d95791ef2f6859aa119ad516c9471010302e1fb5634"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7dcf1319-4fe3-4236-8a50-b05b03eaae37",
            "hashes": {
                "SHA-256": "4585584fe7e14838858b24c18a792b105d18f87d2711c060f09e62d89fc3085b"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--fe304081-6ddb-4be2-af33-5b92697eedb4",
            "hashes": {
                "SHA-256": "69a9d7aa0cb964c091ca128735b6e60fa7ce028a2ba41d99023dd57c06600fe0"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c4e630b7-6569-427c-a3fd-22980cb4b497",
            "hashes": {
                "SHA-256": "eb90e40fc4d91dec68e8509056c52e9c8ed4e392c4ac979518f8d87c31e2b435"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--5a5258ee-aa8f-4a28-9b8f-eedbc8cc85da",
            "value": "dowhelsitjs.netau.net"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--5eacc31e-02d6-4b6d-ab81-5498817ec309",
            "value": "phpschboy.prohosts.org"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--478e305a-2692-4b75-bca7-5fac44f0d0e8",
            "value": "pactchfilepacks.net23.net"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--a014dfac-e081-5b16-a0b1-fe21d104be8f",
            "created": "2026-06-24T17:27:33.994797Z",
            "modified": "2026-06-24T17:27:33.994797Z",
            "name": "Konni"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--4f7f9ef4-1e88-4d9e-b8c3-ce3d451a3f60",
            "created_by_ref": "identity--ce40c63e-51d4-4ec5-a85b-2d76cd5ec7d1",
            "created": "2026-06-24T17:27:33.995843Z",
            "modified": "2026-06-24T17:27:33.995843Z",
            "name": "KONNI: A Malware Under The Radar For Years",
            "published": "2017-05-03T00:00:00Z",
            "object_refs": [
                "identity--ce40c63e-51d4-4ec5-a85b-2d76cd5ec7d1",
                "file--6395b3df-51a6-4b79-8b6c-09a6ab4179fd",
                "file--d672ad06-65a8-49f9-bfdd-3d8238ab0ddc",
                "file--62a94f41-01e6-49f8-9cf4-993021f45a62",
                "file--b67f8781-5637-4514-ad87-8d13a31f0caf",
                "file--0fce2964-39b1-499d-9607-c9cea4777390",
                "file--d1ebe406-ce1b-4e70-91b9-3dc2aafdb3c2",
                "file--0dcbb2d6-5550-4d4f-b227-4f85022f37cd",
                "file--5e7f48e1-ad64-4003-8a7b-ffe8bb2f3ac4",
                "file--341f4361-f657-423d-9304-8fd2bee41900",
                "file--17f1f244-d53a-46e2-b2ee-fd17ddfc531f",
                "file--7dcf1319-4fe3-4236-8a50-b05b03eaae37",
                "file--fe304081-6ddb-4be2-af33-5b92697eedb4",
                "file--c4e630b7-6569-427c-a3fd-22980cb4b497",
                "domain-name--5a5258ee-aa8f-4a28-9b8f-eedbc8cc85da",
                "domain-name--5eacc31e-02d6-4b6d-ab81-5498817ec309",
                "domain-name--478e305a-2692-4b75-bca7-5fac44f0d0e8",
                "threat-actor--a014dfac-e081-5b16-a0b1-fe21d104be8f"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://blog.talosintelligence.com/2017/05/konni-malware-under-radar-for-years.html"
                }
            ]
        }
    ]
}