{
    "type": "bundle",
    "id": "bundle--64cfcdb3-092f-43f1-aa00-af4a0ce5ae1d",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--19d2042f-9f6c-415b-99d2-e4ea9653f6df",
            "created": "2023-03-08T12:51:52.004941Z",
            "modified": "2023-03-08T12:51:52.00502Z",
            "name": "Anquanke",
            "identity_class": "organization"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--60cca3c3-9944-41f2-8334-6e5697a75870",
            "value": "rabadaun.com"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--646d7605-ce57-4d9b-8462-bcb0fe8fe6de",
            "hashes": {
                "SHA-256": "d1baefd0bdc7f3b0369c5b7126c3b98469a518cf4db788fad1d243d8661a17b9"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--0d4bee9d-8215-4a28-a8a9-1201e65d1046",
            "hashes": {
                "SHA-256": "efc139dc0e280a374065dc59c55a45b5146f091a85a3abd6f0caf1a9a2f8b060"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--73c1fe9b-de23-4182-9133-f17f4e73e54b",
            "value": "fd-com.fr"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--ca980769-3af5-4871-bdd7-0b76d46f7137",
            "value": "108.62.118.185"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--cf465f6e-925d-4af2-af41-6dcefa87eb35",
            "value": "186.122.150.107"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--dbe9de30-7581-4407-b8be-0f65ccbf7a13",
            "hashes": {
                "SHA-256": "57b59b770f313b0a09b651bfba0c95cdba482d4a41fa2e95593674dd5cd83c5b"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--bbb3ed1a-aa77-457b-aa4a-ad0f2eb4b766",
            "hashes": {
                "SHA-256": "9891b3d68ffbdb4a4bd0e7e49ba7b1e6d30ffb35935357551c312af5ae3a4f1e"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--65bf6a51-2063-49b9-a1b7-188928e95d60",
            "hashes": {
                "SHA-1": "1e14de870b1c4b09cbf81206562a254c27178d85"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c9780381-f497-42c8-87ee-eff20e817f67",
            "hashes": {
                "MD5": "f108a4d064dd05c0a097f517ec738b1a"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--409e556b-0836-4c3f-bdb1-2c56beff7872",
            "hashes": {
                "SHA-256": "9aab5a536b95963c4e3c990ab40bdeb25c850e2a862ea528b81d470d6acdadb1"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--58898917-1775-4852-8db1-5b737fe4bc54",
            "hashes": {
                "MD5": "f160c057fded2c01bfdb65bb7aa9dfcc"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--fb87d66f-3960-4302-b56d-b81bc89f7c64",
            "hashes": {
                "SHA-256": "544aaf0804060598138f2db809c31bb651dd8f4fce2e64b49f7db051fc54a764"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--bca31932-d392-498d-a8df-421399b5fccf",
            "hashes": {
                "SHA-256": "5bd48c2f61541124920d71e674ce3fd5927702f69c2baacc5a509debe3a893c8"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--0ae6f89d-5ca4-4178-add2-2f3a2f2d2338",
            "hashes": {
                "SHA-1": "f197a7be7fdb286bc9673a57b54994c02a7af8d6"
            }
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--a70ec93a-2341-447b-b3b7-08bb6e3eb719",
            "value": "mypretty0914@gmail.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--d110c7b2-44d3-441e-8bcc-9f6b2645a995",
            "value": "glorify0717@gmail.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--5cbec7b9-711a-47bd-8ef8-c19bde5aba0e",
            "value": "poole.sion2015@yandex.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--632e4ec4-32a8-4122-826e-3c48df02ff0d",
            "value": "norelyeverland@hanmail.net"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--8c37036d-aadf-4ecc-890f-dd56180405f7",
            "value": "http://fd-com.fr/wp-content/themes/consultingservices/upload/tmp.txt"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--516d9c56-dd75-4809-ba66-271b461d7925",
            "value": "http://documentserver.site/dark/index.php?op=7"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--5c8ec1ee-54b9-4669-bd21-f0b8aba9ae46",
            "value": "http://securelevel.site/pppp/index.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--05d08b45-cf7c-4236-8125-bb962f36287c",
            "value": "http://documentserver.site/dark/index.php?op=5"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--443f9f80-ccdb-44ab-a5a8-7077bfac9502",
            "value": "https://rabadaun.com/wordpress/wp-content/themes/TEMP.so"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--b69601e0-d813-46ba-9199-416cb61f493a",
            "value": "s.threatbook.cn"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--546cb50a-db56-486f-baf8-302429b7d7d1",
            "value": "documentserver.site"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--e479b27f-0ade-4599-9a11-a55156269d2d",
            "value": "securelevel.site"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--a014dfac-e081-5b16-a0b1-fe21d104be8f",
            "created": "2026-06-24T18:23:50.425102Z",
            "modified": "2026-06-24T18:23:50.425102Z",
            "name": "Konni"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--8bc3dec0-89e7-4d7b-997c-1a123aedb617",
            "created_by_ref": "identity--19d2042f-9f6c-415b-99d2-e4ea9653f6df",
            "created": "2026-06-24T18:23:50.426255Z",
            "modified": "2026-06-24T18:23:50.426255Z",
            "name": "Konni APT \u7ec4\u7ec7\u4ee5\u671d\u9c9c\u75ab\u60c5\u7269\u8d44\u8bdd\u9898\u4e3a\u8bf1\u9975\u7684\u653b\u51fb\u6d3b\u52a8\u5206\u6790",
            "published": "2021-02-01T00:00:00Z",
            "object_refs": [
                "identity--19d2042f-9f6c-415b-99d2-e4ea9653f6df",
                "domain-name--60cca3c3-9944-41f2-8334-6e5697a75870",
                "file--646d7605-ce57-4d9b-8462-bcb0fe8fe6de",
                "file--0d4bee9d-8215-4a28-a8a9-1201e65d1046",
                "domain-name--73c1fe9b-de23-4182-9133-f17f4e73e54b",
                "ipv4-addr--ca980769-3af5-4871-bdd7-0b76d46f7137",
                "ipv4-addr--cf465f6e-925d-4af2-af41-6dcefa87eb35",
                "file--dbe9de30-7581-4407-b8be-0f65ccbf7a13",
                "file--bbb3ed1a-aa77-457b-aa4a-ad0f2eb4b766",
                "file--65bf6a51-2063-49b9-a1b7-188928e95d60",
                "file--c9780381-f497-42c8-87ee-eff20e817f67",
                "file--409e556b-0836-4c3f-bdb1-2c56beff7872",
                "file--58898917-1775-4852-8db1-5b737fe4bc54",
                "file--fb87d66f-3960-4302-b56d-b81bc89f7c64",
                "file--bca31932-d392-498d-a8df-421399b5fccf",
                "file--0ae6f89d-5ca4-4178-add2-2f3a2f2d2338",
                "email-addr--a70ec93a-2341-447b-b3b7-08bb6e3eb719",
                "email-addr--d110c7b2-44d3-441e-8bcc-9f6b2645a995",
                "email-addr--5cbec7b9-711a-47bd-8ef8-c19bde5aba0e",
                "email-addr--632e4ec4-32a8-4122-826e-3c48df02ff0d",
                "url--8c37036d-aadf-4ecc-890f-dd56180405f7",
                "url--516d9c56-dd75-4809-ba66-271b461d7925",
                "url--5c8ec1ee-54b9-4669-bd21-f0b8aba9ae46",
                "url--05d08b45-cf7c-4236-8125-bb962f36287c",
                "url--443f9f80-ccdb-44ab-a5a8-7077bfac9502",
                "domain-name--b69601e0-d813-46ba-9199-416cb61f493a",
                "domain-name--546cb50a-db56-486f-baf8-302429b7d7d1",
                "domain-name--e479b27f-0ade-4599-9a11-a55156269d2d",
                "threat-actor--a014dfac-e081-5b16-a0b1-fe21d104be8f"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.anquanke.com/post/id/230116"
                }
            ]
        }
    ]
}