{
    "type": "bundle",
    "id": "bundle--8fc8264f-fea6-4088-9d44-5b74077ef2c5",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--c39d85f1-5111-42ed-94ed-e9f749dec731",
            "created": "2023-03-08T12:51:58.194913Z",
            "modified": "2026-04-05T07:21:22.57565Z",
            "name": "Fortinet",
            "identity_class": "organization"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--0c0f4ec7-bce5-4c3b-a937-aec010d8682b",
            "value": "kmdqj1.c1.biz"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7b88e37a-b2c8-4580-b8cb-1db5d74d236b",
            "hashes": {
                "SHA-256": "83e66d912ca592bc2accfd9c275647f287b6dc72a859054a348e616537999b64"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--75cea286-40ba-4717-a0da-b05d51a37f68",
            "hashes": {
                "SHA-256": "793b8e72fded73ae6839e678b03bd5c99959f47a1ad632095ba60fb89f66fa91"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--81d2e578-c87a-4dcd-a2da-bed8213bb879",
            "hashes": {
                "SHA-256": "656dd6e67a51aebc6c69dc35eaba2e1502f225ae6fd9d0a5ff70879982427844"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--eb354505-bdbe-4dde-a644-bcc7a7e6963b",
            "hashes": {
                "SHA-256": "ac9b814b98a962bc77b2ab862d9c3b1ba5f7e86b80797259b4fcb40bfb389081"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c7ca4cd1-8216-4955-a364-d38a6fcc30a7",
            "hashes": {
                "SHA-256": "cfbc7e6a89e4a23a72c7bcd9019197721f18506d9ab842011e0ab9d9eb24c2cc"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--dac8ac41-a1fc-4ca2-bc3f-dd29a26223e0",
            "hashes": {
                "SHA-256": "f07e55ce20e944706232013241d23282e652de2c9514904dede14d4a711a5d1d"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ff7fe75d-6afc-46b1-9015-3d990ff1d09f",
            "hashes": {
                "SHA-256": "085cdb09aba0024c0cadbefe428817829bbe4ab0f68598572ebccc2f6f25e78f"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--68f44211-e750-4952-82f1-85a486453f01",
            "value": "vqt9i1.c1.biz"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--d555d07b-b029-4948-9f75-e8b9e2815c24",
            "value": "rziju6.c1.biz"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--cfd022a1-0eb9-417b-824e-2feb6d45255b",
            "value": "ouvxu2.c1.biz"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--e8edccb0-9a08-494c-9b2d-c6910c48d360",
            "value": "m2jymd.c1.biz"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--57f5a184-7998-4982-8469-bb65a62c08d1",
            "value": "3pl0y5.c1.biz"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--d5c207b4-b424-40b5-8d9e-56bb87e7e570",
            "value": "ewqqa4.c1.biz"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--230e5a4b-3ec3-4236-90af-816ae35263b9",
            "value": "7qnbae.c1.biz"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--72e77703-6e73-4110-9855-3e2a5e8b5ddd",
            "value": "3897lb.c1.biz"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--d9517080-152c-4b75-afbf-510161daf28e",
            "value": "glws5m.c1.biz"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--7fab26c5-41fe-41b9-8ccd-65745aed2589",
            "value": "bg5pl1.c1.biz"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--f56a102d-fdd3-4c1f-b9c9-f0b35c2026fd",
            "value": "6e2nbc.c1.biz"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--30d45094-fee1-45c8-a73f-3eb1ff62cb26",
            "value": "aocsff.c1.biz"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--c807c6d0-50c9-4cdf-ba5b-a896094f1025",
            "value": "9b31n8.c1.biz"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--f6cc2e74-bbcb-4e7e-9e52-cfe641c511bc",
            "value": "caoy9n.c1.biz"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--ca22d622-88ba-489f-a52a-625aff7dd0cc",
            "value": "pm90p1.c1.biz"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--3f2bd4ca-d5bc-4f66-ab67-efcc9f6783ec",
            "value": "pxyunf.c1.biz"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--a780ca79-f814-468e-827b-45c9b5421cf6",
            "value": "b91stf.c1.biz"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--05718a5a-5705-42ff-9fcb-0e6f59e5b54b",
            "value": "558ga9.c1.biz"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--98d87279-ff5f-4909-ab3f-c0fb0e6469cf",
            "value": "dpgbep.c1.biz"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--a014dfac-e081-5b16-a0b1-fe21d104be8f",
            "created": "2026-06-24T17:23:39.735641Z",
            "modified": "2026-06-24T17:23:39.735641Z",
            "name": "Konni"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--dae7373c-f59f-4340-a774-e51d962de2f1",
            "created_by_ref": "identity--c39d85f1-5111-42ed-94ed-e9f749dec731",
            "created": "2026-06-24T17:23:39.737226Z",
            "modified": "2026-06-24T17:23:39.737226Z",
            "name": "Konni Campaign Distributed Via Malicious Document",
            "published": "2023-11-20T00:00:00Z",
            "object_refs": [
                "identity--c39d85f1-5111-42ed-94ed-e9f749dec731",
                "domain-name--0c0f4ec7-bce5-4c3b-a937-aec010d8682b",
                "file--7b88e37a-b2c8-4580-b8cb-1db5d74d236b",
                "file--75cea286-40ba-4717-a0da-b05d51a37f68",
                "file--81d2e578-c87a-4dcd-a2da-bed8213bb879",
                "file--eb354505-bdbe-4dde-a644-bcc7a7e6963b",
                "file--c7ca4cd1-8216-4955-a364-d38a6fcc30a7",
                "file--dac8ac41-a1fc-4ca2-bc3f-dd29a26223e0",
                "file--ff7fe75d-6afc-46b1-9015-3d990ff1d09f",
                "domain-name--68f44211-e750-4952-82f1-85a486453f01",
                "domain-name--d555d07b-b029-4948-9f75-e8b9e2815c24",
                "domain-name--cfd022a1-0eb9-417b-824e-2feb6d45255b",
                "domain-name--e8edccb0-9a08-494c-9b2d-c6910c48d360",
                "domain-name--57f5a184-7998-4982-8469-bb65a62c08d1",
                "domain-name--d5c207b4-b424-40b5-8d9e-56bb87e7e570",
                "domain-name--230e5a4b-3ec3-4236-90af-816ae35263b9",
                "domain-name--72e77703-6e73-4110-9855-3e2a5e8b5ddd",
                "domain-name--d9517080-152c-4b75-afbf-510161daf28e",
                "domain-name--7fab26c5-41fe-41b9-8ccd-65745aed2589",
                "domain-name--f56a102d-fdd3-4c1f-b9c9-f0b35c2026fd",
                "domain-name--30d45094-fee1-45c8-a73f-3eb1ff62cb26",
                "domain-name--c807c6d0-50c9-4cdf-ba5b-a896094f1025",
                "domain-name--f6cc2e74-bbcb-4e7e-9e52-cfe641c511bc",
                "domain-name--ca22d622-88ba-489f-a52a-625aff7dd0cc",
                "domain-name--3f2bd4ca-d5bc-4f66-ab67-efcc9f6783ec",
                "domain-name--a780ca79-f814-468e-827b-45c9b5421cf6",
                "domain-name--05718a5a-5705-42ff-9fcb-0e6f59e5b54b",
                "domain-name--98d87279-ff5f-4909-ab3f-c0fb0e6469cf",
                "threat-actor--a014dfac-e081-5b16-a0b1-fe21d104be8f"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.fortinet.com/blog/threat-research/konni-campaign-distributed-via-malicious-document"
                }
            ]
        }
    ]
}