{
    "type": "bundle",
    "id": "bundle--3c3eba23-c274-4379-a5ec-13fc0d752c58",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--de4ecbb3-b973-4bb0-bb18-c19c9bac5f2b",
            "created": "2023-03-08T12:51:59.316958Z",
            "modified": "2023-03-10T04:29:34.599743Z",
            "name": "LAC",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--87b9c5fa-d212-4faa-be9f-fa794740bbca",
            "hashes": {
                "SHA-256": "bcf9044ac1c90206d8d8b7b98cf084d90abdbd6b3bc10aa9da4cac69465a1f74"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--4b1143d1-4ce2-4e5b-a2b7-428cb279954f",
            "hashes": {
                "SHA-256": "0c5b6081e73a500825eae5687961565bf0e918e91002ce5ff10185ac969a792b"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--4cd6de31-62ae-4e9d-9cf7-8e26516add67",
            "hashes": {
                "SHA-256": "8b396ba6861a39b1801b369eb461311940d6081eae834d949c9aa55bffd0a625"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d5d9969b-9b5a-43dd-a32d-6640a2038f62",
            "hashes": {
                "SHA-256": "22ddecca88cc964f4357458467acbcb881b0ebb77875525c17bef30299f03497"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--80917eb8-60ee-416c-bdd6-066301931eec",
            "hashes": {
                "SHA-256": "4abfbbfa443e7be34da30abda4665789d1b2e5a70cbef066e6dfacd59a1bfdbb"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--5e965f52-a67e-4518-9b79-17ad44973b92",
            "hashes": {
                "SHA-256": "d3590bf0017815f77bd286b4c47f186832ab2b48f123f95ca4cbc25b95ff8ef3"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--2db39e61-9dca-4a7b-9140-8c3a783bdc64",
            "hashes": {
                "SHA-256": "0ecac57958e77648b5e5b47787612f992175bf22e00dbf8ea4de0b9f12dea2d8"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--8638c3b5-eb9b-49cf-bb83-2be86272360d",
            "hashes": {
                "SHA-256": "3b4a56b6d86393fa0c058cdd3d26809ef6c956fb6b69fac9d84f9212d5db7ee1"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--dcf7e50d-8431-437f-9c6d-338f2f9b4a9b",
            "value": "https://www.estsecurity.com/enterprise/security-center/notice/view/417126"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--e5f5dcdc-5162-4f0c-adf7-dba6132c404f",
            "value": "https://webapp-wdac-wizard.azurewebsites.net/"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--4b1913b1-df85-4acf-961b-226662735793",
            "value": "accuses.org"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--a89eb63d-1bd0-45c2-a15c-630e64b63c6e",
            "value": "webapp-wdac-wizard.azurewebsites.net"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--5335915c-b76b-4025-8608-55759ee04092",
            "value": "kpcserver.com"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--c370b1cc-d743-40ed-a580-77471857efa0",
            "value": "23.254.225.184"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--b37dab30-2ac3-4574-8508-37e590b950f2",
            "value": "3.3.14.1"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--67e95248-947b-403b-97d8-66969962c309",
            "value": "3.1.0.15"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--6b042cb5-46dc-4a24-bd3e-5aa4caf884ca",
            "value": "3.2.5.1"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--6180b039-b6f2-4e4b-8616-c669bc0cbb8c",
            "value": "3.3.14.2"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--496af56f-f166-4873-9c95-084b543b5355",
            "value": "65.21.154.31"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--82a95236-aef7-4a56-a701-5b604cd8ed40",
            "value": "3.3.6.1"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--3ade4980-1b23-4053-89f7-5bc2dbfd32a5",
            "value": "3.3.17.1"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--68b71bcf-a88d-462e-8b89-dbbe641f507c",
            "value": "3.3.8.1"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--460fdfa4-5d35-4290-adfd-413a25289a46",
            "value": "3.3.16.1"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--4f6e28ca-7cd5-479c-b255-5b7ed82aa064",
            "value": "38.180.249.56"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--8334d894-92bb-496d-a70a-cb36714deb0f",
            "value": "194.68.27.204"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--67501567-5c37-4126-bb1c-cd01df5ce399",
            "value": "91.107.208.93"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--fb0283b4-904c-4ac6-abed-384dc71112be",
            "value": "109.234.36.135"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ab66b507-7b3f-4aef-bd0c-b6b64b5a0c39",
            "hashes": {
                "SHA-256": "7107c110e4694f50a39a91f8497b9f0e88dbe6a3face0d2123a89bcebf241a1d"
            }
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--0f448191-e487-4c73-ab77-927282f62853",
            "value": "116.202.99.218"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b1ecb289-b781-40f2-9171-a981e0255859",
            "hashes": {
                "SHA-256": "e9239ba649aec746e3c0088bc56400460b4a03e5f2df132ec7e47c14ccb70c0c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--45a4058a-ed84-40f5-9b1d-7c52f8e2a627",
            "hashes": {
                "SHA-256": "9e1a3653029b5378736ea1debba44cd81988de73b6d8689f9eba792e719da79a"
            }
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--c8146291-4d22-4eb5-9e01-037e734d457d",
            "value": "3.3.14.5"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--eb9a6a1d-0883-46ea-b679-e46ef2cdb9eb",
            "value": "185.231.154.22"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--445924c2-8f08-4b9e-9f7a-a5e80641069d",
            "value": "94.103.87.212"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--fd7ea794-bd52-4511-a2c7-0a5d39affd87",
            "value": "autoitscript.com"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--9dfa8a10-6245-4f81-9cdc-d3c38e2f75eb",
            "value": "93.183.93.185"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--f43d4653-0f1a-4c7d-a6ef-3d54218056d2",
            "value": "62.113.118.157"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--a014dfac-e081-5b16-a0b1-fe21d104be8f",
            "created": "2026-06-24T21:17:52.359627Z",
            "modified": "2026-06-24T21:17:52.359627Z",
            "name": "Konni"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--39862b13-ccc6-4230-9c15-540eaa5d58c7",
            "created_by_ref": "identity--de4ecbb3-b973-4bb0-bb18-c19c9bac5f2b",
            "created": "2026-06-24T21:17:52.36485Z",
            "modified": "2026-06-24T21:17:52.36485Z",
            "name": "Konni\u2019s New Arsenal: Unmasking GSRAT in North Korea-linked APT Operation",
            "published": "2026-01-22T00:00:00Z",
            "object_refs": [
                "identity--de4ecbb3-b973-4bb0-bb18-c19c9bac5f2b",
                "file--87b9c5fa-d212-4faa-be9f-fa794740bbca",
                "file--4b1143d1-4ce2-4e5b-a2b7-428cb279954f",
                "file--4cd6de31-62ae-4e9d-9cf7-8e26516add67",
                "file--d5d9969b-9b5a-43dd-a32d-6640a2038f62",
                "file--80917eb8-60ee-416c-bdd6-066301931eec",
                "file--5e965f52-a67e-4518-9b79-17ad44973b92",
                "file--2db39e61-9dca-4a7b-9140-8c3a783bdc64",
                "file--8638c3b5-eb9b-49cf-bb83-2be86272360d",
                "url--dcf7e50d-8431-437f-9c6d-338f2f9b4a9b",
                "url--e5f5dcdc-5162-4f0c-adf7-dba6132c404f",
                "domain-name--4b1913b1-df85-4acf-961b-226662735793",
                "domain-name--a89eb63d-1bd0-45c2-a15c-630e64b63c6e",
                "domain-name--5335915c-b76b-4025-8608-55759ee04092",
                "ipv4-addr--c370b1cc-d743-40ed-a580-77471857efa0",
                "ipv4-addr--b37dab30-2ac3-4574-8508-37e590b950f2",
                "ipv4-addr--67e95248-947b-403b-97d8-66969962c309",
                "ipv4-addr--6b042cb5-46dc-4a24-bd3e-5aa4caf884ca",
                "ipv4-addr--6180b039-b6f2-4e4b-8616-c669bc0cbb8c",
                "ipv4-addr--496af56f-f166-4873-9c95-084b543b5355",
                "ipv4-addr--82a95236-aef7-4a56-a701-5b604cd8ed40",
                "ipv4-addr--3ade4980-1b23-4053-89f7-5bc2dbfd32a5",
                "ipv4-addr--68b71bcf-a88d-462e-8b89-dbbe641f507c",
                "ipv4-addr--460fdfa4-5d35-4290-adfd-413a25289a46",
                "ipv4-addr--4f6e28ca-7cd5-479c-b255-5b7ed82aa064",
                "ipv4-addr--8334d894-92bb-496d-a70a-cb36714deb0f",
                "ipv4-addr--67501567-5c37-4126-bb1c-cd01df5ce399",
                "ipv4-addr--fb0283b4-904c-4ac6-abed-384dc71112be",
                "file--ab66b507-7b3f-4aef-bd0c-b6b64b5a0c39",
                "ipv4-addr--0f448191-e487-4c73-ab77-927282f62853",
                "file--b1ecb289-b781-40f2-9171-a981e0255859",
                "file--45a4058a-ed84-40f5-9b1d-7c52f8e2a627",
                "ipv4-addr--c8146291-4d22-4eb5-9e01-037e734d457d",
                "ipv4-addr--eb9a6a1d-0883-46ea-b679-e46ef2cdb9eb",
                "ipv4-addr--445924c2-8f08-4b9e-9f7a-a5e80641069d",
                "domain-name--fd7ea794-bd52-4511-a2c7-0a5d39affd87",
                "ipv4-addr--9dfa8a10-6245-4f81-9cdc-d3c38e2f75eb",
                "ipv4-addr--f43d4653-0f1a-4c7d-a6ef-3d54218056d2",
                "threat-actor--a014dfac-e081-5b16-a0b1-fe21d104be8f"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://jsac.jpcert.or.jp/archive/2026/pdf/JSAC2026_1_9_takuma_matsumoto-yoshihiro_ishikawa_en.pdf"
                }
            ]
        }
    ]
}