{
    "type": "bundle",
    "id": "bundle--7260dca2-80e1-4468-bdab-ecb2423f3dd4",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--5d199e7e-198c-47e8-ad62-397e3bd362e2",
            "created": "2023-03-08T12:51:51.400428Z",
            "modified": "2024-08-19T23:43:12.521753Z",
            "name": "Group-IB",
            "identity_class": "organization"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--38a9083b-05a3-4709-a4de-379ee9ee2dff",
            "value": "210.52.109.22"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--7f989b3f-5d9d-4182-923e-92feab199512",
            "value": "175.45.178.222"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--dadda8f8-5749-4c72-9114-2d61ab1018d1",
            "value": "175.45.178.19"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--738dc0c7-63c9-46ec-ab30-dd814725eec6",
            "value": "brou.com"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--ea4b6cd1-f2ce-48aa-b422-adeee3f5c2f8",
            "value": "175.45.178.97"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--33d83529-36b8-4fa7-9f0f-432cf26f1f08",
            "value": "knf.gov"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b",
            "created": "2026-06-24T18:31:40.471279Z",
            "modified": "2026-06-24T18:31:40.471279Z",
            "name": "Lazarus"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--53eb63f1-5877-4a98-baa9-7fb979b7c6a1",
            "created_by_ref": "identity--5d199e7e-198c-47e8-ad62-397e3bd362e2",
            "created": "2026-06-24T18:31:40.472319Z",
            "modified": "2026-06-24T18:31:40.472319Z",
            "name": "LAZARUS ARISEN",
            "published": "2017-05-30T00:00:00Z",
            "object_refs": [
                "identity--5d199e7e-198c-47e8-ad62-397e3bd362e2",
                "ipv4-addr--38a9083b-05a3-4709-a4de-379ee9ee2dff",
                "ipv4-addr--7f989b3f-5d9d-4182-923e-92feab199512",
                "ipv4-addr--dadda8f8-5749-4c72-9114-2d61ab1018d1",
                "domain-name--738dc0c7-63c9-46ec-ab30-dd814725eec6",
                "ipv4-addr--ea4b6cd1-f2ce-48aa-b422-adeee3f5c2f8",
                "domain-name--33d83529-36b8-4fa7-9f0f-432cf26f1f08",
                "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.group-ib.com/blog/lazarus"
                }
            ]
        }
    ]
}