{
    "type": "bundle",
    "id": "bundle--6b49d350-c71b-40a1-ba70-2bcfbc1ff137",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--f124ebed-440c-493a-a454-005060f3b4d8",
            "created": "2023-03-08T12:51:57.814175Z",
            "modified": "2026-04-22T13:31:24.745811Z",
            "name": "TrendMicro",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--fc235aba-3b6d-455c-8766-9523c4fb1c9d",
            "hashes": {
                "SHA-256": "4722138dda262a2dca5cbf9acd40f150759c006f56b7637769282dba54de0cab"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--0346dde6-bb5c-4dee-ac53-c6caa2055671",
            "hashes": {
                "SHA-256": "10cbb5d0974af08b5d4aa9c753e274a81348da9f8bfcaa5193fad08b79650cda"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--769276af-c8d5-4074-b067-393923175c62",
            "hashes": {
                "SHA-256": "6cac0be2120be7b3592fe4e1f7c86f4abc7b168d058e07dc8975bf1eafd7cb25"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--95ff469b-4822-4151-9059-f64b8441026e",
            "hashes": {
                "SHA-256": "650d7b814922b58b6580041cb0aa9d27dae7e94e6d899bbb3b4aa5f1047fca0f"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--e917f1ce-a20f-4440-98e8-199f126a32e4",
            "hashes": {
                "SHA-256": "972b598d709b66b35900dc21c5225e5f0d474f241fefa890b381089afd7d44ee"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--a8d65ffb-b72f-4874-acab-fa421a2d70eb",
            "hashes": {
                "SHA-256": "6d4415a2cbedc960c7c7055626c61842b3a3ca4718e2ac0e3d2ac0c7ef41b84d"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c902433a-b57d-4eb5-bc90-926bdaa7b3cf",
            "hashes": {
                "SHA-256": "8ff100ca86cb62117f1290e71d5f9c0519661d6c955d9fcfb71f0bbdf75b51b3"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6af17723-15fb-4c7a-a59b-6224cec9c922",
            "hashes": {
                "SHA-256": "db8163d054a35522d0dec35743cfd2c9872e0eb446467b573a79f84d61761471"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d819c397-caab-4eea-8794-bc0946a07f39",
            "hashes": {
                "SHA-256": "d5f9a81df5061c69be9c0ed55fba7d796e1a8ebab7c609ae437c574bd7b30b48"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--0c101cb8-754e-4c1b-96b2-09848db90c84",
            "hashes": {
                "SHA-256": "1768f2e9cea5f8c97007c6f822531c1c9043c151187c54ebfb289980ff63d666"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--2197e4ba-43d5-466e-9dc6-26bcdcb1cdc7",
            "hashes": {
                "SHA-256": "772b9b873100375c9696d87724f8efa2c8c1484853d40b52c6dc6f7759f5db01"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7e6b5bf1-b796-4a2d-9916-bd38c21ea0af",
            "hashes": {
                "SHA-256": "030b4525558f2c411f972d91b144870b388380b59372e1798926cc2958242863"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--0af751f7-ee87-4882-ad9e-5266b500d9e4",
            "hashes": {
                "SHA-256": "d844777dcafcde8622b9472b6cd442c50c3747579868a53a505ef2f5a4f0e26a"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--2ca05efe-76f8-4d4a-8f5b-20e3a247ef62",
            "hashes": {
                "SHA-256": "f7f2dd674532056c0d67ef1fb7c8ae8dd0484768604b551ee9b6c4405008fe6b"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--45242096-a090-416c-95e4-8d0c7d2ac45e",
            "hashes": {
                "SHA-256": "6cb1e9850dd853880bbaf68ea23243bac9c430df576fa1e679d7f26d56785984"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--a5dec732-1e17-4f88-9cc7-357fc0772ab7",
            "hashes": {
                "SHA-256": "9d10911a7bbf26f58b5e39342540761885422b878617f864bfdb16195b7cd0f5"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ba2a6f81-5e0c-4adf-990a-0a47ee93208b",
            "hashes": {
                "SHA-256": "01b047e0f3b49f8ab6ebf6795bc72ba7f63d7acbc68f65f1f8f66e34de827e49"
            }
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b",
            "created": "2026-06-24T21:08:05.376603Z",
            "modified": "2026-06-24T21:08:05.376603Z",
            "name": "Lazarus"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--1e50ec54-1398-4fc2-8e08-c6147aab3f31",
            "created_by_ref": "identity--f124ebed-440c-493a-a454-005060f3b4d8",
            "created": "2026-06-24T21:08:05.377647Z",
            "modified": "2026-06-24T21:08:05.377647Z",
            "name": "Lazarus Campaign Targeting Cryptocurrencies Reveals Remote Controller Tool, an Evolved RATANKBA, and More",
            "published": "2018-01-24T00:00:00Z",
            "object_refs": [
                "identity--f124ebed-440c-493a-a454-005060f3b4d8",
                "file--fc235aba-3b6d-455c-8766-9523c4fb1c9d",
                "file--0346dde6-bb5c-4dee-ac53-c6caa2055671",
                "file--769276af-c8d5-4074-b067-393923175c62",
                "file--95ff469b-4822-4151-9059-f64b8441026e",
                "file--e917f1ce-a20f-4440-98e8-199f126a32e4",
                "file--a8d65ffb-b72f-4874-acab-fa421a2d70eb",
                "file--c902433a-b57d-4eb5-bc90-926bdaa7b3cf",
                "file--6af17723-15fb-4c7a-a59b-6224cec9c922",
                "file--d819c397-caab-4eea-8794-bc0946a07f39",
                "file--0c101cb8-754e-4c1b-96b2-09848db90c84",
                "file--2197e4ba-43d5-466e-9dc6-26bcdcb1cdc7",
                "file--7e6b5bf1-b796-4a2d-9916-bd38c21ea0af",
                "file--0af751f7-ee87-4882-ad9e-5266b500d9e4",
                "file--2ca05efe-76f8-4d4a-8f5b-20e3a247ef62",
                "file--45242096-a090-416c-95e4-8d0c7d2ac45e",
                "file--a5dec732-1e17-4f88-9cc7-357fc0772ab7",
                "file--ba2a6f81-5e0c-4adf-990a-0a47ee93208b",
                "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://blog.trendmicro.com/trendlabs-security-intelligence/lazarus-campaign-targeting-cryptocurrencies-reveals-remote-controller-tool-evolved-ratankba/"
                }
            ]
        }
    ]
}