{
    "type": "bundle",
    "id": "bundle--e48ea18d-e60b-45d9-994e-e9a99541f621",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--2342bca0-000a-4032-97a0-cb95698d25a8",
            "created": "2024-07-15T23:02:15.401989Z",
            "modified": "2025-01-16T23:06:04.025947Z",
            "name": "Validin",
            "identity_class": "organization"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--302fd751-75e6-4d96-a7d0-e4c45290a04d",
            "value": "getstockprice.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--9f08f771-b17c-45cc-a9a9-28505997d828",
            "value": "goingladies.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--72ba3844-2aba-4453-9ea0-8c31bfa84b28",
            "value": "trashcrease.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--eb13a167-4a68-495a-ba84-5a79940ddc27",
            "value": "anglerstatic.com"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--38018e72-ad43-4baf-a223-719599fd5b16",
            "value": "131.226.2.43"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--b464b086-f57e-4694-8335-ee81ac4b8513",
            "value": "178.128.77.132"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--3fd40329-5f0d-4b76-8743-e6fa7e2142ed",
            "value": "23.236.169.233"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--65a33af6-b382-47bc-a68b-d51e5a4f01b3",
            "value": "70.34.245.118"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--d75b8342-fac9-4901-a3f1-250fc7973e11",
            "value": "clubinfo.io"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--a543aa50-6cb1-43ed-920a-8959451cdd23",
            "value": "showmanroast.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--d8bc8368-ec0c-4c05-94aa-9a254c04e8bf",
            "value": "getstockprice.info"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--9d7dbbb0-97c2-46ef-9625-c6ec4ca9600b",
            "value": "gossipsnare.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--5812b604-5d7c-4ebd-8d19-164eb0272a67",
            "value": "coreladao.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--5d633512-718e-4f90-8724-7f941af05387",
            "value": "replaydreary.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--67b6b603-a483-4e1b-b527-3d74b0ededef",
            "value": "cdn.clubinfo.io"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--2f27e578-44b1-42ee-856c-14d22bd3db2f",
            "value": "eclairdomain.com"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--fafa3434-2e88-41c8-9009-62bb7409f466",
            "value": "131.226.2.120"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--a9ea92ed-7d57-4a59-a694-7f1a9aa4868d",
            "value": "51.38.145.49"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--6c51fcd3-334c-4b54-97a6-f6e6cfef7803",
            "value": "37.120.247.180"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--babf071a-de00-44e3-b30c-95efc4e85e41",
            "value": "88.119.175.208"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--aed63d5d-8c27-4571-8dac-f79945ed26b6",
            "value": "213.252.232.171"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--4da5c7f6-7650-420b-abb8-d600541cc727",
            "value": "wfinance.org"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--7983b488-6b39-4d9f-979c-0d33f4827c0f",
            "value": "stocksindex.org"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--d1a0c6f8-34a3-4d21-abb0-7058843b11ed",
            "value": "stockinfo.io"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--6bbf9174-5f7c-4231-baf8-cfffd42abc3e",
            "value": "en.stocksindex.org"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--350330cd-7393-4a72-9cfb-5549e9b2bcfa",
            "value": "en.wfinance.org"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--e272d728-b216-4992-b540-7ccf0acb0c21",
            "value": "api.stockinfo.io"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--9b893bf9-0a78-42db-808f-a42e9e87abea",
            "value": "136.244.93.248"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--ce4bbf97-fcc4-4284-891c-c68f0f227dae",
            "value": "195.133.26.32"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--a9709813-4d9c-4766-b449-eb23ad86168b",
            "value": "5.206.227.51"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--8256076b-7c22-426a-944b-c97bdfa10a9d",
            "value": "185.236.231.224"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--50109ddb-3cd0-4434-b26d-9e346a2046b5",
            "hashes": {
                "SHA-1": "d767b3cb0ad66544c649e4165fc4b37e3c17e370"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--161e2080-cef1-4149-adfc-636bc9837bc2",
            "hashes": {
                "MD5": "b21405ce3c3456214ad8fc5263eeabb1"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--84ec3efa-9ce7-4589-9f52-fea9a7ff924e",
            "value": "firexch.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--e7680ca5-6199-4d19-b934-1a1e18480fe0",
            "value": "getcoinprice.info"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--21f3aebf-30b4-4596-aae7-8d416db2818d",
            "value": "brown.gallagher-williams.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--8933fbf8-2769-430f-b6ad-d3e340b2bdd0",
            "value": "castro.smith.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--f97fcb4a-1bc7-445f-bd23-c2fbe67faf74",
            "value": "smith-jones.graham.info"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--ba4000a4-27ed-49a2-aa11-35af9bfcf35d",
            "value": "smith.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--5dfdfcf2-d063-4125-ad98-99df1e5fe42b",
            "value": "gallagher-williams.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--4cc55bb8-6c70-4eec-8fca-e4ee4d132155",
            "value": "financecap.io"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--a806bdb8-4ee1-4f73-ad04-76d480a92ead",
            "value": "185.194.178.88"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--28584ff2-f844-434b-8806-201e0ffe9496",
            "value": "192.248.167.90"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--fe6e7b7c-c769-4876-b832-e72b71fb3768",
            "value": "45.86.202.224"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--a59667e6-32bf-412c-8660-a4f5937acf54",
            "value": "185.69.16.236"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b",
            "created": "2026-06-24T17:23:13.213945Z",
            "modified": "2026-06-24T17:23:13.213945Z",
            "name": "Lazarus"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--e9e7bfc7-f1d4-4758-8dfd-0b8dc23db68c",
            "created_by_ref": "identity--2342bca0-000a-4032-97a0-cb95698d25a8",
            "created": "2026-06-24T17:23:13.217932Z",
            "modified": "2026-06-24T17:23:13.217932Z",
            "name": "Lazarus Group Bybit Heist: C2 forensics",
            "published": "2025-03-11T00:00:00Z",
            "object_refs": [
                "identity--2342bca0-000a-4032-97a0-cb95698d25a8",
                "domain-name--302fd751-75e6-4d96-a7d0-e4c45290a04d",
                "domain-name--9f08f771-b17c-45cc-a9a9-28505997d828",
                "domain-name--72ba3844-2aba-4453-9ea0-8c31bfa84b28",
                "domain-name--eb13a167-4a68-495a-ba84-5a79940ddc27",
                "ipv4-addr--38018e72-ad43-4baf-a223-719599fd5b16",
                "ipv4-addr--b464b086-f57e-4694-8335-ee81ac4b8513",
                "ipv4-addr--3fd40329-5f0d-4b76-8743-e6fa7e2142ed",
                "ipv4-addr--65a33af6-b382-47bc-a68b-d51e5a4f01b3",
                "domain-name--d75b8342-fac9-4901-a3f1-250fc7973e11",
                "domain-name--a543aa50-6cb1-43ed-920a-8959451cdd23",
                "domain-name--d8bc8368-ec0c-4c05-94aa-9a254c04e8bf",
                "domain-name--9d7dbbb0-97c2-46ef-9625-c6ec4ca9600b",
                "domain-name--5812b604-5d7c-4ebd-8d19-164eb0272a67",
                "domain-name--5d633512-718e-4f90-8724-7f941af05387",
                "domain-name--67b6b603-a483-4e1b-b527-3d74b0ededef",
                "domain-name--2f27e578-44b1-42ee-856c-14d22bd3db2f",
                "ipv4-addr--fafa3434-2e88-41c8-9009-62bb7409f466",
                "ipv4-addr--a9ea92ed-7d57-4a59-a694-7f1a9aa4868d",
                "ipv4-addr--6c51fcd3-334c-4b54-97a6-f6e6cfef7803",
                "ipv4-addr--babf071a-de00-44e3-b30c-95efc4e85e41",
                "ipv4-addr--aed63d5d-8c27-4571-8dac-f79945ed26b6",
                "domain-name--4da5c7f6-7650-420b-abb8-d600541cc727",
                "domain-name--7983b488-6b39-4d9f-979c-0d33f4827c0f",
                "domain-name--d1a0c6f8-34a3-4d21-abb0-7058843b11ed",
                "domain-name--6bbf9174-5f7c-4231-baf8-cfffd42abc3e",
                "domain-name--350330cd-7393-4a72-9cfb-5549e9b2bcfa",
                "domain-name--e272d728-b216-4992-b540-7ccf0acb0c21",
                "ipv4-addr--9b893bf9-0a78-42db-808f-a42e9e87abea",
                "ipv4-addr--ce4bbf97-fcc4-4284-891c-c68f0f227dae",
                "ipv4-addr--a9709813-4d9c-4766-b449-eb23ad86168b",
                "ipv4-addr--8256076b-7c22-426a-944b-c97bdfa10a9d",
                "file--50109ddb-3cd0-4434-b26d-9e346a2046b5",
                "file--161e2080-cef1-4149-adfc-636bc9837bc2",
                "domain-name--84ec3efa-9ce7-4589-9f52-fea9a7ff924e",
                "domain-name--e7680ca5-6199-4d19-b934-1a1e18480fe0",
                "domain-name--21f3aebf-30b4-4596-aae7-8d416db2818d",
                "domain-name--8933fbf8-2769-430f-b6ad-d3e340b2bdd0",
                "domain-name--f97fcb4a-1bc7-445f-bd23-c2fbe67faf74",
                "domain-name--ba4000a4-27ed-49a2-aa11-35af9bfcf35d",
                "domain-name--5dfdfcf2-d063-4125-ad98-99df1e5fe42b",
                "domain-name--4cc55bb8-6c70-4eec-8fca-e4ee4d132155",
                "ipv4-addr--a806bdb8-4ee1-4f73-ad04-76d480a92ead",
                "ipv4-addr--28584ff2-f844-434b-8806-201e0ffe9496",
                "ipv4-addr--fe6e7b7c-c769-4876-b832-e72b71fb3768",
                "ipv4-addr--a59667e6-32bf-412c-8660-a4f5937acf54",
                "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.validin.com/blog/bybit_hack_infrastructure_hunt/"
                }
            ]
        }
    ]
}