{
    "type": "bundle",
    "id": "bundle--3c12f62f-6a80-4896-a171-9deb94427007",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--2d4ff5f7-f303-4951-b9e3-a043391ba310",
            "created": "2025-07-31T06:19:03.093567Z",
            "modified": "2025-07-31T06:20:17.202305Z",
            "name": "Gbhackers",
            "identity_class": "organization"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--a21e2b20-cfdd-4f25-91e3-8c19318e3740",
            "value": "chainlink-api-v3.cloud"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--933c1d3b-95c2-41ea-88a5-32c192e62528",
            "value": "107.189.24.80"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--ae329c69-5caf-4c6a-b371-3de97bd5428c",
            "value": "144.172.96.35"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--1a0f326e-853e-4137-b5b9-1f2236ddc8a7",
            "value": "135.181.123.177"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--f2ae6cd5-c81a-4943-b0b7-3c28ce37b180",
            "value": "http://fashdefi.store:6168/defy/v7"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--cb4cd95d-f24c-4fe6-8a22-4d4fa06ee6bf",
            "value": "fashdefi.store"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--2652fb9f-dfd0-40ed-9cc5-93e1fb465de6",
            "hashes": {
                "SHA-256": "41ee7ddb2be173686dc3a73a49b4e93bc883ef363acca770f7ede891451122ab"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--03800d53-3a1c-4fd9-b929-c625b08357c4",
            "value": "http://bujey.store:6168/defy/v7"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--9158b2bc-5148-4b56-8dec-d6df7cf0c589",
            "value": "https://cdn-static-server.vercel.app/icons/212"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--12ac91c2-3af4-478e-a8bb-a117e479fc30",
            "value": "bujey.store"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d9a6f2fd-9c5c-4b7f-80e5-03ce17ca8989",
            "hashes": {
                "MD5": "56e15ef3b5e5f169fc063f8d3e88288e"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--7aaae3e1-b5da-4212-8752-a3d043b8b778",
            "value": "http://chainlink-api-v3.cloud/api/service/token/56e15ef3b5e5f169fc063f8d3e88288e"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b",
            "created": "2026-06-24T19:53:09.085813Z",
            "modified": "2026-06-24T19:53:09.085813Z",
            "name": "Lazarus"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--03e7b45d-c562-436c-b7eb-2e007aec596b",
            "created_by_ref": "identity--2d4ff5f7-f303-4951-b9e3-a043391ba310",
            "created": "2026-06-24T19:53:09.088385Z",
            "modified": "2026-06-24T19:53:09.088385Z",
            "name": "Lazarus Group Enhances Malware with New OtterCookie Payload Delivery Technique",
            "published": "2025-07-30T00:00:00Z",
            "object_refs": [
                "identity--2d4ff5f7-f303-4951-b9e3-a043391ba310",
                "domain-name--a21e2b20-cfdd-4f25-91e3-8c19318e3740",
                "ipv4-addr--933c1d3b-95c2-41ea-88a5-32c192e62528",
                "ipv4-addr--ae329c69-5caf-4c6a-b371-3de97bd5428c",
                "ipv4-addr--1a0f326e-853e-4137-b5b9-1f2236ddc8a7",
                "url--f2ae6cd5-c81a-4943-b0b7-3c28ce37b180",
                "domain-name--cb4cd95d-f24c-4fe6-8a22-4d4fa06ee6bf",
                "file--2652fb9f-dfd0-40ed-9cc5-93e1fb465de6",
                "url--03800d53-3a1c-4fd9-b929-c625b08357c4",
                "url--9158b2bc-5148-4b56-8dec-d6df7cf0c589",
                "domain-name--12ac91c2-3af4-478e-a8bb-a117e479fc30",
                "file--d9a6f2fd-9c5c-4b7f-80e5-03ce17ca8989",
                "url--7aaae3e1-b5da-4212-8752-a3d043b8b778",
                "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://gbhackers.com/lazarus-group-malware-with-ottercookie/"
                }
            ]
        }
    ]
}