{
    "type": "bundle",
    "id": "bundle--1657d407-f36d-48c5-864f-9190f266995c",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--6b1d3dfe-e4c1-47eb-9e38-bb509a96d883",
            "created": "2024-11-06T00:58:43.491961Z",
            "modified": "2024-11-06T01:01:17.692995Z",
            "name": "Rewterz",
            "identity_class": "organization"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--feec94d2-4253-4b59-a296-b52c710d8ea4",
            "value": "https://filedn.com/lY24cv0IfefboNEIN0I9gqR"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--e16e4e68-a843-40fb-917c-0b23e2654923",
            "value": "filedn.com"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--a487436d-8929-46d4-9998-212edb239314",
            "value": "104.168.165.203"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--1836ccdd-b973-4b33-afd0-ec45331c55d8",
            "value": "104.168.157.45"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--3d0eca32-ce6c-4fd0-bc64-f2135f3b2404",
            "hashes": {
                "SHA-1": "78027c3800ff58321371a28b1e2a6d7e870add60"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--396c5d2d-a7c2-4ff2-a8a5-a3387c82405a",
            "hashes": {
                "MD5": "9edbd2f21b81183770fd767b31c2458c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--72466c8b-355b-4ae4-bfd6-199d27dcd467",
            "hashes": {
                "SHA-1": "8380d7451f9c4477dd2e8c7c0ba46471bfc6dc27"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--1052a372-e140-447d-ac2f-8dc42b383a5f",
            "hashes": {
                "MD5": "959e71b8f743a202eb80b65acbb60f7c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--e7d7186c-272f-4d21-ac41-5d2de49a7d22",
            "hashes": {
                "MD5": "d8508b3c7ba4f2b9ed1cf3ff28fd6b83"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6158d021-5045-421d-8fe0-01aa64a480a4",
            "hashes": {
                "SHA-1": "5e38363e7c196a3627dc10a8292bb72473599c2e"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d6ab2971-b2a4-49bc-a06c-46ee2d351e9d",
            "hashes": {
                "SHA-1": "2efdf82808cd7f63ebc66f553ae94127c3d7c60b"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--bfe4f3d8-f53f-4838-86d4-6adccb33c358",
            "hashes": {
                "MD5": "3439de0b221320f58e3432c2672c4074"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--0decb47b-92a1-432d-a733-0a78035accce",
            "hashes": {
                "SHA-1": "4a93fe1e7fce91f3c3d99c733d9628ed952dbf2a"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--5cb3b4d2-1879-4a82-9444-850be8f3affb",
            "hashes": {
                "SHA-1": "e9519f91c7acfe68e614fc6d3416033334b1b68c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--0a87bb96-206b-42c5-a9c7-4f7a3309fc54",
            "hashes": {
                "SHA-1": "c91f346d077efbcf45e53e4876b6b23f1e241db4"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--e69b65f6-6133-484b-90bf-b2df6990af70",
            "hashes": {
                "MD5": "a26c2442743d234ccd3b0d104e13a798"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--50325d38-4c12-4e7c-8817-7bf3505668ca",
            "hashes": {
                "SHA-1": "60be225d1a90070d22bf2abcc740d311041cb432"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ff2dc824-d663-4804-956a-0415da931291",
            "hashes": {
                "MD5": "3d14dd06d85f513dfa96d875fdcc0298"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6e32ff37-15cb-433e-87c1-ffc65c33ebcf",
            "hashes": {
                "MD5": "0cbc6df98ce1d302f51714e100560a4d"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--bcf51fc3-39ef-4ef5-a99e-c69fe377fe1f",
            "hashes": {
                "MD5": "22a477da55c7391dd0fc6176241d108e"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6d27a16f-c5a1-4ce5-8f44-b9b7793fb97f",
            "hashes": {
                "SHA-1": "1602cc32d56ab7f7d70c508696134875a0a56000"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--e87095fc-c2f2-47c0-ae51-7fc8cbb55cc4",
            "hashes": {
                "MD5": "a489b72510dfd07e6d05b07e8547cf25"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--140698d6-6299-4c2e-9e43-33ee8e2e79a9",
            "hashes": {
                "MD5": "53b68b9304a0462761917608ca4e60e7"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--81d66a7c-f008-430b-a8c6-0713241d47cd",
            "hashes": {
                "SHA-1": "afefb97605354c96d07d6e24a87798dd5891b583"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--2d07bc4d-5404-48ce-8121-b7fde55813da",
            "hashes": {
                "SHA-256": "9111d458d5665b1bf463859792e950fe8d8186df9a6a3241360dc11f34d018c2"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--9c192590-687f-46da-a703-7c957266990a",
            "hashes": {
                "SHA-256": "e87177e07ab9651b48664c3d22334248e012e8a2bab02f65c93fedd79af0a74f"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--3f9117f8-f5ea-4c34-9328-fba36b7efc61",
            "hashes": {
                "SHA-256": "7464850d7d6891418c503d0e1732812d7703d6c1fd5cf3c821f3c202786f9422"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--07c7a75a-9b02-4a40-9262-b63f4d7f4e18",
            "hashes": {
                "SHA-256": "022344029b8bf951ba02b11025fe26c99193cb7c8a482c33862c9bbaa5e5528e"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6c50a240-cd24-42aa-b8e7-72b3ceea0c74",
            "hashes": {
                "SHA-256": "176e8a5a7b6737f8d3464c18a77deef778ec2b9b42b7e7eafc888aeaf2758c2d"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--81bb220b-6a5f-4cc3-a1a1-531621d82390",
            "hashes": {
                "SHA-256": "f3e6e8df132155daf1d428dff61f0ca53ecd02015a0a0bbe1ad237519ab3cb58"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ab14d16a-b364-4c71-805a-4996857cb795",
            "hashes": {
                "SHA-256": "48ee5d0d44a015876d867fa515b04c1998fecf19badcbd69f4f3fa8497d57215"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--2a885f78-095b-491f-8aea-b0c6502a7e36",
            "hashes": {
                "SHA-256": "4bce97eff4430708299a1bb4142b9d359d8adf77a2e1673bf76485df25e6d357"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--4892d8c8-fd9c-49ac-99de-4af2f3a641cc",
            "hashes": {
                "SHA-256": "878e3701df9b0abdaa7094e22d067c8398a9fc842cabe917fd5f75f2c84d8552"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--0b3c101d-0381-4eb7-b724-62261cf2d7ce",
            "hashes": {
                "SHA-256": "a4cab67569d0b35c249dc536fb25dabdc12839ed4e945c59ec826c0a241b792a"
            }
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b",
            "created": "2026-06-24T21:08:22.595116Z",
            "modified": "2026-06-24T21:08:22.595116Z",
            "name": "Lazarus"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--a8d4722a-87f7-4d39-8376-16e048eba779",
            "created_by_ref": "identity--6b1d3dfe-e4c1-47eb-9e38-bb509a96d883",
            "created": "2026-06-24T21:08:22.597858Z",
            "modified": "2026-06-24T21:08:22.597858Z",
            "name": "Lazarus Group Uses New RustyAttr Malware for Extended Attribute Abuse to Target macOS \u2013 Active IOCs",
            "published": "2024-11-14T00:00:00Z",
            "object_refs": [
                "identity--6b1d3dfe-e4c1-47eb-9e38-bb509a96d883",
                "url--feec94d2-4253-4b59-a296-b52c710d8ea4",
                "domain-name--e16e4e68-a843-40fb-917c-0b23e2654923",
                "ipv4-addr--a487436d-8929-46d4-9998-212edb239314",
                "ipv4-addr--1836ccdd-b973-4b33-afd0-ec45331c55d8",
                "file--3d0eca32-ce6c-4fd0-bc64-f2135f3b2404",
                "file--396c5d2d-a7c2-4ff2-a8a5-a3387c82405a",
                "file--72466c8b-355b-4ae4-bfd6-199d27dcd467",
                "file--1052a372-e140-447d-ac2f-8dc42b383a5f",
                "file--e7d7186c-272f-4d21-ac41-5d2de49a7d22",
                "file--6158d021-5045-421d-8fe0-01aa64a480a4",
                "file--d6ab2971-b2a4-49bc-a06c-46ee2d351e9d",
                "file--bfe4f3d8-f53f-4838-86d4-6adccb33c358",
                "file--0decb47b-92a1-432d-a733-0a78035accce",
                "file--5cb3b4d2-1879-4a82-9444-850be8f3affb",
                "file--0a87bb96-206b-42c5-a9c7-4f7a3309fc54",
                "file--e69b65f6-6133-484b-90bf-b2df6990af70",
                "file--50325d38-4c12-4e7c-8817-7bf3505668ca",
                "file--ff2dc824-d663-4804-956a-0415da931291",
                "file--6e32ff37-15cb-433e-87c1-ffc65c33ebcf",
                "file--bcf51fc3-39ef-4ef5-a99e-c69fe377fe1f",
                "file--6d27a16f-c5a1-4ce5-8f44-b9b7793fb97f",
                "file--e87095fc-c2f2-47c0-ae51-7fc8cbb55cc4",
                "file--140698d6-6299-4c2e-9e43-33ee8e2e79a9",
                "file--81d66a7c-f008-430b-a8c6-0713241d47cd",
                "file--2d07bc4d-5404-48ce-8121-b7fde55813da",
                "file--9c192590-687f-46da-a703-7c957266990a",
                "file--3f9117f8-f5ea-4c34-9328-fba36b7efc61",
                "file--07c7a75a-9b02-4a40-9262-b63f4d7f4e18",
                "file--6c50a240-cd24-42aa-b8e7-72b3ceea0c74",
                "file--81bb220b-6a5f-4cc3-a1a1-531621d82390",
                "file--ab14d16a-b364-4c71-805a-4996857cb795",
                "file--2a885f78-095b-491f-8aea-b0c6502a7e36",
                "file--4892d8c8-fd9c-49ac-99de-4af2f3a641cc",
                "file--0b3c101d-0381-4eb7-b724-62261cf2d7ce",
                "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.rewterz.com/threat-advisory/lazarus-group-uses-new-rustyattr-malware-for-extended-attribute-abuse-to-target-macos-active-iocs"
                }
            ]
        }
    ]
}