{
    "type": "bundle",
    "id": "bundle--0f92485f-6e74-4673-abd9-6aeeafce670e",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--ce40c63e-51d4-4ec5-a85b-2d76cd5ec7d1",
            "created": "2023-03-08T12:52:07.036238Z",
            "modified": "2025-06-18T12:58:21.951363Z",
            "name": "CiscoTalos",
            "identity_class": "organization"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--3e94aecd-b2e6-4373-9ad4-5b93547e6974",
            "value": "67.213.221.6"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--dd3e7783-e5ad-4fe0-8e27-3f4db506d86d",
            "value": "45.9.251.14"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--889e9eb9-118b-4fe9-b06d-37a5bffd5617",
            "value": "199.229.250.142"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--db6467b9-6691-44d3-9df8-f6df8cc2aea1",
            "value": "192.145.127.190"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--9b925263-bf01-4688-89a2-6b2ec58e2da4",
            "hashes": {
                "SHA-256": "2eb9c6722139e821c2fe8314b356880be70f3d19d8d2ba530adc9f466ffc67d8"
            }
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--a134d3d2-b79c-5596-81b9-10adbdaf5faa",
            "created": "2026-06-24T19:57:13.87124Z",
            "modified": "2026-06-24T19:57:13.87124Z",
            "name": "UAT-4820"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--4dc70b8a-b289-53ba-8129-9db976a65816",
            "created": "2026-06-24T19:57:13.878841Z",
            "modified": "2026-06-24T19:57:13.878841Z",
            "name": "LilacSquid"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--8c0087fa-024e-414f-a79d-7baff1954991",
            "created_by_ref": "identity--ce40c63e-51d4-4ec5-a85b-2d76cd5ec7d1",
            "created": "2026-06-24T19:57:13.879872Z",
            "modified": "2026-06-24T19:57:13.879872Z",
            "name": "LilacSquid: The stealthy trilogy of PurpleInk, InkBox and InkLoader",
            "published": "2024-05-30T00:00:00Z",
            "object_refs": [
                "identity--ce40c63e-51d4-4ec5-a85b-2d76cd5ec7d1",
                "ipv4-addr--3e94aecd-b2e6-4373-9ad4-5b93547e6974",
                "ipv4-addr--dd3e7783-e5ad-4fe0-8e27-3f4db506d86d",
                "ipv4-addr--889e9eb9-118b-4fe9-b06d-37a5bffd5617",
                "ipv4-addr--db6467b9-6691-44d3-9df8-f6df8cc2aea1",
                "file--9b925263-bf01-4688-89a2-6b2ec58e2da4",
                "threat-actor--a134d3d2-b79c-5596-81b9-10adbdaf5faa",
                "threat-actor--4dc70b8a-b289-53ba-8129-9db976a65816"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://blog.talosintelligence.com/lilacsquid/"
                }
            ]
        }
    ]
}