{
    "type": "bundle",
    "id": "bundle--7d7460e1-5fdb-4b72-a6ef-d9f7e46ac23a",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--d6060d27-a078-4b68-808e-0f825436ce05",
            "created": "2025-02-20T01:00:01.713031Z",
            "modified": "2025-02-20T01:01:57.020342Z",
            "name": "ENKI",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--e600ed76-89d1-4f9d-8b51-8e7792d75eca",
            "hashes": {
                "SHA-256": "94159655fa0bfb1eff092835d8922d3e18ca5c73884fd0d8b78f42c8511047b6"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--8077cc53-151b-47f3-a570-0edd939036d1",
            "hashes": {
                "SHA-256": "b1025baa59609708315326fe4279d8113f7af3f292470ef42c33fccbb8aa3e56"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--3c9b28ec-f29a-4b48-ad17-388e67f3f45b",
            "hashes": {
                "SHA-256": "dbd5d662cc53d4b91cf7da9979cdffd1b4f702323bb9ec4114371bc6f4f0d4a6"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--f5f15390-7b9a-4304-9a96-22eb333eec7e",
            "hashes": {
                "SHA-256": "4ec203d22097e29d83a6425e523cfb3e26ff5b39454585f78a627f2f0fb658f8"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--939b71e6-3b1f-4562-826b-d4fa8ce71dff",
            "hashes": {
                "SHA-256": "2ae727feffb939434fd9c3804517d868fbe42a8e2d66fd0eef9fa14f3e9c7a27"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ee6abd94-e0af-45ca-b2e1-1c4493e5dbdc",
            "hashes": {
                "SHA-256": "92bad80b08407755da14760de5703dcd7a88703ffca7443f18fd94d853b08056"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--473bcd95-282f-48c1-97fa-529b0301157d",
            "hashes": {
                "SHA-256": "23549c774f56aae77115b456bdcad6c81fb82a0936841da0e056c922db83d342"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--375015d9-6377-455a-a223-f3b5883ba2f9",
            "hashes": {
                "SHA-256": "653202d94d655f9fafbb1217fba57d23f30a7e3ed7fe3272f237ec21e0731126"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--f67608b2-fb98-42d4-a965-9f49c973df6a",
            "hashes": {
                "SHA-256": "9646372af573fb90a7f3665386629cc3b08ee44fb5d294f479c931ad7300bb31"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--eb24d339-e0e1-4aa1-923e-feaffd1ca536",
            "hashes": {
                "SHA-256": "0a501fd9d043b043de9083d03870b9c9ddb4f18a89366bc2ca413f835709415c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--caed7d25-bd9a-4aba-b2f6-bdd8d0de55cd",
            "hashes": {
                "SHA-256": "81269c3c41d957765314a1704e0ea6cdf9666eab729597207fd1cc844c749beb"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b6048335-ca9b-4b00-a3eb-de7aeabee15e",
            "hashes": {
                "SHA-256": "b02329000ae4f8f4238db366d8fe394867dcad8222d02d9a76e82a376c6b1405"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--1a21e920-d7ef-4667-9ac2-ecead23c6f6f",
            "hashes": {
                "SHA-256": "903b02ff3ef690ea53103737a07c36a732bd81ab04f78d6f5eb61ac0fc6f98a6"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b32aa90a-81f7-4a58-9ab2-f3dd29d6568d",
            "hashes": {
                "SHA-256": "cdfa3a84b1bf6a58218bb6435a513b8e0bae4dbc849dfa045ed72216d817ae2b"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--78358a7f-f44d-40fc-8e07-0815c67a7c8f",
            "hashes": {
                "SHA-256": "b8d034814d9c8aa12b49372c9007f364733a0b8d083307f5ee747c1018341282"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7f061b32-8a09-414d-b5ae-b020ec31eb6f",
            "hashes": {
                "SHA-256": "14e507f2160b415d8aae1bbe4e5fbcf0a10563a72bb53b7d8a9fc339518bc668"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b82c5f7b-c7ab-4618-a927-02e3a568f228",
            "hashes": {
                "SHA-256": "00f45a18a4ca30f2de40c213186bd9e9e1202f24c844cbcae29ae01d93cbae93"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--cecef9c5-9343-46e7-aee5-260aec677af0",
            "hashes": {
                "SHA-256": "f3d98b1638dbe6fd0f97ae3b1d2c9d5c0f592baa1317c862042e5201a1e14aed"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--86892ac5-b1e5-46cd-97bb-ccb2fb39eb80",
            "hashes": {
                "SHA-256": "c25e5e87d1e665197209e7aaec64e484ce30e2dabcc9e457c5593ac6c7bb5686"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--814b6bff-5e7a-49f5-9074-8db8f62a6c29",
            "hashes": {
                "SHA-256": "1fa815ed72933b3d2efdae7b13d6cc87ef261ea0d45903a02226a9278ccd49d0"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--453b22aa-c702-42fe-978f-ae20af3af5cd",
            "hashes": {
                "SHA-256": "e97b31d85345d899bdd207e52c7660cf036a65f0c0d224f3e035544f999bf0ad"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ac23b761-db59-4035-a201-66bad2236f9f",
            "hashes": {
                "SHA-256": "faa8312eb5dfaafae9be18b4470990e6e0ff4911c862e33879196ed233d18745"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--696d4a21-fee9-451a-b662-d6c357ffcfe2",
            "hashes": {
                "SHA-256": "dd3803ade05abe200bac8cb34247b4318b45fc8e731f4f1b4a2f26f613201d07"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--fe0734f0-0746-4f60-96fa-a89ab940444d",
            "hashes": {
                "SHA-256": "e6f4bbc21b34b10b10a9bc83ccc329a286b2710f3d34ce427846b5ff53b611c5"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--a1528a2d-cfa9-4070-9d4d-0c755197cc71",
            "hashes": {
                "SHA-256": "dc6ca2e9ce800245a65715647bb1614c35632f270d1879e796472e786cdfc0fc"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--11253acf-dc5f-40c3-95aa-b67fd5a71599",
            "hashes": {
                "SHA-256": "95aedd9c8ec64d3abd6ecf016b6886eec6af73ee278a2d7da9f20ff97e157e6f"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--a4269db5-a781-411e-b951-85456c694f1f",
            "hashes": {
                "SHA-256": "94fb40e50f2614d11e3b122be91e76d2fd233791b8a7b36927f6dcbeb79ea0c3"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--34bdf453-091b-4cf2-a61f-e509fd896ec6",
            "value": "https://api.pcloud.com/listfolder"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--56569f7d-c882-4d28-8b88-5ba498774a8d",
            "value": "https://api.pcloud.com/userinfo"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--02dbe74b-6a75-494d-93c4-5f1f6f8032f1",
            "value": "https://api.pcloud.com/trash_list"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b2ad7d76-a92a-46c3-b8f5-5b4927dc067e",
            "hashes": {
                "SHA-256": "cbc777d1e018832790482e6fd82ab186ac02036c231f10064b14ff1d81832f13"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--15fb697b-c91b-438a-a69c-c6de93c2ba06",
            "hashes": {
                "SHA-256": "4f5d8bb87b68b943c1e4f05c12a8c0836dc7744bc4e7868c6189cbd5881c2d79"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--a7b4a9ba-239c-4830-8812-db8cbcfe49c4",
            "hashes": {
                "SHA-256": "e914f39c7800f87e99ca4821c7a6d4ac580d99b5d70bea54d17c2b6e862b2de6"
            }
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--3be555f5-1f0d-5001-b84a-c6c910760fd0",
            "created": "2026-06-24T22:44:20.429154Z",
            "modified": "2026-06-24T22:44:20.429154Z",
            "name": "APT37"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--56e1cedf-47a8-404d-ae0b-8d53d95c9573",
            "created_by_ref": "identity--d6060d27-a078-4b68-808e-0f825436ce05",
            "created": "2026-06-24T22:44:20.43321Z",
            "modified": "2026-06-24T22:44:20.43321Z",
            "name": "LNK \ud30c\uc77c\uc744 \ud65c\uc6a9\ud55c RokRAT \uc545\uc131\ucf54\ub4dc\uc5d0 \ub300\ud55c \ubd84\uc11d",
            "published": "2024-09-13T00:00:00Z",
            "object_refs": [
                "identity--d6060d27-a078-4b68-808e-0f825436ce05",
                "file--e600ed76-89d1-4f9d-8b51-8e7792d75eca",
                "file--8077cc53-151b-47f3-a570-0edd939036d1",
                "file--3c9b28ec-f29a-4b48-ad17-388e67f3f45b",
                "file--f5f15390-7b9a-4304-9a96-22eb333eec7e",
                "file--939b71e6-3b1f-4562-826b-d4fa8ce71dff",
                "file--ee6abd94-e0af-45ca-b2e1-1c4493e5dbdc",
                "file--473bcd95-282f-48c1-97fa-529b0301157d",
                "file--375015d9-6377-455a-a223-f3b5883ba2f9",
                "file--f67608b2-fb98-42d4-a965-9f49c973df6a",
                "file--eb24d339-e0e1-4aa1-923e-feaffd1ca536",
                "file--caed7d25-bd9a-4aba-b2f6-bdd8d0de55cd",
                "file--b6048335-ca9b-4b00-a3eb-de7aeabee15e",
                "file--1a21e920-d7ef-4667-9ac2-ecead23c6f6f",
                "file--b32aa90a-81f7-4a58-9ab2-f3dd29d6568d",
                "file--78358a7f-f44d-40fc-8e07-0815c67a7c8f",
                "file--7f061b32-8a09-414d-b5ae-b020ec31eb6f",
                "file--b82c5f7b-c7ab-4618-a927-02e3a568f228",
                "file--cecef9c5-9343-46e7-aee5-260aec677af0",
                "file--86892ac5-b1e5-46cd-97bb-ccb2fb39eb80",
                "file--814b6bff-5e7a-49f5-9074-8db8f62a6c29",
                "file--453b22aa-c702-42fe-978f-ae20af3af5cd",
                "file--ac23b761-db59-4035-a201-66bad2236f9f",
                "file--696d4a21-fee9-451a-b662-d6c357ffcfe2",
                "file--fe0734f0-0746-4f60-96fa-a89ab940444d",
                "file--a1528a2d-cfa9-4070-9d4d-0c755197cc71",
                "file--11253acf-dc5f-40c3-95aa-b67fd5a71599",
                "file--a4269db5-a781-411e-b951-85456c694f1f",
                "url--34bdf453-091b-4cf2-a61f-e509fd896ec6",
                "url--56569f7d-c882-4d28-8b88-5ba498774a8d",
                "url--02dbe74b-6a75-494d-93c4-5f1f6f8032f1",
                "file--b2ad7d76-a92a-46c3-b8f5-5b4927dc067e",
                "file--15fb697b-c91b-438a-a69c-c6de93c2ba06",
                "file--a7b4a9ba-239c-4830-8812-db8cbcfe49c4",
                "threat-actor--3be555f5-1f0d-5001-b84a-c6c910760fd0"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.enki.co.kr/media-center/blog/analysis-of-rokrat-malware-utilizing-lnk-files"
                }
            ]
        }
    ]
}