{
    "type": "bundle",
    "id": "bundle--fe2a7e99-a3a0-4b98-ac53-c84752b94cba",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--f124ebed-440c-493a-a454-005060f3b4d8",
            "created": "2023-03-08T12:51:57.814175Z",
            "modified": "2026-04-22T13:31:24.745811Z",
            "name": "TrendMicro",
            "identity_class": "organization"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--d2b8db15-3b94-4789-85a3-7be6a7347c22",
            "value": "https://appstockfolio.com/panel/upload.php"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--7b750d8e-abd1-481c-b93b-da5995e48871",
            "value": "appstockfolio.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--703aa315-97cf-4f1a-b821-3ca144ad176d",
            "value": "owpqkszz.info"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--b8d2388a-ca07-4070-9e38-66fd46a83677",
            "value": "193.37.212.176"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6c49771f-d6b6-4b39-896c-619618964f0a",
            "hashes": {
                "SHA-256": "faa2799751582b8829c61cbfe2cbaf3e792960835884b61046778d17937520f4"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--293f3db2-495d-46f0-bb22-e00993807bd9",
            "hashes": {
                "SHA-256": "6f48ef0d76ce68bbca53b05d2d22031aec5ce997e7227c3dcb20809959680f11"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b0780df3-b0de-4bf5-88a0-1e00159360d4",
            "hashes": {
                "SHA-256": "efd5b96f489f934f2465a185e43fddf50fcde51b12a8fb91d5d93b09a21706c7"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--0e75920c-2a05-4182-acd2-6e4bbf4a231c",
            "hashes": {
                "SHA-256": "18e1db7c37a63d987a5448b4dd25103c8053799b0deea5f45f00ca094afe2fe7"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6741900f-cd66-45de-b974-5c750426af5d",
            "hashes": {
                "SHA-256": "83df2f39140679a9cfb55f9c839ff8e7638ba29dba164900f9c77bb177796e03"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--23a4f7d7-7760-4521-bf10-7a068819b732",
            "hashes": {
                "SHA-256": "6fe741ef057d38dd6d9bbe02dacbcb4940dac6c32e0f50a641e73727d6bf60d9"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b3470d6d-3469-4b5f-affb-f45fbcb32629",
            "hashes": {
                "SHA-256": "be8b6549da925f285307b17c616a010a9418af70d090ed960ade575ce27c7787"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--10d7db08-e2f0-4473-a02d-a651d134d067",
            "hashes": {
                "SHA-256": "d50f5e94f2c417623c5f573963cc777c0676cc7245d65967ca09a53f464d2b50"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--86170d1a-487b-4dc8-a4d1-4eff485b38a9",
            "value": "http://owpqkszz.info"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--b3fa2d80-e87c-4849-ae62-09741b11cb8d",
            "value": "gmzera54l5qpa6lm.onion"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--11bafeba-182f-48d8-ad41-3e94c3b4709c",
            "created_by_ref": "identity--f124ebed-440c-493a-a454-005060f3b4d8",
            "created": "2026-06-24T21:03:01.654731Z",
            "modified": "2026-06-24T21:03:01.654731Z",
            "name": "Mac Malware that Spoofs Trading App Steals User Information, Uploads it to Website",
            "published": "2019-09-20T00:00:00Z",
            "object_refs": [
                "identity--f124ebed-440c-493a-a454-005060f3b4d8",
                "url--d2b8db15-3b94-4789-85a3-7be6a7347c22",
                "domain-name--7b750d8e-abd1-481c-b93b-da5995e48871",
                "domain-name--703aa315-97cf-4f1a-b821-3ca144ad176d",
                "ipv4-addr--b8d2388a-ca07-4070-9e38-66fd46a83677",
                "file--6c49771f-d6b6-4b39-896c-619618964f0a",
                "file--293f3db2-495d-46f0-bb22-e00993807bd9",
                "file--b0780df3-b0de-4bf5-88a0-1e00159360d4",
                "file--0e75920c-2a05-4182-acd2-6e4bbf4a231c",
                "file--6741900f-cd66-45de-b974-5c750426af5d",
                "file--23a4f7d7-7760-4521-bf10-7a068819b732",
                "file--b3470d6d-3469-4b5f-affb-f45fbcb32629",
                "file--10d7db08-e2f0-4473-a02d-a651d134d067",
                "url--86170d1a-487b-4dc8-a4d1-4eff485b38a9",
                "domain-name--b3fa2d80-e87c-4849-ae62-09741b11cb8d"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://blog.trendmicro.com/trendlabs-security-intelligence/mac-malware-that-spoofs-trading-app-steals-user-information-uploads-it-to-website/"
                }
            ]
        }
    ]
}