{
    "type": "bundle",
    "id": "bundle--60634247-8611-4982-bf2b-8f4846e61838",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--ce40c63e-51d4-4ec5-a85b-2d76cd5ec7d1",
            "created": "2023-03-08T12:52:07.036238Z",
            "modified": "2025-06-18T12:58:21.951363Z",
            "name": "CiscoTalos",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7d6fae7c-2884-4c9a-a0d0-835929cef1c0",
            "hashes": {
                "SHA-256": "f32f6b229913d68daad937cc72a57aa45291a9d623109ed48938815aa7b6005c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7787806d-eacf-497d-bb7a-89a7aff3d6aa",
            "hashes": {
                "SHA-256": "bffe910904efd1f69544daa9b72f2a70fb29f73c51070bde4ea563de862ce4b1"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--51f183e0-2866-4aec-8a2f-f47200247743",
            "hashes": {
                "SHA-256": "f78cabf7a0e7ed3ef2d1c976c1486281f56a6503354b87219b466f2f7a0b65c4"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--0b76232d-3623-4234-9cfa-b5e7be4d8430",
            "hashes": {
                "SHA-256": "1c926fb3bd99f4a586ed476e4683163892f3958581bf8c24235cd2a415513b7f"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--a57b4c32-9856-4924-8816-e160e69387f6",
            "hashes": {
                "SHA-256": "23eff00dde0ee27dabad28c1f4ffb8b09e876f1e1a77c1e6fb735ab517d79b76"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ed10ca0e-25c0-426b-9cfb-2de0affa3bc5",
            "hashes": {
                "SHA-256": "ca932ccaa30955f2fffb1122234fb1524f7de3a8e0044de1ed4fe05cab8702a5"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ca88f14c-d2a2-45bd-8585-1ed43a3b511f",
            "hashes": {
                "SHA-256": "196fb1b6eff4e7a049cea323459cfd6c0e3900d8d69e1d80bffbaabd24c06eba"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c6cbb730-9d1d-4253-96a2-626734928f76",
            "hashes": {
                "SHA-256": "f6827dc5af661fbb4bf64bc625c78283ef836c6985bb2bfb836bd0c8d5397332"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--946b4158-2ffd-45ae-b156-6c49cf16514d",
            "hashes": {
                "SHA-256": "1f8dcfaebbcd7e71c2872e0ba2fc6db81d651cf654a21d33c78eae6662e62392"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--492d5885-1cc8-4ae4-8d00-8d48a95d9fd2",
            "hashes": {
                "SHA-256": "d20959b615af699d8fff3f0087faade16ed4919355a458a32f5ae61badb5b0ca"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--f11bc839-ef49-4d35-9da2-bf63441c1bf8",
            "value": "visual.1991-06.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--035f8dea-ff28-4dcf-8e1b-e52c5d826336",
            "value": "gendoraduragonkgp126.com"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--976dedc7-882c-4e3c-bacc-1638e48a62c4",
            "value": "66.154.102.91"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--28da043b-54ae-44bc-b461-f8804b816b38",
            "value": "193.56.28.251"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--6a4eef09-8a3e-4c48-a956-d268af2edfc4",
            "value": "64.188.27.73"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--30324205-0b9d-4ae2-aa4d-30feadeae7bc",
            "value": "151.106.2.139"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--0f5ffd6c-3e31-4d20-bda9-76863fe00484",
            "value": "52.202.193.124"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--64290946-19b3-4d05-998d-26531b6e32ed",
            "created_by_ref": "identity--ce40c63e-51d4-4ec5-a85b-2d76cd5ec7d1",
            "created": "2026-06-24T19:53:38.999827Z",
            "modified": "2026-06-24T19:53:38.999827Z",
            "name": "MagicRAT: Lazarus\u2019 latest gateway into victim networks",
            "published": "2022-09-07T00:00:00Z",
            "object_refs": [
                "identity--ce40c63e-51d4-4ec5-a85b-2d76cd5ec7d1",
                "file--7d6fae7c-2884-4c9a-a0d0-835929cef1c0",
                "file--7787806d-eacf-497d-bb7a-89a7aff3d6aa",
                "file--51f183e0-2866-4aec-8a2f-f47200247743",
                "file--0b76232d-3623-4234-9cfa-b5e7be4d8430",
                "file--a57b4c32-9856-4924-8816-e160e69387f6",
                "file--ed10ca0e-25c0-426b-9cfb-2de0affa3bc5",
                "file--ca88f14c-d2a2-45bd-8585-1ed43a3b511f",
                "file--c6cbb730-9d1d-4253-96a2-626734928f76",
                "file--946b4158-2ffd-45ae-b156-6c49cf16514d",
                "file--492d5885-1cc8-4ae4-8d00-8d48a95d9fd2",
                "domain-name--f11bc839-ef49-4d35-9da2-bf63441c1bf8",
                "domain-name--035f8dea-ff28-4dcf-8e1b-e52c5d826336",
                "ipv4-addr--976dedc7-882c-4e3c-bacc-1638e48a62c4",
                "ipv4-addr--28da043b-54ae-44bc-b461-f8804b816b38",
                "ipv4-addr--6a4eef09-8a3e-4c48-a956-d268af2edfc4",
                "ipv4-addr--30324205-0b9d-4ae2-aa4d-30feadeae7bc",
                "ipv4-addr--0f5ffd6c-3e31-4d20-bda9-76863fe00484"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "http://blog.talosintelligence.com/2022/09/lazarus-magicrat.html"
                }
            ]
        }
    ]
}