{
    "type": "bundle",
    "id": "bundle--060ccd0a-8d12-4986-9e1b-fe5533d0d867",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--acadf73f-9f52-4ca7-9140-95ee34cc35b2",
            "created": "2023-03-08T12:52:02.580609Z",
            "modified": "2023-03-08T12:52:02.58069Z",
            "name": "Alienvault",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--8b62af0f-e10a-49c7-a8e6-d2b49437fbaa",
            "hashes": {
                "SHA-256": "d8af45210bf931bc5b03215ed30fb731e067e91f25eda02a404bd55169e3e3c3"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--957df846-2eb5-470c-81a3-f8e109d70768",
            "hashes": {
                "MD5": "06cfc6cda57fb5b67ee3eb0400dd5b97"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--afd6508d-7c62-4bac-911e-079363eb6ecb",
            "value": "tpddata.com"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--410c70ab-6648-4810-b0da-a73ccf638ac9",
            "hashes": {
                "MD5": "69ad5bd4b881d6d1fdb7b19939903e0b"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--27b2dc2a-fa19-4b1d-9201-b07f7eda5953",
            "hashes": {
                "MD5": "cf09201f02f2edb9c555942a2d6b01d4"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--dab5f407-12a8-4ea8-8ef0-bd95aa936df4",
            "hashes": {
                "SHA-256": "5b1663d5eb565caccca188b6ff8a36291da32f368211e6437db339ce2dc2e9cd"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--78ca452a-8b18-4432-a1bd-8263fe4099ef",
            "hashes": {
                "SHA-256": "3cde54dce88a4544bf5ffa36066a184958d4ff74c2e0ce32fdbf91729c0f574e"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--4b319fba-b0ec-4c91-9ceb-56aba593c632",
            "hashes": {
                "SHA-256": "e76b3fd3e906ac23218b1fbd66fd29c3945ee209a29e9462bbc46b07d1645de2"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--e631a195-9e01-4ae3-861d-7b8e7d09a6c6",
            "hashes": {
                "SHA-256": "2f4a958b148bef4be10780e8128860cdca21ec26537f51cec8960a9e019aa1f0"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b8ecaddb-04d8-42c7-bb8b-d6a0dda4c737",
            "hashes": {
                "SHA-256": "596fbdf01557c3ec89b345c57ae5d9a0b7251dd8d5a707f7353dd733274c6eb6"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--e14401c7-d399-40b7-a18a-2aa6bc73d1c0",
            "hashes": {
                "SHA-256": "e98991cdd9ddd30adf490673c67a4f8241993f26810da09b52d8748c6160a292"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d36ac4e0-3e0d-435b-b234-e2286ddedb8f",
            "hashes": {
                "SHA-256": "7985af0a87780d27dc52c4f73c38de44e5ad477cb78b2e8e89708168fbc4a882"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--05c55f14-adff-4127-b7d2-800be63ce83f",
            "hashes": {
                "SHA-256": "58a97c2c731cdf045f26ccc7cba370bd2dfee277a9c43c0421c53593e493f7bc"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c42c1a9e-65e1-4270-871a-2b58794232e8",
            "hashes": {
                "SHA-256": "485f77e5d32de5dc05510743025a75af5b6f714e930e22098490b7afb71b737f"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--cb809b95-e967-44ea-9359-b76325ef590c",
            "hashes": {
                "SHA-256": "4838f85499e3c68415010d4f19e83e2c9e3f2302290138abe79c380754f97324"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--5d11c2a0-a97a-4875-bc95-3216a96e043a",
            "hashes": {
                "SHA-256": "927120588e6c4e5db5b5a1ea9914cd78a0fa0c9fb558726604747de672c6adf3"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7dfeddb7-0b44-4692-8f5e-9a63a694e77f",
            "hashes": {
                "SHA-256": "c10363059c57c52501c01f85e3bb43533ccc639f0ea57f43bae5736a8e7a9bc8"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--43da388a-9646-4e74-8f84-e3913b12ff8a",
            "hashes": {
                "SHA-256": "afba8105793b635d4ed7febdae4b744826ca8b2381c1b85f5e528bb672ed63c2"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--2cf8829e-5e50-495a-b1f9-e61c0edc60dc",
            "hashes": {
                "SHA-256": "e498630abe9a91485ba42698a35c2a0d8e13fe5cccde65479bf3033c45e7d431"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--144c0ee2-6ae8-45eb-96bd-694a5fe47a7d",
            "hashes": {
                "SHA-256": "2813c0ebcacdcf9052f71d51c81e9c52a16b9a69f8981b2c74eab236524ff4b9"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--d5fdaae3-a960-48a6-a4ed-e3968d7d3d41",
            "value": "https://www.ap8898.com/include/arc.search.class.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--772764db-5d33-4d87-aa14-b9b7c2892674",
            "value": "http://mileage.krb.co.kr/common/db_conf.asp"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--7d8f03ec-bd35-44f2-940a-70ac8c6d0daa",
            "value": "http://www.530hr.com/data/common.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--cc9901ef-f42d-4b77-9aab-79417200ad15",
            "value": "http://www.apshenyihl.com/include/arc.speclist.class.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--b787f378-7456-403e-8ed7-5d90b0cb4f8d",
            "value": "http://www.33cow.com/include/control.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--eb1aa3e6-39e2-4d3f-ae9b-2dbfb6dd6787",
            "value": "http://www.shieldonline.co.za/sitemap.asp"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--480c1c43-f529-458c-b6eb-e9caa043b286",
            "value": "http://ansetech.co.kr/smarteditor/common.asp"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--c3e7e5a7-9788-40a7-a812-5bd50f5fbd4c",
            "value": "http://www.anlway.com/include/arc.search.class.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--15b2af45-75d3-4abb-ae5a-c0bdeba4aeb1",
            "value": "http://www.97nb.net/include/arc.sglistview.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--afef0ae7-5411-47f1-9d5a-080cd928c892",
            "value": "http://www.marmarademo.com/include/extend.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--1ca1d57e-2a58-43d1-837f-203ffd8219ea",
            "value": "https://www.apshenyihl.com/include/arc.speclist.class.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--21f8d863-7810-464e-abe3-5071499dbe9d",
            "value": "http://www.ap8898.com/include/arc.search.class.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--61676cec-c462-4ac2-95ad-0c0f1f7305ec",
            "value": "http://www.51up.com/ace/main.asp"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--deef2479-7564-4377-9bc4-e209333a86b0",
            "value": "http://168wangpi.com/include/charset.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--739acfd9-add5-463a-abb2-d4cce702337a",
            "value": "http://www.028xmz.com/include/common.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--3ef80d22-c6e6-49f4-af46-79e7622eb6e5",
            "value": "http://www.paulkaren.com/synthpop/main.asp"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--d13b9360-e20c-41d7-aa67-767793a7ece8",
            "value": "http://ando.co.kr/service/s_top.asp"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--00955807-f00f-4594-bfaa-ed46f9d938f5",
            "value": "https://www.anlway.com/include/arc.search.class.php"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--06d16079-920a-49d8-b170-17aea7c3019a",
            "value": "bitfiniex.org"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--ddb36cda-1748-4b32-9d87-ef7ec4e89839",
            "value": "coinmaketcape.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--7cb24b79-6f01-4f49-af9a-6a0819eb340c",
            "value": "coinoen.org"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--2d860e01-4578-4ddc-adf1-12592733f3af",
            "hashes": {
                "MD5": "eb6275a24d047e3be05c2b4e5f50703d"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--1931efb0-e70c-486d-bf73-9c5acb0c09ff",
            "hashes": {
                "MD5": "a6d1424e1c33ac7a95eb5b92b923c511"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--b31f4d3a-6884-4925-b82b-0c3c2f5d9f12",
            "value": "https://tpddata.com/skins/skin-6.thm"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--b4a2946b-13bf-4d69-a1e5-033bc716d008",
            "value": "https://tpddata.com/skins/skin-8.thm"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--f6d2272b-d4a1-4a1a-ac7d-130769490d56",
            "value": "wifispeedcheck.net"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--f5e74f8d-ae91-440d-b4ac-a1871454318d",
            "value": "itaddnet.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--632ffc53-3fb3-4082-a64d-90b3cd895dcd",
            "value": "168wangpi.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--092ee3e2-0e61-4ece-a216-8d41581b90f1",
            "value": "mileage.krb.co.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--f036f93b-73dd-48f0-986b-6211300359f2",
            "value": "ansetech.co.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--4c82acbf-ab20-4622-a310-ddd7521a112e",
            "value": "ando.co.kr"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b",
            "created": "2026-06-24T18:42:04.402138Z",
            "modified": "2026-06-24T18:42:04.402138Z",
            "name": "Lazarus"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--a0b884a0-95f3-4e54-aa47-aec50ef279a3",
            "created_by_ref": "identity--acadf73f-9f52-4ca7-9140-95ee34cc35b2",
            "created": "2026-06-24T18:42:04.403239Z",
            "modified": "2026-06-24T18:42:04.403239Z",
            "name": "Malicious Documents from Lazarus Group Targeting South Korea",
            "published": "2018-06-22T00:00:00Z",
            "object_refs": [
                "identity--acadf73f-9f52-4ca7-9140-95ee34cc35b2",
                "file--8b62af0f-e10a-49c7-a8e6-d2b49437fbaa",
                "file--957df846-2eb5-470c-81a3-f8e109d70768",
                "domain-name--afd6508d-7c62-4bac-911e-079363eb6ecb",
                "file--410c70ab-6648-4810-b0da-a73ccf638ac9",
                "file--27b2dc2a-fa19-4b1d-9201-b07f7eda5953",
                "file--dab5f407-12a8-4ea8-8ef0-bd95aa936df4",
                "file--78ca452a-8b18-4432-a1bd-8263fe4099ef",
                "file--4b319fba-b0ec-4c91-9ceb-56aba593c632",
                "file--e631a195-9e01-4ae3-861d-7b8e7d09a6c6",
                "file--b8ecaddb-04d8-42c7-bb8b-d6a0dda4c737",
                "file--e14401c7-d399-40b7-a18a-2aa6bc73d1c0",
                "file--d36ac4e0-3e0d-435b-b234-e2286ddedb8f",
                "file--05c55f14-adff-4127-b7d2-800be63ce83f",
                "file--c42c1a9e-65e1-4270-871a-2b58794232e8",
                "file--cb809b95-e967-44ea-9359-b76325ef590c",
                "file--5d11c2a0-a97a-4875-bc95-3216a96e043a",
                "file--7dfeddb7-0b44-4692-8f5e-9a63a694e77f",
                "file--43da388a-9646-4e74-8f84-e3913b12ff8a",
                "file--2cf8829e-5e50-495a-b1f9-e61c0edc60dc",
                "file--144c0ee2-6ae8-45eb-96bd-694a5fe47a7d",
                "url--d5fdaae3-a960-48a6-a4ed-e3968d7d3d41",
                "url--772764db-5d33-4d87-aa14-b9b7c2892674",
                "url--7d8f03ec-bd35-44f2-940a-70ac8c6d0daa",
                "url--cc9901ef-f42d-4b77-9aab-79417200ad15",
                "url--b787f378-7456-403e-8ed7-5d90b0cb4f8d",
                "url--eb1aa3e6-39e2-4d3f-ae9b-2dbfb6dd6787",
                "url--480c1c43-f529-458c-b6eb-e9caa043b286",
                "url--c3e7e5a7-9788-40a7-a812-5bd50f5fbd4c",
                "url--15b2af45-75d3-4abb-ae5a-c0bdeba4aeb1",
                "url--afef0ae7-5411-47f1-9d5a-080cd928c892",
                "url--1ca1d57e-2a58-43d1-837f-203ffd8219ea",
                "url--21f8d863-7810-464e-abe3-5071499dbe9d",
                "url--61676cec-c462-4ac2-95ad-0c0f1f7305ec",
                "url--deef2479-7564-4377-9bc4-e209333a86b0",
                "url--739acfd9-add5-463a-abb2-d4cce702337a",
                "url--3ef80d22-c6e6-49f4-af46-79e7622eb6e5",
                "url--d13b9360-e20c-41d7-aa67-767793a7ece8",
                "url--00955807-f00f-4594-bfaa-ed46f9d938f5",
                "domain-name--06d16079-920a-49d8-b170-17aea7c3019a",
                "domain-name--ddb36cda-1748-4b32-9d87-ef7ec4e89839",
                "domain-name--7cb24b79-6f01-4f49-af9a-6a0819eb340c",
                "file--2d860e01-4578-4ddc-adf1-12592733f3af",
                "file--1931efb0-e70c-486d-bf73-9c5acb0c09ff",
                "url--b31f4d3a-6884-4925-b82b-0c3c2f5d9f12",
                "url--b4a2946b-13bf-4d69-a1e5-033bc716d008",
                "domain-name--f6d2272b-d4a1-4a1a-ac7d-130769490d56",
                "domain-name--f5e74f8d-ae91-440d-b4ac-a1871454318d",
                "domain-name--632ffc53-3fb3-4082-a64d-90b3cd895dcd",
                "domain-name--092ee3e2-0e61-4ece-a216-8d41581b90f1",
                "domain-name--f036f93b-73dd-48f0-986b-6211300359f2",
                "domain-name--4c82acbf-ab20-4622-a310-ddd7521a112e",
                "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.alienvault.com/blogs/labs-research/malicious-documents-from-lazarus-group-targeting-south-korea"
                }
            ]
        }
    ]
}