{
    "type": "bundle",
    "id": "bundle--d9b946f2-eeb3-4229-ae7c-08b2a96715a9",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--eafdd258-8d1a-438d-bbef-6ca0d4a35852",
            "created": "2023-03-08T12:51:41.544512Z",
            "modified": "2025-02-04T10:54:04.972936Z",
            "name": "Ahnlab",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--02827253-a5d8-4866-89f3-4dc11370d019",
            "hashes": {
                "MD5": "7034268d1c52539ea0cd48fd33ae43c4"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--66911c7f-6cba-4d7e-853c-2bba6d5de598",
            "hashes": {
                "MD5": "f03618281092b02589bca833f674e8a0"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--871afd47-2961-4233-a0b0-4f07cf1d2147",
            "hashes": {
                "MD5": "7beaf468765b2f1f346d43115c894d4b"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--98f67003-05b3-42c3-85ef-a4f59bdcbfb3",
            "hashes": {
                "MD5": "b74efd8470206a20175d723c14c2e872"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--e38eb1c4-ff19-42f0-a9d9-91830ba99dda",
            "hashes": {
                "MD5": "b8ffb0b5bc3c66b7f1b0ec5cc4aadafc"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--cf38ba66-c093-4dfe-a5b4-40193596aaa6",
            "value": "http://minish.wiki.gd/index.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--840b1e2c-6ee8-4320-b9f3-471515b83289",
            "value": "http://minish.wiki.gd/eng.db"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--7bf94a43-6dfd-4e3f-a4aa-512be152223d",
            "value": "http://minish.wiki.gd/upload.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--45194a9b-8c91-4ec9-8feb-daf25538463f",
            "value": "https://real-joey-nicely.ngrok-free.app/mir/index.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--6552e6d9-7c56-4efb-b6e9-21d869816506",
            "value": "http://minish.wiki.gd/c.pdf"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--d6995dae-bd1b-4494-8197-5f3f010f4a33",
            "value": "https://fitting-discrete-lemur.ngrok-free.app/minish/index.php"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--6a0b3515-1d3e-460c-96d7-74c8c62b39c6",
            "value": "minish.wiki.gd"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--0de43607-d5ba-40aa-9d21-a21010b1afb0",
            "value": "210.16.120.210"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1",
            "created": "2026-06-24T22:31:41.284956Z",
            "modified": "2026-06-24T22:31:41.284956Z",
            "name": "Kimsuky"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--53613f9e-ae79-4866-b5c9-8d5e2ed45b2a",
            "created_by_ref": "identity--eafdd258-8d1a-438d-bbef-6ca0d4a35852",
            "created": "2026-06-24T22:31:41.290552Z",
            "modified": "2026-06-24T22:31:41.290552Z",
            "name": "Malware Disguised as Installer from Korean Public Institution (Kimsuky Group)",
            "published": "2024-03-26T00:00:00Z",
            "object_refs": [
                "identity--eafdd258-8d1a-438d-bbef-6ca0d4a35852",
                "file--02827253-a5d8-4866-89f3-4dc11370d019",
                "file--66911c7f-6cba-4d7e-853c-2bba6d5de598",
                "file--871afd47-2961-4233-a0b0-4f07cf1d2147",
                "file--98f67003-05b3-42c3-85ef-a4f59bdcbfb3",
                "file--e38eb1c4-ff19-42f0-a9d9-91830ba99dda",
                "url--cf38ba66-c093-4dfe-a5b4-40193596aaa6",
                "url--840b1e2c-6ee8-4320-b9f3-471515b83289",
                "url--7bf94a43-6dfd-4e3f-a4aa-512be152223d",
                "url--45194a9b-8c91-4ec9-8feb-daf25538463f",
                "url--6552e6d9-7c56-4efb-b6e9-21d869816506",
                "url--d6995dae-bd1b-4494-8197-5f3f010f4a33",
                "domain-name--6a0b3515-1d3e-460c-96d7-74c8c62b39c6",
                "ipv4-addr--0de43607-d5ba-40aa-9d21-a21010b1afb0",
                "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://asec.ahnlab.com/en/63396/"
                }
            ]
        }
    ]
}