{
    "type": "bundle",
    "id": "bundle--9e4a3a5f-2735-4cbc-a162-d2c108d6baa9",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--eafdd258-8d1a-438d-bbef-6ca0d4a35852",
            "created": "2023-03-08T12:51:41.544512Z",
            "modified": "2025-02-04T10:54:04.972936Z",
            "name": "Ahnlab",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--70028dae-d5ea-4a1c-919e-2422f1c3b52c",
            "hashes": {
                "MD5": "55a46a2415d18093abcd59a0bf33d0a9"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--50724ce6-100e-417f-83a4-799162307d79",
            "value": "jooshineng.com"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--0c985a72-4c12-4d09-b32b-d72ceccb6231",
            "hashes": {
                "MD5": "83b4d96fc75f74bb589c28e8a9eddbbf"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--cf15c182-ab6f-4715-a923-8177a54720c5",
            "hashes": {
                "MD5": "705ef00224f3f7b02e29f21eb6e10d02"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--76028025-2aa2-420c-a8ee-0a8f7d76a78f",
            "hashes": {
                "MD5": "873b2b0656ee9f6912390b5abc32b276"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--9d5583be-83b5-4b65-90bd-875459485d40",
            "value": "http://jooshineng.com/gnuboard4/adm/img/ghp/up/state.dotm"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--be35704b-7299-42a1-be88-3c8037e31577",
            "value": "http://www.hydrotec.co.kr/bbs/img/cmg/upload3/show.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--1364e3e0-4579-4cfe-a4e0-62cf346856d1",
            "value": "http://gdtech.kr/gnuboard4/adm/cmg/attatch/init.dotm"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--0a70df18-0001-45ee-b573-1e384e6b702c",
            "value": "http://www.hydrotec.co.kr/bbs/img/cmg/upload3/init.dotm"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--f517f019-de0c-48ac-a280-28e0bfa6af79",
            "value": "http://ddim.co.kr/gnuboard4/adm/cmg/upload/show.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--e5e857ad-2e0f-438b-9614-a49962e19c00",
            "value": "http://gdtech.kr/gnuboard4/adm/cmg/upload/state.docx"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--c93df8cf-9cdf-4ea8-ba68-acd6a7d7c954",
            "value": "http://ddim.co.kr/gnuboard4/adm/cmg/upload/init.dotm"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--46e38907-a85b-454d-b0de-48cfab81da32",
            "value": "http://www.hydrotec.co.kr/bbs/img/cmg/upload2/init.dotm"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--63e87d8e-b144-4e07-a8b4-40b847fe9e6f",
            "value": "http://gdtech.kr/gnuboard4/adm/cmg/upload/show.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--4bffd379-0b9c-434d-ab6f-e74f18473f1b",
            "value": "http://gdtech.kr/gnuboard4/adm/cmg/upload/list.php?query=60"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--6e94ffc1-4236-422f-b1be-9b03344ad895",
            "value": "ddim.co.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--97471536-f471-480a-b0d7-ebb3df630337",
            "value": "gdtech.kr"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1",
            "created": "2026-06-24T18:19:09.162957Z",
            "modified": "2026-06-24T18:19:09.162957Z",
            "name": "Kimsuky"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--16531a17-3f85-4849-85d8-b8e7f4c463a2",
            "created_by_ref": "identity--eafdd258-8d1a-438d-bbef-6ca0d4a35852",
            "created": "2026-06-24T18:19:09.164029Z",
            "modified": "2026-06-24T18:19:09.164029Z",
            "name": "Malware Disguised as Normal Documents (Kimsuky)",
            "published": "2023-02-15T00:00:00Z",
            "object_refs": [
                "identity--eafdd258-8d1a-438d-bbef-6ca0d4a35852",
                "file--70028dae-d5ea-4a1c-919e-2422f1c3b52c",
                "domain-name--50724ce6-100e-417f-83a4-799162307d79",
                "file--0c985a72-4c12-4d09-b32b-d72ceccb6231",
                "file--cf15c182-ab6f-4715-a923-8177a54720c5",
                "file--76028025-2aa2-420c-a8ee-0a8f7d76a78f",
                "url--9d5583be-83b5-4b65-90bd-875459485d40",
                "url--be35704b-7299-42a1-be88-3c8037e31577",
                "url--1364e3e0-4579-4cfe-a4e0-62cf346856d1",
                "url--0a70df18-0001-45ee-b573-1e384e6b702c",
                "url--f517f019-de0c-48ac-a280-28e0bfa6af79",
                "url--e5e857ad-2e0f-438b-9614-a49962e19c00",
                "url--c93df8cf-9cdf-4ea8-ba68-acd6a7d7c954",
                "url--46e38907-a85b-454d-b0de-48cfab81da32",
                "url--63e87d8e-b144-4e07-a8b4-40b847fe9e6f",
                "url--4bffd379-0b9c-434d-ab6f-e74f18473f1b",
                "domain-name--6e94ffc1-4236-422f-b1be-9b03344ad895",
                "domain-name--97471536-f471-480a-b0d7-ebb3df630337",
                "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://asec.ahnlab.com/en/47585/"
                }
            ]
        }
    ]
}