{
    "type": "bundle",
    "id": "bundle--e3784c20-0b2d-4f57-bf17-af5e0e4658de",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--c7e51838-39bb-4a48-83bd-ce30af0c9402",
            "created": "2024-03-05T10:56:29.07593Z",
            "modified": "2024-10-29T23:27:51.306863Z",
            "name": "Hunt.io",
            "identity_class": "organization"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--017fa299-6c80-47b9-aee0-2964427a8c43",
            "value": "o-r.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--2f68aa74-9e4f-458c-9fa4-ebb70c088a23",
            "value": "n-e.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--a73a3f63-5466-45e4-a6e4-aaf33f968e95",
            "value": "p-e.kr"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--b5530a4f-adfc-4f52-8b4e-48f912eccba9",
            "value": "cfa4a551515dc742s@gmail.com"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--b9587bdb-0f93-42a9-9b87-d18d91699121",
            "value": "123.58.200.13"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--e92490d4-25b0-46c6-b4f3-8edad5451341",
            "value": "118.193.69.248"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--39bf67ec-164b-4c90-8f1e-a3dd899c9ba5",
            "value": "123.58.200.50"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--5e714a0e-fe36-460a-a5f6-254229af72bc",
            "value": "118.193.68.146"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--80546a0f-d2a4-4048-a4a7-21929a4ff688",
            "value": "101.36.114.153"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--52710bb0-3710-49d6-ad26-c6b940701855",
            "value": "152.32.243.184"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--154a4632-9151-47cd-8c02-eed5a1eb2158",
            "value": "152.32.138.191"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--143a090d-6973-43b6-bc04-fb0e061e1a50",
            "value": "118.194.248.148"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--1d3b366a-92e2-493d-849b-89b30b2b311a",
            "value": "152.32.138.63"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--e65e22db-f880-425b-990f-2226a52a9fb1",
            "value": "152.32.243.153"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--9bb12d5e-285c-4e54-8ffa-8493ab9949cf",
            "hashes": {
                "SHA-256": "974e386f8facff325ec2f3ebb7439a9a1e4e4c88944d5beb5c341923dc993556"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--e279bc6e-5875-44aa-ae01-cb39a05ecade",
            "hashes": {
                "SHA-256": "5f2c65e695d85395634e7ab561242425e6ef281ce2e14a0d5c1704ed593cfa5f"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b13b46ee-3b98-437a-a12a-80f3e361b968",
            "hashes": {
                "SHA-256": "98c85ef91e05593cd470ffe8698aa6d97b36e8b885200be87080b8c2a135fb9c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--0a6267fb-8bfe-446b-99c7-c2aa107cfdfc",
            "hashes": {
                "SHA-256": "d8a8ddda6cc12c5533268b20e48e1b636ce9173e9f9b5bb4c832fe00f1b26841"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--3fdaeab9-60cb-4411-8035-b820948a6d34",
            "hashes": {
                "SHA-256": "393cbd41f14b1c55bde92a32e10b5d65384e33a97c77f352bd90fdb8fd5d73ae"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--f6329f3c-8f9d-4977-910f-55b07654d094",
            "value": "checkmail.kro.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--a092f18e-0c78-430b-afb9-65236f6b9ebc",
            "value": "nidcheck.o-r.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--4e9623d6-f3d1-49d2-9a45-2b0ecb441d20",
            "value": "nld.blog-view.o-r.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--016d513b-1dc6-4d3e-af8c-835420e1fecb",
            "value": "edoc-send.n-e.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--f74fd2e6-9823-48d5-ab67-7a4e7fc46e17",
            "value": "nidauth.r-e.kr"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1",
            "created": "2026-06-24T21:04:32.196625Z",
            "modified": "2026-06-24T21:04:32.196625Z",
            "name": "Kimsuky"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--ededca38-0b62-4865-927b-683ac552c405",
            "created_by_ref": "identity--c7e51838-39bb-4a48-83bd-ce30af0c9402",
            "created": "2026-06-24T21:04:32.199527Z",
            "modified": "2026-06-24T21:04:32.199527Z",
            "name": "\"Million OK!!!!\" and the Naver Facade: Tracking Recent Suspected Kimsuky Infrastructure",
            "published": "2024-12-10T00:00:00Z",
            "object_refs": [
                "identity--c7e51838-39bb-4a48-83bd-ce30af0c9402",
                "domain-name--017fa299-6c80-47b9-aee0-2964427a8c43",
                "domain-name--2f68aa74-9e4f-458c-9fa4-ebb70c088a23",
                "domain-name--a73a3f63-5466-45e4-a6e4-aaf33f968e95",
                "email-addr--b5530a4f-adfc-4f52-8b4e-48f912eccba9",
                "ipv4-addr--b9587bdb-0f93-42a9-9b87-d18d91699121",
                "ipv4-addr--e92490d4-25b0-46c6-b4f3-8edad5451341",
                "ipv4-addr--39bf67ec-164b-4c90-8f1e-a3dd899c9ba5",
                "ipv4-addr--5e714a0e-fe36-460a-a5f6-254229af72bc",
                "ipv4-addr--80546a0f-d2a4-4048-a4a7-21929a4ff688",
                "ipv4-addr--52710bb0-3710-49d6-ad26-c6b940701855",
                "ipv4-addr--154a4632-9151-47cd-8c02-eed5a1eb2158",
                "ipv4-addr--143a090d-6973-43b6-bc04-fb0e061e1a50",
                "ipv4-addr--1d3b366a-92e2-493d-849b-89b30b2b311a",
                "ipv4-addr--e65e22db-f880-425b-990f-2226a52a9fb1",
                "file--9bb12d5e-285c-4e54-8ffa-8493ab9949cf",
                "file--e279bc6e-5875-44aa-ae01-cb39a05ecade",
                "file--b13b46ee-3b98-437a-a12a-80f3e361b968",
                "file--0a6267fb-8bfe-446b-99c7-c2aa107cfdfc",
                "file--3fdaeab9-60cb-4411-8035-b820948a6d34",
                "domain-name--f6329f3c-8f9d-4977-910f-55b07654d094",
                "domain-name--a092f18e-0c78-430b-afb9-65236f6b9ebc",
                "domain-name--4e9623d6-f3d1-49d2-9a45-2b0ecb441d20",
                "domain-name--016d513b-1dc6-4d3e-af8c-835420e1fecb",
                "domain-name--f74fd2e6-9823-48d5-ab67-7a4e7fc46e17",
                "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://hunt.io/blog/million-ok-naver-facade-kimsuky-tracking"
                }
            ]
        }
    ]
}