{
    "type": "bundle",
    "id": "bundle--ea13bf05-2d6c-42d1-8017-026538bb361d",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--ce40c63e-51d4-4ec5-a85b-2d76cd5ec7d1",
            "created": "2023-03-08T12:52:07.036238Z",
            "modified": "2025-06-18T12:58:21.951363Z",
            "name": "CiscoTalos",
            "identity_class": "organization"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--73cc743c-b726-4b38-bb11-ee384fceca33",
            "value": "80.71.157.55"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--fe06bacc-b0cf-421c-991c-f5d2d563a985",
            "hashes": {
                "SHA-256": "148c69a7a1e06dc06e52db5c3f5895de6adc3d79498bc3ccc2cbd8fdf28b2070"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--f99238ca-83da-43f5-ae09-d21010cf220e",
            "hashes": {
                "SHA-256": "3e39fc595db9db1706828b0791161440dc1571eaa07b523df9b721ad65e2369b"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--3d07355e-80f2-4ea5-ac54-68bd850723c1",
            "hashes": {
                "SHA-256": "27202534cc03a398308475146f6710b790aa31361931d4fe1b495c31c3ed54f7"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7035a7e5-6722-4dd9-aba6-9b19165f06bf",
            "hashes": {
                "SHA-256": "4108c5096a62c0a6664eed781c39bb042eb0adf166fcc5d64d7c89139d525d4f"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7c420cba-3d1b-4ca7-90bf-6217cab408d6",
            "hashes": {
                "SHA-256": "b8233fe9e903ca08b9b1836fe6197e7d3e98e36b13815d8662de09832367a98a"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7ef90c98-5f0d-4d1d-b852-f2f87567edb7",
            "hashes": {
                "SHA-256": "0b8897103135d92b89a83093f00d1da845a1eae63da7b57f638bab48a779808e"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--2c506693-4cb4-41d3-8a2c-2a3fc9c2f7aa",
            "hashes": {
                "SHA-256": "f4aa4c6942a87087530494cba770a1dcbc263514d874f12ba93a64b1edbae21c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--22cbce9d-e317-472b-a631-ad39dd59c65e",
            "hashes": {
                "SHA-256": "facf3b40a2b99cc15eee7b7aee3b36a57f0951cda45931fcde311c0cc21cdc71"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--20d6c407-283c-48b1-abba-aa9e0387c125",
            "hashes": {
                "SHA-256": "4599a9421e83fb0e2c005e5d9ac171305192beabe965f3385accaf2647be3e8e"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--34a976d3-0519-4ce1-bf7d-affdb60011a6",
            "hashes": {
                "SHA-256": "2b35ef3080dcc13e2d907f681443f3fc3eda832ae66b0458ca5c97050f849306"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--dad23114-7e3b-4c93-ae82-5eee7cea4f3c",
            "hashes": {
                "SHA-256": "44e492d5b9c48c1df7ef5e0fe9a732f271234219d8377cf909a431a386759555"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--44fdef06-30d3-4273-bd9f-42e739f1a333",
            "hashes": {
                "SHA-256": "458641936e2b41c425161a9b892d2aa08d1de2bc0db446f214b5f87a6a506432"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7b553bf8-020b-4763-8661-9638d315ebd7",
            "hashes": {
                "SHA-256": "15eee641978ac318dabc397d9c39fb4cb8e1a854883d8c2401f6f04845a79b4b"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7b3982ff-0525-43ac-be9d-e2b263180ad7",
            "hashes": {
                "SHA-256": "58fdc1b6ce4744d6331f8e2efc4652d754e803cae4cc16101fc78438184995e6"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--251c96fd-7a2e-4105-bb71-05ebfde49068",
            "hashes": {
                "SHA-256": "97ba8d30cf8393c39f61f7e63266914ecafd07bd49911370afb866399446f37d"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--10127467-93ce-40ad-9fd2-4ddedea7012f",
            "hashes": {
                "SHA-256": "a80a35649f638049244a06dd4fb6eca4de0757ef566bfbe1affe1c8bf1d96b04"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--87b72365-87b2-44a4-909a-92e2ca87cd7f",
            "hashes": {
                "SHA-256": "6bf8a19deb443bde013678f3ff83ab9db4ddc47838cd9d00935888e00b30cee6"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--4d0edcfb-9001-46b3-9ac7-0bb850700472",
            "hashes": {
                "SHA-256": "6a3839788c0dafe591718a3fb6316d12ccd8e82dbcb41ce40e66b743f2dd344d"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--8a732eac-d62c-4e1f-af85-93bf9cf55bed",
            "hashes": {
                "SHA-256": "8a4fbcdec5c08e6324e3142f8b8c41da5b8e714b9398c425c47189f17a51d07b"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c2422d84-d6ce-4482-8bb9-f862bac46c3f",
            "hashes": {
                "SHA-256": "1ad43ddfce147c1ec71b37011d522c11999a974811fead11fee6761ceb920b10"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--99b97072-eba9-45c3-80b8-f581dd4a3154",
            "hashes": {
                "SHA-256": "72a25d959d12e3efe9604aee4b1e7e4db1ef590848d207007419838ddbad5e3f"
            }
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--8b213c4d-5878-4d20-a82e-ed61940ad2d8",
            "value": "95.164.86.148"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--175abf2e-1f66-403d-9627-d9b28d0a3745",
            "value": "45.87.153.79"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--2062ffee-ce7f-45c4-8fbf-af1b74988b41",
            "value": "45.95.11.52"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--9aaecec2-07d5-4a92-81df-857e1d184871",
            "value": "167.88.173.173"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--30711797-0fab-4780-a760-fe6d24c54754",
            "hashes": {
                "SHA-256": "0ed643a30a82daacecfec946031143b962f693104bcb7087ec6bda09ade0f3cb"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c04afe26-013a-470c-b78f-1d19d162feff",
            "hashes": {
                "SHA-256": "293b1a7e923be0f554ec44c87c0981c9b5cf0f20c3ad89d767f366afb0c1f24a"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--45fd671f-d478-4c49-a818-6fe0780c26c8",
            "hashes": {
                "SHA-256": "f928a0887cf3319a74c90c0bdf63b5f79710e9f9e2f769038ec9969fcc8ee329"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c8a670ff-4394-422c-923d-dba023847f58",
            "hashes": {
                "SHA-256": "41d4f7734fbf14ebcdf63f51093718fd5a22ec38a297c0dc3d7704a3fb48b3f9"
            }
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--47d70d36-4241-4ff6-be67-678f374103a7",
            "value": "210.92.18.169"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--a2a65e26-4084-4b71-a3d7-ed5f2d993c49",
            "value": "27.255.80.162"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--2c9ea9d4-e0c8-40f7-9109-22172f7ec39f",
            "value": "84.247.179.77"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--d0afacb3-d54c-42e4-ae82-0b614d0319c1",
            "value": "104.194.152.251"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--6fda1bae-96e0-4fe3-8b10-bf440e68b5cf",
            "value": "91.194.161.109"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--25366cce-5f64-42e0-a4a2-08d0b2bcfed8",
            "value": "212.224.107.244"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--a97892da-543f-4262-8aea-ac73ec3c45aa",
            "value": "27.255.81.118"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--58021e54-7d6b-474c-b639-c1c26d2a69e6",
            "value": "159.100.29.122"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--63f4ac84-3f58-5ab2-848b-da571cec9f43",
            "created": "2026-06-24T22:31:41.066288Z",
            "modified": "2026-06-24T22:31:41.066288Z",
            "name": "UAT-5394"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--2d2ad90a-1fbc-40fb-93fe-0c36025f427d",
            "created_by_ref": "identity--ce40c63e-51d4-4ec5-a85b-2d76cd5ec7d1",
            "created": "2026-06-24T22:31:41.067325Z",
            "modified": "2026-06-24T22:31:41.067325Z",
            "name": "MoonPeak malware from North Korean actors unveils new details on attacker infrastructure",
            "published": "2024-08-21T00:00:00Z",
            "object_refs": [
                "identity--ce40c63e-51d4-4ec5-a85b-2d76cd5ec7d1",
                "ipv4-addr--73cc743c-b726-4b38-bb11-ee384fceca33",
                "file--fe06bacc-b0cf-421c-991c-f5d2d563a985",
                "file--f99238ca-83da-43f5-ae09-d21010cf220e",
                "file--3d07355e-80f2-4ea5-ac54-68bd850723c1",
                "file--7035a7e5-6722-4dd9-aba6-9b19165f06bf",
                "file--7c420cba-3d1b-4ca7-90bf-6217cab408d6",
                "file--7ef90c98-5f0d-4d1d-b852-f2f87567edb7",
                "file--2c506693-4cb4-41d3-8a2c-2a3fc9c2f7aa",
                "file--22cbce9d-e317-472b-a631-ad39dd59c65e",
                "file--20d6c407-283c-48b1-abba-aa9e0387c125",
                "file--34a976d3-0519-4ce1-bf7d-affdb60011a6",
                "file--dad23114-7e3b-4c93-ae82-5eee7cea4f3c",
                "file--44fdef06-30d3-4273-bd9f-42e739f1a333",
                "file--7b553bf8-020b-4763-8661-9638d315ebd7",
                "file--7b3982ff-0525-43ac-be9d-e2b263180ad7",
                "file--251c96fd-7a2e-4105-bb71-05ebfde49068",
                "file--10127467-93ce-40ad-9fd2-4ddedea7012f",
                "file--87b72365-87b2-44a4-909a-92e2ca87cd7f",
                "file--4d0edcfb-9001-46b3-9ac7-0bb850700472",
                "file--8a732eac-d62c-4e1f-af85-93bf9cf55bed",
                "file--c2422d84-d6ce-4482-8bb9-f862bac46c3f",
                "file--99b97072-eba9-45c3-80b8-f581dd4a3154",
                "ipv4-addr--8b213c4d-5878-4d20-a82e-ed61940ad2d8",
                "ipv4-addr--175abf2e-1f66-403d-9627-d9b28d0a3745",
                "ipv4-addr--2062ffee-ce7f-45c4-8fbf-af1b74988b41",
                "ipv4-addr--9aaecec2-07d5-4a92-81df-857e1d184871",
                "file--30711797-0fab-4780-a760-fe6d24c54754",
                "file--c04afe26-013a-470c-b78f-1d19d162feff",
                "file--45fd671f-d478-4c49-a818-6fe0780c26c8",
                "file--c8a670ff-4394-422c-923d-dba023847f58",
                "ipv4-addr--47d70d36-4241-4ff6-be67-678f374103a7",
                "ipv4-addr--a2a65e26-4084-4b71-a3d7-ed5f2d993c49",
                "ipv4-addr--2c9ea9d4-e0c8-40f7-9109-22172f7ec39f",
                "ipv4-addr--d0afacb3-d54c-42e4-ae82-0b614d0319c1",
                "ipv4-addr--6fda1bae-96e0-4fe3-8b10-bf440e68b5cf",
                "ipv4-addr--25366cce-5f64-42e0-a4a2-08d0b2bcfed8",
                "ipv4-addr--a97892da-543f-4262-8aea-ac73ec3c45aa",
                "ipv4-addr--58021e54-7d6b-474c-b639-c1c26d2a69e6",
                "threat-actor--63f4ac84-3f58-5ab2-848b-da571cec9f43"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://blog.talosintelligence.com/moonpeak-malware-infrastructure-north-korea/"
                }
            ]
        }
    ]
}