{
    "type": "bundle",
    "id": "bundle--eb53c487-5f48-4b91-9631-621dbfc3cca2",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--a361b290-d09a-4e0e-a13d-681ca0c3dcc7",
            "created": "2023-03-08T12:51:43.404685Z",
            "modified": "2024-08-31T04:09:59.408166Z",
            "name": "Microsoft",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--daff386e-afce-4689-a37b-c4413480304c",
            "hashes": {
                "SHA-256": "f59035192098e44b86c4648a0de4078edbe80352260276f4755d15d354f5fc58"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--48e18683-dd83-4c5d-ab12-28fc8a7bd473",
            "hashes": {
                "SHA-256": "cb97ec024c04150ad419d1af2d1eb66b5c48ab5f345409d9d791db574981a3fb"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--71f6fecf-08a8-44f1-9e5b-1f3200b35cd5",
            "hashes": {
                "SHA-256": "09d152aa2b6261e3b0a1d1c19fa8032f215932186829cfcca954cc5e84a6cc38"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c15287ff-b136-420c-b4a2-2b9b66a9ca17",
            "hashes": {
                "SHA-256": "9863173e0a45318f776e36b1a8529380362af8f3e73a2b4875e30d31ad7bd3c1"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d7dd0f83-e14f-4de2-a9a7-3d19c0f9989d",
            "hashes": {
                "SHA-256": "cafaa7bc3277711509dc0800ed53b82f645e86c195e85fbf34430bbc75c39c24"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--a5eba6dc-eff6-46e1-96f1-6a5ed9ddbd52",
            "hashes": {
                "SHA-256": "39d7407e76080ec5d838c8ebca5182f3ac4a5f416ff7bda9cbc4efffd78b4ff5"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--155fd86a-bb15-48fc-b8c7-1017578fc40c",
            "value": "ccwaterfall.com"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--38b90a4d-e414-4f28-a030-86b5a72fa703",
            "hashes": {
                "SHA-256": "ecce739b556f26de07adbfc660a958ba2dca432f70a8c4dd01466141a6551146"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--98611646-f30c-40b5-8879-ee010c9994fc",
            "hashes": {
                "SHA-256": "56554117d96d12bd3504ebef2a8f28e790dd1fe583c33ad58ccbf614313ead8c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--35ad3470-853c-475a-8c23-c38a1e46f708",
            "hashes": {
                "SHA-256": "70c5b64589277ace59db86d19d846a9236214b48aacabbaf880f2b6355ab5260"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--e489b2dc-1fdc-4ef0-8064-ae663af0095d",
            "hashes": {
                "SHA-256": "f66122a3e1eaa7dcb7c13838037573dace4e5a1c474a23006417274c0c8608be"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--bfcafb0a-a98d-475f-9a24-5624366d2c39",
            "value": "detankwar.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--953f5608-45ec-41b0-b393-3d0a3b4cf308",
            "value": "freenet-zhilly.org"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--2dfe4c81-46dd-4c1e-954d-0cefe884615e",
            "value": "defitankzone.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--22779d66-52ef-48e7-ba07-e801fd73659a",
            "value": "starglowventures.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--52f581e5-9bc5-430f-9595-b61e9a06e369",
            "value": "pointdnt.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--5b807154-a13d-4e44-9f0f-ae0affde80b4",
            "value": "bestonlinefilmstudio.org"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--be531af9-bc1a-4e30-9518-00a91164289c",
            "value": "mingeloem.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--8fd72d92-18db-484c-9ca3-9f4218bf6dc6",
            "value": "matrixane.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--33579016-6627-4cec-820f-2982176c0ff6",
            "value": "blockchain-newtech.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--341a04eb-5d13-4afd-aaca-14dd375e6aa2",
            "value": "chaingrown.com"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--03550cfe-1db3-5bcf-b290-8a1a27da993d",
            "created": "2026-06-24T21:19:00.233381Z",
            "modified": "2026-06-24T21:19:00.233381Z",
            "name": "MoonstoneSleet"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--3a70b1a8-c1bc-58cd-adad-16cf3ee31b99",
            "created": "2026-06-24T21:19:00.237175Z",
            "modified": "2026-06-24T21:19:00.237175Z",
            "name": "Storm-1789"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--ddde9e57-1fd0-5698-8488-0a3516cca59c",
            "created": "2026-06-24T21:19:00.239491Z",
            "modified": "2026-06-24T21:19:00.239491Z",
            "name": "Storm-1877"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--092a9b0b-9c40-4bcc-897e-9b69ce4630fa",
            "created_by_ref": "identity--a361b290-d09a-4e0e-a13d-681ca0c3dcc7",
            "created": "2026-06-24T21:19:00.243734Z",
            "modified": "2026-06-24T21:19:00.243734Z",
            "name": "Moonstone Sleet emerges as new North Korean threat actor with new bag of tricks",
            "published": "2024-05-28T00:00:00Z",
            "object_refs": [
                "identity--a361b290-d09a-4e0e-a13d-681ca0c3dcc7",
                "file--daff386e-afce-4689-a37b-c4413480304c",
                "file--48e18683-dd83-4c5d-ab12-28fc8a7bd473",
                "file--71f6fecf-08a8-44f1-9e5b-1f3200b35cd5",
                "file--c15287ff-b136-420c-b4a2-2b9b66a9ca17",
                "file--d7dd0f83-e14f-4de2-a9a7-3d19c0f9989d",
                "file--a5eba6dc-eff6-46e1-96f1-6a5ed9ddbd52",
                "domain-name--155fd86a-bb15-48fc-b8c7-1017578fc40c",
                "file--38b90a4d-e414-4f28-a030-86b5a72fa703",
                "file--98611646-f30c-40b5-8879-ee010c9994fc",
                "file--35ad3470-853c-475a-8c23-c38a1e46f708",
                "file--e489b2dc-1fdc-4ef0-8064-ae663af0095d",
                "domain-name--bfcafb0a-a98d-475f-9a24-5624366d2c39",
                "domain-name--953f5608-45ec-41b0-b393-3d0a3b4cf308",
                "domain-name--2dfe4c81-46dd-4c1e-954d-0cefe884615e",
                "domain-name--22779d66-52ef-48e7-ba07-e801fd73659a",
                "domain-name--52f581e5-9bc5-430f-9595-b61e9a06e369",
                "domain-name--5b807154-a13d-4e44-9f0f-ae0affde80b4",
                "domain-name--be531af9-bc1a-4e30-9518-00a91164289c",
                "domain-name--8fd72d92-18db-484c-9ca3-9f4218bf6dc6",
                "domain-name--33579016-6627-4cec-820f-2982176c0ff6",
                "domain-name--341a04eb-5d13-4afd-aaca-14dd375e6aa2",
                "threat-actor--03550cfe-1db3-5bcf-b290-8a1a27da993d",
                "threat-actor--3a70b1a8-c1bc-58cd-adad-16cf3ee31b99",
                "threat-actor--ddde9e57-1fd0-5698-8488-0a3516cca59c"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.microsoft.com/en-us/security/blog/2024/05/28/moonstone-sleet-emerges-as-new-north-korean-threat-actor-with-new-bag-of-tricks/"
                }
            ]
        }
    ]
}