{
    "type": "bundle",
    "id": "bundle--744c3ba0-6172-4aee-9b49-899e372410bc",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--a07ba383-78bd-4d39-a223-bbbc16c1577f",
            "created": "2023-03-08T12:52:02.228203Z",
            "modified": "2023-03-08T13:12:13.005571Z",
            "name": "FSI",
            "identity_class": "organization"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--f0ee29e4-a6cb-406e-bfc6-071fcd63a812",
            "value": "http://foodforu.heliohost.org/blog/apache_backup.jpg"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--2b1210e1-e3f0-4591-9b7c-2690719549d6",
            "value": "http://foodforu.heliohost.org/blog/apache.ipp"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--2b2ed588-8fd6-4c75-bb04-00ff6e2c8ea6",
            "value": "https://www.unsunozo.org"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--8403d32c-c5ee-420d-9aed-8b0df3cab9f5",
            "value": "http://foodforu.heliohost.org/blog/apache.jpg"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--9b648e3d-504b-413a-92d2-85ff5adc2b64",
            "value": "https://www.kbautosys.com"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--a9a9542b-8c2c-41c1-8ab8-69a7eb6b43ee",
            "value": "49.239.189.45"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--c8657785-5355-4e3e-ad62-b7f7822c003f",
            "value": "115.92.103.37"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--9548870e-3052-4faa-bc2a-23980474bf06",
            "value": "http://old.jrchina.com/btob_asiana/udel_ok.ipp"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--fe018a5b-41fd-49a4-bead-a259a8c30cb5",
            "value": "http://old.jrchina.com/btob_asiana/appach02.jpg"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--56528bdc-7c86-472e-96c5-a1378342f91c",
            "value": "http://old.jrchina.com/btob_asiana/appach01.jpg"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--90f9d546-c375-40ab-aee2-deb3b625bfa8",
            "value": "old.jrchina.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--35556b72-d15d-4fb4-998a-1da386e45b54",
            "value": "foodforu.heliohost.org"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--6126b7fe-b809-42d0-a086-3f0003a668ba",
            "value": "https://niebezpiecznik.pl/post/jakprzeprowadzono-atak-na-knf-i-polskie-banki-orazkto-jeszcze-byl-na-celowniku-przestepcow/"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--7dd7078f-5336-4a5d-96a4-cf8d7b783c48",
            "value": "niebezpiecznik.pl"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--779b8f52-56c4-5aee-b87a-0e7e139d8eff",
            "created": "2026-06-24T22:43:27.76442Z",
            "modified": "2026-06-24T22:43:27.76442Z",
            "name": "Andariel"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--12e642fa-ea3c-4b92-bda3-9ca9b7729c1a",
            "created_by_ref": "identity--a07ba383-78bd-4d39-a223-bbbc16c1577f",
            "created": "2026-06-24T22:43:27.769087Z",
            "modified": "2026-06-24T22:43:27.769087Z",
            "name": "NATION-STATE MONEYMULE'S HUNTING SEASON \u2013 APT ATTACKS TARGETING FINANCIAL INSTITUTION",
            "published": "2017-12-07T00:00:00Z",
            "object_refs": [
                "identity--a07ba383-78bd-4d39-a223-bbbc16c1577f",
                "url--f0ee29e4-a6cb-406e-bfc6-071fcd63a812",
                "url--2b1210e1-e3f0-4591-9b7c-2690719549d6",
                "url--2b2ed588-8fd6-4c75-bb04-00ff6e2c8ea6",
                "url--8403d32c-c5ee-420d-9aed-8b0df3cab9f5",
                "url--9b648e3d-504b-413a-92d2-85ff5adc2b64",
                "ipv4-addr--a9a9542b-8c2c-41c1-8ab8-69a7eb6b43ee",
                "ipv4-addr--c8657785-5355-4e3e-ad62-b7f7822c003f",
                "url--9548870e-3052-4faa-bc2a-23980474bf06",
                "url--fe018a5b-41fd-49a4-bead-a259a8c30cb5",
                "url--56528bdc-7c86-472e-96c5-a1378342f91c",
                "domain-name--90f9d546-c375-40ab-aee2-deb3b625bfa8",
                "domain-name--35556b72-d15d-4fb4-998a-1da386e45b54",
                "url--6126b7fe-b809-42d0-a086-3f0003a668ba",
                "domain-name--7dd7078f-5336-4a5d-96a4-cf8d7b783c48",
                "threat-actor--779b8f52-56c4-5aee-b87a-0e7e139d8eff"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.blackhat.com/docs/eu-17/materials/eu-17-Shen-Nation-State%20Moneymules-Hunting-Season-APT-Attacks-Targeting-Financial-Institutions.pdf"
                }
            ]
        }
    ]
}