{
    "type": "bundle",
    "id": "bundle--8e986ebf-5d20-43f3-9a02-f5b74ab3456c",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--59f99ee9-2b33-4e70-a488-4addc93d3d77",
            "created": "2023-03-08T12:51:43.018137Z",
            "modified": "2024-10-23T12:33:11.030915Z",
            "name": "Kaspersky",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6e47657a-93f8-42bc-b321-d385bb16346b",
            "hashes": {
                "SHA-1": "da96876f9535e3946aff3875c5e5c05e48ecb49c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--5f4a0461-a248-406e-9a1e-5a6065b7ee67",
            "hashes": {
                "MD5": "90385d612877e9d360196770d73d22d6"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--50829ebc-5bb7-40f5-bb6e-488d10febf2a",
            "hashes": {
                "SHA-1": "611e5b662c593a08ff58d14ae22452d198df6c60"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7c092b32-1fe7-4229-b6f1-a5cec40e62aa",
            "hashes": {
                "MD5": "1fddf14984c6b57358401a4587e7b950"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--dc9e6333-1762-4be0-b428-2209c628adda",
            "hashes": {
                "MD5": "b1e01ae0006f449781a05f4704546b34"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--577cc759-b466-4602-9f26-b3a1c45fa9b5",
            "hashes": {
                "MD5": "3b3b3b9f7c71fcd7239abe90c97751c0"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--cfd69089-0b2e-4ccd-aab1-b54e8d547061",
            "hashes": {
                "MD5": "d8011dcca570689d72064b156647fa82"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--0eee4e03-513f-4731-b60d-247438ba6085",
            "hashes": {
                "MD5": "80c1256f8bb2a9572e20dd480ac68759"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--402f92ff-6e19-4924-b6a1-04e293d74bc3",
            "hashes": {
                "SHA-1": "3b166c3b7dc4b751c9fe2afab9135641e388e186"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--d6e54ed1-7053-4960-addc-b60128fabfc7",
            "value": "http://on-global.xyz"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--487e9001-87f9-46d0-875f-99f8b432bd19",
            "value": "http://on-global.xyz/Of56cYsfVV8/OJITWH2WFx/Jy5S7hSx0K/fP7saoiPBc/A=="
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--b6db0b0c-4e9b-424a-bf9b-54f2c8b805e0",
            "value": "http://on-global.xyz/Ov56cYsfVV8/OJITWH2WFx/Jy5S7hSx0K/fP7saoiPBc/A=="
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--fc08c8af-f138-4aaa-99f4-256282877f34",
            "value": "on-global.xyz"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--f7f0d913-f17b-5632-a48a-76b4eef8a1cb",
            "created": "2026-06-24T16:55:40.522083Z",
            "modified": "2026-06-24T16:55:40.522083Z",
            "name": "Bluenoroff"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--bac9dc27-759b-446a-b7e2-b0043ddc689a",
            "created_by_ref": "identity--59f99ee9-2b33-4e70-a488-4addc93d3d77",
            "created": "2026-06-24T16:55:40.526801Z",
            "modified": "2026-06-24T16:55:40.526801Z",
            "name": "New BlueNoroff loader for macOS",
            "published": "2023-12-05T00:00:00Z",
            "object_refs": [
                "identity--59f99ee9-2b33-4e70-a488-4addc93d3d77",
                "file--6e47657a-93f8-42bc-b321-d385bb16346b",
                "file--5f4a0461-a248-406e-9a1e-5a6065b7ee67",
                "file--50829ebc-5bb7-40f5-bb6e-488d10febf2a",
                "file--7c092b32-1fe7-4229-b6f1-a5cec40e62aa",
                "file--dc9e6333-1762-4be0-b428-2209c628adda",
                "file--577cc759-b466-4602-9f26-b3a1c45fa9b5",
                "file--cfd69089-0b2e-4ccd-aab1-b54e8d547061",
                "file--0eee4e03-513f-4731-b60d-247438ba6085",
                "file--402f92ff-6e19-4924-b6a1-04e293d74bc3",
                "url--d6e54ed1-7053-4960-addc-b60128fabfc7",
                "url--487e9001-87f9-46d0-875f-99f8b432bd19",
                "url--b6db0b0c-4e9b-424a-bf9b-54f2c8b805e0",
                "domain-name--fc08c8af-f138-4aaa-99f4-256282877f34",
                "threat-actor--f7f0d913-f17b-5632-a48a-76b4eef8a1cb"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://securelist.com/bluenoroff-new-macos-malware/111290/"
                }
            ]
        }
    ]
}