{
    "type": "bundle",
    "id": "bundle--eb6903e6-7401-4dde-bc8b-4eb699101429",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--5ace95f0-bd6c-4fee-a494-ca40e791918d",
            "created": "2023-03-08T12:51:44.544245Z",
            "modified": "2024-09-09T23:28:33.92829Z",
            "name": "PaloaltoNetworks",
            "identity_class": "organization"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--eadd86bd-e41a-4f2e-9329-012b5e13cdab",
            "value": "files.000webhost.com"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b5e08ae3-0326-41b4-a111-3b240697a678",
            "hashes": {
                "SHA-256": "d5fc0ef2d1ed037b5b6389882f9bb4ea15a6b41f21cdc0f5e90752f4e687445c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--53360742-d82c-4d27-9b92-6ebea975486f",
            "hashes": {
                "SHA-256": "dce53e59b0c48e269dadc766a78667a14f11b72c49f57d95abde62c84ac8d7ae"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c63e6072-0a1f-4b48-b704-dd168bd54d69",
            "hashes": {
                "MD5": "42fbea771f3e0ff04ac0a1d09db2a45e"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--a7a476d8-9f05-48d0-9d0b-54bff4b4d401",
            "hashes": {
                "SHA-256": "c07bea0928a35b9292eebab32563378d01d95434d098e5c7c076e94866a14212"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--a0438f32-10ac-4fac-a1c2-40dfd720486a",
            "hashes": {
                "SHA-256": "d92c94423ec3d01ad584a74a38a2e817449648a4da3f12d345c611edc5c4cdbd"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--cd6f936b-3bae-4bd8-9ca2-f9cf3cc385ee",
            "hashes": {
                "MD5": "88587c43daff30cd3cc0c913a390e9df"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--33f5c55d-c5e6-4595-9835-554bc635d00b",
            "hashes": {
                "SHA-1": "1cc8ceeef9a2ea4260fae03368a9d07d56e8331b"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--8e009f91-5efd-475d-a89d-dc911d8a7a46",
            "hashes": {
                "SHA-256": "0657f788e89a437a1e6fe2630c19436736aa55dcf255540698864a7576192611"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c1976289-64ab-4334-8bf7-eda257c9b801",
            "hashes": {
                "SHA-256": "b8120d5c9c2c889b37aa9e37514a3b4964c6e41296be216b327cdccd2e908311"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ed61927c-4788-4cdf-9d5c-73515025d323",
            "hashes": {
                "SHA-256": "07b90088ec02ef6757f6590a62e2a038ce769914139aff1a26b50399a31dcde9"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b0834437-9ae0-4ff6-ade8-6cf18153efbb",
            "hashes": {
                "SHA-256": "d211815177ce4b9fd2d3c258d2fc6282c23b8458d71f8f6f0df06a9dda89c12f"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--fcc2da66-98aa-470b-96de-04dfe57722f2",
            "hashes": {
                "SHA-256": "5137f6a59c2c7a54f1a5fc9a9650972b17d52dd0e203f5abefedf5c593c41ff0"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--56d4c07b-0e77-482b-96a1-7379d8accc9c",
            "hashes": {
                "SHA-256": "74ddd56b1e33aa3752f143a77e5802a5803fd2c222f2cca77bfa5c740dfc8f5e"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--1ab6f319-7cf5-4bce-81ab-9695b2b1940c",
            "hashes": {
                "SHA-256": "9bf634ff0bc7c69ffceb75f9773c198944d907ba822c02c44c83e997b88eeabd"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--5ddb1778-b2f5-4a9a-afec-c9258530d34e",
            "hashes": {
                "MD5": "48f031f8120554a5f47259666fd0ee02"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--32dedb8e-77d0-49ce-a094-af03c3cc2d6e",
            "hashes": {
                "SHA-1": "dc739ca07585eab7394843bc4dba2faca8e5bfe0"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b1fc53af-b9d9-415f-8ec5-bef4ace99e11",
            "hashes": {
                "SHA-256": "c3172b403068aabc711b7cbe4d923ae1fa705ce11c4cc71271fde83ce751c21c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d7ea3e34-2ec0-4547-9189-a4c02319c663",
            "hashes": {
                "SHA-256": "4e84f97bb61c2d373a574676fa374131460839ecc7b53064f558ce7ce55528ad"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--3961999a-cd45-4999-83ed-193f353bb909",
            "hashes": {
                "SHA-256": "9b1a21d352ededd057ee3a965907126dd11d13474028a429d91e2349b1f00e10"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d9534f0a-a152-4ffa-864e-0da9e31586de",
            "hashes": {
                "SHA-1": "02ee6302436250e1cee1e75cf452a127b397be8d"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--06dd1394-dab6-4942-b0d0-fe79d70c6adf",
            "hashes": {
                "MD5": "ae27e617f4197cd30cc09fe784453cd4"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--e700deb0-f302-4903-b101-68ff6415d4df",
            "hashes": {
                "SHA-1": "2b6b6f24f58072a02f03fa04deaccce04b6bb43b"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--4b96468b-c20a-4a0e-a7e0-9141ddabaaea",
            "hashes": {
                "SHA-256": "0d98ca35b29d2a9f7ca6908747c457ebdba999f0e83e182f770848e2335ade5b"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ccf69780-72c1-4d05-acf5-57621c493fa4",
            "hashes": {
                "SHA-256": "fd673703c502be907919a4ff2922b7b969d96d206abc572a5cb83e69ab32ca18"
            }
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--f6509c7c-40c6-4efc-8440-337c0bfaed4c",
            "value": "145.14.145.32"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--b6b6e555-bf3a-4a9c-8dd3-121b6d0a4baf",
            "value": "141.223.125.112"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--9f13f15b-57a1-4830-9842-ca4c0d17dfe2",
            "value": "210.112.239.74"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--1e10b78b-a4e9-4c7d-ad18-1ed2e3a04ed7",
            "value": "101.129.1.104"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--a014dfac-e081-5b16-a0b1-fe21d104be8f",
            "created": "2026-06-24T19:56:03.836398Z",
            "modified": "2026-06-24T19:56:03.836398Z",
            "name": "Konni"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--7e9d3547-7f1a-491c-988d-0b2d6eff690d",
            "created_by_ref": "identity--5ace95f0-bd6c-4fee-a494-ca40e791918d",
            "created": "2026-06-24T19:56:03.839003Z",
            "modified": "2026-06-24T19:56:03.839003Z",
            "name": "New KONNI Malware attacking Eurasia and Southeast Asia",
            "published": "2018-09-28T00:00:00Z",
            "object_refs": [
                "identity--5ace95f0-bd6c-4fee-a494-ca40e791918d",
                "domain-name--eadd86bd-e41a-4f2e-9329-012b5e13cdab",
                "file--b5e08ae3-0326-41b4-a111-3b240697a678",
                "file--53360742-d82c-4d27-9b92-6ebea975486f",
                "file--c63e6072-0a1f-4b48-b704-dd168bd54d69",
                "file--a7a476d8-9f05-48d0-9d0b-54bff4b4d401",
                "file--a0438f32-10ac-4fac-a1c2-40dfd720486a",
                "file--cd6f936b-3bae-4bd8-9ca2-f9cf3cc385ee",
                "file--33f5c55d-c5e6-4595-9835-554bc635d00b",
                "file--8e009f91-5efd-475d-a89d-dc911d8a7a46",
                "file--c1976289-64ab-4334-8bf7-eda257c9b801",
                "file--ed61927c-4788-4cdf-9d5c-73515025d323",
                "file--b0834437-9ae0-4ff6-ade8-6cf18153efbb",
                "file--fcc2da66-98aa-470b-96de-04dfe57722f2",
                "file--56d4c07b-0e77-482b-96a1-7379d8accc9c",
                "file--1ab6f319-7cf5-4bce-81ab-9695b2b1940c",
                "file--5ddb1778-b2f5-4a9a-afec-c9258530d34e",
                "file--32dedb8e-77d0-49ce-a094-af03c3cc2d6e",
                "file--b1fc53af-b9d9-415f-8ec5-bef4ace99e11",
                "file--d7ea3e34-2ec0-4547-9189-a4c02319c663",
                "file--3961999a-cd45-4999-83ed-193f353bb909",
                "file--d9534f0a-a152-4ffa-864e-0da9e31586de",
                "file--06dd1394-dab6-4942-b0d0-fe79d70c6adf",
                "file--e700deb0-f302-4903-b101-68ff6415d4df",
                "file--4b96468b-c20a-4a0e-a7e0-9141ddabaaea",
                "file--ccf69780-72c1-4d05-acf5-57621c493fa4",
                "ipv4-addr--f6509c7c-40c6-4efc-8440-337c0bfaed4c",
                "ipv4-addr--b6b6e555-bf3a-4a9c-8dd3-121b6d0a4baf",
                "ipv4-addr--9f13f15b-57a1-4830-9842-ca4c0d17dfe2",
                "ipv4-addr--1e10b78b-a4e9-4c7d-ad18-1ed2e3a04ed7",
                "threat-actor--a014dfac-e081-5b16-a0b1-fe21d104be8f"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://researchcenter.paloaltonetworks.com/2018/09/unit42-new-konni-malware-attacking-eurasia-southeast-asia/"
                }
            ]
        }
    ]
}