{
    "type": "bundle",
    "id": "bundle--b67b6ac3-5829-499a-a080-b75b05cdda71",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--18a3a1f0-eb3d-4bbc-904e-ee52948913a7",
            "created": "2023-03-08T12:51:43.431426Z",
            "modified": "2023-03-08T12:51:43.431505Z",
            "name": "Malwarebytes",
            "identity_class": "organization"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--a5206e03-a81c-4b3f-92a7-ce2f0e597f85",
            "value": "takemetoyouheart.c1.biz"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--a9bb5d93-21a7-4a84-96fe-56949abef0c2",
            "hashes": {
                "SHA-256": "f702dfddbc5b4f1d5a5a9db0a2c013900d30515e69a09420a7c3f6eaac901b12"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--fe7493a4-45b7-4ad2-8b0d-787888ba823b",
            "hashes": {
                "SHA-256": "10109e69d1fb2fe8f801c3588f829e020f1f29c4638fad5394c1033bc298fd3f"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--37743229-83df-476d-af9b-d6d55ea9384f",
            "hashes": {
                "SHA-256": "a7d5f7a14e36920413e743932f26e624573bbb0f431c594fb71d87a252c8d90d"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--98300dff-e006-4872-b36e-1440262acf18",
            "hashes": {
                "SHA-256": "fccad2fea7371ad24a1256b78165bceffc5d01a850f6e2ff576a2d8801ef94fa"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--2f253713-e19f-48ac-afce-18ed271e91d7",
            "hashes": {
                "SHA-256": "617f733c05b42048c0399ceea50d6e342a4935344bad85bba2f8215937bc0b83"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--e6b7284f-2264-4814-ada0-80e83a0e434d",
            "hashes": {
                "SHA-256": "4876a41ca8919c4ff58ffb4b4df54202d82804fd85d0010669c7cb4f369c12c3"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--eb9f3d17-db2e-4f0d-8930-d034a59870d3",
            "hashes": {
                "SHA-256": "7f82540a6b3fc81d581450dbdf7dec7ad45d2984d3799084b29150ba91c004fd"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--2822796c-0f95-4657-a5e9-6d419545ac65",
            "hashes": {
                "SHA-256": "80641207b659931d5e3cad7ad5e3e653a27162c66b35b9ae9019d5e19e092362"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--55f9809f-05b9-4f36-be22-553213ec5258",
            "hashes": {
                "SHA-256": "062aa6a968090cf6fd98e1ac8612dd4985bf9b29e13d60eba8f24e5a706f8311"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--546bf477-0a56-484c-a978-62869fc74f3c",
            "hashes": {
                "SHA-256": "7a8f0690cb0eb7cbe72ddc9715b1527f33cec7497dcd2a1010def69e75c46586"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--e1a700b2-00af-44c9-b02e-73969eac3d26",
            "hashes": {
                "SHA-256": "d283a0d5cfed4d212cd76497920cf820472c5f138fd061f25e3cddf65190283f"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--54139af2-476b-4c06-80ef-72f0dc8fd340",
            "hashes": {
                "SHA-256": "491ed46847e30b9765a7ec5ff08d9acb8601698019002be0b38becce477e12f6"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--0f4a046c-f753-40a8-836c-fc9c66ca3615",
            "value": "http://taketodjnfnei898.c1.biz/up.php?name=%UserName%"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--7b01a616-8f73-4f88-88ea-7f78696a33fa",
            "value": "http://taketodjnfnei898.c1.biz/dn.php?name=%UserName%&prefix=tt"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--fc03192b-2853-407f-be05-079b00f3948c",
            "value": "taketodjnfnei898.c1.biz"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--dc79a2e8-5685-4119-8ce9-34560a2c3694",
            "value": "romanovawillkillyou.c1.biz"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--f72d96a8-22cb-4fd0-9151-3cdf31b95303",
            "value": "taketodjnfnei898.ueuo.com"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--a014dfac-e081-5b16-a0b1-fe21d104be8f",
            "created": "2026-06-24T19:57:15.972346Z",
            "modified": "2026-06-24T19:57:15.972346Z",
            "name": "Konni"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--ee25a683-0af9-4cb7-9c15-176086520ff9",
            "created_by_ref": "identity--18a3a1f0-eb3d-4bbc-904e-ee52948913a7",
            "created": "2026-06-24T19:57:15.973547Z",
            "modified": "2026-06-24T19:57:15.973547Z",
            "name": "New variant of Konni malware used in campaign targetting Russia",
            "published": "2021-08-20T00:00:00Z",
            "object_refs": [
                "identity--18a3a1f0-eb3d-4bbc-904e-ee52948913a7",
                "domain-name--a5206e03-a81c-4b3f-92a7-ce2f0e597f85",
                "file--a9bb5d93-21a7-4a84-96fe-56949abef0c2",
                "file--fe7493a4-45b7-4ad2-8b0d-787888ba823b",
                "file--37743229-83df-476d-af9b-d6d55ea9384f",
                "file--98300dff-e006-4872-b36e-1440262acf18",
                "file--2f253713-e19f-48ac-afce-18ed271e91d7",
                "file--e6b7284f-2264-4814-ada0-80e83a0e434d",
                "file--eb9f3d17-db2e-4f0d-8930-d034a59870d3",
                "file--2822796c-0f95-4657-a5e9-6d419545ac65",
                "file--55f9809f-05b9-4f36-be22-553213ec5258",
                "file--546bf477-0a56-484c-a978-62869fc74f3c",
                "file--e1a700b2-00af-44c9-b02e-73969eac3d26",
                "file--54139af2-476b-4c06-80ef-72f0dc8fd340",
                "url--0f4a046c-f753-40a8-836c-fc9c66ca3615",
                "url--7b01a616-8f73-4f88-88ea-7f78696a33fa",
                "domain-name--fc03192b-2853-407f-be05-079b00f3948c",
                "domain-name--dc79a2e8-5685-4119-8ce9-34560a2c3694",
                "domain-name--f72d96a8-22cb-4fd0-9151-3cdf31b95303",
                "threat-actor--a014dfac-e081-5b16-a0b1-fe21d104be8f"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://blog.malwarebytes.com/threat-intelligence/2021/08/new-variant-of-konni-malware-used-in-campaign-targetting-russia/"
                }
            ]
        }
    ]
}