{
    "type": "bundle",
    "id": "bundle--da37f9ea-d3c5-4891-9e7a-dd69218963c3",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--5ace95f0-bd6c-4fee-a494-ca40e791918d",
            "created": "2023-03-08T12:51:44.544245Z",
            "modified": "2024-09-09T23:28:33.92829Z",
            "name": "PaloaltoNetworks",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--57a8f931-fcf2-46ae-9b3a-a321cc34a3f1",
            "hashes": {
                "SHA-256": "fb94a5e30de7afd1d9072ccedd90a249374f687f16170e1986d6fd43c143fb3a"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--51715d0b-917f-4b8f-a52f-03e7967f1b17",
            "value": "http://kmbr1.nitesbr1.org/UserFiles/File/image/index.php"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--c3382e18-9ae3-4546-bfb9-cf94babfff3b",
            "value": "kmbr1.nitesbr1.org"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--2a154381-cb93-47bf-a04a-ab773a630440",
            "hashes": {
                "SHA-256": "0669c71740134323793429d10518576b42941f9eee0def6057ed9a4ba87a3a9a"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--811bd637-54ac-4878-b60f-23388419f5bc",
            "hashes": {
                "MD5": "0f1d3ed85fee2acc23a8a26e0dc12e0f"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--cf7723c4-113d-4204-bbb0-7f2486e14028",
            "hashes": {
                "SHA-256": "66a0c294ee8f3507d723a376065798631906128ce79bd6dfd8f025eda6b75e51"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--cab0613f-eec7-4ef8-ab74-a4c1a20cb248",
            "hashes": {
                "MD5": "a2fe5dcb08ae8b72e8bc98ddc0b918e7"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--42f4438c-f623-42b1-93c0-81c38fe04fe6",
            "hashes": {
                "MD5": "05d43d417a8f50e7b23246643fc7e03d"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--62d23ea5-f4d8-4f91-b5db-a729ca223615",
            "hashes": {
                "SHA-1": "d13fc918433c705b49db74c91f56ae6c0cb5cf8d"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--bfce1d08-2680-4ec3-a163-beba306dc4cc",
            "hashes": {
                "SHA-1": "741dbdb20d1beeb8ff809291996c8b78585cb812"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--fe495302-4fc0-4d80-b531-4c013e1f5d26",
            "hashes": {
                "SHA-1": "67c05b3937d94136eda4a60a2d5fb685abc776a1"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--bba80563-ac04-4e11-b8de-ad82041be93f",
            "hashes": {
                "SHA-256": "3fee068bf90ffbeb25549eb52be0456609b1decfe91cda1967eb068ef2c8918f"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--33f552dd-1b27-4ea9-b3dd-6f83c6e3ee07",
            "hashes": {
                "MD5": "e02024f38dfb6290ce0d693539a285a9"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--a8b814a5-d58d-4dcd-890d-5aaebc13df60",
            "hashes": {
                "SHA-1": "3d161de48d3f4da0aefff685253404c8b0111563"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--b78fdc71-51f4-4499-bf1d-a3b0a2840a80",
            "value": "http://kmbr1.nitesbr1.org/UserFiles/File/images/wwwtest.jpg"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--0a6011d6-c6e4-497d-b1a9-74084220894e",
            "value": "http://kmbr1.nitesbr1.org/UserFiles/File/images/happy.jpg"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--3778563b-b8d8-468c-a2d0-65f9eaa2143e",
            "value": "http://kmbr1.nitesbr1.org/UserFiles/File/image/home.html"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--9ecd4caf-04de-50a7-8167-508e0da44c35",
            "created": "2026-06-24T23:57:21.009797Z",
            "modified": "2026-06-24T23:57:21.009797Z",
            "name": "TEMP.Reaper"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--8f08ceb6-9e46-4dca-8a49-fbd9a6200939",
            "created_by_ref": "identity--5ace95f0-bd6c-4fee-a494-ca40e791918d",
            "created": "2026-06-24T23:57:21.014999Z",
            "modified": "2026-06-24T23:57:21.014999Z",
            "name": "NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT",
            "published": "2018-10-01T00:00:00Z",
            "object_refs": [
                "identity--5ace95f0-bd6c-4fee-a494-ca40e791918d",
                "file--57a8f931-fcf2-46ae-9b3a-a321cc34a3f1",
                "url--51715d0b-917f-4b8f-a52f-03e7967f1b17",
                "domain-name--c3382e18-9ae3-4546-bfb9-cf94babfff3b",
                "file--2a154381-cb93-47bf-a04a-ab773a630440",
                "file--811bd637-54ac-4878-b60f-23388419f5bc",
                "file--cf7723c4-113d-4204-bbb0-7f2486e14028",
                "file--cab0613f-eec7-4ef8-ab74-a4c1a20cb248",
                "file--42f4438c-f623-42b1-93c0-81c38fe04fe6",
                "file--62d23ea5-f4d8-4f91-b5db-a729ca223615",
                "file--bfce1d08-2680-4ec3-a163-beba306dc4cc",
                "file--fe495302-4fc0-4d80-b531-4c013e1f5d26",
                "file--bba80563-ac04-4e11-b8de-ad82041be93f",
                "file--33f552dd-1b27-4ea9-b3dd-6f83c6e3ee07",
                "file--a8b814a5-d58d-4dcd-890d-5aaebc13df60",
                "url--b78fdc71-51f4-4499-bf1d-a3b0a2840a80",
                "url--0a6011d6-c6e4-497d-b1a9-74084220894e",
                "url--3778563b-b8d8-468c-a2d0-65f9eaa2143e",
                "threat-actor--9ecd4caf-04de-50a7-8167-508e0da44c35"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://researchcenter.paloaltonetworks.com/2018/10/unit42-nokki-almost-ties-the-knot-with-dogcall-reaper-group-uses-new-malware-to-deploy-rat/"
                }
            ]
        }
    ]
}