{
    "type": "bundle",
    "id": "bundle--f4f0d168-8c86-42c0-996b-8de2f5093fc3",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--2b96b5d7-2075-4d96-9706-4b67d615e67c",
            "created": "2023-03-08T12:51:44.657627Z",
            "modified": "2024-09-04T07:23:22.792387Z",
            "name": "Mandiant",
            "identity_class": "organization"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--71d4ea49-4988-4b3c-84bd-4f31527ec8b9",
            "value": "rentedpushy.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--259b13be-bcdf-45e6-8e75-eaecb0a04754",
            "value": "contortonset.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--1affa55e-6e89-4507-b620-7c5f9344320c",
            "value": "prontoposer.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--db0564ad-ee2f-4606-bb90-55fdab39b61e",
            "value": "basketsalute.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--84525935-37af-41e0-b781-a2ecdd4fa467",
            "value": "relysudden.com"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--cc3bb1f1-79d6-4ffa-acb5-22e59bb3fd27",
            "value": "146.19.173.125"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--ca954ea1-9fb0-4842-9292-ba01cf56aeef",
            "value": "198.244.135.250"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--2a5d89a1-dd07-4d36-a7e7-8f117dbc02a0",
            "value": "23.227.202.54"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--3ca3b805-e3fe-43f3-a4c4-14ff2aa472cf",
            "value": "38.132.124.88"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--d8fcdf99-f018-4884-8a4d-cd1c613efa4f",
            "value": "88.119.174.148"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--00cf72ca-df27-4da2-837a-1a2b9a84534d",
            "value": "primerosauxiliosperu.com"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7d56f756-0587-4c5a-aa68-8755cb590e78",
            "hashes": {
                "SHA-256": "5d18443f88f38ad7e3de62ac46489f649b4e8183b76fba902fb9a9ccf8a0d5c8"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--68a65c9c-bcba-4930-98e4-41af64ce50a7",
            "hashes": {
                "SHA-256": "9b1c1013ad8d2c0144af74eff5a2afc454b7b858bb7a5cba312bfb0f531c8930"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--631bef59-5da9-46ff-9a95-bc732dd8954b",
            "hashes": {
                "MD5": "48eaf2a7e97189709fb3789f0c662e1c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--f6b7c52d-8f0c-46b1-92fa-52081e4bef3f",
            "hashes": {
                "MD5": "27db0f17282a4c4507266f3c4d9c4527"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b81a44f3-1392-489f-a63d-85ce390c00aa",
            "hashes": {
                "SHA-256": "a8b1c5eb2254e1a3cec397576ef42da038600b4fa7cd1ab66472d8012baabf17"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--e12350ef-6cb0-4383-8923-6d7b2d46a6f4",
            "hashes": {
                "SHA-1": "c1fc3213bdb8f3139fd5d4b13e242441016c3c84"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b6e6dd6a-f25b-4e86-b32d-ffbbcb7df1f3",
            "hashes": {
                "MD5": "b0e0e0d258fcd55d3cc5af2b4669e014"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--edb6b082-e669-41a0-84a9-57565da06644",
            "hashes": {
                "SHA-256": "88f23c22a7f9da8b5087a3fa9c76fd5c79903d89ceda4152943cadc0797cbcb8"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c24aaf1f-587f-44a3-aaf2-f55cc54d8cb1",
            "hashes": {
                "SHA-256": "e901d9279d8f2ad96d741e7cd92770c0ce3ff3f4c029dbf26177b4e09228fe66"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--70b0c4bd-539b-427d-8432-ae3f12edb30f",
            "hashes": {
                "MD5": "15bfe67e912f224faef9c7f6968279c6"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--fe97c6ec-6894-4c1a-bb1e-0375d791c79a",
            "hashes": {
                "SHA-1": "e5d42bee74a1e1813e8aad9a46a5ebc219953926"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--be63d4f2-267b-44d0-9f3b-53805bcb39e9",
            "hashes": {
                "SHA-256": "6f1c47566a46d252885858f928a3b855fb3fd03941e3571d152562d0c75c4d47"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--34b256db-0ce4-40ac-b775-bb4c059f4a09",
            "hashes": {
                "MD5": "6d8194c003d0025fa92fbcbf2eadb6d1"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--73d2c1af-df28-45a3-bbb7-221c801c0425",
            "hashes": {
                "SHA-256": "f0854a28209e07a70d7847af4b2632e697bcb95f2c8fcead41eb9314710bd0c2"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--65b2e77f-4c2c-4d9e-9b86-ba072727aca1",
            "hashes": {
                "SHA-1": "55554944c2a6eb29a7bc3c73acdaa3e0a7a8d8c7"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--f7c1f698-2bae-404d-aeac-52d2b6f0688c",
            "hashes": {
                "SHA-256": "28c3d359364bf5d64a864f08d4743ea08e48017be27fda8cf53fb5ba307583b4"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--4d7983ab-9e0c-4856-89ac-d1289a9b35da",
            "hashes": {
                "MD5": "65baa3c1a22052fe1f70c9d2cbe11de4"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--f2e5236c-e4cc-4bdc-8483-856d7f3c9aa3",
            "hashes": {
                "SHA-256": "08607faad41009e31c094539b20b615b3e7a71e716f2bca12e4a097f38f14466"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--40f0d487-c4c3-4f68-95db-20399714f6e1",
            "hashes": {
                "SHA-1": "555549440ea0d64e96bb34428e08cc8d948b40e7"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--69a85969-4781-42c0-b37a-14109aa1bbc1",
            "hashes": {
                "MD5": "39a421ea89035ffcc3dea0cd0f10964e"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--8e387fbe-ef0a-42fa-9e92-64df16c84bf3",
            "hashes": {
                "SHA-256": "5701d7bcf809d5ffc9061daeb24d3e7cc6585d9b42bacf94fc68a6c500542f8c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--02c903f2-dee8-428d-9277-e240bfd1d446",
            "hashes": {
                "SHA-1": "ff975b95cfc65b6d19ca18993322cfeed282de04"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6f14a7cd-25ed-4b77-902a-b9966949483d",
            "hashes": {
                "SHA-256": "a90561efc22bdd777956cc67d5b67e3ec3c1b4f35a64f4328e40615d2ab24186"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6e070103-9aa5-4fad-a8b7-d36315beaebe",
            "hashes": {
                "SHA-1": "555549440fca1d2f1e613094b0c768d393f83d7f"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6529a78d-281c-4dad-9de5-9887852982ae",
            "hashes": {
                "MD5": "155597a7985cb8f7a6e748e5e108f637"
            }
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--a49cbd31-b55e-5342-b725-f8e47ed6ee5c",
            "created": "2026-06-24T17:28:16.673452Z",
            "modified": "2026-06-24T17:28:16.673452Z",
            "name": "UNC4899"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--94521cd0-130e-4871-abe9-a0da6ecb19bc",
            "created_by_ref": "identity--2b96b5d7-2075-4d96-9706-4b67d615e67c",
            "created": "2026-06-24T17:28:16.674599Z",
            "modified": "2026-06-24T17:28:16.674599Z",
            "name": "North Korea Leverages SaaS Provider in a Targeted Supply Chain Attack",
            "published": "2023-07-24T00:00:00Z",
            "object_refs": [
                "identity--2b96b5d7-2075-4d96-9706-4b67d615e67c",
                "domain-name--71d4ea49-4988-4b3c-84bd-4f31527ec8b9",
                "domain-name--259b13be-bcdf-45e6-8e75-eaecb0a04754",
                "domain-name--1affa55e-6e89-4507-b620-7c5f9344320c",
                "domain-name--db0564ad-ee2f-4606-bb90-55fdab39b61e",
                "domain-name--84525935-37af-41e0-b781-a2ecdd4fa467",
                "ipv4-addr--cc3bb1f1-79d6-4ffa-acb5-22e59bb3fd27",
                "ipv4-addr--ca954ea1-9fb0-4842-9292-ba01cf56aeef",
                "ipv4-addr--2a5d89a1-dd07-4d36-a7e7-8f117dbc02a0",
                "ipv4-addr--3ca3b805-e3fe-43f3-a4c4-14ff2aa472cf",
                "ipv4-addr--d8fcdf99-f018-4884-8a4d-cd1c613efa4f",
                "domain-name--00cf72ca-df27-4da2-837a-1a2b9a84534d",
                "file--7d56f756-0587-4c5a-aa68-8755cb590e78",
                "file--68a65c9c-bcba-4930-98e4-41af64ce50a7",
                "file--631bef59-5da9-46ff-9a95-bc732dd8954b",
                "file--f6b7c52d-8f0c-46b1-92fa-52081e4bef3f",
                "file--b81a44f3-1392-489f-a63d-85ce390c00aa",
                "file--e12350ef-6cb0-4383-8923-6d7b2d46a6f4",
                "file--b6e6dd6a-f25b-4e86-b32d-ffbbcb7df1f3",
                "file--edb6b082-e669-41a0-84a9-57565da06644",
                "file--c24aaf1f-587f-44a3-aaf2-f55cc54d8cb1",
                "file--70b0c4bd-539b-427d-8432-ae3f12edb30f",
                "file--fe97c6ec-6894-4c1a-bb1e-0375d791c79a",
                "file--be63d4f2-267b-44d0-9f3b-53805bcb39e9",
                "file--34b256db-0ce4-40ac-b775-bb4c059f4a09",
                "file--73d2c1af-df28-45a3-bbb7-221c801c0425",
                "file--65b2e77f-4c2c-4d9e-9b86-ba072727aca1",
                "file--f7c1f698-2bae-404d-aeac-52d2b6f0688c",
                "file--4d7983ab-9e0c-4856-89ac-d1289a9b35da",
                "file--f2e5236c-e4cc-4bdc-8483-856d7f3c9aa3",
                "file--40f0d487-c4c3-4f68-95db-20399714f6e1",
                "file--69a85969-4781-42c0-b37a-14109aa1bbc1",
                "file--8e387fbe-ef0a-42fa-9e92-64df16c84bf3",
                "file--02c903f2-dee8-428d-9277-e240bfd1d446",
                "file--6f14a7cd-25ed-4b77-902a-b9966949483d",
                "file--6e070103-9aa5-4fad-a8b7-d36315beaebe",
                "file--6529a78d-281c-4dad-9de5-9887852982ae",
                "threat-actor--a49cbd31-b55e-5342-b725-f8e47ed6ee5c"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.mandiant.com/resources/blog/north-korea-supply-chain"
                }
            ]
        }
    ]
}