{
    "type": "bundle",
    "id": "bundle--af91b81b-f59a-411f-bd3e-9dc8732f5e15",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--6b1d3dfe-e4c1-47eb-9e38-bb509a96d883",
            "created": "2024-11-06T00:58:43.491961Z",
            "modified": "2024-11-06T01:01:17.692995Z",
            "name": "Rewterz",
            "identity_class": "organization"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--017fa299-6c80-47b9-aee0-2964427a8c43",
            "value": "o-r.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--cb709de6-361c-440f-b1ce-ab4d788f910e",
            "value": "r-e.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--2f68aa74-9e4f-458c-9fa4-ebb70c088a23",
            "value": "n-e.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--c011836e-7993-481f-b16a-eccba26878ee",
            "value": "nts-service.o-r.kr"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--072627cd-09e9-4fac-bd48-c6d45b373906",
            "value": "72.14.155.62"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1",
            "created": "2026-06-24T18:42:14.812847Z",
            "modified": "2026-06-24T18:42:14.812847Z",
            "name": "Kimsuky"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--6b3a2e51-c94f-4171-b6a6-b106ee17307e",
            "created_by_ref": "identity--6b1d3dfe-e4c1-47eb-9e38-bb509a96d883",
            "created": "2026-06-24T18:42:14.813914Z",
            "modified": "2026-06-24T18:42:14.813914Z",
            "name": "North Korean APT Kimsuky aka Black Banshee \u2013 Active IOCs",
            "published": "2024-12-31T00:00:00Z",
            "object_refs": [
                "identity--6b1d3dfe-e4c1-47eb-9e38-bb509a96d883",
                "domain-name--017fa299-6c80-47b9-aee0-2964427a8c43",
                "domain-name--cb709de6-361c-440f-b1ce-ab4d788f910e",
                "domain-name--2f68aa74-9e4f-458c-9fa4-ebb70c088a23",
                "domain-name--c011836e-7993-481f-b16a-eccba26878ee",
                "ipv4-addr--072627cd-09e9-4fac-bd48-c6d45b373906",
                "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.rewterz.com/threat-advisory/north-korean-apt-kimsuky-aka-black-banshee-active-iocs-37856"
                }
            ]
        }
    ]
}