{
    "type": "bundle",
    "id": "bundle--f64a46f9-60c9-496e-af90-4b1ad6e8bb04",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--6b1d3dfe-e4c1-47eb-9e38-bb509a96d883",
            "created": "2024-11-06T00:58:43.491961Z",
            "modified": "2024-11-06T01:01:17.692995Z",
            "name": "Rewterz",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--901081e8-5066-494b-a9c3-a009d01b19d0",
            "hashes": {
                "MD5": "a6598bbdc947286c84f951289d14425c"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--064c2fb5-c75e-484a-bfe9-71c0af0c5e62",
            "value": "mrasis.n-e.kr"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--293e55da-67da-4cbb-b572-5039f02e140f",
            "hashes": {
                "MD5": "85f5075610661c9706571a33548d7585"
            }
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--5a0e255a-5bae-48c8-89b5-3e0cc58c9e27",
            "value": "101.36.114.190"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b2885de4-3ad3-462e-8914-efa6dfe72324",
            "hashes": {
                "SHA-1": "07c7cf4441254e8754aa62150bf8c5365c3825f4"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--031e1ff3-57f7-4278-b7b8-948d523a574a",
            "hashes": {
                "SHA-256": "5f23b1ca43f6a18e3c9f21d390f5d1e187b1339b07a1dce70f8338f3be320878"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--1a3b8c5f-c653-478a-bc60-6b68131e2675",
            "value": "http://mrasis.n-e.kr/"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--33aa2d42-2fc4-45b3-9a01-28ca2de7d07b",
            "hashes": {
                "SHA-256": "6ffb5106d912e582bde2c095365fa37a441741e4b9ea7f856b2ecad9516b74c2"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--dbfa5cbf-fd9a-4217-9257-3a017c445330",
            "hashes": {
                "SHA-1": "bc36b9e8cf23dc0287f090a5c0bad3b391d00f86"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--f55dc721-3a25-4941-bfb8-b4740de0335c",
            "hashes": {
                "MD5": "ba00e1a70e5da6ed610652a93e7cc7dd"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--1d2d3129-1eba-4818-95ca-bd98dedfef00",
            "hashes": {
                "SHA-256": "784d5df037879ed47cf46f8b2ec2c54e3c590805dbc05539ddd8c328215644a7"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c4cd23a3-6f7d-4046-937d-3d41beadef27",
            "hashes": {
                "SHA-1": "2bd2657c4924e2cb6f2ae33997262c7cd8432fe1"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--2b7c2863-b604-4481-af4f-a6f2ea688daf",
            "hashes": {
                "SHA-1": "d5eb074d6db0e5b0725389236e883915d629de21"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--91f75582-3d9d-4e17-b192-14a21336ef2c",
            "hashes": {
                "SHA-256": "3cc47aea39c48aa22fbf246f11cd4aaa8179efa48bb1c3e30fbf70541fe2cf87"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--42a4c5ff-a21e-4b75-8161-5fbc598e68df",
            "hashes": {
                "MD5": "d414e3718ad82a9925339ac8338b77a6"
            }
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1",
            "created": "2026-06-24T21:09:27.546183Z",
            "modified": "2026-06-24T21:09:27.546183Z",
            "name": "Kimsuky"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--482d4b08-88e0-42ae-ba54-cf4caea2fc2e",
            "created_by_ref": "identity--6b1d3dfe-e4c1-47eb-9e38-bb509a96d883",
            "created": "2026-06-24T21:09:27.54723Z",
            "modified": "2026-06-24T21:09:27.54723Z",
            "name": "North Korean APT Kimsuky aka Black Banshee \u2013 Active IOCs",
            "published": "2025-03-17T00:00:00Z",
            "object_refs": [
                "identity--6b1d3dfe-e4c1-47eb-9e38-bb509a96d883",
                "file--901081e8-5066-494b-a9c3-a009d01b19d0",
                "domain-name--064c2fb5-c75e-484a-bfe9-71c0af0c5e62",
                "file--293e55da-67da-4cbb-b572-5039f02e140f",
                "ipv4-addr--5a0e255a-5bae-48c8-89b5-3e0cc58c9e27",
                "file--b2885de4-3ad3-462e-8914-efa6dfe72324",
                "file--031e1ff3-57f7-4278-b7b8-948d523a574a",
                "url--1a3b8c5f-c653-478a-bc60-6b68131e2675",
                "file--33aa2d42-2fc4-45b3-9a01-28ca2de7d07b",
                "file--dbfa5cbf-fd9a-4217-9257-3a017c445330",
                "file--f55dc721-3a25-4941-bfb8-b4740de0335c",
                "file--1d2d3129-1eba-4818-95ca-bd98dedfef00",
                "file--c4cd23a3-6f7d-4046-937d-3d41beadef27",
                "file--2b7c2863-b604-4481-af4f-a6f2ea688daf",
                "file--91f75582-3d9d-4e17-b192-14a21336ef2c",
                "file--42a4c5ff-a21e-4b75-8161-5fbc598e68df",
                "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://rewterz.com/threat-advisory/north-korean-apt-kimsuky-aka-black-banshee-active-iocs-43"
                }
            ]
        }
    ]
}