{
    "type": "bundle",
    "id": "bundle--0c355b2e-3e1a-406f-9be1-bcb1971a03c2",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--ce40c63e-51d4-4ec5-a85b-2d76cd5ec7d1",
            "created": "2023-03-08T12:52:07.036238Z",
            "modified": "2025-06-18T12:58:21.951363Z",
            "name": "CiscoTalos",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--9fd80d16-32eb-4bad-9b26-f26499b4a968",
            "hashes": {
                "SHA-256": "dddc57299857e6ecb2b80cbab2ae6f1978e89c4bfe664c7607129b0fc8db8b1f"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--13bf5a61-ad6e-45be-9075-15375c01093c",
            "hashes": {
                "SHA-256": "5498c3eb2fb335aadcaf6c5d60560c5d2525997ba6af39b191f6092cb70a3aa6"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--0831511e-df70-48b3-ae3d-58c66dc3a15f",
            "value": "o61666ch.getenjoyment.net"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--aa53de3a-81d7-407c-a6e0-166db4ea0c55",
            "hashes": {
                "SHA-256": "5e3907e9e2ed8ff12bb4e96b52401d871526c5ed502d2149dd4f680da4925590"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c1ed97e8-1efb-4c95-93dd-2571a0173c44",
            "hashes": {
                "SHA-256": "85f6db3a74a4f1a367cc0b60b190c5da56cd0116c1d6a20fd7b51cda8f8948d8"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6e077663-94cd-4db4-ae79-cf309e538912",
            "hashes": {
                "SHA-256": "4b0e2244f82170f4e569bb6b100890ec117458bf5cc835fd7bd991f0d334318b"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6d1368b2-b282-4e26-8d02-d0b1c2b8efc0",
            "hashes": {
                "SHA-256": "de0932206c4d531ab4325c0ec8f025108a6807478eb5d744905560ae119fc6fa"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--54b90965-7a8e-4555-93a8-888706a9ebb0",
            "hashes": {
                "SHA-256": "99b516acd059a4b88f281214d849c5134aa1cea936d69e8eb7393b22be0508a0"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7d6c9e7a-e876-46ec-9018-e56459e212e4",
            "hashes": {
                "SHA-256": "395eebf586d5fc033e22235f7a4224e91ad5dce8570023669c6dee97d04aa21d"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d62821ac-f790-46ae-9e7e-c0cb61217517",
            "hashes": {
                "SHA-256": "e929f23c242cc102a16f5466163622585455aee7b6ed3f98d12787086b14e721"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6794a3ef-5573-4a6f-95eb-45356126ec11",
            "hashes": {
                "SHA-256": "595be57cb6f025ec5753fbe72222e3f7c02b8cb27b438d48286375adbcf427c6"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--cfff7f89-c788-4e7f-807f-2534da331e0e",
            "hashes": {
                "SHA-256": "bb0a3c784e55bd25f845644b69c57e3e470af51983617fdfe7ba5d253019ed24"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7e7f9f9f-4502-45c0-ba95-5a3117918b43",
            "hashes": {
                "SHA-256": "5563599441935e3c0c8bdd42ec2c35b78f8376b6c9560898ef6401531058eb87"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--db5b936e-2ce9-4b9b-b9ae-5372c59b449f",
            "hashes": {
                "SHA-256": "873b8fb97b4b0c6d7992f6af15653295788526def41f337c651dc64e8e4aeebd"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d39eb76c-07a8-4866-98fb-79682e9f88db",
            "hashes": {
                "SHA-256": "f4d06956085d2305c19dd78c6d01b06f17ab43e9dd4808885fd08d5da08dd9d2"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c72ab080-d89e-4f8a-99ae-c0f40281922d",
            "hashes": {
                "SHA-256": "c43475601f330a5a17a50f075696e058429656db54cdfcbdccb0fb93446f6ac9"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--82bc2e04-212b-494f-8ea3-0ca9979f3730",
            "hashes": {
                "SHA-256": "048f3564d5c4d3e0e3b879f33f3b8d340b692f505515e81f192544b98e269ccf"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--8e892cda-c3e4-4f92-bf11-fa10a4b11385",
            "hashes": {
                "SHA-256": "4b244ac09e4b46792661754bd5d386e8b1a168cb1d5ed440df04c1c2928cb84d"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--9bc63c5f-db29-46cc-945c-a9e06321db74",
            "hashes": {
                "SHA-256": "36187cd4bc18e4d6ddc5c96dc0ed038bfec751dac4f5354398fdaa89d9fcacd1"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--2678911e-5499-4bfa-a7c6-733fcba8d236",
            "value": "pcsecucheck.scienceontheweb.net"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--665a90b5-e057-4494-9448-84dcd30964c4",
            "value": "http://eucie09111.myartsonline.com/0502/v.php"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--03771dcd-265f-4d52-8488-0bcfd24143f9",
            "value": "eucie09111.myartsonline.com"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--014d9ce1-b786-497c-9dbb-31db87d78f02",
            "hashes": {
                "SHA-256": "811b42bb169f02d1b0b3527e2ca6c00630bebd676b235cd4e391e9e595f9dfa8"
            }
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1",
            "created": "2026-06-24T21:18:31.307378Z",
            "modified": "2026-06-24T21:18:31.307378Z",
            "name": "Kimsuky"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--fd90c4da-9534-4226-a56c-6a25e8ff765b",
            "created_by_ref": "identity--ce40c63e-51d4-4ec5-a85b-2d76cd5ec7d1",
            "created": "2026-06-24T21:18:31.311332Z",
            "modified": "2026-06-24T21:18:31.311332Z",
            "name": "North Korean attackers use malicious blogs to deliver malware to high-profile South Korean targets",
            "published": "2021-11-10T00:00:00Z",
            "object_refs": [
                "identity--ce40c63e-51d4-4ec5-a85b-2d76cd5ec7d1",
                "file--9fd80d16-32eb-4bad-9b26-f26499b4a968",
                "file--13bf5a61-ad6e-45be-9075-15375c01093c",
                "domain-name--0831511e-df70-48b3-ae3d-58c66dc3a15f",
                "file--aa53de3a-81d7-407c-a6e0-166db4ea0c55",
                "file--c1ed97e8-1efb-4c95-93dd-2571a0173c44",
                "file--6e077663-94cd-4db4-ae79-cf309e538912",
                "file--6d1368b2-b282-4e26-8d02-d0b1c2b8efc0",
                "file--54b90965-7a8e-4555-93a8-888706a9ebb0",
                "file--7d6c9e7a-e876-46ec-9018-e56459e212e4",
                "file--d62821ac-f790-46ae-9e7e-c0cb61217517",
                "file--6794a3ef-5573-4a6f-95eb-45356126ec11",
                "file--cfff7f89-c788-4e7f-807f-2534da331e0e",
                "file--7e7f9f9f-4502-45c0-ba95-5a3117918b43",
                "file--db5b936e-2ce9-4b9b-b9ae-5372c59b449f",
                "file--d39eb76c-07a8-4866-98fb-79682e9f88db",
                "file--c72ab080-d89e-4f8a-99ae-c0f40281922d",
                "file--82bc2e04-212b-494f-8ea3-0ca9979f3730",
                "file--8e892cda-c3e4-4f92-bf11-fa10a4b11385",
                "file--9bc63c5f-db29-46cc-945c-a9e06321db74",
                "domain-name--2678911e-5499-4bfa-a7c6-733fcba8d236",
                "url--665a90b5-e057-4494-9448-84dcd30964c4",
                "domain-name--03771dcd-265f-4d52-8488-0bcfd24143f9",
                "file--014d9ce1-b786-497c-9dbb-31db87d78f02",
                "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://blog.talosintelligence.com/2021/11/kimsuky-abuses-blogs-delivers-malware.html"
                }
            ]
        }
    ]
}