{
    "type": "bundle",
    "id": "bundle--ef82f2df-fa4b-4079-94fe-161462bfdf48",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--6b1d3dfe-e4c1-47eb-9e38-bb509a96d883",
            "created": "2024-11-06T00:58:43.491961Z",
            "modified": "2024-11-06T01:01:17.692995Z",
            "name": "Rewterz",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--1969b8f0-b1cb-4772-9d3a-f26928f395ee",
            "hashes": {
                "MD5": "529fe6eff1cf452680976087e2250c02"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--5e7e1ca2-64d0-4069-a5c6-e1e97ff1a37d",
            "hashes": {
                "SHA-1": "7e07765bf8ee2d0b2233039623016d6dfb610a6d"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--ab43bc8d-ad84-4fc7-8ccd-25ba47fe8012",
            "value": "buy2x.com"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--cc963bdb-c49d-46e9-969b-8f25500331b3",
            "hashes": {
                "SHA-256": "bd2aa5805b76f272b43a595b3d73e29d0fc4647e15e87950b8f904ea26dcf053"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--32ac2ef7-066f-4e2f-85f2-1a19f8892238",
            "value": "analysis.arkinvst.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--adc17b92-c116-439d-9a2b-72e9b671aa8c",
            "value": "maelstromfund.org"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--864c7b13-833a-4192-91fc-e2aa4c958d20",
            "value": "atajerefoods.com"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--53bd31cf-910d-4b94-bb59-4095d39b46c9",
            "value": "23.254.253.75"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--dce4b1c4-efd9-4f26-b555-430173764daa",
            "value": "144.172.74.23"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--942afbba-9e4a-4849-b6a4-265e9064b47e",
            "value": "144.172.74.141"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--3567c372-f84e-42ec-8e28-0b728b755036",
            "value": "172.86.108.47"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--ec6083e6-9375-47b8-872b-37a8bd9d067a",
            "value": "45.61.135.105"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--83f1bc70-2c82-426b-bc90-229743dd7fab",
            "value": "45.61.128.122"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--b730c154-95d9-467e-bbd3-97701360a28d",
            "value": "45.61.140.26"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--c50d42cc-fefc-4c66-be9d-fd75d4eca007",
            "value": "216.107.136.10"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--f7f0d913-f17b-5632-a48a-76b4eef8a1cb",
            "created": "2026-06-24T23:58:34.230592Z",
            "modified": "2026-06-24T23:58:34.230592Z",
            "name": "Bluenoroff"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--0ca7cc1f-f4a8-41c5-b7c9-11e59424df62",
            "created_by_ref": "identity--6b1d3dfe-e4c1-47eb-9e38-bb509a96d883",
            "created": "2026-06-24T23:58:34.233636Z",
            "modified": "2026-06-24T23:58:34.233636Z",
            "name": "North Korean Threat Actors Deploy Hidden Risk Malware on macOS to Target Crypto Firms \u2013 Active IOCs",
            "published": "2024-11-08T00:00:00Z",
            "object_refs": [
                "identity--6b1d3dfe-e4c1-47eb-9e38-bb509a96d883",
                "file--1969b8f0-b1cb-4772-9d3a-f26928f395ee",
                "file--5e7e1ca2-64d0-4069-a5c6-e1e97ff1a37d",
                "domain-name--ab43bc8d-ad84-4fc7-8ccd-25ba47fe8012",
                "file--cc963bdb-c49d-46e9-969b-8f25500331b3",
                "domain-name--32ac2ef7-066f-4e2f-85f2-1a19f8892238",
                "domain-name--adc17b92-c116-439d-9a2b-72e9b671aa8c",
                "domain-name--864c7b13-833a-4192-91fc-e2aa4c958d20",
                "ipv4-addr--53bd31cf-910d-4b94-bb59-4095d39b46c9",
                "ipv4-addr--dce4b1c4-efd9-4f26-b555-430173764daa",
                "ipv4-addr--942afbba-9e4a-4849-b6a4-265e9064b47e",
                "ipv4-addr--3567c372-f84e-42ec-8e28-0b728b755036",
                "ipv4-addr--ec6083e6-9375-47b8-872b-37a8bd9d067a",
                "ipv4-addr--83f1bc70-2c82-426b-bc90-229743dd7fab",
                "ipv4-addr--b730c154-95d9-467e-bbd3-97701360a28d",
                "ipv4-addr--c50d42cc-fefc-4c66-be9d-fd75d4eca007",
                "threat-actor--f7f0d913-f17b-5632-a48a-76b4eef8a1cb"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.rewterz.com/threat-advisory/north-korean-threat-actors-deploy-hidden-risk-malware-on-macos-to-target-crypto-firms-active-iocs"
                }
            ]
        }
    ]
}