{
    "type": "bundle",
    "id": "bundle--20a73a2c-fec5-4db1-8a73-7e30e73cf5e7",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--a361b290-d09a-4e0e-a13d-681ca0c3dcc7",
            "created": "2023-03-08T12:51:43.404685Z",
            "modified": "2024-08-31T04:09:59.408166Z",
            "name": "Microsoft",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--de4c8792-a94b-4136-ba47-f472db9b9bb4",
            "hashes": {
                "SHA-256": "8daa6b20caf4bf384cc7912a73f243ce6e2f07a5cb3b3e95303db931c3fe339f"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--0aa661bf-dd9e-4180-b834-eb16b7eb32a8",
            "hashes": {
                "SHA-256": "fed94f461145681dc9347b382497a72542424c64b6ae6fcf945f4becd2d46c32"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--cc5788f9-624e-461f-8e4f-5204141ceda1",
            "hashes": {
                "SHA-256": "1b88b939e5ec186b2d19aec8f17792d493d74dd6ab3d5a6ddc42bfe78b01aff1"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c66302a0-6f92-43a1-bf6a-c9a3887c50ab",
            "hashes": {
                "SHA-256": "f1662bee722a4e25614ed30933b0ced17b752d99fae868fbb326a46afa2282d5"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--61b19b4d-54e5-4b8b-b47b-0b704838d701",
            "hashes": {
                "SHA-256": "7339cfa5a67f5a4261c18839ef971d7f96eaf60a46190cab590b439c71c4742b"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--4d89b588-8043-4231-806c-a2765b499788",
            "hashes": {
                "SHA-256": "3098e6e7ae23b3b8637677da7bfc0ba720e557e6df71fa54a8ef1579b6746061"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--5871f132-d04f-4e95-a0f1-8393d49a6dbe",
            "hashes": {
                "SHA-256": "29c6044d65af0073424ccc01abcb8411cbdc52720cac957a3012773c4380bab3"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--cafeba5b-fab9-46ec-8127-1429b0d8715e",
            "hashes": {
                "SHA-256": "0837dd54268c373069fc5c1628c6e3d75eb99c3b3efc94c45b73e2cf9a6f3207"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7d6fae7c-2884-4c9a-a0d0-835929cef1c0",
            "hashes": {
                "SHA-256": "f32f6b229913d68daad937cc72a57aa45291a9d623109ed48938815aa7b6005c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--9b01b685-5bfa-4088-bceb-c84076445273",
            "hashes": {
                "SHA-256": "868a62feff8b46466e9d63b83135a7987bf6d332c13739aa11b747b3e2ad4bbf"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--159deccd-2ac9-4e81-9dea-0efc34266fc5",
            "hashes": {
                "MD5": "76cb5d1e6c2b6895428115705d9ac765"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--4ebacf1b-5add-4a1c-b433-9cc230c81d20",
            "hashes": {
                "SHA-1": "6624c7b8faac176d1c1cb10b03e7ee58a4853f91"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--01eaab1b-be72-4f4e-b129-9797d716858d",
            "value": "advice.uphearth.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--9c1aa9ee-f551-4aed-95f8-4ca65b327f14",
            "value": "ww3c.bounceme.net"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--a3f11f32-6983-42ce-bb4a-8b194b11be41",
            "value": "213.139.205.151"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--b97c0587-2852-4b88-88fb-4fa9e04ce130",
            "value": "84.38.134.56"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--6fd9c1b7-741d-460a-bb06-80c8874395fe",
            "value": "147.78.149.201"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--9dfda6db-2457-4484-a3da-031fcf7baeaf",
            "value": "45.155.37.101"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--02163e76-7d8b-42b0-99e7-263e7febc509",
            "value": "162.19.71.175"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--6d2400c6-7ca6-4429-8079-43649a50f92a",
            "value": "109.248.150.147"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--3746817f-0463-4855-a88f-fd7c9a97edfb",
            "value": "privatemake.bounceme.net"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--2affbaa4-5aae-53f8-8e70-9e82df1e8160",
            "created": "2026-06-24T22:42:00.712387Z",
            "modified": "2026-06-24T22:42:00.712387Z",
            "name": "OnyxSleet"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--3f869826-e95b-4c49-893d-30c6e5eaab89",
            "created_by_ref": "identity--a361b290-d09a-4e0e-a13d-681ca0c3dcc7",
            "created": "2026-06-24T22:42:00.719876Z",
            "modified": "2026-06-24T22:42:00.719876Z",
            "name": "Onyx Sleet uses array of malware to gather intelligence for North Korea",
            "published": "2024-07-25T00:00:00Z",
            "object_refs": [
                "identity--a361b290-d09a-4e0e-a13d-681ca0c3dcc7",
                "file--de4c8792-a94b-4136-ba47-f472db9b9bb4",
                "file--0aa661bf-dd9e-4180-b834-eb16b7eb32a8",
                "file--cc5788f9-624e-461f-8e4f-5204141ceda1",
                "file--c66302a0-6f92-43a1-bf6a-c9a3887c50ab",
                "file--61b19b4d-54e5-4b8b-b47b-0b704838d701",
                "file--4d89b588-8043-4231-806c-a2765b499788",
                "file--5871f132-d04f-4e95-a0f1-8393d49a6dbe",
                "file--cafeba5b-fab9-46ec-8127-1429b0d8715e",
                "file--7d6fae7c-2884-4c9a-a0d0-835929cef1c0",
                "file--9b01b685-5bfa-4088-bceb-c84076445273",
                "file--159deccd-2ac9-4e81-9dea-0efc34266fc5",
                "file--4ebacf1b-5add-4a1c-b433-9cc230c81d20",
                "domain-name--01eaab1b-be72-4f4e-b129-9797d716858d",
                "domain-name--9c1aa9ee-f551-4aed-95f8-4ca65b327f14",
                "ipv4-addr--a3f11f32-6983-42ce-bb4a-8b194b11be41",
                "ipv4-addr--b97c0587-2852-4b88-88fb-4fa9e04ce130",
                "ipv4-addr--6fd9c1b7-741d-460a-bb06-80c8874395fe",
                "ipv4-addr--9dfda6db-2457-4484-a3da-031fcf7baeaf",
                "ipv4-addr--02163e76-7d8b-42b0-99e7-263e7febc509",
                "ipv4-addr--6d2400c6-7ca6-4429-8079-43649a50f92a",
                "domain-name--3746817f-0463-4855-a88f-fd7c9a97edfb",
                "threat-actor--2affbaa4-5aae-53f8-8e70-9e82df1e8160"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.microsoft.com/en-us/security/blog/2024/07/25/onyx-sleet-uses-array-of-malware-to-gather-intelligence-for-north-korea/"
                }
            ]
        }
    ]
}