{
    "type": "bundle",
    "id": "bundle--4581ea5c-e029-4fb0-b2e8-23c41055d7f2",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--e8d92f95-2fa7-40c6-ae51-176a72b21b1a",
            "created": "2023-03-08T12:51:54.465531Z",
            "modified": "2023-03-08T12:51:54.465608Z",
            "name": "Intezer",
            "identity_class": "organization"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--b7310525-9a98-4bbe-b26f-2a00e585dfe6",
            "value": "pudn.com"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--99e42af6-5cce-4434-978d-e102d1a8d159",
            "hashes": {
                "SHA-256": "d1cf03fbcb6471d44b914c2720821582fb3dd81cb543f325b2780a5e95046395"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--530e4019-12a4-45ea-b746-8e6accda3d6d",
            "hashes": {
                "SHA-256": "f4b7b36e9c940937748d5bba3beb82b7c3636f084e5e913c7a5ad3ad623ffbc5"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--960b860e-d856-410e-9405-1488dc5c0a9d",
            "hashes": {
                "SHA-256": "4915f53221dc7786710a7a82a9cb00cf8468e0d1155a1355c9eb17e8cddfd265"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--64f41088-5295-4c43-8ed0-e8994b71abd4",
            "hashes": {
                "SHA-256": "c62ec66e45098d2c41bfd7a674a5f76248cf4954225c2d3a2cfcd023daa93522"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--82cdc496-1ab5-4fe1-9586-a61ed6fc6623",
            "hashes": {
                "SHA-256": "458ffcc41959599f8dab1fd4366c9a50efefa376e42971c4a436aa7fd697a396"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--32d6c5a5-106a-460b-a2d1-a25154621215",
            "hashes": {
                "SHA-256": "6724c041fe0df61a619006bf1df4a759f4f22a65e2afda32501760ebc9ebe25d"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--f5f6d049-ad4a-482f-a436-b1dd447c82ba",
            "hashes": {
                "SHA-256": "ec73fe2ecc2e0425e4aeb1f01581b50c5b1f8e85475c20ea409de798e6469608"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--4d0c7b96-e0eb-48d8-813b-27242fb5911c",
            "hashes": {
                "SHA-256": "1b6a1320fba00dd2e56e35cf6f11f941deabcb6e4dba7ea773ded7e3d648ec54"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--2c9c0415-2cbc-4bc8-9d7d-efa3d4622d40",
            "hashes": {
                "SHA-256": "926a2e8c2baa90d504d48c0d50ca73e0f400d565ee6e07ad6dafdd0d7b948b0e"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--cbee9d7d-0038-49cd-8896-088496af3260",
            "hashes": {
                "SHA-256": "068b89e2ec5655d006f2788ea328e5f12bd57ba761ee03c4de2fb0aa01c92c7f"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--e5078750-3b28-42ca-8023-64e0c9b9b38a",
            "value": "http://ready-jetkorea.com/data/file/pop/write_ok.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--8e67934c-a131-40f2-8277-079e4ed94569",
            "value": "http://plsong.com/xe/addons/counter/conf/write_ok.php"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--a216477e-e704-4f01-bd08-af9371f70ad0",
            "value": "ready-jetkorea.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--0cd2c34c-818e-4257-bd28-78be8602113a",
            "value": "plsong.com"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b",
            "created": "2026-06-24T18:43:03.370605Z",
            "modified": "2026-06-24T18:43:03.370605Z",
            "name": "Lazarus"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--e02750dc-d850-4ddb-922a-dac8b60d710d",
            "created_by_ref": "identity--e8d92f95-2fa7-40c6-ae51-176a72b21b1a",
            "created": "2026-06-24T18:43:03.371644Z",
            "modified": "2026-06-24T18:43:03.371644Z",
            "name": "Paleontology: The Unknown Origins of Lazarus malware",
            "published": "2018-10-31T00:00:00Z",
            "object_refs": [
                "identity--e8d92f95-2fa7-40c6-ae51-176a72b21b1a",
                "domain-name--b7310525-9a98-4bbe-b26f-2a00e585dfe6",
                "file--99e42af6-5cce-4434-978d-e102d1a8d159",
                "file--530e4019-12a4-45ea-b746-8e6accda3d6d",
                "file--960b860e-d856-410e-9405-1488dc5c0a9d",
                "file--64f41088-5295-4c43-8ed0-e8994b71abd4",
                "file--82cdc496-1ab5-4fe1-9586-a61ed6fc6623",
                "file--32d6c5a5-106a-460b-a2d1-a25154621215",
                "file--f5f6d049-ad4a-482f-a436-b1dd447c82ba",
                "file--4d0c7b96-e0eb-48d8-813b-27242fb5911c",
                "file--2c9c0415-2cbc-4bc8-9d7d-efa3d4622d40",
                "file--cbee9d7d-0038-49cd-8896-088496af3260",
                "url--e5078750-3b28-42ca-8023-64e0c9b9b38a",
                "url--8e67934c-a131-40f2-8277-079e4ed94569",
                "domain-name--a216477e-e704-4f01-bd08-af9371f70ad0",
                "domain-name--0cd2c34c-818e-4257-bd28-78be8602113a",
                "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.intezer.com/paleontology-the-unknown-origins-of-lazarus-malware/"
                }
            ]
        }
    ]
}