{
    "type": "bundle",
    "id": "bundle--96a7e843-2931-495e-a051-0f6766e7aa39",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--2764b27d-9e36-419c-b1e3-dd5da021229e",
            "created": "2025-10-01T06:07:58.678038Z",
            "modified": "2025-10-01T06:07:58.678072Z",
            "name": "Siddhant",
            "identity_class": "organization"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--171ace22-d9bf-48dd-a224-5d83ac8212cf",
            "value": "conf.leoaura.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--3961ab59-ed2d-4c7b-bae6-31f02408cd45",
            "value": "exchange.fcis.ned.org"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--b08d2431-ece3-44df-b838-7de347468ce9",
            "value": "swi-nwv2.ad.plc.ned.org"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--ba533f09-a794-4d5d-a5b3-41297bc5d04b",
            "value": "163.29.149.131"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--037c1905-878c-498d-90a3-a856203d9faa",
            "value": "211.23.123.246"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--72edbc67-cc4a-473b-9fcf-3544ba0d517b",
            "value": "210.71.195.10"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--e1f5c136-4968-4860-8804-bb152c0ef4c9",
            "value": "13.224.163.100"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--63830358-8f2a-4324-9762-f612d23b1f96",
            "value": "tw.systexcloud.com"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--64ed7030-47ec-438d-a08f-aaf0cc6ef436",
            "value": "59.125.159.81"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--a01e27de-256e-4f94-88b2-6b149f7075f8",
            "value": "118.163.30.45"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--49b03dfa-8ba9-456b-9b85-bdc0af339441",
            "value": "163.29.3.119"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1",
            "created": "2026-06-24T21:04:38.202528Z",
            "modified": "2026-06-24T21:04:38.202528Z",
            "name": "Kimsuky"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--0fd12c1c-56ae-446d-a9ee-e5477a95b4bd",
            "created_by_ref": "identity--2764b27d-9e36-419c-b1e3-dd5da021229e",
            "created": "2026-06-24T21:04:38.227862Z",
            "modified": "2026-06-24T21:04:38.227862Z",
            "name": "Preliminary File List Analysis of Kimsuky / APT43 Leak",
            "published": "2025-09-26T00:00:00Z",
            "object_refs": [
                "identity--2764b27d-9e36-419c-b1e3-dd5da021229e",
                "domain-name--171ace22-d9bf-48dd-a224-5d83ac8212cf",
                "domain-name--3961ab59-ed2d-4c7b-bae6-31f02408cd45",
                "domain-name--b08d2431-ece3-44df-b838-7de347468ce9",
                "ipv4-addr--ba533f09-a794-4d5d-a5b3-41297bc5d04b",
                "ipv4-addr--037c1905-878c-498d-90a3-a856203d9faa",
                "ipv4-addr--72edbc67-cc4a-473b-9fcf-3544ba0d517b",
                "ipv4-addr--e1f5c136-4968-4860-8804-bb152c0ef4c9",
                "domain-name--63830358-8f2a-4324-9762-f612d23b1f96",
                "ipv4-addr--64ed7030-47ec-438d-a08f-aaf0cc6ef436",
                "ipv4-addr--a01e27de-256e-4f94-88b2-6b149f7075f8",
                "ipv4-addr--49b03dfa-8ba9-456b-9b85-bdc0af339441",
                "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://medium.com/@siddhantalokmishra/preliminary-file-list-analysis-of-kimsuky-apt43-leak-77b863e40c52"
                }
            ]
        }
    ]
}