{
    "type": "bundle",
    "id": "bundle--1963cc88-2dc5-44cd-9778-d22bc97383e6",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--eb598878-0b17-4931-b953-3d68af6c0023",
            "created": "2023-11-08T12:29:58.001081Z",
            "modified": "2025-02-11T13:00:56.882042Z",
            "name": "AnyRun",
            "identity_class": "organization"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--61c47429-679d-4199-a0f4-99d2addb5599",
            "value": "151.243.101.229"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--f7b5673b-f9d2-487a-bd68-f80460416407",
            "hashes": {
                "SHA-256": "c7ecf8be40c1e9a9a8c3d148eb2ae2c0c64119ab46f51f603a00b812a7be3b45"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--dd8f4ff2-1352-4bb3-a306-85b3b3e8b886",
            "hashes": {
                "SHA-256": "bb794019f8a63966e4a16063dc785fafe8a5f7c7553bcd3da661c7054c6674c7"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--f7fa78a7-e3f7-4dde-b6d1-0dbd81596c3c",
            "hashes": {
                "SHA-256": "c4fd45bb8c33a5b0fa5189306eb65fa3db53a53c1092078ec62f3fc19bc05dcb"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--dec51aab-ba2e-4bfb-92a9-d20f357a538a",
            "hashes": {
                "SHA-256": "a179caf1b7d293f7c14021b80deecd2b42bbd409e052da767e0d383f71625940"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--cebe6d99-bb74-4a5a-be8f-d24692633e1c",
            "hashes": {
                "SHA-256": "ef04a839f60911a5df2408aebd6d9af432229d95b4814132ee589f178005c72f"
            }
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--6e381aab-f36d-42c1-bfc9-c3b518fcb304",
            "value": "13.107.246.45"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--1d227bee-f26c-5f74-a3f8-5bdb18774b64",
            "created": "2026-06-24T21:10:45.04689Z",
            "modified": "2026-06-24T21:10:45.04689Z",
            "name": "FamousChollima"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--5e225fdb-9f28-4565-9162-cab49a3dfad5",
            "created_by_ref": "identity--eb598878-0b17-4931-b953-3d68af6c0023",
            "created": "2026-06-24T21:10:45.056374Z",
            "modified": "2026-06-24T21:10:45.056374Z",
            "name": "PyLangGhost RAT: Rising Data Stealer from Lazarus Group Targeting Finance and Technology",
            "published": "2025-08-06T00:00:00Z",
            "object_refs": [
                "identity--eb598878-0b17-4931-b953-3d68af6c0023",
                "ipv4-addr--61c47429-679d-4199-a0f4-99d2addb5599",
                "file--f7b5673b-f9d2-487a-bd68-f80460416407",
                "file--dd8f4ff2-1352-4bb3-a306-85b3b3e8b886",
                "file--f7fa78a7-e3f7-4dde-b6d1-0dbd81596c3c",
                "file--dec51aab-ba2e-4bfb-92a9-d20f357a538a",
                "file--cebe6d99-bb74-4a5a-be8f-d24692633e1c",
                "ipv4-addr--6e381aab-f36d-42c1-bfc9-c3b518fcb304",
                "threat-actor--1d227bee-f26c-5f74-a3f8-5bdb18774b64"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://any.run/cybersecurity-blog/pylangghost-malware-analysis/"
                }
            ]
        }
    ]
}