{
    "type": "bundle",
    "id": "bundle--3bb23971-d299-48fe-a60f-84f007e65080",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--f4803e7d-b579-4a46-8dc1-0c877555140c",
            "created": "2025-11-15T02:32:04.845014Z",
            "modified": "2025-11-15T02:32:47.992201Z",
            "name": "StealthMole",
            "identity_class": "organization"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--9c060559-34ef-4265-ac9a-9e3daf6ceee6",
            "value": "oiaglobal.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--8818a5e4-1a5b-4770-a32b-1e72ddcbced3",
            "value": "hoonet.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--1b8f8251-8eee-4b0f-ac6c-aae68df5a065",
            "value": "chosunexpo.com"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--a6b38f84-4a9c-5481-ad0c-9b5ee8bd5a96",
            "created": "2026-06-24T21:08:49.436675Z",
            "modified": "2026-06-24T21:08:49.436675Z",
            "name": "APT38"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b",
            "created": "2026-06-24T21:08:49.439013Z",
            "modified": "2026-06-24T21:08:49.439013Z",
            "name": "Lazarus"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--1897c53c-e47b-4aff-a1f3-40e671994413",
            "created_by_ref": "identity--f4803e7d-b579-4a46-8dc1-0c877555140c",
            "created": "2026-06-24T21:08:49.440022Z",
            "modified": "2026-06-24T21:08:49.440022Z",
            "name": "Revisiting the Lazarus Operator: Mapping Park Jin Hyok\u2019s Digital Footprint Using StealthMole",
            "published": "2025-11-14T00:00:00Z",
            "object_refs": [
                "identity--f4803e7d-b579-4a46-8dc1-0c877555140c",
                "domain-name--9c060559-34ef-4265-ac9a-9e3daf6ceee6",
                "domain-name--8818a5e4-1a5b-4770-a32b-1e72ddcbced3",
                "domain-name--1b8f8251-8eee-4b0f-ac6c-aae68df5a065",
                "threat-actor--a6b38f84-4a9c-5481-ad0c-9b5ee8bd5a96",
                "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://stealthmole-intelligence-hub.blogspot.com/2025/11/revisiting-lazarus-operator-mapping.html"
                }
            ]
        }
    ]
}