{
    "type": "bundle",
    "id": "bundle--f2de0abb-d748-4b03-9493-08441019f93a",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--5ace95f0-bd6c-4fee-a494-ca40e791918d",
            "created": "2023-03-08T12:51:44.544245Z",
            "modified": "2024-09-09T23:28:33.92829Z",
            "name": "PaloaltoNetworks",
            "identity_class": "organization"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--a253b521-8b49-424e-8184-c376bea854c5",
            "value": "5.255.101.148"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--fe1d9764-f9c7-445f-baf2-44195e9ed987",
            "hashes": {
                "SHA-256": "c379f4ab29a49d4bccb232c8551d1b8b01e64440ea495bbabef9010a519516c3"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7a67b32b-6310-4813-981d-8d35ba685b33",
            "hashes": {
                "SHA-256": "2b8c057cf071bcd548d23bc7d73b4a90745e3ff22e5cddcc71fa34ecbf76a8b5"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b45ea21d-3631-4742-b949-139c49d9329b",
            "hashes": {
                "SHA-256": "b5119a49830a2044f406645c261e54ab335c9b1e1ed320df758405a8147fae88"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6bb348d3-e393-4891-a63a-ea7139ce418e",
            "hashes": {
                "SHA-256": "97abafff549ea21797c135c965c5e4a46a44ec7353b2edd293e8a22d5954b6aa"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--f3ed09d7-0432-4e5d-b02f-00e87994aeb4",
            "hashes": {
                "SHA-256": "a5b7ddd12539ce3e8c08bed5855ddcea3217d41d7d4c58fcc1a7e01336b38912"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--bf4fe4d4-579f-48b1-a361-5ca01a19d2d7",
            "hashes": {
                "SHA-256": "77361f7ef25a0185636a0fc6deff2e9986720223da9d6b1494f671082105bebb"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--de03440e-559d-4ddb-866d-94f0ed2b6652",
            "hashes": {
                "SHA-256": "baa676b671e771bf04b245e648f49516b338e1f49cbd9b4d237cc36d57ab858d"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--5e1b1cd4-950c-4dfe-8606-21b3dd705416",
            "hashes": {
                "SHA-256": "adde2970b40634e91b9ef8520f8e50eaa7901a65f9230e65d7995ac1a47700ef"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--e02b896c-1a21-4773-b348-995eaf307a76",
            "hashes": {
                "SHA-256": "8be62324fe5af009c12fb9afc8d4f47d12c98ea680bff490b3f5e0c72c8f9617"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--3aa46526-e99c-411d-8d1c-49904a82c2c2",
            "hashes": {
                "SHA-256": "8f0e2b8b3e07f5761066cb00bc0db10d68c56ada8c054e9f07990cc1ac5ae962"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--f8e419dd-e89a-4168-b5a9-135262146491",
            "hashes": {
                "SHA-256": "c42b103b42d7e9817f93cb66716b7bf2e4fe73a405e0fbbae0806ce8b248a304"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--f155d6ed-1de8-405b-8e66-f16ea2416cbc",
            "hashes": {
                "SHA-256": "76f96a35b6f638eed779dc127f29a5b537ffc3bb7accc2c9bfab5a2120ea6bc9"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--fd38b86f-580c-4bd9-a34f-4cfd9b516dfe",
            "hashes": {
                "SHA-256": "27fcc3278afbbec44737e9f72666946607fea819f5b1cb9fbbe268037a561f0b"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--f3db7136-7501-4345-a956-3a97f3dd9068",
            "hashes": {
                "SHA-256": "b5412375477a180608bf410f5cb36b4a0949bee7663648a06879f42be9a3b6bc"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--f9ccc38b-47b9-48e7-9871-d1cdf760244f",
            "hashes": {
                "SHA-256": "17064520feaf5804aa725e123b24fd0f73f8afc9b7f4361650cd11ddf4ee768f"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ccbd2e27-a8ff-41e0-859b-53d45fe7ea71",
            "hashes": {
                "SHA-256": "a900ec81363358ef26bcdf7827f6091af44c3f1001bc8f52b766c9569b56faa5"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--646e6fc8-5766-4bbb-bf36-80ccf1f91538",
            "value": "https://visualstudiomacupdate.com"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--81e6aae2-f556-44a4-8455-04324208d584",
            "value": "https://apple-ads-metric.com/sh.sh"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--71b6426e-e8eb-4c24-9bb3-b53f6f91337a",
            "value": "https://apple-ads-metric.com/back.sh"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--448dc20b-5509-4379-b0a3-6a77e2c8b49a",
            "value": "https://apple-ads-metric.com"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--85e5b4f6-41f7-48ea-a98a-e6c4a9729de8",
            "value": "https://visualstudiomacupdate.com/tasks/upload_file"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--178a8636-3f07-42c7-93ba-3659905f0a51",
            "value": "https://apple-ads-metric.com/npm"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--349b28ad-95f9-41ef-a282-e0a6d4b1ea42",
            "value": "visualstudiomacupdate.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--f53d4f56-79f4-4852-b70a-6849d975dc7a",
            "value": "apple-ads-metric.com"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--22906134-c6c4-4303-94cb-4f4666492b11",
            "value": "31.41.244.92"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--517f1d6a-514b-592b-8216-43a310ad6d08",
            "created": "2026-06-24T21:18:59.518166Z",
            "modified": "2026-06-24T21:18:59.518166Z",
            "name": "ContagiousInterview"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--6ebd3ba7-ddf4-570e-bbb7-5c99b60e41fb",
            "created": "2026-06-24T21:18:59.520452Z",
            "modified": "2026-06-24T21:18:59.520452Z",
            "name": "AlluringPisces"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--7c839753-abf1-4fba-8971-317e90062715",
            "created_by_ref": "identity--5ace95f0-bd6c-4fee-a494-ca40e791918d",
            "created": "2026-06-24T21:18:59.524281Z",
            "modified": "2026-06-24T21:18:59.524281Z",
            "name": "RustDoor and Koi Stealer for macOS Used by North Korea-Linked Threat Actor to Target the Cryptocurrency Sector",
            "published": "2025-02-26T00:00:00Z",
            "object_refs": [
                "identity--5ace95f0-bd6c-4fee-a494-ca40e791918d",
                "ipv4-addr--a253b521-8b49-424e-8184-c376bea854c5",
                "file--fe1d9764-f9c7-445f-baf2-44195e9ed987",
                "file--7a67b32b-6310-4813-981d-8d35ba685b33",
                "file--b45ea21d-3631-4742-b949-139c49d9329b",
                "file--6bb348d3-e393-4891-a63a-ea7139ce418e",
                "file--f3ed09d7-0432-4e5d-b02f-00e87994aeb4",
                "file--bf4fe4d4-579f-48b1-a361-5ca01a19d2d7",
                "file--de03440e-559d-4ddb-866d-94f0ed2b6652",
                "file--5e1b1cd4-950c-4dfe-8606-21b3dd705416",
                "file--e02b896c-1a21-4773-b348-995eaf307a76",
                "file--3aa46526-e99c-411d-8d1c-49904a82c2c2",
                "file--f8e419dd-e89a-4168-b5a9-135262146491",
                "file--f155d6ed-1de8-405b-8e66-f16ea2416cbc",
                "file--fd38b86f-580c-4bd9-a34f-4cfd9b516dfe",
                "file--f3db7136-7501-4345-a956-3a97f3dd9068",
                "file--f9ccc38b-47b9-48e7-9871-d1cdf760244f",
                "file--ccbd2e27-a8ff-41e0-859b-53d45fe7ea71",
                "url--646e6fc8-5766-4bbb-bf36-80ccf1f91538",
                "url--81e6aae2-f556-44a4-8455-04324208d584",
                "url--71b6426e-e8eb-4c24-9bb3-b53f6f91337a",
                "url--448dc20b-5509-4379-b0a3-6a77e2c8b49a",
                "url--85e5b4f6-41f7-48ea-a98a-e6c4a9729de8",
                "url--178a8636-3f07-42c7-93ba-3659905f0a51",
                "domain-name--349b28ad-95f9-41ef-a282-e0a6d4b1ea42",
                "domain-name--f53d4f56-79f4-4852-b70a-6849d975dc7a",
                "ipv4-addr--22906134-c6c4-4303-94cb-4f4666492b11",
                "threat-actor--517f1d6a-514b-592b-8216-43a310ad6d08",
                "threat-actor--6ebd3ba7-ddf4-570e-bbb7-5c99b60e41fb"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://unit42.paloaltonetworks.com/macos-malware-targets-crypto-sector/"
                }
            ]
        }
    ]
}