{
    "type": "bundle",
    "id": "bundle--0bc61101-98fa-4eab-8c42-db6508c1bccd",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--3856ce54-f40d-4787-b610-cceb7f9d4b2f",
            "created": "2024-11-13T13:00:30.707688Z",
            "modified": "2024-11-13T13:01:19.839942Z",
            "name": "Levelblue",
            "identity_class": "organization"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--44bd6408-6b28-41b8-9d45-ac85063c2b44",
            "value": "ur01webzoom.us"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--3e46b0cd-7808-481f-8950-6b9910c39073",
            "value": "ux06webzoom.us"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--8d08230a-3b0f-4c1e-8dab-5e2554d7135c",
            "value": "uv04webzoom.us"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--372f4050-eb6b-469d-8454-94ab7e44f5d9",
            "value": "uv03webzoom.us"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--d470fa1e-d41d-4d22-a36d-61e71f057dd8",
            "value": "uv01webzoom.us"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--b3b584f2-e209-48a2-ab59-648fa7d338c7",
            "value": "uw03webzoom.us"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--13329fe1-e926-4998-83f4-5743ddd76b6f",
            "value": "uw05webzoom.us"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--6460bcbf-b5a3-42a0-843c-9afff2a8574f",
            "value": "uw04webzoom.us"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--7e661c1e-abfb-4ae3-96f2-26612b12556c",
            "value": "83.136.210.180"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--4a2974a6-44ce-4160-8b42-4ba5b7990474",
            "value": "check02id.com"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--0085aeac-5fe7-413f-81c0-e6d00e5a5622",
            "value": "83.136.209.22"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--cff26c12-ab46-45de-983a-273ba98c382d",
            "value": "83.136.208.246"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--9f09d49f-5595-4aee-9644-3249a16bf133",
            "value": "104.145.210.107"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--61a535fb-df28-4083-949b-d524ace01d83",
            "hashes": {
                "SHA-256": "5fbbca2d72840feb86b6ef8a1abb4fe2f225d84228a714391673be2719c73ac7"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6fb75a8b-3c75-410b-a172-05e0b417e0f1",
            "hashes": {
                "SHA-256": "8fd5b8db10458ace7e4ed335eb0c66527e1928ad87a3c688595804f72b205e8c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--583cb663-53e2-466d-bbb6-edac2f15d26b",
            "hashes": {
                "SHA-256": "05e1761b535537287e7b72d103a29c4453742725600f59a34a4831eafc0b8e53"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--113fc68c-5c46-4746-8b3a-77a6bb85f1f0",
            "hashes": {
                "SHA-256": "5e581f22f56883ee13358f73fabab00fcf9313a053210eb12ac18e66098346e5"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b931b12e-bc32-476c-a614-40d620648634",
            "hashes": {
                "SHA-256": "95e893e7cdde19d7d16ff5a5074d0b369abd31c1a30962656133caa8153e8d63"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6bc48066-3c21-4af9-970d-7c1bba50ccc4",
            "hashes": {
                "SHA-256": "a05400000843fbad6b28d2b76fc201c3d415a72d88d8dc548fafd8bae073c640"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--db569fad-c4f2-4b0f-823f-e717c2826099",
            "hashes": {
                "SHA-256": "2075fd1a1362d188290910a8c55cf30c11ed5955c04af410c481410f538da419"
            }
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--95cd38e2-0367-434e-8187-f5f637d9f14e",
            "value": "83.136.208.48"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--f7f0d913-f17b-5632-a48a-76b4eef8a1cb",
            "created": "2026-06-24T22:30:57.321786Z",
            "modified": "2026-06-24T22:30:57.321786Z",
            "name": "Bluenoroff"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--ad58f665-2d60-592c-9ad6-a6ba3b636760",
            "created": "2026-06-24T22:30:57.325464Z",
            "modified": "2026-06-24T22:30:57.325464Z",
            "name": "SapphireSleet"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--b1fc54ae-4fb3-5833-9e0f-4873d16620f8",
            "created": "2026-06-24T22:30:57.327692Z",
            "modified": "2026-06-24T22:30:57.327692Z",
            "name": "UNC1069"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--a344726d-5820-4ec9-9ccb-2e7b640d1bbd",
            "created_by_ref": "identity--3856ce54-f40d-4787-b610-cceb7f9d4b2f",
            "created": "2026-06-24T22:30:57.3385Z",
            "modified": "2026-06-24T22:30:57.3385Z",
            "name": "Sapphire Sleet Targets macOS in Multi-Stage Intrusion Campaign",
            "published": "2026-05-28T00:00:00Z",
            "object_refs": [
                "identity--3856ce54-f40d-4787-b610-cceb7f9d4b2f",
                "domain-name--44bd6408-6b28-41b8-9d45-ac85063c2b44",
                "domain-name--3e46b0cd-7808-481f-8950-6b9910c39073",
                "domain-name--8d08230a-3b0f-4c1e-8dab-5e2554d7135c",
                "domain-name--372f4050-eb6b-469d-8454-94ab7e44f5d9",
                "domain-name--d470fa1e-d41d-4d22-a36d-61e71f057dd8",
                "domain-name--b3b584f2-e209-48a2-ab59-648fa7d338c7",
                "domain-name--13329fe1-e926-4998-83f4-5743ddd76b6f",
                "domain-name--6460bcbf-b5a3-42a0-843c-9afff2a8574f",
                "ipv4-addr--7e661c1e-abfb-4ae3-96f2-26612b12556c",
                "domain-name--4a2974a6-44ce-4160-8b42-4ba5b7990474",
                "ipv4-addr--0085aeac-5fe7-413f-81c0-e6d00e5a5622",
                "ipv4-addr--cff26c12-ab46-45de-983a-273ba98c382d",
                "ipv4-addr--9f09d49f-5595-4aee-9644-3249a16bf133",
                "file--61a535fb-df28-4083-949b-d524ace01d83",
                "file--6fb75a8b-3c75-410b-a172-05e0b417e0f1",
                "file--583cb663-53e2-466d-bbb6-edac2f15d26b",
                "file--113fc68c-5c46-4746-8b3a-77a6bb85f1f0",
                "file--b931b12e-bc32-476c-a614-40d620648634",
                "file--6bc48066-3c21-4af9-970d-7c1bba50ccc4",
                "file--db569fad-c4f2-4b0f-823f-e717c2826099",
                "ipv4-addr--95cd38e2-0367-434e-8187-f5f637d9f14e",
                "threat-actor--f7f0d913-f17b-5632-a48a-76b4eef8a1cb",
                "threat-actor--ad58f665-2d60-592c-9ad6-a6ba3b636760",
                "threat-actor--b1fc54ae-4fb3-5833-9e0f-4873d16620f8"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.levelblue.com/blogs/spiderlabs-blog/sapphire-sleet-targets-macos-in-multi-stage-intrusion-campaign"
                }
            ]
        }
    ]
}