{
    "type": "bundle",
    "id": "bundle--e9e839c2-d0d5-4072-b2d6-425bccaaed52",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--1123d3d5-732c-4556-a43a-ebab4652eec5",
            "created": "2023-03-30T22:58:25.993435Z",
            "modified": "2023-03-30T22:59:20.861456Z",
            "name": "3CX",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--0f4983de-278e-44e3-8ccc-7dba97423de8",
            "hashes": {
                "MD5": "d9d19abffc2c7dac11a16745f4aea44f"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--e5e1acc1-ffc9-41a0-aa27-f170852a8d4f",
            "value": "journalide.org"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--8fb00bd4-8e77-4a10-88a4-98eec9856ec4",
            "value": "akamaicontainer.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--6aa9b8f5-135e-4806-9fd0-1a3026f2ee20",
            "value": "azureonlinecloud.com"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--e6382d12-9229-415b-a9ee-026457fa91bb",
            "created": "2026-06-24T19:15:42.707746Z",
            "modified": "2026-06-24T19:15:42.707746Z",
            "name": "YARA Rule",
            "pattern": "rule TAXHAUL\r\n{\r\nmeta:\r\nauthor = \"Mandiant\"\r\ncreated = \"04/03/2023\"\r\nmodified = \"04/03/2023\"\r\nversion = \"1.0\"\r\nstrings:\r\n$p00_0 = {410f45fe4c8d3d[4]eb??4533f64c8d3d[4]eb??4533f64c8d3d[4]eb}\r\n$p00_1 = {4d3926488b01400f94c6ff90[4]41b9[4]eb??8bde4885c074}\r\ncondition:\r\nuint16(0) == 0x5A4D and any of them\r\n}",
            "pattern_type": "yara",
            "valid_from": "2023-04-11T00:00:00Z"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--a531a1b0-fc2f-458a-bbd1-c76a12cee949",
            "value": "msboxonline.com"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--cff8908d-57a1-512f-bd0b-ed3caeeb6f2a",
            "created": "2026-06-24T19:15:42.715882Z",
            "modified": "2026-06-24T19:15:42.715882Z",
            "name": "UNC4736"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--6db390a6-978b-4c92-952e-e79f75f1b71b",
            "created_by_ref": "identity--1123d3d5-732c-4556-a43a-ebab4652eec5",
            "created": "2026-06-24T19:15:42.71847Z",
            "modified": "2026-06-24T19:15:42.71847Z",
            "name": "Security Update Mandiant Initial Results",
            "published": "2023-04-11T00:00:00Z",
            "object_refs": [
                "identity--1123d3d5-732c-4556-a43a-ebab4652eec5",
                "file--0f4983de-278e-44e3-8ccc-7dba97423de8",
                "domain-name--e5e1acc1-ffc9-41a0-aa27-f170852a8d4f",
                "domain-name--8fb00bd4-8e77-4a10-88a4-98eec9856ec4",
                "domain-name--6aa9b8f5-135e-4806-9fd0-1a3026f2ee20",
                "indicator--e6382d12-9229-415b-a9ee-026457fa91bb",
                "domain-name--a531a1b0-fc2f-458a-bbd1-c76a12cee949",
                "threat-actor--cff8908d-57a1-512f-bd0b-ed3caeeb6f2a"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.3cx.com/blog/news/mandiant-initial-results/"
                }
            ]
        }
    ]
}