{
    "type": "bundle",
    "id": "bundle--b0c8422d-0346-45a6-8ce7-a01df3a77e79",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--e41faa1c-9eaf-4179-9979-7d1e2d325532",
            "created": "2023-03-08T12:52:01.32117Z",
            "modified": "2024-10-02T10:44:39.622712Z",
            "name": "Symantec",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--eccb14a8-9fc2-42dc-97d9-0132807f8296",
            "hashes": {
                "SHA-256": "8e45daace21f135b54c515dbd5cf6e0bd28ae2515b9d724ad2d01a4bf10f93bd"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c9cf533a-e067-4b74-815f-7acff75feabb",
            "hashes": {
                "SHA-256": "7bd723b5e4f7b3c645ac04e763dfc913060eaf6e136eecc4ee0653ad2056f3a0"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--82530325-9cf9-4434-b6ef-c28729c49d7a",
            "hashes": {
                "SHA-256": "47d084e54d15d5d313f09f5b5fcdea0c9273dcddd9a564e154e222343f697822"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d0e434a6-b136-40fa-8d57-600a9b130e72",
            "hashes": {
                "SHA-256": "30584f13c0a9d0c86562c803de350432d5a0607a06b24481ad4d92cdf7288213"
            }
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--5ec38e81-72e8-47b5-bbfc-c1277df0f025",
            "value": "216.189.159.34"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--4d1ec746-3548-4616-a70c-f76d80adc8e8",
            "hashes": {
                "SHA-256": "ff945b3565f63cef7bb214a93c623688759ee2805a8c574f00237660b1c4d3fd"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--8c48a882-6ca4-410d-b295-916e8d40387b",
            "hashes": {
                "SHA-256": "d05c50067bd88dae4389e96d7e88b589027f75427104fdb46f8608bbcf89edb4"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--5063254a-b989-4269-9d7d-f71074e954aa",
            "hashes": {
                "SHA-256": "d7f3ecd8939ae8b170b641448ff12ade2163baad05ca6595547f8794b5ad013b"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--8ea30668-ca0c-40c3-87b7-074c18e37ad6",
            "hashes": {
                "SHA-256": "a98c017d1b9a18195411d22b44dbe65d5f4a9e181c81ea2168794950dc4cbd3c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--3edaac83-c786-46c9-b0e3-e0258577a725",
            "hashes": {
                "SHA-256": "831f27eb18caf672d43a5a80590df130b0d3d9e7d08e333b0f710b95f2cde0e0"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--1be25532-e35f-469d-8c15-2a57e6231310",
            "hashes": {
                "SHA-256": "ecab00f86a6c3adb5f4d5b16da56e16f8e742adfb82235c505d3976c06c74e20"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7551fd3e-395b-4017-a07d-4d29b1662375",
            "hashes": {
                "SHA-256": "8898b6b3e2b7551edcceffbef2557b99bdf4d99533411cc90390eeb278d11ac8"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--e03673c9-d1dc-4439-b281-373b999dbf58",
            "hashes": {
                "SHA-256": "5068ead78c226893df638a188fbe7222b99618b7889759e0725d85497f533e98"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--1db8d070-dce4-4067-81f9-1991d0799a21",
            "hashes": {
                "SHA-256": "8a80b6bd452547650b3e61b2cc301d525de139a740aac9b0da2150ffac986be4"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--cc9053c1-7965-43b0-b27f-7b10ac91474d",
            "hashes": {
                "SHA-256": "cc7a123d08a3558370a32427c8a5d15a4be98fb1b754349d1e0e48f0f4cb6bfc"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--9096afd0-5733-485b-bc1f-04deb88f311a",
            "hashes": {
                "SHA-256": "36ea1b317b46c55ed01dd860131a7f6a216de71958520d7d558711e13693c9dc"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--0f412a20-427e-43ef-91aa-cc1061b83057",
            "hashes": {
                "SHA-256": "6c2a8e2bbe4ebf1fb6967a34211281959484032af1d620cbab390e89f739c339"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--db088bdb-2324-4107-851f-6cad1ebfbb45",
            "hashes": {
                "SHA-256": "380ec7396cc67cf1134f8e8cda906b67c70aa5c818273b1db758f0757b955d81"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--866e7e77-da63-498f-b4e2-3be4027e7205",
            "hashes": {
                "SHA-256": "bc4c1c869a03045e0b594a258ec3801369b0dcabac193e90f0a684900e9a582d"
            }
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--3f7744af-e1ae-5d69-aedc-778d8e923792",
            "created": "2026-06-24T20:58:46.144167Z",
            "modified": "2026-06-24T20:58:46.144167Z",
            "name": "Springtail"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--2a87acbd-a9d1-42b8-8380-bc5285c258a2",
            "created_by_ref": "identity--e41faa1c-9eaf-4179-9979-7d1e2d325532",
            "created": "2026-06-24T20:58:46.145274Z",
            "modified": "2026-06-24T20:58:46.145274Z",
            "name": "Springtail: New Linux Backdoor Added to Toolkit",
            "published": "2024-05-16T00:00:00Z",
            "object_refs": [
                "identity--e41faa1c-9eaf-4179-9979-7d1e2d325532",
                "file--eccb14a8-9fc2-42dc-97d9-0132807f8296",
                "file--c9cf533a-e067-4b74-815f-7acff75feabb",
                "file--82530325-9cf9-4434-b6ef-c28729c49d7a",
                "file--d0e434a6-b136-40fa-8d57-600a9b130e72",
                "ipv4-addr--5ec38e81-72e8-47b5-bbfc-c1277df0f025",
                "file--4d1ec746-3548-4616-a70c-f76d80adc8e8",
                "file--8c48a882-6ca4-410d-b295-916e8d40387b",
                "file--5063254a-b989-4269-9d7d-f71074e954aa",
                "file--8ea30668-ca0c-40c3-87b7-074c18e37ad6",
                "file--3edaac83-c786-46c9-b0e3-e0258577a725",
                "file--1be25532-e35f-469d-8c15-2a57e6231310",
                "file--7551fd3e-395b-4017-a07d-4d29b1662375",
                "file--e03673c9-d1dc-4439-b281-373b999dbf58",
                "file--1db8d070-dce4-4067-81f9-1991d0799a21",
                "file--cc9053c1-7965-43b0-b27f-7b10ac91474d",
                "file--9096afd0-5733-485b-bc1f-04deb88f311a",
                "file--0f412a20-427e-43ef-91aa-cc1061b83057",
                "file--db088bdb-2324-4107-851f-6cad1ebfbb45",
                "file--866e7e77-da63-498f-b4e2-3be4027e7205",
                "threat-actor--3f7744af-e1ae-5d69-aedc-778d8e923792"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/springtail-kimsuky-backdoor-espionage"
                }
            ]
        }
    ]
}