{
    "type": "bundle",
    "id": "bundle--030719ce-c737-4f23-bf4c-d51c9dca14a2",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--2b96b5d7-2075-4d96-9706-4b67d615e67c",
            "created": "2023-03-08T12:51:44.657627Z",
            "modified": "2024-09-04T07:23:22.792387Z",
            "name": "Mandiant",
            "identity_class": "organization"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--7488943a-e8be-4859-88b3-83bc03f8c73c",
            "value": "http://mantis.quick.net.pl/library/securimage/index.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--3cf6ddc2-7f4d-482b-9d10-d80f922aed3c",
            "value": "http://www.keewoom.co.kr/prod_img/201409/prod.php"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--f8ab7d7f-3a42-44a5-b6cc-b8ffab92d8f8",
            "value": "mantis.quick.net.pl"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--0b44ecf7-65c0-479d-a4a4-fc4f514204b3",
            "hashes": {
                "MD5": "3bf748baecfc24def6c0393bc2354771"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c4a731fb-2fe0-4e8b-85f1-d78cd306fd03",
            "hashes": {
                "MD5": "41dcd8db4371574453561251701107bc"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--80cfc665-ff62-4f7e-9d8b-4881741102d0",
            "hashes": {
                "MD5": "8c597659ede15d97914cb27512a55fc7"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--fd5cdd97-dfa5-498c-b3a8-806f1450700d",
            "hashes": {
                "MD5": "49425d6dedb5f88bddc053cc8fd5f0f4"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--1fc34851-17b5-497a-9a9a-ea57e6860fa3",
            "hashes": {
                "MD5": "30358639af2ecc217bbc26008c5640a7"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--a3559886-949b-4218-9b19-392a41f13847",
            "hashes": {
                "MD5": "300103aff7ab676a41e47ec3d615ba3f"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--e80e71cf-a9b2-4a74-b838-2b58b252ac7f",
            "hashes": {
                "MD5": "a9e30c16df400c3f24fc4e9d76db78ef"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--9d993ac8-931c-4740-ae5d-7ef504d3d96b",
            "hashes": {
                "MD5": "a2109276dc704dedf481a4f6c8914c6e"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--9e9aa37e-8ccf-429e-abdb-b6c595e84fda",
            "hashes": {
                "MD5": "05b6f459be513bf6120e9b2b85f6c844"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--060d50a6-8bdf-41d6-aea8-73d531cbcba4",
            "hashes": {
                "MD5": "91b6d6efa5840d6c1f10a72c66e925ce"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--2dca8c3f-ddfc-4ee8-99ed-b56ab65ad746",
            "hashes": {
                "MD5": "e97b13b7e91edeceeac876c3869cc4eb"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ee59b60b-8776-47b7-abf4-16aadf5cd6fe",
            "hashes": {
                "MD5": "abd91676a814f4b50ec357ca1584567e"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--fcd194da-abd8-4ede-9afb-d683590eb7c7",
            "hashes": {
                "MD5": "f910ffb063abe31e87982bad68fd0d87"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--95d695d9-bf58-4fd0-aaae-1c69e6c95714",
            "hashes": {
                "MD5": "866f9f205fa1d47af27173b5eb464363"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--2609d18a-722f-480c-b865-0506bc0dda5a",
            "value": "https://toptradenews.com/wp-content/themes/themes.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--bedfffa5-8933-4c86-8dfe-4be95ecb2a5e",
            "value": "http://webinternal.anyplex.com/images/query_image.jsp"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--542e75e7-443a-41ce-850e-4257ef53c91e",
            "value": "http://www.ruscheltelefonia.com.br/public/php/index.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--1b5c78b2-e0b5-4c94-a842-2ac1cf8cf485",
            "value": "https://ajayjangid.in/js/jquery/jquery.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--07911120-b7fa-4cfe-8a72-1cee6c8af08c",
            "value": "https://leadsblue.com/wp-content/wp-utility/index.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--f68dfdd9-ccd1-434f-ae3b-db1b8f4c6470",
            "value": "https://sede.lamarinadevalencia.com/tablonEdictal/layout/contentLayout.jsp"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--8c9ced10-13e0-4464-8ac8-0112c25049f8",
            "value": "http://abba-servicios.mx/wordpress/wp-content/themes/config.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--af548736-7b03-4ec2-8b8f-ceb84b20a157",
            "value": "https://crickethighlights.today/wp-content/plugins/contact.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--ab23cdfe-a9b5-4507-9622-fd4ade33eacc",
            "value": "https://doug.org/wp-includes/admin.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--846e688e-3d5a-4ef7-820b-783f8d4b9263",
            "value": "http://www.fainstec.com/assets/js/jquery/jquery.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--7852d325-51a7-4dba-b266-08bbdb25af6c",
            "value": "https://olidhealth.com/wp-includes/php-compat/compat.php"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--3e48a69b-667e-4679-8fe7-2bc4e8d9e7a9",
            "value": "toptradenews.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--1f5b6a20-494d-411f-a624-16e3e6f5bf8c",
            "value": "sede.lamarinadevalencia.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--c1d23792-3b54-4315-aa72-bc64cece3657",
            "value": "leadsblue.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--5e490649-2340-4399-a479-27c1e7de51c2",
            "value": "abba-servicios.mx"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--a21838e7-54a9-40d4-952e-cbff1ea6067f",
            "value": "crickethighlights.today"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--4c139adb-5e51-468e-aa7f-b8b2861750b5",
            "value": "doug.org"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--c6369194-2fd9-40e9-8f13-c3eebf414a31",
            "value": "ajayjangid.in"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--e779665c-dfaf-4b9d-bacd-5566641a52f9",
            "value": "webinternal.anyplex.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--26518745-ce74-42c0-8a66-a17abfc968a7",
            "value": "olidhealth.com"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--049cf601-7a61-5344-a195-591661b1b2ec",
            "created": "2026-06-24T18:41:56.62122Z",
            "modified": "2026-06-24T18:41:56.62122Z",
            "name": "UNC2970"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--7ea639bb-db2c-5955-ae3c-2f589fd98f9d",
            "created": "2026-06-24T18:41:56.6251Z",
            "modified": "2026-06-24T18:41:56.6251Z",
            "name": "UNC577"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--99d2fdcc-d618-40ee-bb3f-ad5c57c5b148",
            "created_by_ref": "identity--2b96b5d7-2075-4d96-9706-4b67d615e67c",
            "created": "2026-06-24T18:41:56.626258Z",
            "modified": "2026-06-24T18:41:56.626258Z",
            "name": "Stealing the LIGHTSHOW (Part One) \u2014 North Korea's UNC2970",
            "published": "2023-03-09T00:00:00Z",
            "object_refs": [
                "identity--2b96b5d7-2075-4d96-9706-4b67d615e67c",
                "url--7488943a-e8be-4859-88b3-83bc03f8c73c",
                "url--3cf6ddc2-7f4d-482b-9d10-d80f922aed3c",
                "domain-name--f8ab7d7f-3a42-44a5-b6cc-b8ffab92d8f8",
                "file--0b44ecf7-65c0-479d-a4a4-fc4f514204b3",
                "file--c4a731fb-2fe0-4e8b-85f1-d78cd306fd03",
                "file--80cfc665-ff62-4f7e-9d8b-4881741102d0",
                "file--fd5cdd97-dfa5-498c-b3a8-806f1450700d",
                "file--1fc34851-17b5-497a-9a9a-ea57e6860fa3",
                "file--a3559886-949b-4218-9b19-392a41f13847",
                "file--e80e71cf-a9b2-4a74-b838-2b58b252ac7f",
                "file--9d993ac8-931c-4740-ae5d-7ef504d3d96b",
                "file--9e9aa37e-8ccf-429e-abdb-b6c595e84fda",
                "file--060d50a6-8bdf-41d6-aea8-73d531cbcba4",
                "file--2dca8c3f-ddfc-4ee8-99ed-b56ab65ad746",
                "file--ee59b60b-8776-47b7-abf4-16aadf5cd6fe",
                "file--fcd194da-abd8-4ede-9afb-d683590eb7c7",
                "file--95d695d9-bf58-4fd0-aaae-1c69e6c95714",
                "url--2609d18a-722f-480c-b865-0506bc0dda5a",
                "url--bedfffa5-8933-4c86-8dfe-4be95ecb2a5e",
                "url--542e75e7-443a-41ce-850e-4257ef53c91e",
                "url--1b5c78b2-e0b5-4c94-a842-2ac1cf8cf485",
                "url--07911120-b7fa-4cfe-8a72-1cee6c8af08c",
                "url--f68dfdd9-ccd1-434f-ae3b-db1b8f4c6470",
                "url--8c9ced10-13e0-4464-8ac8-0112c25049f8",
                "url--af548736-7b03-4ec2-8b8f-ceb84b20a157",
                "url--ab23cdfe-a9b5-4507-9622-fd4ade33eacc",
                "url--846e688e-3d5a-4ef7-820b-783f8d4b9263",
                "url--7852d325-51a7-4dba-b266-08bbdb25af6c",
                "domain-name--3e48a69b-667e-4679-8fe7-2bc4e8d9e7a9",
                "domain-name--1f5b6a20-494d-411f-a624-16e3e6f5bf8c",
                "domain-name--c1d23792-3b54-4315-aa72-bc64cece3657",
                "domain-name--5e490649-2340-4399-a479-27c1e7de51c2",
                "domain-name--a21838e7-54a9-40d4-952e-cbff1ea6067f",
                "domain-name--4c139adb-5e51-468e-aa7f-b8b2861750b5",
                "domain-name--c6369194-2fd9-40e9-8f13-c3eebf414a31",
                "domain-name--e779665c-dfaf-4b9d-bacd-5566641a52f9",
                "domain-name--26518745-ce74-42c0-8a66-a17abfc968a7",
                "threat-actor--049cf601-7a61-5344-a195-591661b1b2ec",
                "threat-actor--7ea639bb-db2c-5955-ae3c-2f589fd98f9d"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.mandiant.com/resources/blog/lightshow-north-korea-unc2970"
                }
            ]
        }
    ]
}