{
    "type": "bundle",
    "id": "bundle--083eb93b-07e8-4ce4-a9a4-ea970c5dd722",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--2b81ac94-301c-4ad2-9570-be4d616d870c",
            "created": "2023-03-08T12:51:45.55441Z",
            "modified": "2024-10-04T00:29:05.547086Z",
            "name": "Securonix",
            "identity_class": "organization"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--bed7146b-634b-4195-8ed2-292f668d67bd",
            "value": "185.176.43.106"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--24ab1b6e-3d4e-434f-b674-7d53a7863e3b",
            "hashes": {
                "SHA-256": "b6987a717741329d5b64f769c9d3f1f572b42c7375dd841aecbf2b6d4096d6de"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--4a974f5f-4abb-4aff-93ef-b1a876e2ba0b",
            "hashes": {
                "SHA-256": "9f27430ed919e74c81b0487542fe29a65a0b860a6a290e3b032f3a5ba7c691bc"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d5d9d223-c8eb-4b53-a473-d0bc4da0316c",
            "hashes": {
                "SHA-256": "5fce9f27326549cc6091ba1f806e7c161878a2642411a941ba484b0c1c7adb8f"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--0cf824cd-0e9c-4959-bbd8-15446b9c13a8",
            "hashes": {
                "SHA-256": "9c82477eac14abfb7f507806a941e4e5633dd07c4b73a44b10296ec28e3df162"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--4b9a58c1-0a0c-4ad4-a196-3912a6acdd24",
            "hashes": {
                "SHA-256": "35d38eed9168c16d2dd595fa9542a411080d12de971ea3d3c12dd5c44e454049"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--08969b83-791a-4646-ae5c-e03b8b5bfa3d",
            "hashes": {
                "SHA-256": "07b10c5a772f6f3136eb58a7034bcb5ce71c0c740aaa528d3bae318d939b2242"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--a0ca1142-561c-47b8-a583-876c694cc060",
            "hashes": {
                "SHA-256": "6f325fb0a7de6f05490f1eb3c0e5826a44a11ed2dee4c17f486b8200f539d49e"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--dd8d1564-64f7-4134-b69e-3540f0387e6b",
            "hashes": {
                "SHA-256": "5d28072d76bd6af944fcec8045cbc24410a58fe70eef6f83c50934245ec92e60"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7fcede35-1359-4e65-a758-224c405f7942",
            "hashes": {
                "SHA-256": "b9727fb553894d857900c0a18f82723659d136329ef56bbe9388905a666f1197"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--8072fdf7-8dd8-4ec6-b2a0-222c7633c032",
            "hashes": {
                "SHA-256": "44566d506e0348c999a66ee5158b0014a74bdd3f038e40ca76e5b069b8991f85"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--651dd08b-4ad6-4ae8-8ed8-5c415becd4d1",
            "hashes": {
                "SHA-256": "31a9801e5e2e5fd7f66f23bc8456069b6a958e03838e431ccf7d84867f88c840"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--67da2176-7cba-42d9-988f-52d9dbe22553",
            "hashes": {
                "SHA-256": "5f3483823342318c4154bbef806cec2187a0360f079237a456603896ff7f5473"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c46ea739-6fdf-4d37-bac6-cd7f8710666c",
            "hashes": {
                "SHA-256": "dee7826f5b7f0cbc97a81de8f6844a011cc836269bc5d00a0594dfec5386613c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7e4fe0c3-d161-4c06-879d-89458b17e992",
            "hashes": {
                "SHA-256": "12df9753abd867118ce97e6570c2bde780c7913ecab4b91ef7f540c4fede2772"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--14ab6fd9-7ed4-4cba-a723-53ed61d67120",
            "value": "http://547857.c1.biz/dn.php?name="
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--af32dc88-2b83-46fd-aece-156530e2a306",
            "value": "pull.net"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--97601175-789f-438b-9eff-15d2ce7723ad",
            "value": "chkey.net"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--01378bae-8549-4319-8fa7-cd84f0e9410e",
            "value": "547857.c1.biz"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--a4abfd1a-78ab-4493-8f72-72d437f0728d",
            "value": "65487.c1.biz"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--ee001372-8552-4bf6-bcce-7a2a5a45b3dd",
            "value": "capture.net"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--0ae873d0-5970-4b03-b8d3-6b6315cf1835",
            "value": "shell.net"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--a014dfac-e081-5b16-a0b1-fe21d104be8f",
            "created": "2026-06-24T21:10:21.376743Z",
            "modified": "2026-06-24T21:10:21.376743Z",
            "name": "Konni"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--4d691ee1-463c-48a7-9ab6-0a7908b0d9c9",
            "created_by_ref": "identity--2b81ac94-301c-4ad2-9570-be4d616d870c",
            "created": "2026-06-24T21:10:21.414292Z",
            "modified": "2026-06-24T21:10:21.414292Z",
            "name": "STIFF#BIZON Detection Using Securonix \u2013 New Attack Campaign Observed Possibly Linked to Konni/APT37 (North Korea)",
            "published": "2022-07-20T00:00:00Z",
            "object_refs": [
                "identity--2b81ac94-301c-4ad2-9570-be4d616d870c",
                "ipv4-addr--bed7146b-634b-4195-8ed2-292f668d67bd",
                "file--24ab1b6e-3d4e-434f-b674-7d53a7863e3b",
                "file--4a974f5f-4abb-4aff-93ef-b1a876e2ba0b",
                "file--d5d9d223-c8eb-4b53-a473-d0bc4da0316c",
                "file--0cf824cd-0e9c-4959-bbd8-15446b9c13a8",
                "file--4b9a58c1-0a0c-4ad4-a196-3912a6acdd24",
                "file--08969b83-791a-4646-ae5c-e03b8b5bfa3d",
                "file--a0ca1142-561c-47b8-a583-876c694cc060",
                "file--dd8d1564-64f7-4134-b69e-3540f0387e6b",
                "file--7fcede35-1359-4e65-a758-224c405f7942",
                "file--8072fdf7-8dd8-4ec6-b2a0-222c7633c032",
                "file--651dd08b-4ad6-4ae8-8ed8-5c415becd4d1",
                "file--67da2176-7cba-42d9-988f-52d9dbe22553",
                "file--c46ea739-6fdf-4d37-bac6-cd7f8710666c",
                "file--7e4fe0c3-d161-4c06-879d-89458b17e992",
                "url--14ab6fd9-7ed4-4cba-a723-53ed61d67120",
                "domain-name--af32dc88-2b83-46fd-aece-156530e2a306",
                "domain-name--97601175-789f-438b-9eff-15d2ce7723ad",
                "domain-name--01378bae-8549-4319-8fa7-cd84f0e9410e",
                "domain-name--a4abfd1a-78ab-4493-8f72-72d437f0728d",
                "domain-name--ee001372-8552-4bf6-bcce-7a2a5a45b3dd",
                "domain-name--0ae873d0-5970-4b03-b8d3-6b6315cf1835",
                "threat-actor--a014dfac-e081-5b16-a0b1-fe21d104be8f"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.securonix.com/blog/stiffbizon-detection-new-attack-campaign-observed/"
                }
            ]
        }
    ]
}