{
    "type": "bundle",
    "id": "bundle--e79566f8-9c12-4a29-bca0-4cd6dc4381b2",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--efe77d0c-206a-48fe-9fff-187cb688f647",
            "created": "2023-03-08T12:51:42.397625Z",
            "modified": "2025-05-13T13:10:32.768936Z",
            "name": "Proofpoint",
            "identity_class": "organization"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--c64359ed-1b4a-4861-8c23-1c7f3d8356f2",
            "value": "outlook.com"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--27341b5b-93ef-4031-87a4-5f4916cedea2",
            "hashes": {
                "SHA-256": "28116e434e35f76400dc473ada97aeae9b93ca5bcc2a86bd1002f6824f3c9537"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--17bb4a35-215a-4b73-9a9b-58fcab124cf0",
            "hashes": {
                "SHA-256": "58adb6b87a3873f20d56a10ccde457469adb5203f3108786c3631e0da555b917"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6ea1a027-1deb-4629-98aa-c1d3f1528845",
            "hashes": {
                "SHA-256": "2a13f273d85dc2322e05e2edfaec7d367116366d1a375b8e9863189a05a5cec5"
            }
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--7abffb1c-24ec-4035-a41b-eb67cb9dec36",
            "value": "emln0reply@protonmail.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--a28b32d6-2115-4e0e-9627-6a9644d6b7ab",
            "value": "john.dargavel.smith46@gmail.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--17d92f32-76a5-44f4-a471-246802089578",
            "value": "eml-n0replypro@proton.me"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--a531dfa1-36fe-42d7-9fc3-f79bdd148755",
            "value": "john.smith.19880@outlook.com"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--42d61449-3055-4ea4-b26e-2fcf59541918",
            "value": "http://pokijhgcfsdfghnj.mywebcommunity.org/main/receive.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--584c2a43-cc6a-4e23-a7c2-0e0a410951ee",
            "value": "http://pokijhgcfsdfghnj.mywebcommunity.org/main/test.txt"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--73579c83-f907-4f85-bddc-25fb31fe8947",
            "value": "https://lorica.com.ua/MFA/"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--6e6cb441-eb1e-414f-a7e4-3df75b4bcee9",
            "value": "http://qweasdzxc.mygamesonline.org/dn.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--4bceebc6-822d-4eae-849e-c8f195e1c710",
            "value": "https://mega.nz/file/SmxUiA4K#QoS_PYQDnJN4VtsSg5HoCv5eOK0AI1bL6Cw5lxA0zfI"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--f3714a2d-0494-4794-9e5a-e837a9895eb8",
            "value": "http://wersdfxcv.mygamesonline.org/view.php"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--5be52676-637d-4bb6-b5d4-695bb80ac7ed",
            "value": "qweasdzxc.mygamesonline.org"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--24e04956-9e72-4f8d-aa3b-d0c4790ca961",
            "value": "pokijhgcfsdfghnj.mywebcommunity.org"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--634ba0a8-a15a-4ed3-a398-933f2268a3f9",
            "value": "lorica.com.ua"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--a8982bde-a33a-4ecf-9bd6-f90d9a9958b5",
            "value": "wersdfxcv.mygamesonline.org"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--2e6e3d37-6a32-4604-8566-e095fdacfefa",
            "value": "jetmf.com"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--9c92f8c9-182a-58be-b03b-f8025542ab1e",
            "created": "2026-06-24T20:53:29.177054Z",
            "modified": "2026-06-24T20:53:29.177054Z",
            "name": "TA406"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--06837d48-c573-4364-9c3e-f2320246c110",
            "created_by_ref": "identity--efe77d0c-206a-48fe-9fff-187cb688f647",
            "created": "2026-06-24T20:53:29.179643Z",
            "modified": "2026-06-24T20:53:29.179643Z",
            "name": "TA406 Pivots to the Front",
            "published": "2025-05-13T00:00:00Z",
            "object_refs": [
                "identity--efe77d0c-206a-48fe-9fff-187cb688f647",
                "domain-name--c64359ed-1b4a-4861-8c23-1c7f3d8356f2",
                "file--27341b5b-93ef-4031-87a4-5f4916cedea2",
                "file--17bb4a35-215a-4b73-9a9b-58fcab124cf0",
                "file--6ea1a027-1deb-4629-98aa-c1d3f1528845",
                "email-addr--7abffb1c-24ec-4035-a41b-eb67cb9dec36",
                "email-addr--a28b32d6-2115-4e0e-9627-6a9644d6b7ab",
                "email-addr--17d92f32-76a5-44f4-a471-246802089578",
                "email-addr--a531dfa1-36fe-42d7-9fc3-f79bdd148755",
                "url--42d61449-3055-4ea4-b26e-2fcf59541918",
                "url--584c2a43-cc6a-4e23-a7c2-0e0a410951ee",
                "url--73579c83-f907-4f85-bddc-25fb31fe8947",
                "url--6e6cb441-eb1e-414f-a7e4-3df75b4bcee9",
                "url--4bceebc6-822d-4eae-849e-c8f195e1c710",
                "url--f3714a2d-0494-4794-9e5a-e837a9895eb8",
                "domain-name--5be52676-637d-4bb6-b5d4-695bb80ac7ed",
                "domain-name--24e04956-9e72-4f8d-aa3b-d0c4790ca961",
                "domain-name--634ba0a8-a15a-4ed3-a398-933f2268a3f9",
                "domain-name--a8982bde-a33a-4ecf-9bd6-f90d9a9958b5",
                "domain-name--2e6e3d37-6a32-4604-8566-e095fdacfefa",
                "threat-actor--9c92f8c9-182a-58be-b03b-f8025542ab1e"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.proofpoint.com/us/blog/threat-insight/ta406-pivots-front"
                }
            ]
        }
    ]
}