{
    "type": "bundle",
    "id": "bundle--1dd5a24a-e784-4ee6-b797-e76328830f9e",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--8d7468b9-b3ef-4eff-8250-4b8bd3e6ebac",
            "created": "2023-03-08T12:51:46.656797Z",
            "modified": "2024-11-01T00:50:30.77394Z",
            "name": "Trellix",
            "identity_class": "organization"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--50c3d08e-6fc8-46cb-a5c6-5ad067c1b531",
            "value": "158.247.230.196"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--403abe7f-16f4-40c5-8379-7cd772b96c49",
            "hashes": {
                "SHA-256": "9f5460850a3b5b53568cd450e83406927776833778a8eb24955bcebdf9849321"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c59babcc-7cf9-494b-a4a2-6e1660a525a0",
            "hashes": {
                "MD5": "488570af25f908e907c9732aae632b0f"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--2568c7e5-09fb-40af-8ac2-85240b053982",
            "hashes": {
                "MD5": "bca4cac80c436e813d93eba1b25257d0"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--75483b78-2305-4a84-bc00-3c0be1156f2e",
            "hashes": {
                "SHA-256": "9c5964753f8092a98f414a97cfb02cbe2692a02bea0d1b601ff205282fbf8a62"
            }
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--e5cae973-c0da-454f-b1f3-a86f29f65777",
            "value": "landf5503@gmail.com"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--8972e549-e0cc-45c8-b026-5fb0ef6a0cd3",
            "hashes": {
                "MD5": "dfacbcf7ef2a3080f9cd785329e7896b"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--1ced2f8b-be6e-48c1-9583-cd3700acb1cf",
            "hashes": {
                "SHA-256": "6dea2bf9512f618e3316f58d4f830e2a5cd746b778b125a91403da02de691d89"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c6f0c3fe-af55-4a7e-b69e-d4b8897acc65",
            "hashes": {
                "SHA-256": "c72f52813110685fe16af777f4ea5da2521270b4a906aae2fac98b746e3021ca"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--f2e39504-7b35-4981-9bcd-eb75179ba450",
            "hashes": {
                "SHA-256": "48fe8b7c8ceb1575dcdb6cf9f717d322e3450b2a06d6fab3d05ca907048aa1cd"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--bbde876a-4668-40ea-af17-17acadf2093d",
            "hashes": {
                "SHA-256": "1e10203174fb1fcfb47bb00cac2fe6ffe660660839b7a2f53d8c0892845b0029"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--314385cf-b83d-4ee1-a317-fb14c3589762",
            "hashes": {
                "SHA-256": "7ac1cb59cf1d5167b4f545c5a49f1c3db71493b448bd81a9a7ad7e25dcd7b943"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--8adacd7d-5ee0-4272-85da-5bbc56518803",
            "hashes": {
                "SHA-256": "cf2cba1859b2df4e927b8d52c630ce7ab6700babf9c7b4030f8243981b1a04fa"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--fc60032e-b787-47e2-86f6-07b8710a4945",
            "hashes": {
                "MD5": "25595588106848b2054497ceba1a2d66"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--62ce4620-11c1-412b-8fa2-79eab6b20e1f",
            "hashes": {
                "MD5": "5b5d21904d4874da9a31d456c5bcef8f"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--66fa94e4-86c0-4017-b533-beefacd5c19c",
            "hashes": {
                "MD5": "60895bbfd40b902513afda50b28e80da"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7fbc64e3-4de3-4629-b271-c3cad50ecb0e",
            "hashes": {
                "MD5": "45bd30d3a52904a7fe64fd97c31e3a1c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--a8ed3e5c-d23a-4b84-809d-0859b75067da",
            "hashes": {
                "MD5": "0e0f720193204cbd1a2c847d76f9e82f"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--8390aba8-62d8-47f3-903b-5b62246e2100",
            "hashes": {
                "MD5": "8b605de9d28c8c6477a996d4e5873e4e"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b028e785-1ca8-4cea-8873-370464e6929d",
            "hashes": {
                "MD5": "8a94fe218e7970839b83b53a824ebc47"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--750b6762-1e7c-4c99-b930-df9909cb8d59",
            "hashes": {
                "MD5": "5f704db7552a0b6b535b9c7c5f240664"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--989b9327-97d8-4302-bad7-aa1160b94fcf",
            "hashes": {
                "SHA-256": "4bfd068156adbcaa9c9701abbd72d21c0174f7ce6d3563962891e0538f6a36a7"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--25370dbb-8af6-4eee-974e-f08232e26452",
            "hashes": {
                "SHA-256": "90f53ae46c789884cfddc0d1d8f1ee7f8c4662b899fce51d5b01e94848554072"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--301d7045-ba04-45e6-ab47-e72ee20ddb49",
            "hashes": {
                "SHA-256": "f372b16ec015767320a8334b73405943b0222ea125241907235fd4f347832d0e"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7235eaf3-b500-4fc0-9e2a-6295a7a21413",
            "hashes": {
                "SHA-256": "892734d408626a9bb557346c5f80343d5f415e8e536f2aad30df74086865fe50"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c6e0773a-185d-4e48-8dab-6dc4251972b5",
            "hashes": {
                "MD5": "da19f3c42361ac84642e936e61c149a1"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7017d58e-bf8b-456b-a8ab-27fe3f420bf1",
            "hashes": {
                "SHA-256": "18ab9a5bd68314b8a91070f18ca9c2c9097a3441b058edccd304b0e33d6c1422"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--3684219d-82f8-413f-a2de-5760fec613e7",
            "hashes": {
                "MD5": "ff37eb655a96b71e7dc08b4d91e1daea"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--e95df68e-2530-4260-8a4f-24c37f9f9192",
            "hashes": {
                "MD5": "752b8fc6f69c8153d6945ff608ae6b4e"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d1361db2-2cee-4955-b623-5309943c7cf1",
            "hashes": {
                "SHA-256": "4a3e9f6b214effe5028a0bf36776190916621fd7977bf3720cb6ead34d9ee20d"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c78a2a6c-981b-47b8-be7a-5a9bcc1f1ddc",
            "hashes": {
                "MD5": "02430604d146e8e33554061344ca806e"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--858ea9b5-6056-417d-81e7-6f35418c2d76",
            "hashes": {
                "SHA-256": "f462439a4590e9ee053573639a82e36304897f0a695729990c108bce6518f556"
            }
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--73e5135e-1d71-4c7e-b46d-d20792ce29bd",
            "value": "execuetive.director@gmail.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--4a66da32-c590-4f2a-ba61-bd8d6ea85b09",
            "value": "tienqang65@gmail.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--2a0d7f16-ddee-4f7a-9105-a16cc78e1d4b",
            "value": "goddadyusim@hanmail.net"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--bf86b373-a756-470a-91c5-6681c72806a1",
            "value": "ironc1oud@hanmail.net"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--2eea63f4-667d-40bc-88b6-8acf03b65823",
            "value": "timesthemorning@gmail.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--dc3b8877-8bcd-4d2a-bae9-c62f46392bdb",
            "value": "protocol.emb.2025@gmail.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--4693a42f-8df4-490d-ae06-650d0aed9dfa",
            "value": "1gai2000@hanmail.net"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--d72e0fd0-d57e-4250-9af9-7c714c0a9027",
            "value": "https://dl.dropbox.com/scl/fi/4pydbg08752rsw6us7e5x/bobokan.rtf?rlkey=b49lxndnjvigz58o7ptwqrsbm&st=9rtwns0x&dl=0"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--de19cbc8-83e4-4115-86c0-ff9d6fe0db81",
            "value": "https://dl.dropbox.com/scl/fi/kpxdthefmdbxw9m31tao3/krumhan.rtf?rlkey=yhzti914uzn72wm4iruej24px&st=xjzyd4ip&dl=0"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--8983e82e-d2dc-44dd-9258-4a50c0c6255b",
            "value": "https://dl.dropbox.com/scl/fi/sb19vsslj13wdkndskwuou/eula.rtf?rlkey=axrb5o5mv14afu7g6e8s3d5s8&st=xy96nggc&dl=0"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--7ae3f7fa-5322-4762-86eb-98343995bd17",
            "value": "https://bp.nidnaver.cloud/forbhmypresent.66ghz.com/dn.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--6f85ecf7-16b2-438a-b9fb-2fe0acd8bcee",
            "value": "https://dl.dropboxusercontent.com/scl/fi/c6ba7iwuke57d75j3mmte/eula.rtf?rlkey=t0jnirhxk48xdu8p74rqgv9dw&st=oofgjsq8&dl=0"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--2b1e731d-7b6c-41d0-98d6-3e9af1ef3bce",
            "value": "https://bp.nidnaver.cloud/info.php"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--5fdede61-4741-40a3-951e-efe2240f5fee",
            "value": "bp.nidnaver.cloud"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--365bcb38-e0f6-44e9-9b47-1ee0c6208fca",
            "value": "isc-parliment.org"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--3baf27d1-36fd-40a6-9ae0-ca106729f1dd",
            "value": "165.154.52.140"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--c11627ee-4b46-4277-b9ca-92ace54f9ea8",
            "value": "165.154.52.210"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--c75f0cff-1539-4292-ab47-9ea70efba14c",
            "value": "141.164.40.239"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--3eb0ac1a-b3b3-4c15-af80-de5682c45ca3",
            "value": "141.164.49.250"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--346e4468-b6b4-4414-9c71-cf60a51938e0",
            "value": "158.247.249.243"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--b13fde70-a25c-479e-8c99-f35e3d9aed1c",
            "value": "141.164.41.17"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1",
            "created": "2026-06-24T19:53:14.724537Z",
            "modified": "2026-06-24T19:53:14.724537Z",
            "name": "Kimsuky"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--be94733a-ecf6-4fc3-bff5-dbf636466df9",
            "created_by_ref": "identity--8d7468b9-b3ef-4eff-8250-4b8bd3e6ebac",
            "created": "2026-06-24T19:53:14.766317Z",
            "modified": "2026-06-24T19:53:14.766317Z",
            "name": "The Coordinated Embassy Hunt: Unmasking the DPRK-linked GitHub C2 Espionage Campaign",
            "published": "2025-08-18T00:00:00Z",
            "object_refs": [
                "identity--8d7468b9-b3ef-4eff-8250-4b8bd3e6ebac",
                "ipv4-addr--50c3d08e-6fc8-46cb-a5c6-5ad067c1b531",
                "file--403abe7f-16f4-40c5-8379-7cd772b96c49",
                "file--c59babcc-7cf9-494b-a4a2-6e1660a525a0",
                "file--2568c7e5-09fb-40af-8ac2-85240b053982",
                "file--75483b78-2305-4a84-bc00-3c0be1156f2e",
                "email-addr--e5cae973-c0da-454f-b1f3-a86f29f65777",
                "file--8972e549-e0cc-45c8-b026-5fb0ef6a0cd3",
                "file--1ced2f8b-be6e-48c1-9583-cd3700acb1cf",
                "file--c6f0c3fe-af55-4a7e-b69e-d4b8897acc65",
                "file--f2e39504-7b35-4981-9bcd-eb75179ba450",
                "file--bbde876a-4668-40ea-af17-17acadf2093d",
                "file--314385cf-b83d-4ee1-a317-fb14c3589762",
                "file--8adacd7d-5ee0-4272-85da-5bbc56518803",
                "file--fc60032e-b787-47e2-86f6-07b8710a4945",
                "file--62ce4620-11c1-412b-8fa2-79eab6b20e1f",
                "file--66fa94e4-86c0-4017-b533-beefacd5c19c",
                "file--7fbc64e3-4de3-4629-b271-c3cad50ecb0e",
                "file--a8ed3e5c-d23a-4b84-809d-0859b75067da",
                "file--8390aba8-62d8-47f3-903b-5b62246e2100",
                "file--b028e785-1ca8-4cea-8873-370464e6929d",
                "file--750b6762-1e7c-4c99-b930-df9909cb8d59",
                "file--989b9327-97d8-4302-bad7-aa1160b94fcf",
                "file--25370dbb-8af6-4eee-974e-f08232e26452",
                "file--301d7045-ba04-45e6-ab47-e72ee20ddb49",
                "file--7235eaf3-b500-4fc0-9e2a-6295a7a21413",
                "file--c6e0773a-185d-4e48-8dab-6dc4251972b5",
                "file--7017d58e-bf8b-456b-a8ab-27fe3f420bf1",
                "file--3684219d-82f8-413f-a2de-5760fec613e7",
                "file--e95df68e-2530-4260-8a4f-24c37f9f9192",
                "file--d1361db2-2cee-4955-b623-5309943c7cf1",
                "file--c78a2a6c-981b-47b8-be7a-5a9bcc1f1ddc",
                "file--858ea9b5-6056-417d-81e7-6f35418c2d76",
                "email-addr--73e5135e-1d71-4c7e-b46d-d20792ce29bd",
                "email-addr--4a66da32-c590-4f2a-ba61-bd8d6ea85b09",
                "email-addr--2a0d7f16-ddee-4f7a-9105-a16cc78e1d4b",
                "email-addr--bf86b373-a756-470a-91c5-6681c72806a1",
                "email-addr--2eea63f4-667d-40bc-88b6-8acf03b65823",
                "email-addr--dc3b8877-8bcd-4d2a-bae9-c62f46392bdb",
                "email-addr--4693a42f-8df4-490d-ae06-650d0aed9dfa",
                "url--d72e0fd0-d57e-4250-9af9-7c714c0a9027",
                "url--de19cbc8-83e4-4115-86c0-ff9d6fe0db81",
                "url--8983e82e-d2dc-44dd-9258-4a50c0c6255b",
                "url--7ae3f7fa-5322-4762-86eb-98343995bd17",
                "url--6f85ecf7-16b2-438a-b9fb-2fe0acd8bcee",
                "url--2b1e731d-7b6c-41d0-98d6-3e9af1ef3bce",
                "domain-name--5fdede61-4741-40a3-951e-efe2240f5fee",
                "domain-name--365bcb38-e0f6-44e9-9b47-1ee0c6208fca",
                "ipv4-addr--3baf27d1-36fd-40a6-9ae0-ca106729f1dd",
                "ipv4-addr--c11627ee-4b46-4277-b9ca-92ace54f9ea8",
                "ipv4-addr--c75f0cff-1539-4292-ab47-9ea70efba14c",
                "ipv4-addr--3eb0ac1a-b3b3-4c15-af80-de5682c45ca3",
                "ipv4-addr--346e4468-b6b4-4414-9c71-cf60a51938e0",
                "ipv4-addr--b13fde70-a25c-479e-8c99-f35e3d9aed1c",
                "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.trellix.com/blogs/research/dprk-linked-github-c2-espionage-campaign/"
                }
            ]
        }
    ]
}