{
    "type": "bundle",
    "id": "bundle--eb9edd72-5822-4d2e-8112-d457e6240eea",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--8d7468b9-b3ef-4eff-8250-4b8bd3e6ebac",
            "created": "2023-03-08T12:51:46.656797Z",
            "modified": "2024-11-01T00:50:30.77394Z",
            "name": "Trellix",
            "identity_class": "organization"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--a5013675-1463-48a2-bb01-87d2d9e8a97e",
            "value": "Semenov.akkim@protonmail.com"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--a6b38f84-4a9c-5481-ad0c-9b5ee8bd5a96",
            "created": "2026-06-24T18:29:42.204631Z",
            "modified": "2026-06-24T18:29:42.204631Z",
            "name": "APT38"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--6d123f37-7c2c-4901-b085-a6ff9df1ac05",
            "created_by_ref": "identity--8d7468b9-b3ef-4eff-8250-4b8bd3e6ebac",
            "created": "2026-06-24T18:29:42.209859Z",
            "modified": "2026-06-24T18:29:42.209859Z",
            "name": "The Hermit Kingdom\u2019s Ransomware play",
            "published": "2022-05-03T00:00:00Z",
            "object_refs": [
                "identity--8d7468b9-b3ef-4eff-8250-4b8bd3e6ebac",
                "email-addr--a5013675-1463-48a2-bb01-87d2d9e8a97e",
                "threat-actor--a6b38f84-4a9c-5481-ad0c-9b5ee8bd5a96"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.trellix.com/en-us/about/newsroom/stories/threat-labs/the-hermit-kingdoms-ransomware-play.html"
                }
            ]
        }
    ]
}