{
    "type": "bundle",
    "id": "bundle--7700198c-fe3f-41c1-b167-c2c82b9a6aa6",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--6d7c06b4-8b9a-4ebc-bcfa-febb5bfc5a80",
            "created": "2023-03-31T06:30:53.758743Z",
            "modified": "2023-03-31T06:30:53.758794Z",
            "name": "Rapid7",
            "identity_class": "organization"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--63d7aa5d-03b3-49ed-9292-f0eeddd4f0a0",
            "value": "niscarea.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--3d1740de-bbe4-4ba4-9dd3-b6d8573ed750",
            "value": "00701111.000webhostapp.com"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--1f89437a-c631-4169-bac0-1cfdd8839df6",
            "hashes": {
                "SHA-1": "5c7b2705155023e6e438399d895d30bf924e0547"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--747f271f-42e1-4c7b-9d61-d7b9a4f21892",
            "hashes": {
                "SHA-256": "e8000ddfddbe120b5f2fb3677abbad901615d1abd01a0de204fade5d2dd5ad0d"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--baf6c171-b0ae-4122-9698-b27257f82f22",
            "hashes": {
                "MD5": "71db2ae9c36403cec1fd38864d64f239"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--3d35ebf3-c8e5-431e-8d2c-c286205cbf0e",
            "value": "http://gosiweb.gosiclass.com/m/gnu/convert/html/com/list.php?query=6"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--9fcfb7a1-3e50-425c-92dd-6175eb00fa9d",
            "hashes": {
                "SHA-1": "d4fa57f9c9e35222a8cacddc79055c1d76907fb9"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7a417977-d48d-485a-bb56-6d78ea6d4b79",
            "hashes": {
                "SHA-256": "da79eea1198a1a10e2ffd50fd949521632d8f252fb1aadb57a45218482b9fd89"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--45e24a61-4b92-4da6-bc4f-805794b8cacd",
            "hashes": {
                "MD5": "f35b05779e9538cec363ca37ab38e287"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--17096db0-5bdb-417f-8d70-5ad2e3539564",
            "hashes": {
                "SHA-1": "b5224224fdbabdea53a91a96e9f816c6f9a8708c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--767e9b4f-3e78-4633-bbdd-07ffbce1aafc",
            "hashes": {
                "MD5": "364d4fdf430477222fe854b3cd5b6d40"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--78965ed8-467c-4314-918a-abaadc5e4341",
            "hashes": {
                "SHA-256": "c62677543eeb50e0def44fc75009a7748cdbedd0a3ccf62f50d7f219f6a5aa05"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--661d0c10-e1d1-4a1b-a8a5-ee6e25b4ca66",
            "value": "gosiweb.gosiclass.com"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1",
            "created": "2026-06-24T22:32:00.759757Z",
            "modified": "2026-06-24T22:32:00.759757Z",
            "name": "Kimsuky"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--a4175b0c-1dee-4ba6-a807-1acbc5072fa8",
            "created_by_ref": "identity--6d7c06b4-8b9a-4ebc-bcfa-febb5bfc5a80",
            "created": "2026-06-24T22:32:00.765171Z",
            "modified": "2026-06-24T22:32:00.765171Z",
            "name": "The Updated APT Playbook: Tales from the Kimsuky threat actor group",
            "published": "2024-03-20T00:00:00Z",
            "object_refs": [
                "identity--6d7c06b4-8b9a-4ebc-bcfa-febb5bfc5a80",
                "domain-name--63d7aa5d-03b3-49ed-9292-f0eeddd4f0a0",
                "domain-name--3d1740de-bbe4-4ba4-9dd3-b6d8573ed750",
                "file--1f89437a-c631-4169-bac0-1cfdd8839df6",
                "file--747f271f-42e1-4c7b-9d61-d7b9a4f21892",
                "file--baf6c171-b0ae-4122-9698-b27257f82f22",
                "url--3d35ebf3-c8e5-431e-8d2c-c286205cbf0e",
                "file--9fcfb7a1-3e50-425c-92dd-6175eb00fa9d",
                "file--7a417977-d48d-485a-bb56-6d78ea6d4b79",
                "file--45e24a61-4b92-4da6-bc4f-805794b8cacd",
                "file--17096db0-5bdb-417f-8d70-5ad2e3539564",
                "file--767e9b4f-3e78-4633-bbdd-07ffbce1aafc",
                "file--78965ed8-467c-4314-918a-abaadc5e4341",
                "domain-name--661d0c10-e1d1-4a1b-a8a5-ee6e25b4ca66",
                "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.rapid7.com/blog/post/2024/03/20/the-updated-apt-playbook-tales-from-the-kimsuky-threat-actor-group/"
                }
            ]
        }
    ]
}