{
    "type": "bundle",
    "id": "bundle--674ce911-eda7-4a95-92d4-9f206426eb44",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--279efcac-f4a3-4fde-bbc0-e3c4c0b65000",
            "created": "2024-08-17T01:12:48.728304Z",
            "modified": "2024-10-04T00:49:45.192504Z",
            "name": "Kandji",
            "identity_class": "organization"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--ab43bc8d-ad84-4fc7-8ccd-25ba47fe8012",
            "value": "buy2x.com"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--77d6e306-d5f5-4b5d-bbcc-380551fd5dbb",
            "hashes": {
                "SHA-256": "9b839e9169babff1d14468d9f8497c165931dc65d5ff1f4b547925ff924c43fe"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--25f196af-9cb1-491c-acc4-7e14a9349914",
            "hashes": {
                "SHA-256": "f1b3ce96462027644f9caa314d3da745dab139ee1cb14fe508234e76bd686f93"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b25f804f-66bf-43e4-891c-c9ac139ac501",
            "hashes": {
                "SHA-256": "a55029c963ff454e42483b9b6f0293dc546e06b2fb71e6ebaa4c6f146a9906a3"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--8515e680-ef8f-441f-9f4c-20c4f4128316",
            "hashes": {
                "SHA-256": "9623c98f7338d56b07b35cd379e31e685e32a9c5317d7bc4af5276916cef4ed3"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--30906f2e-b650-4668-a043-3a95fce25ee9",
            "hashes": {
                "SHA-256": "e09d2277a19dddd751edb164bde064682a6acc41a7ee178a2dacd4f9ac357fc7"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--4aa5a2ef-c027-427c-a098-98f0523dad81",
            "hashes": {
                "SHA-256": "c52e3e73d7870bf8edc1b9ae52b26c08ef2466f948ef3446b2c865fd53d859dd"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--67349e69-f9a7-4791-8917-2422cba23a51",
            "hashes": {
                "SHA-1": "a55029c963ff454e42483b9b6f0293dc546e06b2"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--fb04244c-aa79-438a-96fb-0c81e68fcf08",
            "value": "http://buy2x.com/OcMySY5QNkY/ABcTDInKWw/4SqSYtx%2B/EKfP7saoiP/BcA%3D%3D"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--f7f0d913-f17b-5632-a48a-76b4eef8a1cb",
            "created": "2026-06-24T17:28:16.902803Z",
            "modified": "2026-06-24T17:28:16.902803Z",
            "name": "Bluenoroff"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--7f46d3e2-300f-4abb-b4f5-aa23b711ef93",
            "created_by_ref": "identity--279efcac-f4a3-4fde-bbc0-e3c4c0b65000",
            "created": "2026-06-24T17:28:16.907831Z",
            "modified": "2026-06-24T17:28:16.907831Z",
            "name": "TodoSwift Disguises Malware Download Behind Bitcoin PDF",
            "published": "2024-08-16T00:00:00Z",
            "object_refs": [
                "identity--279efcac-f4a3-4fde-bbc0-e3c4c0b65000",
                "domain-name--ab43bc8d-ad84-4fc7-8ccd-25ba47fe8012",
                "file--77d6e306-d5f5-4b5d-bbcc-380551fd5dbb",
                "file--25f196af-9cb1-491c-acc4-7e14a9349914",
                "file--b25f804f-66bf-43e4-891c-c9ac139ac501",
                "file--8515e680-ef8f-441f-9f4c-20c4f4128316",
                "file--30906f2e-b650-4668-a043-3a95fce25ee9",
                "file--4aa5a2ef-c027-427c-a098-98f0523dad81",
                "file--67349e69-f9a7-4791-8917-2422cba23a51",
                "url--fb04244c-aa79-438a-96fb-0c81e68fcf08",
                "threat-actor--f7f0d913-f17b-5632-a48a-76b4eef8a1cb"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.kandji.io/blog/todoswift-disguises-malware-download-behind-bitcoin-pdf"
                }
            ]
        }
    ]
}