{
    "type": "bundle",
    "id": "bundle--89d23a2f-b912-4685-9cc7-aa06ca26ee71",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--eafdd258-8d1a-438d-bbef-6ca0d4a35852",
            "created": "2023-03-08T12:51:41.544512Z",
            "modified": "2025-02-04T10:54:04.972936Z",
            "name": "Ahnlab",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--4e3e365f-3f36-40be-ad35-017b114b79a2",
            "hashes": {
                "MD5": "9e75705b4930f50502bcbd740fc3ece1"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--913da24a-cb95-470a-a8f8-8683850bb629",
            "hashes": {
                "MD5": "a67cf9add2905c11f5c466bc01d554b0"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--3593f81e-60fa-4527-a7b6-83708d5eacba",
            "value": "http://sa.netup.p-e.kr/index.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--e8788c7a-f67d-433d-acda-9fcc1dfc3ff5",
            "value": "http://dl.netup.p-e.kr/index.php"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--2472c579-3042-4dc2-94c1-8c15d1175789",
            "value": "sa.netup.p-e.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--467d4d98-b0eb-40da-980f-2097f01267a9",
            "value": "dl.netup.p-e.kr"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--47fcd9a6-b235-45e5-94b9-5c6d7e908773",
            "hashes": {
                "MD5": "7457dc037c4a5f3713d9243a0dfb1a2c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--9af1c554-d7c1-4334-a56e-90bf90faf2a2",
            "hashes": {
                "MD5": "88f183304b99c897aacfa321d58e1840"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--5b9bae94-6491-48e1-97bd-b5bc0d06c018",
            "hashes": {
                "MD5": "27ef6917fe32685fdf9b755eb8e97565"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--f1427f19-cd4c-4a93-bc73-214ecf7018a1",
            "hashes": {
                "MD5": "7b6d02a459fdaa4caa1a5bf741c4bd42"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ab025434-4079-4d14-a797-9f97c1d9c813",
            "hashes": {
                "MD5": "c8e7b0d3b6afa22e801cacaf16b37355"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--8bebe6a1-1beb-45a1-80d3-74a7ad87ba2b",
            "value": "http://qi.limsjo.p-e.kr/index.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--63a4722d-8ddc-457f-a6b6-6e5f1a3cd43c",
            "value": "http://ol.negapa.p-e.kr/index.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--888e6bd4-f278-400c-a374-bb62c934120f",
            "value": "http://ai.negapa.p-e.kr/index.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--8cfb1781-c7f1-4b76-92e2-721d5ff352e4",
            "value": "http://ar.kostin.p-e.kr/index.php"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--59bf25ac-0dd6-44d1-a941-55b10f0b55a6",
            "value": "ai.negapa.p-e.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--4021851c-cd46-4620-88ee-d6ade3210b99",
            "value": "ar.kostin.p-e.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--32cc4c56-b274-4ee9-92c2-4922895e6738",
            "value": "ol.negapa.p-e.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--b087534e-3965-4a3f-8a8e-e473cb91a00e",
            "value": "qi.limsjo.p-e.kr"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d718e766-21c7-43b1-ab2c-9efc3b426a13",
            "hashes": {
                "MD5": "2b678c0f59924ca90a753daa881e9fd3"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--25466ddc-1528-4d1f-b20e-cc58d97379f1",
            "hashes": {
                "MD5": "e4a6d47e9e60e4c858c1314d263aa317"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--464b5107-4fa8-49f2-abda-156cb13db01a",
            "hashes": {
                "MD5": "4222492e069ac78a55d3451f4b9b9fca"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d7fbc900-e88f-4f4b-b28d-33eac5965ce6",
            "hashes": {
                "MD5": "4168ff8b0a3e2f7e9c96afb653d42a01"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--f4964d9f-4787-4766-a5ac-8af84a187be4",
            "hashes": {
                "MD5": "013c4ee2b32511b11ee9540bb0fdb9d1"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--087ef9a0-ed8c-45fe-9485-c5c4a11f858a",
            "hashes": {
                "MD5": "9360a895837177d8a23b2e3f79508059"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--748fa4b2-6f6b-483a-aa1e-370a84329df7",
            "hashes": {
                "MD5": "42ea65fda0f92bbeca5f4535155125c7"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c148d52a-6b3f-4a43-b9b6-4881c77592f6",
            "hashes": {
                "MD5": "b532f3dcc788896c4844f36eb6cee3d1"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--201a4ca9-2f30-4bfe-b4bc-39f629cb027b",
            "hashes": {
                "MD5": "62fba369711087ea37ef0b0ab62f3372"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--13c44d22-c10e-4e5f-b565-6164153bc0aa",
            "hashes": {
                "MD5": "d67abe980a397a94e1715df6e64eedc8"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--bdcee71e-cac6-4a5e-8443-7c2a0b5be4ff",
            "hashes": {
                "MD5": "8d4af59eebdcda10f3c88049bb097a3a"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--55a8e63f-b2b4-4636-86d2-8149eb43e3ba",
            "hashes": {
                "MD5": "b97abf7b17aeb4fa661594a4a1e5c77f"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--e893e262-83d6-4a0f-80e1-8f70a3449d22",
            "hashes": {
                "MD5": "2aaa3f1859102aab35519f0d4c1585dd"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--edc5d243-e3b4-4b92-a5ce-e00e757dd1bc",
            "hashes": {
                "MD5": "035cf750c67de0ab2e6228409ac85ea3"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--38764770-ed08-44b4-a3ff-7ee34fad44b2",
            "hashes": {
                "MD5": "dc636da03e807258d2a10825780b4639"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ae304e16-dfc7-4c97-a82b-afed50402ff9",
            "hashes": {
                "MD5": "6097d030fe6f05ec0249e4d87b6be4a6"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--946b64ed-c814-44dd-a219-db96b434d8b8",
            "value": "pe.daysol.p-e.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--6c35eb2f-31c0-4994-b641-c1a6bd074379",
            "value": "ce.aerosp.p-e.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--b79bd593-c5fd-4e64-99e1-36e41fa127ae",
            "value": "ca.bananat.p-e.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--bc7c1150-64f6-4e5d-bd92-9d31195bdb60",
            "value": "viewer.appofficer.kro.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--bb46183d-758a-427c-9a33-d8644b9233ea",
            "value": "pi.selecto.p-e.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--c3d1e82e-417a-40cb-96c0-6c4c41163daa",
            "value": "ai.selecto.p-e.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--8505a4dc-6e42-431f-a9df-2352a11ddd5f",
            "value": "ai.ssungmin.p-e.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--29773473-c410-4f28-8e78-e423551aea63",
            "value": "ai.daysol.p-e.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--2ded7190-7ca6-4766-9517-388a37b120a2",
            "value": "ai.bananat.p-e.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--5b404011-d8e4-47ae-a6df-30e4c9e87c94",
            "value": "ai.kimyy.p-e.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--6b450f75-7fac-4000-bcb6-f7c3fe10d595",
            "value": "li.ssungmin.p-e.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--e397f869-45b5-464b-b424-a6a342806ce9",
            "value": "ai.aerosp.p-e.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--aedee00e-7f92-46e0-a39a-4d9bb7685d64",
            "value": "ve.kimyy.p-e.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--df070316-f413-46f5-bdd4-c0c968296166",
            "value": "qa.jaychoi.p-e.kr"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--2f65ca45-d3ce-4460-9aa4-c395f4567d31",
            "hashes": {
                "MD5": "19c2decfa7271fa30e48d4750c1d18c1"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c7f8db1b-a142-412b-839f-126b5541feb3",
            "hashes": {
                "MD5": "87429e9223d45e0359cd1c41c0301836"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--f4e1a568-05f6-4a59-ae79-6c12e1a480df",
            "value": "ai.kostin.p-e.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--0818be3e-64d4-4603-89cf-acfb7b402b3f",
            "value": "coolsystem.co.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--392d7bf9-54eb-4d26-9545-4bd8c023a4ac",
            "value": "ai.limsjo.p-e.kr"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--8d5704e2-ac06-434f-bf6b-61a2f26e3ea8",
            "value": "http://ai.limsjo.p-e.kr/index.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--6ed263da-c1f3-45e7-8210-d8217f4a3799",
            "value": "http://ai.kostin.p-e.kr/index.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--7a77a8ef-cd40-4c9a-b669-31c47c99f41e",
            "value": "http://coolsystem.co.kr/admin/mail/index.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--44b9dd35-8032-4b4c-84ff-cf40e64dd303",
            "value": "http://pe.daysol.p-e.kr/index.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--9c6e3b38-d2ef-4c10-b9ea-8d596bd7ba8b",
            "value": "http://pi.selecto.p-e.kr/index.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--60fec0c7-184f-4ea2-be05-c789b200f730",
            "value": "http://ai.aerosp.p-e.kr/index.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--a80083e2-1278-494a-8e87-45a5adc7f742",
            "value": "http://qa.jaychoi.p-e.kr/index.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--da3d7b7d-7493-4880-b735-b26b4330edc7",
            "value": "http://ai.ssungmin.p-e.kr/index.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--70addcca-f4c8-44b4-9714-3dad3181a437",
            "value": "http://ai.selecto.p-e.kr/index.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--bef96772-aeb2-4b11-9d75-847239595831",
            "value": "http://ca.bananat.p-e.kr/index.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--27cb15be-2068-4f47-8853-dcffefb76c2c",
            "value": "http://ce.aerosp.p-e.kr/index.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--fd2f7d3d-4614-4b43-8ca8-19133b7c1ad4",
            "value": "http://ai.bananat.p-e.kr/index.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--4dd95978-9dc8-4d23-8528-47da96a0e0a9",
            "value": "http://ve.kimyy.p-e.kr/index.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--3170e1af-97cb-4e34-91b6-d71ee7b72223",
            "value": "http://li.ssungmin.p-e.kr/index.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--83d836c5-59c0-4c7b-a9c9-737d42241bbf",
            "value": "http://ai.kimyy.p-e.kr/index.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--e324aff0-dbd8-413f-bdc7-8e9bff5a7f37",
            "value": "http://ai.daysol.p-e.kr/index.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--ddaf418b-04cd-4f5e-babf-adfa6e20a7ab",
            "value": "http://viewer.appofficer.kro.kr/index.php"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1",
            "created": "2026-06-24T18:10:38.456417Z",
            "modified": "2026-06-24T18:10:38.456417Z",
            "name": "Kimsuky"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--be3db918-a3de-41af-a865-d60530f4e9fc",
            "created_by_ref": "identity--eafdd258-8d1a-438d-bbef-6ca0d4a35852",
            "created": "2026-06-24T18:10:38.460353Z",
            "modified": "2026-06-24T18:10:38.460353Z",
            "name": "TrollAgent That Infects Systems Upon Security Program Installation Process (Kimsuky Group)",
            "published": "2024-02-23T00:00:00Z",
            "object_refs": [
                "identity--eafdd258-8d1a-438d-bbef-6ca0d4a35852",
                "file--4e3e365f-3f36-40be-ad35-017b114b79a2",
                "file--913da24a-cb95-470a-a8f8-8683850bb629",
                "url--3593f81e-60fa-4527-a7b6-83708d5eacba",
                "url--e8788c7a-f67d-433d-acda-9fcc1dfc3ff5",
                "domain-name--2472c579-3042-4dc2-94c1-8c15d1175789",
                "domain-name--467d4d98-b0eb-40da-980f-2097f01267a9",
                "file--47fcd9a6-b235-45e5-94b9-5c6d7e908773",
                "file--9af1c554-d7c1-4334-a56e-90bf90faf2a2",
                "file--5b9bae94-6491-48e1-97bd-b5bc0d06c018",
                "file--f1427f19-cd4c-4a93-bc73-214ecf7018a1",
                "file--ab025434-4079-4d14-a797-9f97c1d9c813",
                "url--8bebe6a1-1beb-45a1-80d3-74a7ad87ba2b",
                "url--63a4722d-8ddc-457f-a6b6-6e5f1a3cd43c",
                "url--888e6bd4-f278-400c-a374-bb62c934120f",
                "url--8cfb1781-c7f1-4b76-92e2-721d5ff352e4",
                "domain-name--59bf25ac-0dd6-44d1-a941-55b10f0b55a6",
                "domain-name--4021851c-cd46-4620-88ee-d6ade3210b99",
                "domain-name--32cc4c56-b274-4ee9-92c2-4922895e6738",
                "domain-name--b087534e-3965-4a3f-8a8e-e473cb91a00e",
                "file--d718e766-21c7-43b1-ab2c-9efc3b426a13",
                "file--25466ddc-1528-4d1f-b20e-cc58d97379f1",
                "file--464b5107-4fa8-49f2-abda-156cb13db01a",
                "file--d7fbc900-e88f-4f4b-b28d-33eac5965ce6",
                "file--f4964d9f-4787-4766-a5ac-8af84a187be4",
                "file--087ef9a0-ed8c-45fe-9485-c5c4a11f858a",
                "file--748fa4b2-6f6b-483a-aa1e-370a84329df7",
                "file--c148d52a-6b3f-4a43-b9b6-4881c77592f6",
                "file--201a4ca9-2f30-4bfe-b4bc-39f629cb027b",
                "file--13c44d22-c10e-4e5f-b565-6164153bc0aa",
                "file--bdcee71e-cac6-4a5e-8443-7c2a0b5be4ff",
                "file--55a8e63f-b2b4-4636-86d2-8149eb43e3ba",
                "file--e893e262-83d6-4a0f-80e1-8f70a3449d22",
                "file--edc5d243-e3b4-4b92-a5ce-e00e757dd1bc",
                "file--38764770-ed08-44b4-a3ff-7ee34fad44b2",
                "file--ae304e16-dfc7-4c97-a82b-afed50402ff9",
                "domain-name--946b64ed-c814-44dd-a219-db96b434d8b8",
                "domain-name--6c35eb2f-31c0-4994-b641-c1a6bd074379",
                "domain-name--b79bd593-c5fd-4e64-99e1-36e41fa127ae",
                "domain-name--bc7c1150-64f6-4e5d-bd92-9d31195bdb60",
                "domain-name--bb46183d-758a-427c-9a33-d8644b9233ea",
                "domain-name--c3d1e82e-417a-40cb-96c0-6c4c41163daa",
                "domain-name--8505a4dc-6e42-431f-a9df-2352a11ddd5f",
                "domain-name--29773473-c410-4f28-8e78-e423551aea63",
                "domain-name--2ded7190-7ca6-4766-9517-388a37b120a2",
                "domain-name--5b404011-d8e4-47ae-a6df-30e4c9e87c94",
                "domain-name--6b450f75-7fac-4000-bcb6-f7c3fe10d595",
                "domain-name--e397f869-45b5-464b-b424-a6a342806ce9",
                "domain-name--aedee00e-7f92-46e0-a39a-4d9bb7685d64",
                "domain-name--df070316-f413-46f5-bdd4-c0c968296166",
                "file--2f65ca45-d3ce-4460-9aa4-c395f4567d31",
                "file--c7f8db1b-a142-412b-839f-126b5541feb3",
                "domain-name--f4e1a568-05f6-4a59-ae79-6c12e1a480df",
                "domain-name--0818be3e-64d4-4603-89cf-acfb7b402b3f",
                "domain-name--392d7bf9-54eb-4d26-9545-4bd8c023a4ac",
                "url--8d5704e2-ac06-434f-bf6b-61a2f26e3ea8",
                "url--6ed263da-c1f3-45e7-8210-d8217f4a3799",
                "url--7a77a8ef-cd40-4c9a-b669-31c47c99f41e",
                "url--44b9dd35-8032-4b4c-84ff-cf40e64dd303",
                "url--9c6e3b38-d2ef-4c10-b9ea-8d596bd7ba8b",
                "url--60fec0c7-184f-4ea2-be05-c789b200f730",
                "url--a80083e2-1278-494a-8e87-45a5adc7f742",
                "url--da3d7b7d-7493-4880-b735-b26b4330edc7",
                "url--70addcca-f4c8-44b4-9714-3dad3181a437",
                "url--bef96772-aeb2-4b11-9d75-847239595831",
                "url--27cb15be-2068-4f47-8853-dcffefb76c2c",
                "url--fd2f7d3d-4614-4b43-8ca8-19133b7c1ad4",
                "url--4dd95978-9dc8-4d23-8528-47da96a0e0a9",
                "url--3170e1af-97cb-4e34-91b6-d71ee7b72223",
                "url--83d836c5-59c0-4c7b-a9c9-737d42241bbf",
                "url--e324aff0-dbd8-413f-bdc7-8e9bff5a7f37",
                "url--ddaf418b-04cd-4f5e-babf-adfa6e20a7ab",
                "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://asec.ahnlab.com/en/61934/"
                }
            ]
        }
    ]
}