{
    "type": "bundle",
    "id": "bundle--12d443f5-1496-4863-89a0-16e07cd8893d",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--f30a1150-ad6e-415c-adb7-f570cbd5297e",
            "created": "2025-03-03T23:54:01.037735Z",
            "modified": "2025-03-03T23:54:01.037778Z",
            "name": "Spur",
            "identity_class": "organization"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--97933643-103d-4c86-8b85-d43d6cc99563",
            "value": "appletls.com"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--72097a44-7c7c-438d-b4bd-0a936729d0bb",
            "value": "156.59.13.153"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--63d6cd7c-f021-4858-9fa4-ada7edb3a79d",
            "hashes": {
                "SHA-1": "a26c0e8b1491eda727fd88b629ce886666387ef5"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--af40a4a2-9177-490b-a7d1-7bdab642e185",
            "value": "ctax2k93hsocm8mxx6ey.ganode.org"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--6d40e382-9aec-4959-87ec-b9dfbe084444",
            "value": "ganode.org"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--7099175d-299a-458e-96fe-ec5fe196bcd8",
            "value": "mf429xciejryees2cusm.appletls.com"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1",
            "created": "2026-06-24T23:57:10.195296Z",
            "modified": "2026-06-24T23:57:10.195296Z",
            "name": "Kimsuky"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--1ea2b203-a3b3-4809-aa40-f59e2ecf037a",
            "created_by_ref": "identity--f30a1150-ad6e-415c-adb7-f570cbd5297e",
            "created": "2026-06-24T23:57:10.197874Z",
            "modified": "2026-06-24T23:57:10.197874Z",
            "name": "Uncovering the Chinese Proxy Service Used in APT Campaigns",
            "published": "2025-08-20T00:00:00Z",
            "object_refs": [
                "identity--f30a1150-ad6e-415c-adb7-f570cbd5297e",
                "domain-name--97933643-103d-4c86-8b85-d43d6cc99563",
                "ipv4-addr--72097a44-7c7c-438d-b4bd-0a936729d0bb",
                "file--63d6cd7c-f021-4858-9fa4-ada7edb3a79d",
                "domain-name--af40a4a2-9177-490b-a7d1-7bdab642e185",
                "domain-name--6d40e382-9aec-4959-87ec-b9dfbe084444",
                "domain-name--7099175d-299a-458e-96fe-ec5fe196bcd8",
                "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://spur.us/how-spur-uncovered-a-chinese-proxy-and-vpn-service-used-in-an-apt-campaign/"
                }
            ]
        }
    ]
}