{
    "type": "bundle",
    "id": "bundle--1b1f569e-712b-4d03-96a8-09be9a3c5a29",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--fd68cf21-ee4c-4f39-8ad1-6ebfe134db32",
            "created": "2023-03-28T08:46:37.988486Z",
            "modified": "2023-03-28T08:46:37.988536Z",
            "name": "Bridewell",
            "identity_class": "organization"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--c924349c-ffc9-451f-9ea6-073566d8101d",
            "value": "dnsowl.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--895e2ec2-ea8b-4a85-b64e-0318e09fe5a7",
            "value": "docs.azurehosting.co"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--4e9d1cac-d785-413c-afd8-96b1cbcc6123",
            "value": "shippingspro.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--002305f9-d09f-41ee-a3a9-ff914f58abde",
            "value": "share.anobaka.info"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--12eab5ba-4a75-483d-b354-01ad2a16c4c3",
            "value": "team.msteam.biz"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--04f22cdb-8469-4532-b15b-7c45778b81d7",
            "value": "cloud.j-ic.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--bc6418a9-061d-4bb3-a64f-a77d096f63d0",
            "value": "cloud.j-ic.co"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--84e073a2-da8e-49bf-8786-2a99f879ae0b",
            "value": "internal.j-ic.co"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--0a54d62e-97d2-4170-8296-3d994abf47d1",
            "value": "cloud.azurehosting.co"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--1c5e6314-dc77-46cf-b81b-d09a3fca63b6",
            "value": "down.espcapital.co"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--47d98ff1-0ebf-42fc-8d63-92415d26391e",
            "value": "cloud.anobaka.info"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--25930792-c2c6-47b0-8c40-e590ccc49fe0",
            "value": "down.j-ic.co"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--050dff35-2281-4c7a-aef0-3305ba16eb9d",
            "value": "autoprotect.gb.net"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--800bf86b-19bd-4115-b7f2-aa8de30ad60b",
            "value": "trytiponlineresult.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--a192d151-a9a5-4a59-bbd4-317e828d9277",
            "value": "autoprotect.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--459b0a4f-8c53-4c18-bd87-e3c02e8e9508",
            "value": "cloud.mekongcapital.net"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--6ce8b4ec-83e2-485e-80f8-fb873dda365a",
            "value": "cloud.gpmtreit.co"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--b7bc0d72-9e49-42de-a5ad-37d00a8ac520",
            "value": "ns2.trytiponlineresult.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--013e3489-e20d-4a59-8820-ad70ea54727d",
            "value": "down.j-ic.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--ce364e27-a357-438c-a2cf-4c5f92f60e9a",
            "value": "ns1.trytiponlineresult.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--ffd69f0b-58e8-4cc0-a7d6-80caba1af0e2",
            "value": "site.siteshare.me"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--3c447088-63ed-4d36-82d5-7a537179c77d",
            "value": "autoprotect.com.de"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--e7425987-f911-4893-ba76-6f5f3eb13b00",
            "value": "down.gpmtreit.co"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--d23135f5-1b4d-4438-8c4d-1c2bae2e1f54",
            "value": "share.1drvmicrosoft.com"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--eba1efb6-356e-4389-8bfd-14352610d9cb",
            "value": "104.255.172.56"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--ac082f62-1f8b-4a2e-8b52-5d16da3878d2",
            "value": "172.93.181.221"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--2a00f4b2-e80d-46a0-8e13-e46c38bed059",
            "value": "ms.msteam.biz"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--8b6b525b-15aa-44d7-a28d-b79bcaac81d1",
            "value": "155.138.159.45"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--89c45080-f231-4f07-b3a2-0b8c66ef8fde",
            "value": "172.86.122.181"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--27683c74-4142-43be-8a63-89c9f90c2319",
            "value": "centralnic.net"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--94c755f4-125b-4ca9-9f33-ebdd21f25c20",
            "value": "server-1.phcnetworks.net"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--01fca25d-3595-4175-9072-c0be26d7351c",
            "value": "namecheaphosting.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--e10d0a00-0133-4752-b7f0-891edafddf89",
            "value": "phcnetworks.net"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--63da517d-9131-4728-80f2-596e938c9a0b",
            "value": "naogoze.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--fa12d40b-49ac-458f-9fd5-ba489552fe76",
            "value": "corporateimageguru.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--e4cb3218-c7cc-4fbe-983a-ad8a898e8ccd",
            "value": "phcdevworks.com"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--adaf071b-5c98-41c0-b6f7-bc81d6a40a66",
            "value": "172.86.123.181"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--adcc8e95-a44f-55f4-953b-224a76d65b44",
            "created": "2026-06-24T19:57:10.450357Z",
            "modified": "2026-06-24T19:57:10.450357Z",
            "name": "TA444"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--f0ce9bd3-a6dd-4ceb-9f8b-f8e868b29f4a",
            "created_by_ref": "identity--fd68cf21-ee4c-4f39-8ad1-6ebfe134db32",
            "created": "2026-06-24T19:57:10.4514Z",
            "modified": "2026-06-24T19:57:10.4514Z",
            "name": "Undetected North Korean Malware: A Looming Threat to Financial Institutions",
            "published": "2023-02-16T00:00:00Z",
            "object_refs": [
                "identity--fd68cf21-ee4c-4f39-8ad1-6ebfe134db32",
                "domain-name--c924349c-ffc9-451f-9ea6-073566d8101d",
                "domain-name--895e2ec2-ea8b-4a85-b64e-0318e09fe5a7",
                "domain-name--4e9d1cac-d785-413c-afd8-96b1cbcc6123",
                "domain-name--002305f9-d09f-41ee-a3a9-ff914f58abde",
                "domain-name--12eab5ba-4a75-483d-b354-01ad2a16c4c3",
                "domain-name--04f22cdb-8469-4532-b15b-7c45778b81d7",
                "domain-name--bc6418a9-061d-4bb3-a64f-a77d096f63d0",
                "domain-name--84e073a2-da8e-49bf-8786-2a99f879ae0b",
                "domain-name--0a54d62e-97d2-4170-8296-3d994abf47d1",
                "domain-name--1c5e6314-dc77-46cf-b81b-d09a3fca63b6",
                "domain-name--47d98ff1-0ebf-42fc-8d63-92415d26391e",
                "domain-name--25930792-c2c6-47b0-8c40-e590ccc49fe0",
                "domain-name--050dff35-2281-4c7a-aef0-3305ba16eb9d",
                "domain-name--800bf86b-19bd-4115-b7f2-aa8de30ad60b",
                "domain-name--a192d151-a9a5-4a59-bbd4-317e828d9277",
                "domain-name--459b0a4f-8c53-4c18-bd87-e3c02e8e9508",
                "domain-name--6ce8b4ec-83e2-485e-80f8-fb873dda365a",
                "domain-name--b7bc0d72-9e49-42de-a5ad-37d00a8ac520",
                "domain-name--013e3489-e20d-4a59-8820-ad70ea54727d",
                "domain-name--ce364e27-a357-438c-a2cf-4c5f92f60e9a",
                "domain-name--ffd69f0b-58e8-4cc0-a7d6-80caba1af0e2",
                "domain-name--3c447088-63ed-4d36-82d5-7a537179c77d",
                "domain-name--e7425987-f911-4893-ba76-6f5f3eb13b00",
                "domain-name--d23135f5-1b4d-4438-8c4d-1c2bae2e1f54",
                "ipv4-addr--eba1efb6-356e-4389-8bfd-14352610d9cb",
                "ipv4-addr--ac082f62-1f8b-4a2e-8b52-5d16da3878d2",
                "domain-name--2a00f4b2-e80d-46a0-8e13-e46c38bed059",
                "ipv4-addr--8b6b525b-15aa-44d7-a28d-b79bcaac81d1",
                "ipv4-addr--89c45080-f231-4f07-b3a2-0b8c66ef8fde",
                "domain-name--27683c74-4142-43be-8a63-89c9f90c2319",
                "domain-name--94c755f4-125b-4ca9-9f33-ebdd21f25c20",
                "domain-name--01fca25d-3595-4175-9072-c0be26d7351c",
                "domain-name--e10d0a00-0133-4752-b7f0-891edafddf89",
                "domain-name--63da517d-9131-4728-80f2-596e938c9a0b",
                "domain-name--fa12d40b-49ac-458f-9fd5-ba489552fe76",
                "domain-name--e4cb3218-c7cc-4fbe-983a-ad8a898e8ccd",
                "ipv4-addr--adaf071b-5c98-41c0-b6f7-bc81d6a40a66",
                "threat-actor--adcc8e95-a44f-55f4-953b-224a76d65b44"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://storage.pardot.com/838563/1676629189Mljyft19/CTI_Advisory_Undetected_North_Korean_Malware_A_Looming_Threat_to_Finan.pdf"
                }
            ]
        }
    ]
}