{
    "type": "bundle",
    "id": "bundle--1c3b116d-bc80-4706-985e-cbf904cf00f8",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--c7e51838-39bb-4a48-83bd-ce30af0c9402",
            "created": "2024-03-05T10:56:29.07593Z",
            "modified": "2024-10-29T23:27:51.306863Z",
            "name": "Hunt.io",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--566f8c1c-52ee-4a95-85ad-f769087df729",
            "hashes": {
                "SHA-256": "ffe4cfde23a1ef557f7dc56f53b3713d8faa9e47ae6562b61ffa1887e5d2d56e"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--3e14bf9d-e027-46a3-94d7-8f64a662277c",
            "hashes": {
                "SHA-256": "cd313c9b706c2ba9f50d338305c456ad3392572efe387a83093b09d2cb6f1b56"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--906c19ab-22fd-4e2e-ac50-e5aafc28fc93",
            "hashes": {
                "SHA-256": "52277d43d2f5e8fa8c856e1c098a1ff260a956f0598e16c8fb1b38e3a9374d15"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--b9718b24-feb6-42ea-bfa5-2b38b0e55a31",
            "value": "http://one68.top/client"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--5108d98d-99a5-43ac-930f-5c6aeab7595f",
            "value": "http://updatetiker.site/dev/client.bin"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--a331a104-4471-448a-9cf0-0eee64b1ed6c",
            "value": "henho247.net"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--256e0baa-7c43-46d2-be9c-8e94436d67bf",
            "value": "one68.top"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--d59b2b57-f0f1-4d30-b10e-f86a806debfc",
            "value": "remote.henh247.net"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--1ace7e7c-cf9d-416e-a731-5aec1c3213c0",
            "value": "updatetiker.site"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--8d83e893-18b1-4f18-a374-b0fe5e8d4d7d",
            "value": "updatetiker.net"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--b58a4cb1-4315-4b56-99a7-383bacc9194d",
            "value": "remote.henho247.net"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--add3f631-e438-49ba-ae4d-e6f51a4d9046",
            "value": "118.194.249.38"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--4b1ac8d8-6e4e-424b-b7eb-7eb8b0e474b8",
            "value": "152.32.138.108"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--aea5988a-86e9-41c7-993d-c9ca71eb98af",
            "value": "15.235.130.160"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--5f6dee6a-b683-4aff-8060-ea12ad2780a3",
            "value": "15.32.138.108"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--05ba3548-739c-4a47-8ab1-32a6e80af6fb",
            "value": "51.79.218.159"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--c53a2aa5-6261-43fc-817b-96ca8cc90ff7",
            "created_by_ref": "identity--c7e51838-39bb-4a48-83bd-ce30af0c9402",
            "created": "2026-06-24T18:20:57.540252Z",
            "modified": "2026-06-24T18:20:57.540252Z",
            "name": "Unmasking SparkRAT: Detection & macOS Campaign Insights",
            "published": "2025-01-28T00:00:00Z",
            "object_refs": [
                "identity--c7e51838-39bb-4a48-83bd-ce30af0c9402",
                "file--566f8c1c-52ee-4a95-85ad-f769087df729",
                "file--3e14bf9d-e027-46a3-94d7-8f64a662277c",
                "file--906c19ab-22fd-4e2e-ac50-e5aafc28fc93",
                "url--b9718b24-feb6-42ea-bfa5-2b38b0e55a31",
                "url--5108d98d-99a5-43ac-930f-5c6aeab7595f",
                "domain-name--a331a104-4471-448a-9cf0-0eee64b1ed6c",
                "domain-name--256e0baa-7c43-46d2-be9c-8e94436d67bf",
                "domain-name--d59b2b57-f0f1-4d30-b10e-f86a806debfc",
                "domain-name--1ace7e7c-cf9d-416e-a731-5aec1c3213c0",
                "domain-name--8d83e893-18b1-4f18-a374-b0fe5e8d4d7d",
                "domain-name--b58a4cb1-4315-4b56-99a7-383bacc9194d",
                "ipv4-addr--add3f631-e438-49ba-ae4d-e6f51a4d9046",
                "ipv4-addr--4b1ac8d8-6e4e-424b-b7eb-7eb8b0e474b8",
                "ipv4-addr--aea5988a-86e9-41c7-993d-c9ca71eb98af",
                "ipv4-addr--5f6dee6a-b683-4aff-8060-ea12ad2780a3",
                "ipv4-addr--05ba3548-739c-4a47-8ab1-32a6e80af6fb"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://hunt.io/blog/sparkrat-server-detection-macos-activity-and-malicious-connections"
                }
            ]
        }
    ]
}