{
    "type": "bundle",
    "id": "bundle--2a031f61-340e-40cc-b7b2-93c20c826504",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--5ace95f0-bd6c-4fee-a494-ca40e791918d",
            "created": "2023-03-08T12:51:44.544245Z",
            "modified": "2024-09-09T23:28:33.92829Z",
            "name": "PaloaltoNetworks",
            "identity_class": "organization"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--b1ec4ac3-cb84-4faa-8710-4a6a9a896c85",
            "value": "152.32.138.167"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--5ff746b8-e092-42eb-9f67-b10def1933a0",
            "hashes": {
                "SHA-256": "990b7eec4e0d9a22ec0b5c82df535cf1666d9021f2e417b49dc5110a67228e27"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--225dceee-5ab1-4855-ba09-2feb2aeb51ef",
            "hashes": {
                "SHA-256": "c69cd6a9a09405ae5a60acba2f9770c722afde952bd5a227a72393501b4f5343"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d6c94a40-e0e5-42a3-a70b-38b1cd7aabc9",
            "hashes": {
                "SHA-256": "faf666019333f4515f241c1d3fcfc25c67532463245e358b90f9e498fe4f6801"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--8530a38d-0d33-44d8-995f-81e7895b043c",
            "hashes": {
                "SHA-256": "2e768cee1c89ad5fc89be9df5061110d2a4953b336309014e0593eb65c75e715"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--4530790a-6cba-4b66-8abd-2605b7fcd856",
            "hashes": {
                "SHA-256": "a173a425d17b6f2362eca3c8ea4de9860b52faba414bbb22162895641dda0dc2"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--7a2e67b1-82e7-42b0-8a9c-5ebe605718bf",
            "value": "http://mail.apollo-page.r-e.kr/wp-content/include.php?_sys_=7"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--e97103b8-ce36-4363-a4b8-e2df87ce6946",
            "value": "http://mail.apollo-page.r-e.kr/plugin/include.php?_sys_=7"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--811cfd61-baf5-4153-96ae-fcec1ba5d052",
            "value": "https://nidlogin.apollo.r-e.kr/cmd/index.php?_idx_=7"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--c112ab57-07b0-4b09-b5eb-1458b2c4c6d9",
            "value": "nidlogin.apollo.r-e.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--7ecc321d-193d-4063-a482-2376176745fc",
            "value": "bitjoker2024.000webhostapp.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--9985ba0b-6825-4d1d-8f16-f169487cdd68",
            "value": "mail.apollo-page.r-e.kr"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--b6d839dd-309c-5248-93ae-966a9739ab15",
            "created": "2026-06-24T21:08:42.302119Z",
            "modified": "2026-06-24T21:08:42.302119Z",
            "name": "SparklingPisces"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--6b4e4462-aa49-4230-9907-0d189ac817df",
            "created_by_ref": "identity--5ace95f0-bd6c-4fee-a494-ca40e791918d",
            "created": "2026-06-24T21:08:42.306034Z",
            "modified": "2026-06-24T21:08:42.306034Z",
            "name": "Unraveling Sparkling Pisces\u2019s Tool Set: KLogEXE and FPSpy",
            "published": "2024-09-26T00:00:00Z",
            "object_refs": [
                "identity--5ace95f0-bd6c-4fee-a494-ca40e791918d",
                "ipv4-addr--b1ec4ac3-cb84-4faa-8710-4a6a9a896c85",
                "file--5ff746b8-e092-42eb-9f67-b10def1933a0",
                "file--225dceee-5ab1-4855-ba09-2feb2aeb51ef",
                "file--d6c94a40-e0e5-42a3-a70b-38b1cd7aabc9",
                "file--8530a38d-0d33-44d8-995f-81e7895b043c",
                "file--4530790a-6cba-4b66-8abd-2605b7fcd856",
                "url--7a2e67b1-82e7-42b0-8a9c-5ebe605718bf",
                "url--e97103b8-ce36-4363-a4b8-e2df87ce6946",
                "url--811cfd61-baf5-4153-96ae-fcec1ba5d052",
                "domain-name--c112ab57-07b0-4b09-b5eb-1458b2c4c6d9",
                "domain-name--7ecc321d-193d-4063-a482-2376176745fc",
                "domain-name--9985ba0b-6825-4d1d-8f16-f169487cdd68",
                "threat-actor--b6d839dd-309c-5248-93ae-966a9739ab15"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://unit42.paloaltonetworks.com/kimsuky-new-keylogger-backdoor-variant/"
                }
            ]
        }
    ]
}