{
    "type": "bundle",
    "id": "bundle--acd64f8a-d02a-4eda-9fd4-b359be4d0f52",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--8a0b93da-a9d1-41b5-8d1b-7e8a105945fc",
            "created": "2023-03-08T14:44:38.241293Z",
            "modified": "2023-03-08T14:44:38.241418Z",
            "name": "S2W",
            "identity_class": "organization"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--01917e38-16a6-4e49-ae68-97c3df7f3b87",
            "value": "navernnail.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--1c5c5bc7-3473-42e7-8090-20004e58c1ba",
            "value": "goooglesecurity.com"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--ee56f34d-cbb3-40e6-bf51-bc215930ee11",
            "value": "23.106.122.16"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--893a604a-077a-4ce0-b339-c00ee77bd9b8",
            "value": "mc.pzs.kr"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--aa3ad2e8-927f-4c09-ac2d-f6ca0f1cd809",
            "hashes": {
                "MD5": "89f97e1d68e274b03bc40f6e06e2ba9a"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--a06505a8-8271-4b7a-a506-d697ec22d88e",
            "hashes": {
                "MD5": "3458daa0dffdc3fbb5c931f25d7a1ec0"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6e6e5f9a-fb95-4d77-bcf4-c5d295f3e454",
            "hashes": {
                "SHA-256": "884ff7e3a3cea5ce6371851f205d703e77abc7d1427d21800a04a205a124b649"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7b368106-82ef-4c1c-9c02-f1f0a102b91f",
            "hashes": {
                "SHA-256": "539231dea156e29bd6f7ed8430bd08a4e07ba330a9fad799fea45d9e9eed070c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--dc8e017f-4c00-4d66-add2-087fc4e201b9",
            "hashes": {
                "MD5": "8420236c32f0991feaa7869549abdb97"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d354f9f2-7495-4771-8e6d-fe8487ccf89d",
            "hashes": {
                "MD5": "5d56371944dec9da57db95d0199dd920"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--04487853-832f-47fe-b7dc-613f24a70d39",
            "hashes": {
                "SHA-256": "59cb6bb54a6a222c863258baf9ee2500a539b55411b468a3e672fe7b26166b98"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d4564ab0-e4e4-43d9-bc3d-86f4f1646199",
            "hashes": {
                "SHA-256": "031bde16d3b75083b0adda754aa982d4f6bd91e6b9d0531d5486dc139a90ce5a"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--86889af4-21a8-4486-850b-2762ec2dbd61",
            "hashes": {
                "SHA-256": "ae7436c00e2380cdabbdcccacf134b95ddbaf2a40483fa289535dd6207cc58ce"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--f1ab5fb4-60fe-4ae3-8f99-c195ec7af76f",
            "hashes": {
                "MD5": "aefa23b91cc667be041cad40abbfa043"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--1900701d-3aa0-42f1-bed5-0e229a199498",
            "hashes": {
                "SHA-256": "9722107fff4f3b2255556e0cf4d367ccb73305c34b1746baed31b16899eefc4b"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--72468cb1-7437-4466-b145-77efbe6854a9",
            "hashes": {
                "SHA-256": "c038b20f104be66550d8dd3366bf4474398beea330bd25dac2bb2fd4b5377332"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ecbf4f8a-5c1d-4a26-b083-a57c35034303",
            "hashes": {
                "SHA-256": "38d1d8c3c4ec5ea17c3719af285247cb1d8879c7cf967e1be1197e60d42c01c5"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b4eff026-ffa6-4eb6-b0ed-38782bb1fbb3",
            "hashes": {
                "SHA-256": "fdd0e18e841d3ec4e501dd8bf0da68201779fd90237c1c67078d1d915cd13045"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--9f95d174-f1ae-4222-8439-24834b5e644d",
            "hashes": {
                "SHA-256": "1510780646e92cbefc5fb4f4d7d2997a549058712a81553f90e197e907434672"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--71405c96-30ab-4050-9c32-ddd5279d4148",
            "value": "http://navernnail.com/fkwneovjubske4gv/android/facebook.html"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--24fcbd14-e137-4556-a090-a60b7b9b388b",
            "value": "http://mc.pzs.kr/themes/mobile/images/about/temp/android/facebook.html"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--77935dfe-7cd2-4562-8fe5-0b0a12ef8014",
            "value": "http://navernnail.com/fkwneovjubske4gv/android/naver.html"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--0bb01b93-18e9-4c26-816a-5eb7eab1d70c",
            "value": "http://goooglesecurity.com/fkwneovjubske4gv/android/fcm.html"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--e84a39c2-8c74-4f82-83b5-2c35372a089a",
            "value": "http://navernnail.com/fkwneovjubske4gv/android/daum.html"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--0840ed55-dd6c-4551-a784-790d645aabb0",
            "value": "http://mc.pzs.kr/themes/mobile/images/about/temp/android/daum.html"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--039c022f-b393-447f-be62-f72d5cb6acf4",
            "value": "http://mc.pzs.kr/themes/mobile/images/about/temp/android/naver.html"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1",
            "created": "2026-06-24T21:04:33.750964Z",
            "modified": "2026-06-24T21:04:33.750964Z",
            "name": "Kimsuky"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--c7d8d4a6-0934-40b6-a6a5-830b91e733f9",
            "created_by_ref": "identity--8a0b93da-a9d1-41b5-8d1b-7e8a105945fc",
            "created": "2026-06-24T21:04:33.755433Z",
            "modified": "2026-06-24T21:04:33.755433Z",
            "name": "Unveil the evolution of Kimsuky targeting Android devices with newly discovered mobile malware",
            "published": "2022-10-25T00:00:00Z",
            "object_refs": [
                "identity--8a0b93da-a9d1-41b5-8d1b-7e8a105945fc",
                "domain-name--01917e38-16a6-4e49-ae68-97c3df7f3b87",
                "domain-name--1c5c5bc7-3473-42e7-8090-20004e58c1ba",
                "ipv4-addr--ee56f34d-cbb3-40e6-bf51-bc215930ee11",
                "domain-name--893a604a-077a-4ce0-b339-c00ee77bd9b8",
                "file--aa3ad2e8-927f-4c09-ac2d-f6ca0f1cd809",
                "file--a06505a8-8271-4b7a-a506-d697ec22d88e",
                "file--6e6e5f9a-fb95-4d77-bcf4-c5d295f3e454",
                "file--7b368106-82ef-4c1c-9c02-f1f0a102b91f",
                "file--dc8e017f-4c00-4d66-add2-087fc4e201b9",
                "file--d354f9f2-7495-4771-8e6d-fe8487ccf89d",
                "file--04487853-832f-47fe-b7dc-613f24a70d39",
                "file--d4564ab0-e4e4-43d9-bc3d-86f4f1646199",
                "file--86889af4-21a8-4486-850b-2762ec2dbd61",
                "file--f1ab5fb4-60fe-4ae3-8f99-c195ec7af76f",
                "file--1900701d-3aa0-42f1-bed5-0e229a199498",
                "file--72468cb1-7437-4466-b145-77efbe6854a9",
                "file--ecbf4f8a-5c1d-4a26-b083-a57c35034303",
                "file--b4eff026-ffa6-4eb6-b0ed-38782bb1fbb3",
                "file--9f95d174-f1ae-4222-8439-24834b5e644d",
                "url--71405c96-30ab-4050-9c32-ddd5279d4148",
                "url--24fcbd14-e137-4556-a090-a60b7b9b388b",
                "url--77935dfe-7cd2-4562-8fe5-0b0a12ef8014",
                "url--0bb01b93-18e9-4c26-816a-5eb7eab1d70c",
                "url--e84a39c2-8c74-4f82-83b5-2c35372a089a",
                "url--0840ed55-dd6c-4551-a784-790d645aabb0",
                "url--039c022f-b393-447f-be62-f72d5cb6acf4",
                "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://medium.com/s2wblog/unveil-the-evolution-of-kimsuky-targeting-android-devices-with-newly-discovered-mobile-malware-280dae5a650f"
                }
            ]
        }
    ]
}