{
    "type": "bundle",
    "id": "bundle--5a215fc7-cdaa-46b1-9cf2-da960af56d7a",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--0b321554-b19f-4576-8a72-5d21285d352f",
            "created": "2024-11-04T13:12:41.551911Z",
            "modified": "2024-11-04T13:15:36.524915Z",
            "name": "HybridAnalysis",
            "identity_class": "organization"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--44e1c867-e326-46da-9200-a0b7d60a27c3",
            "value": "rur243@proton.me"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--13b0e520-b5df-4b0e-8a70-821c25f2c2f1",
            "value": "handgoldlove119@gmail.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--59922bcb-3003-4da0-9de7-54788724a59e",
            "value": "handgoldlove@gmail.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--9593ea87-6710-44df-9db9-8fc45b8a20b1",
            "value": "vergiegpham@gmail.com"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--273f1c13-0169-45c8-8ff6-981409641385",
            "value": "https://github.com/Fujinuma0804/Tralert"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--888e2ac7-a50c-4d9f-b7ad-5cb5380cc609",
            "value": "https://github.com/vergiegpham/ADS_Analitics"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--d4f6cf6c-2b19-4ea5-bd44-2016d2b86c3d",
            "value": "http://161.97.113.34:3001/api/textcontent"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--ef452dce-bd00-42cb-a2d9-cd4b1510ed77",
            "value": "endava.online"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--82c32449-9e37-4bc3-a9c6-e28c00191e89",
            "value": "talert.space"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--e2ab7c40-e475-44e1-bf44-add61a28928a",
            "value": "talert.online"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--4e37deb2-0481-43d8-be4b-f9ff4d94a9e0",
            "value": "talert.store"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--4a9940d3-003a-4528-8bfe-209af1615524",
            "value": "talert.site"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--48a2c7fe-1e9a-48c6-9023-6ac8bc5001e3",
            "value": "tralert.store"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--7f33dfab-78fe-47d3-bc6a-6ae438816739",
            "value": "tralert.site"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--27563e47-66a5-4d4e-a465-d3f0aac04cbe",
            "value": "trumpalert.store"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--60ffd777-9f26-40f6-9b97-44ac2b8b5cdc",
            "value": "tralert7.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--5ffcced2-7c87-4224-ab28-cea26308d02b",
            "value": "tralert.online"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--1f25c3d0-8272-4b1d-9e37-e4f910c2d9ea",
            "value": "91.107.246.107"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--d6fd8a01-7a7a-4dbb-b0db-a1f7313ac6e7",
            "value": "161.97.113.34"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--570eb9ec-1874-4a61-9a2a-115b1883d1bc",
            "hashes": {
                "MD5": "8bcfedccf028a08dafd34a01b036799f",
                "SHA-1": "61623817b5bf4b0204bb94ffc7b5d59627224709",
                "SHA-256": "3c356065e32ac8cbc6ec330581c7c343bf2d5567695f3a015a0ae95908a7ed6b"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--5baac477-f5c9-4fd1-8baa-21f8d79ad7d9",
            "hashes": {
                "MD5": "4794c3cca9a860c8500f51d430cf2392",
                "SHA-1": "8d7a4b14b7f86d9f1857d8f54ebeffaf8b78b7fe",
                "SHA-256": "eaba341f94e700ff470e7a8fb3fe596f601ff54a8415103fa102520ec4bbd5e9"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--81932f3a-9e51-4d3d-b67a-9569613301f6",
            "hashes": {
                "MD5": "666da559f02a9b217a4c826b17923c0c",
                "SHA-1": "692b542e877af215c17e63ef61bbd0aaf927c7ad",
                "SHA-256": "528b004407d32bbc6299540a7a9fd98a3037070d34b56f14813aaaa29820b13d"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--e3d10d60-b00a-482d-b87e-3a01c45569d8",
            "hashes": {
                "MD5": "f10d35fedb6aa986cef4c113edfdef26",
                "SHA-1": "ed02996ba97457166406d1d3230ef177fec67913",
                "SHA-256": "384255ba8bea8997dce5a6a9c4b4352279343000821128342e6960dbcc14bbe0"
            }
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--cfd4e85d-785b-559b-9448-0187296dde0f",
            "created": "2026-06-24T21:11:07.85778Z",
            "modified": "2026-06-24T21:11:07.85778Z",
            "name": "VelvetChollima"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--1e5f4913-4ab0-4af3-beb5-0532b9ad8315",
            "created_by_ref": "identity--0b321554-b19f-4576-8a72-5d21285d352f",
            "created": "2026-06-24T21:11:07.86802Z",
            "modified": "2026-06-24T21:11:07.86802Z",
            "name": "VELVET CHOLLIMA Infostealer Campaign Using Trading App as Lure",
            "published": "2026-05-14T00:00:00Z",
            "object_refs": [
                "identity--0b321554-b19f-4576-8a72-5d21285d352f",
                "email-addr--44e1c867-e326-46da-9200-a0b7d60a27c3",
                "email-addr--13b0e520-b5df-4b0e-8a70-821c25f2c2f1",
                "email-addr--59922bcb-3003-4da0-9de7-54788724a59e",
                "email-addr--9593ea87-6710-44df-9db9-8fc45b8a20b1",
                "url--273f1c13-0169-45c8-8ff6-981409641385",
                "url--888e2ac7-a50c-4d9f-b7ad-5cb5380cc609",
                "url--d4f6cf6c-2b19-4ea5-bd44-2016d2b86c3d",
                "domain-name--ef452dce-bd00-42cb-a2d9-cd4b1510ed77",
                "domain-name--82c32449-9e37-4bc3-a9c6-e28c00191e89",
                "domain-name--e2ab7c40-e475-44e1-bf44-add61a28928a",
                "domain-name--4e37deb2-0481-43d8-be4b-f9ff4d94a9e0",
                "domain-name--4a9940d3-003a-4528-8bfe-209af1615524",
                "domain-name--48a2c7fe-1e9a-48c6-9023-6ac8bc5001e3",
                "domain-name--7f33dfab-78fe-47d3-bc6a-6ae438816739",
                "domain-name--27563e47-66a5-4d4e-a465-d3f0aac04cbe",
                "domain-name--60ffd777-9f26-40f6-9b97-44ac2b8b5cdc",
                "domain-name--5ffcced2-7c87-4224-ab28-cea26308d02b",
                "ipv4-addr--1f25c3d0-8272-4b1d-9e37-e4f910c2d9ea",
                "ipv4-addr--d6fd8a01-7a7a-4dbb-b0db-a1f7313ac6e7",
                "file--570eb9ec-1874-4a61-9a2a-115b1883d1bc",
                "file--5baac477-f5c9-4fd1-8baa-21f8d79ad7d9",
                "file--81932f3a-9e51-4d3d-b67a-9569613301f6",
                "file--e3d10d60-b00a-482d-b87e-3a01c45569d8",
                "threat-actor--cfd4e85d-785b-559b-9448-0187296dde0f"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://hybrid-analysis.blogspot.com/2026/05/velvet-chollima-infostealer-campaign.html"
                }
            ]
        }
    ]
}