{
    "type": "bundle",
    "id": "bundle--f90161ae-e51e-4a4e-b0bf-38bf6febd4e6",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--f924a234-6732-41ee-bc8d-9100eba73165",
            "created": "2023-03-08T12:51:52.889089Z",
            "modified": "2024-09-11T13:26:05.365279Z",
            "name": "ReversingLabs",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--895b2316-7a30-4e53-b892-2eee7a332b09",
            "hashes": {
                "SHA-1": "b1880340818a1feda156abd272255bcc018f8bef"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--2bfa41ab-651c-45b1-8f37-a3937efea646",
            "hashes": {
                "SHA-1": "5e026885bcf4b67993aefa4e992153f6d81c11da"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--87a07af4-49cf-4624-bf0d-d08b9eb09396",
            "hashes": {
                "SHA-1": "049cc8d88a086c8fc69b51d76b6c0c4c2a66fa08"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ba95efcc-d219-4d0b-a4c3-2115d27c3ed3",
            "hashes": {
                "SHA-1": "321363f11464208ee24e56a700ad5d26154df4bd"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d83c5931-4c98-4c30-8e62-8a69e485a73a",
            "hashes": {
                "SHA-1": "2c72edf29d5bca22525d612c94f1ee323c47be0c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--9e7a8671-a8bf-47f1-ba71-f03c12317009",
            "hashes": {
                "SHA-1": "859f5b0af717fca9f890dcba0b87ac63be469033"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b67d7bc2-79d2-47a6-939b-1560f54bf31e",
            "hashes": {
                "SHA-1": "bbb1e2ac1d243b8db922a23821de570702140145"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7321f0df-6eb7-47af-b7e1-0a1321b42b77",
            "hashes": {
                "SHA-1": "e3545b2c53c2cb8f012f0badc1bf452badfee341"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--039601ce-35c7-40f8-8dec-956f6b23cac3",
            "hashes": {
                "SHA-1": "89c05ecd388c5f168704c5a8e1d37f72a7f0f0f4"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7e071bce-fb49-4a11-b2f5-c7277ba24bfb",
            "hashes": {
                "SHA-1": "e063b210b50ca1426da45afa430d87c53b2ef5d2"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--33c6a6d7-d99d-40f0-9469-6f4dc6679580",
            "hashes": {
                "SHA-1": "aeeb445216a205abd770546dfa8d03f8b94515a1"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--a0207d8d-11f0-430b-b363-a41d1a704a75",
            "hashes": {
                "SHA-1": "39e9859f0cf85a0c8361e042e8316d4e185d1cfb"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--22b9ff92-67a4-4766-bc79-111c1b240c84",
            "hashes": {
                "SHA-1": "fdea182ffe7c04c28f28f88ceb9624732bb36bdc"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--f1f8424e-7db2-45b6-9120-f029e177f057",
            "hashes": {
                "SHA-1": "9b8eefa1d7ee348c2b1b4c350028df5c2707c3d8"
            }
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--d4510b15-3b76-4aaf-9fc0-9c1e04eebfb8",
            "value": "45.61.136.133"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--e9f35cea-fd6e-5fc7-a5b9-2894700cb511",
            "created": "2026-06-24T19:53:14.276369Z",
            "modified": "2026-06-24T19:53:14.276369Z",
            "name": "LabyrinthChollima"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--794838a6-bae3-445c-b60e-c988bc60fa69",
            "created_by_ref": "identity--f924a234-6732-41ee-bc8d-9100eba73165",
            "created": "2026-06-24T19:53:14.281159Z",
            "modified": "2026-06-24T19:53:14.281159Z",
            "name": "VMConnect supply chain attack continues, evidence points to North Korea",
            "published": "2023-08-31T00:00:00Z",
            "object_refs": [
                "identity--f924a234-6732-41ee-bc8d-9100eba73165",
                "file--895b2316-7a30-4e53-b892-2eee7a332b09",
                "file--2bfa41ab-651c-45b1-8f37-a3937efea646",
                "file--87a07af4-49cf-4624-bf0d-d08b9eb09396",
                "file--ba95efcc-d219-4d0b-a4c3-2115d27c3ed3",
                "file--d83c5931-4c98-4c30-8e62-8a69e485a73a",
                "file--9e7a8671-a8bf-47f1-ba71-f03c12317009",
                "file--b67d7bc2-79d2-47a6-939b-1560f54bf31e",
                "file--7321f0df-6eb7-47af-b7e1-0a1321b42b77",
                "file--039601ce-35c7-40f8-8dec-956f6b23cac3",
                "file--7e071bce-fb49-4a11-b2f5-c7277ba24bfb",
                "file--33c6a6d7-d99d-40f0-9469-6f4dc6679580",
                "file--a0207d8d-11f0-430b-b363-a41d1a704a75",
                "file--22b9ff92-67a4-4766-bc79-111c1b240c84",
                "file--f1f8424e-7db2-45b6-9120-f029e177f057",
                "ipv4-addr--d4510b15-3b76-4aaf-9fc0-9c1e04eebfb8",
                "threat-actor--e9f35cea-fd6e-5fc7-a5b9-2894700cb511"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.reversinglabs.com/blog/vmconnect-supply-chain-campaign-continues"
                }
            ]
        }
    ]
}