{
    "type": "bundle",
    "id": "bundle--3bae8cce-8716-423d-ae06-f40a74de7f8f",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--b5bcf025-fdd8-486e-85fe-9d23c45827d6",
            "created": "2026-02-26T23:33:02.446066Z",
            "modified": "2026-02-26T23:33:02.446113Z",
            "name": "Kmsec",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--be64ea84-2ca6-46c0-a7b5-4984f867d57a",
            "hashes": {
                "SHA-256": "f290db50ffe64d4fb5fe409d3d1c8eca6f6711e4bbd85a13c9dce055508cc1b3"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6b04634e-040e-43a5-b514-742b7276c684",
            "hashes": {
                "SHA-256": "8456fc178a8ea190fc15a140c39a9bc67a5508575cf81fd089003f9de6cfd51c"
            }
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--1d227bee-f26c-5f74-a3f8-5bdb18774b64",
            "created": "2026-06-24T17:25:10.101247Z",
            "modified": "2026-06-24T17:25:10.101247Z",
            "name": "FamousChollima"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--c8902fc7-0285-45b0-82ef-3cfa75eb0df4",
            "created_by_ref": "identity--b5bcf025-fdd8-486e-85fe-9d23c45827d6",
            "created": "2026-06-24T17:25:10.102319Z",
            "modified": "2026-06-24T17:25:10.102319Z",
            "name": "VMWare artifacts left by a FAMOUS CHOLLIMA operator",
            "published": "2026-02-13T00:00:00Z",
            "object_refs": [
                "identity--b5bcf025-fdd8-486e-85fe-9d23c45827d6",
                "file--be64ea84-2ca6-46c0-a7b5-4984f867d57a",
                "file--6b04634e-040e-43a5-b514-742b7276c684",
                "threat-actor--1d227bee-f26c-5f74-a3f8-5bdb18774b64"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://kmsec.uk/blog/dprk-opsec-1/"
                }
            ]
        }
    ]
}