{
    "type": "bundle",
    "id": "bundle--b793b058-40e9-4413-b9f9-07628050cea4",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--59f99ee9-2b33-4e70-a488-4addc93d3d77",
            "created": "2023-03-08T12:51:43.018137Z",
            "modified": "2024-10-23T12:33:11.030915Z",
            "name": "Kaspersky",
            "identity_class": "organization"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--0003f5ee-5f80-4fe9-bb90-3e8ab1f3c2c1",
            "value": "flashserv.net"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--e5dec88f-5936-4839-b8f7-7ecb09a9ab10",
            "value": "update.craftx.biz"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--01c57a92-3887-48aa-a9ad-5d1e3315a993",
            "value": "download.ns360.info"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--e6f867ee-cd9c-4bbd-aac0-64e9b3ca6487",
            "value": "checkupdates.flashserv.net"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--69dabe11-9b3e-4e55-b22d-6e9a5269f1dc",
            "hashes": {
                "MD5": "58a4d93d386736cb9843a267c7c3c10b"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--600e6ca0-7742-477b-a81d-4379bea307a2",
            "hashes": {
                "MD5": "99a18bf3c04a491b256f7d60eb6e0f26"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--bd884c77-5bea-4edd-a7d2-15061502ad48",
            "hashes": {
                "MD5": "6355c82c7c6a90ef41824a03bbabbabc"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--3a28c6df-37fb-4d1c-b6c4-f259954cdfc2",
            "value": "http://www.chateau-eu.fr/wp-content/protect/wpprotect.php?"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--1c9a1fe8-b2bc-45d5-98cc-1dc3ffe0b621",
            "value": "https://edwardsnowden.com/wp-content/"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--84075200-da37-4abc-9002-6899a7f8ebc1",
            "value": "http://www.chateau-eu.fr/wp-content/protect/wpprotect.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--d5e4f4de-e942-4190-a631-0d948cba7774",
            "value": "http://scarcroft.net/wp-content/plugins/twitplug/"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--36255ac2-a92e-4f8c-ba49-04a7d81a8a5a",
            "value": "http://www.chateau-eu.fr/wp-content/plugins/"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--8f9173ac-0b43-4b50-873b-730f6fbc2031",
            "value": "http://www.volatilityfoundation.org"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--d624cb67-78c6-4081-bb1b-53e08b526d53",
            "value": "http://www.chateau-eu.fr/wp-content/player/"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--3d52719a-4d0e-4cb8-9555-5c6cd0dfff83",
            "value": "http://scarcroft.net/plus/thumbs/index.php"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--58538429-7154-4219-a276-0b7f1f7b7b29",
            "value": "fes-caucasus.org"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--7a213fce-c7b2-43de-b675-99c84691ccf4",
            "value": "cafe.daum.net"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--fa66cfa4-8c04-4ee0-a0f1-327b3879e03a",
            "value": "download1.ns360.info"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--c200293d-a1b1-4ac0-a2ce-8f6977a103fe",
            "value": "scarcroft.net"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--15b6e9ef-afc2-40e3-954e-cea306723e74",
            "value": "rfchosun.org"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--c04f4b93-d015-403b-94f0-2ca156609877",
            "value": "mozilla.tftpd.net"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--0decee7f-c070-4fc2-ac86-e5d3cc5973ee",
            "value": "84.45.76.100"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--dedf3825-e448-47e1-9dbf-f89398988405",
            "value": "54.251.107.25"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--81508a6a-efe8-4867-b2c2-9ecf71b04e46",
            "value": "89.46.102.43"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--16b121bf-628f-4405-9aea-02c7e44ff4c2",
            "value": "29.214.39.124"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--c571cecc-393e-500e-9d4a-28c0b8dec018",
            "created": "2026-06-24T18:41:07.999656Z",
            "modified": "2026-06-24T18:41:07.999656Z",
            "name": "Scarcruft"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--f8f926ee-a7f3-4086-8195-2d452c09710d",
            "created_by_ref": "identity--59f99ee9-2b33-4e70-a488-4addc93d3d77",
            "created": "2026-06-24T18:41:08.00372Z",
            "modified": "2026-06-24T18:41:08.00372Z",
            "name": "WALKING IN YOUR ENEMY\u2019S SHADOW: WHEN FOURTH-PARTY COLLECTION BECOMES ATTRIBUTION HELL",
            "published": "2017-08-30T00:00:00Z",
            "object_refs": [
                "identity--59f99ee9-2b33-4e70-a488-4addc93d3d77",
                "domain-name--0003f5ee-5f80-4fe9-bb90-3e8ab1f3c2c1",
                "domain-name--e5dec88f-5936-4839-b8f7-7ecb09a9ab10",
                "domain-name--01c57a92-3887-48aa-a9ad-5d1e3315a993",
                "domain-name--e6f867ee-cd9c-4bbd-aac0-64e9b3ca6487",
                "file--69dabe11-9b3e-4e55-b22d-6e9a5269f1dc",
                "file--600e6ca0-7742-477b-a81d-4379bea307a2",
                "file--bd884c77-5bea-4edd-a7d2-15061502ad48",
                "url--3a28c6df-37fb-4d1c-b6c4-f259954cdfc2",
                "url--1c9a1fe8-b2bc-45d5-98cc-1dc3ffe0b621",
                "url--84075200-da37-4abc-9002-6899a7f8ebc1",
                "url--d5e4f4de-e942-4190-a631-0d948cba7774",
                "url--36255ac2-a92e-4f8c-ba49-04a7d81a8a5a",
                "url--8f9173ac-0b43-4b50-873b-730f6fbc2031",
                "url--d624cb67-78c6-4081-bb1b-53e08b526d53",
                "url--3d52719a-4d0e-4cb8-9555-5c6cd0dfff83",
                "domain-name--58538429-7154-4219-a276-0b7f1f7b7b29",
                "domain-name--7a213fce-c7b2-43de-b675-99c84691ccf4",
                "domain-name--fa66cfa4-8c04-4ee0-a0f1-327b3879e03a",
                "domain-name--c200293d-a1b1-4ac0-a2ce-8f6977a103fe",
                "domain-name--15b6e9ef-afc2-40e3-954e-cea306723e74",
                "domain-name--c04f4b93-d015-403b-94f0-2ca156609877",
                "ipv4-addr--0decee7f-c070-4fc2-ac86-e5d3cc5973ee",
                "ipv4-addr--dedf3825-e448-47e1-9dbf-f89398988405",
                "ipv4-addr--81508a6a-efe8-4867-b2c2-9ecf71b04e46",
                "ipv4-addr--16b121bf-628f-4405-9aea-02c7e44ff4c2",
                "threat-actor--c571cecc-393e-500e-9d4a-28c0b8dec018"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2018/03/07170728/Guerrero-Saade-Raiu-VB2017.pdf"
                }
            ]
        }
    ]
}