{
    "type": "bundle",
    "id": "bundle--1509d96b-2fae-408c-84e5-d58c1a1ac5b0",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--e1770d75-00b9-4e7e-bf11-54ca60ca3da1",
            "created": "2023-03-08T12:51:59.981763Z",
            "modified": "2023-03-08T12:51:59.981844Z",
            "name": "Fireeye",
            "identity_class": "organization"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--47225faa-9119-47d3-a269-7364cd01e9c8",
            "value": "89.34.111.113"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--a720aa9d-f790-4b64-a56c-4a99906555ea",
            "hashes": {
                "MD5": "12def981952667740eb06ee91168e643"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--73376c18-8b1d-40ee-91e7-1d3714971db1",
            "hashes": {
                "MD5": "96986b18a8470f4020ea78df0b3db7d4"
            }
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--2d461deb-6bd7-45f3-af22-d6a66ffb6f4c",
            "value": "47.91.56.21"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--368a6f76-38a9-436a-911e-73af63759841",
            "value": "103.225.168.159"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--3fed5002-967c-45d8-ad1c-299996e95ead",
            "hashes": {
                "MD5": "119a0fd733bc1a013b0d4399112b8626"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b1751a57-67f7-4b9f-85e1-541d551b3282",
            "hashes": {
                "MD5": "062801f6fdbda4dd67b77834c62e82a4"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--5f5b00b9-9b88-4aaa-8d4e-8f3016619529",
            "hashes": {
                "MD5": "97d74671d0489071baa21f38f456eb74"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--eefdc47f-c8b7-448c-a1f1-cce1d1c1b26d",
            "hashes": {
                "MD5": "2961c52f04b7fdf7ccf6c01ac259d767"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--3e505663-72dc-43a7-8cbb-d1219fbac409",
            "hashes": {
                "MD5": "7dae2d144dae4447a152bef586520ef8"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--e1378d02-245f-46c7-90c2-5b5460afc704",
            "hashes": {
                "MD5": "aac00312a961e81c4af4664c49b4a2b2"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--da4b8792-6fcb-46d6-9fd3-146021916eb5",
            "hashes": {
                "MD5": "9b81b3174c9b699f594d725cf89ffaa4"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--96ea702d-81af-4a67-bf01-4164abc1633b",
            "hashes": {
                "MD5": "3aabc9767d02c75ef44df6305bc6a41f"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--9fd415ca-036e-408f-81a6-163466d05fc3",
            "hashes": {
                "MD5": "1ba398b0a14328b9604eeb5ebf139b40"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c4981af9-503e-48fe-ae8f-29ce01767e81",
            "hashes": {
                "MD5": "914ac7ecf2557d5836f26a151c1b9b62"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--80dd6b1e-24b6-42b6-b930-b5af32ad9952",
            "hashes": {
                "MD5": "8e067e4cda99299b0bf2481cc1fd8e12"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--9f125d62-0613-4f52-a423-bbef70fe0242",
            "hashes": {
                "MD5": "49419d84076b13e96540fdd911f1c2f0"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--8dd38608-4fef-4e94-a68e-8e2e9673fc79",
            "hashes": {
                "MD5": "9b19753369b6ed1187159b95fc8a81cd"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--e3e91908-7e41-4e4c-ba6e-b6b26eaa26e8",
            "hashes": {
                "MD5": "1f5fa51ac9517d70f136e187d45f69de"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--2fba51b6-d3e2-40f2-ac97-172f05c249df",
            "hashes": {
                "MD5": "79b53b4555c1fb39ba3c7b8ce9a4287e"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--fed728be-1f15-4485-b6ae-1dc6a9017af0",
            "hashes": {
                "MD5": "8c93e024fc194f520e4e72e761c0942d"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--66e3df83-414d-40a7-acb2-74ddaa9ddb68",
            "hashes": {
                "MD5": "e9815dfb90776ab449539a2be7c16de5"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--4aa7892e-ef03-45c8-af2f-96f10d89307b",
            "hashes": {
                "MD5": "dc63d5affde0db95128dac52f9d19578"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--f8e8dc29-118c-4fb4-879d-931d1aed0edd",
            "hashes": {
                "MD5": "0f56b04a4e9a0df94c7f89c1bccf830c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--dd91abf4-0739-4537-9a24-a0730b43da94",
            "hashes": {
                "MD5": "31718d7b9b3261688688bdc4e026db99"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--f78ee590-9d08-44c7-abfd-2e708c2c612b",
            "hashes": {
                "MD5": "eca09fe8dcbc9d1c097277f2b3ef1081"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--43bf5bf3-70bc-403b-8ff4-1310529c516b",
            "hashes": {
                "MD5": "f36404fb24a640b40e2d43c72c18e66b"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--acc29e2b-9151-4868-99c3-64910430d1ce",
            "hashes": {
                "MD5": "bcc49643833a4d8545ed4145fb6fdfd2"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--392c3308-bce9-4fc8-825f-2e426cc75388",
            "value": "http://tiny-share.com/direct/7dae2d144dae4447a152bef586520ef8"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--79e09e28-b207-4920-859f-a03af69580f8",
            "value": "tiny-share.com"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--fd6aacfc-7fef-4496-a22a-8da3d88c29fb",
            "value": "31.148.220.53"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--51220ca9-9e7a-4b1d-bdde-7b1cbdec4cce",
            "value": "185.162.131.92"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--3c9b02c9-7991-4641-8824-fa0fb0b79848",
            "value": "185.49.71.101"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--0938d5ad-c6f1-404b-bcf4-f82410a187dd",
            "created_by_ref": "identity--e1770d75-00b9-4e7e-bf11-54ca60ca3da1",
            "created": "2026-06-24T19:50:19.625237Z",
            "modified": "2026-06-24T19:50:19.625237Z",
            "name": "WinRAR Zero-day Abused in Multiple Campaigns",
            "published": "2019-03-26T00:00:00Z",
            "object_refs": [
                "identity--e1770d75-00b9-4e7e-bf11-54ca60ca3da1",
                "ipv4-addr--47225faa-9119-47d3-a269-7364cd01e9c8",
                "file--a720aa9d-f790-4b64-a56c-4a99906555ea",
                "file--73376c18-8b1d-40ee-91e7-1d3714971db1",
                "ipv4-addr--2d461deb-6bd7-45f3-af22-d6a66ffb6f4c",
                "ipv4-addr--368a6f76-38a9-436a-911e-73af63759841",
                "file--3fed5002-967c-45d8-ad1c-299996e95ead",
                "file--b1751a57-67f7-4b9f-85e1-541d551b3282",
                "file--5f5b00b9-9b88-4aaa-8d4e-8f3016619529",
                "file--eefdc47f-c8b7-448c-a1f1-cce1d1c1b26d",
                "file--3e505663-72dc-43a7-8cbb-d1219fbac409",
                "file--e1378d02-245f-46c7-90c2-5b5460afc704",
                "file--da4b8792-6fcb-46d6-9fd3-146021916eb5",
                "file--96ea702d-81af-4a67-bf01-4164abc1633b",
                "file--9fd415ca-036e-408f-81a6-163466d05fc3",
                "file--c4981af9-503e-48fe-ae8f-29ce01767e81",
                "file--80dd6b1e-24b6-42b6-b930-b5af32ad9952",
                "file--9f125d62-0613-4f52-a423-bbef70fe0242",
                "file--8dd38608-4fef-4e94-a68e-8e2e9673fc79",
                "file--e3e91908-7e41-4e4c-ba6e-b6b26eaa26e8",
                "file--2fba51b6-d3e2-40f2-ac97-172f05c249df",
                "file--fed728be-1f15-4485-b6ae-1dc6a9017af0",
                "file--66e3df83-414d-40a7-acb2-74ddaa9ddb68",
                "file--4aa7892e-ef03-45c8-af2f-96f10d89307b",
                "file--f8e8dc29-118c-4fb4-879d-931d1aed0edd",
                "file--dd91abf4-0739-4537-9a24-a0730b43da94",
                "file--f78ee590-9d08-44c7-abfd-2e708c2c612b",
                "file--43bf5bf3-70bc-403b-8ff4-1310529c516b",
                "file--acc29e2b-9151-4868-99c3-64910430d1ce",
                "url--392c3308-bce9-4fc8-825f-2e426cc75388",
                "domain-name--79e09e28-b207-4920-859f-a03af69580f8",
                "ipv4-addr--fd6aacfc-7fef-4496-a22a-8da3d88c29fb",
                "ipv4-addr--51220ca9-9e7a-4b1d-bdde-7b1cbdec4cce",
                "ipv4-addr--3c9b02c9-7991-4641-8824-fa0fb0b79848"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.mandiant.com/resources/blog/winrar-zero-day-abused-multiple-campaigns"
                }
            ]
        }
    ]
}