{
    "type": "bundle",
    "id": "bundle--6a606d48-7ab8-4f75-a3bc-0c03ff5d73e5",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--eafdd258-8d1a-438d-bbef-6ca0d4a35852",
            "created": "2023-03-08T12:51:41.544512Z",
            "modified": "2025-02-04T10:54:04.972936Z",
            "name": "Ahnlab",
            "identity_class": "organization"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--c16917fd-45d0-4dab-a279-d412e81d78cb",
            "value": "http://schemas.openxmlformats.org/officeDocument/2006/relationships/attachedTemplate"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--3dc3ed64-299c-43f5-99d0-f4cae3cfc2fc",
            "value": "ms-offices.com"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--9ca38089-c757-49fb-a9f8-dd29e041f433",
            "hashes": {
                "MD5": "d698fccf14f670595442155395f42642"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--3e9c9588-f9ef-4c5d-ac01-83b48b8f377f",
            "value": "https://ms-office.services/templates-for-word/download?id=I5I2"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--b1b9f3d5-fef9-403e-82c0-bae1e14d291f",
            "value": "https://ms-office.services/templates-for-word/download?id=EFHO"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--af18e8ef-dac2-4298-a18b-ea0544734ccd",
            "value": "https://ms-offices.com/templates-for-word/download?id=AL03"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--e13156b2-5fb6-417e-a436-ebe0b4be95c7",
            "value": "http://schemas.openxmlformat.org/officeDocument/2006/relationships/o/word?officeid=NPW5D"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--fa7cdc98-543d-4d40-b5b3-5bc91c1ce3e1",
            "value": "http://schemas.openxmlformat.org/officeDocument/2006/relationships/o/word"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--fe482e7e-2f8a-47e4-aa62-eaf19d27f64f",
            "value": "http://offices.word-template.net"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--054fe9f2-880a-43f0-8114-b056e659c4e0",
            "value": "https://ms-office.services/templates-for-word/download?id=V2BX"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--8b4a4187-dd62-4a21-b47e-a836deb480a6",
            "value": "http://offices.word-template.net/office/template?view=GYIJ"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--19eed267-bfaf-4fac-9aba-d5c8e110bed9",
            "value": "https://ms-offices.com"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--2107b019-5f15-47c8-ae1d-8c04050f2653",
            "value": "https://ms-offices.com/templates-for-word/download?id=DTF"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--5fd85741-0e55-4237-9da7-b9cdbbedff15",
            "value": "http://schemas.openxmlformat.org"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--512a780b-75dc-4251-9024-31ff62462a51",
            "value": "https://ms-office.services"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--9015146c-a293-41aa-9d97-67a817fb14b9",
            "value": "https://ms-office.services/templates-for-word/download?id=79B9"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--59c7db8c-5d3e-4b38-8dd5-2f39eb999b60",
            "value": "https://ms-offices.com/templates-for-word/download?id=ZQ9H"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--a37604ab-386d-4e34-88ed-178e46b09c93",
            "value": "offices.word-template.net"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--b501ba4c-6372-4840-b761-6c7b231dbefd",
            "value": "ms-office.services"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1",
            "created": "2026-06-24T17:26:04.127687Z",
            "modified": "2026-06-24T17:26:04.127687Z",
            "name": "Kimsuky"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--395427de-6cf7-4c1f-8828-aef59a3794c9",
            "created_by_ref": "identity--eafdd258-8d1a-438d-bbef-6ca0d4a35852",
            "created": "2026-06-24T17:26:04.128798Z",
            "modified": "2026-06-24T17:26:04.128798Z",
            "name": "Word Documents Disguised as Normal MS Office URLs Being Distributed",
            "published": "2022-11-25T00:00:00Z",
            "object_refs": [
                "identity--eafdd258-8d1a-438d-bbef-6ca0d4a35852",
                "url--c16917fd-45d0-4dab-a279-d412e81d78cb",
                "domain-name--3dc3ed64-299c-43f5-99d0-f4cae3cfc2fc",
                "file--9ca38089-c757-49fb-a9f8-dd29e041f433",
                "url--3e9c9588-f9ef-4c5d-ac01-83b48b8f377f",
                "url--b1b9f3d5-fef9-403e-82c0-bae1e14d291f",
                "url--af18e8ef-dac2-4298-a18b-ea0544734ccd",
                "url--e13156b2-5fb6-417e-a436-ebe0b4be95c7",
                "url--fa7cdc98-543d-4d40-b5b3-5bc91c1ce3e1",
                "url--fe482e7e-2f8a-47e4-aa62-eaf19d27f64f",
                "url--054fe9f2-880a-43f0-8114-b056e659c4e0",
                "url--8b4a4187-dd62-4a21-b47e-a836deb480a6",
                "url--19eed267-bfaf-4fac-9aba-d5c8e110bed9",
                "url--2107b019-5f15-47c8-ae1d-8c04050f2653",
                "url--5fd85741-0e55-4237-9da7-b9cdbbedff15",
                "url--512a780b-75dc-4251-9024-31ff62462a51",
                "url--9015146c-a293-41aa-9d97-67a817fb14b9",
                "url--59c7db8c-5d3e-4b38-8dd5-2f39eb999b60",
                "domain-name--a37604ab-386d-4e34-88ed-178e46b09c93",
                "domain-name--b501ba4c-6372-4840-b761-6c7b231dbefd",
                "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://asec.ahnlab.com/en/42554/"
                }
            ]
        }
    ]
}