{
    "type": "bundle",
    "id": "bundle--77883916-9388-4eaa-a5f2-e63ca8867abe",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--dd8b2b1b-4cc4-448d-8f25-852fc2b729bc",
            "created": "2023-03-30T13:44:52.115441Z",
            "modified": "2023-03-30T13:44:52.115462Z",
            "name": "NextronSystems",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--fc14745c-7c21-4609-a7d2-1f5c9230aa47",
            "hashes": {
                "SHA-256": "aa4e398b3bd8645016d8090ffc77d15f926a8e69258642191deb4e68688ff973"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d3ce8fb1-0b15-41ca-bace-1cb376a99851",
            "hashes": {
                "SHA-256": "c485674ee63ec8d4e8fde9800788175a8b02d3f9416d0e763360fff7f8eb4e02"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--8956602e-e553-47e1-a44d-93d4a536eef9",
            "hashes": {
                "SHA-256": "7986bbaee8940da11ce089383521ab420c443ab7b15ed42aed91fd31ce833896"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6e0a9a70-2557-4a9c-8343-d8bd6c671091",
            "hashes": {
                "SHA-256": "dde03348075512796241389dfea5560c20a3d2a2eac95c894e7bbed5e85a0acc"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--0607368e-7024-4f99-8bbd-6398cb170247",
            "hashes": {
                "SHA-256": "fad482ded2e25ce9e1dd3d3ecc3227af714bdfbbde04347dbc1b21d6a3670405"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7cc2b5f5-fcfd-40da-aa2c-30e900560253",
            "hashes": {
                "SHA-256": "59e1edf4d82fae4978e97512b0331b7eb21dd4b838b850ba46794d9c7a2c0983"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--4d3e9e0a-bd8e-404d-8670-3a4af7e36e7d",
            "hashes": {
                "SHA-256": "aa124a4b4df12b34e74ee7f6c683b2ebec4ce9a8edcf9be345823b4fdcf5d868"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--5ec44a08-1b5c-4eed-9028-3267dcd5f4a2",
            "hashes": {
                "SHA-256": "b86c695822013483fa4e2dfdf712c5ee777d7b99cbad8c2fa2274b133481eadb"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--5e7bdddb-192e-4552-94fc-f64f40bdbc31",
            "hashes": {
                "SHA-256": "51079c7e549cbad25429ff98b6d6ca02dc9234e466dd9b75a5e05b9d7b95af72"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--dfde298e-9cf7-4454-8e1a-8eb3b2e4c759",
            "hashes": {
                "SHA-256": "ac99602999bf9823f221372378f95baa4fc68929bac3a10e8d9a107ec8074eca"
            }
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--aad2d102-73a3-42ae-92a4-e1752dddde69",
            "created_by_ref": "identity--dd8b2b1b-4cc4-448d-8f25-852fc2b729bc",
            "created": "2026-06-24T21:04:00.597613Z",
            "modified": "2026-06-24T21:04:00.597613Z",
            "name": "YARA rule set related to the 3CX incident",
            "published": "2023-03-30T00:00:00Z",
            "object_refs": [
                "identity--dd8b2b1b-4cc4-448d-8f25-852fc2b729bc",
                "file--fc14745c-7c21-4609-a7d2-1f5c9230aa47",
                "file--d3ce8fb1-0b15-41ca-bace-1cb376a99851",
                "file--8956602e-e553-47e1-a44d-93d4a536eef9",
                "file--6e0a9a70-2557-4a9c-8343-d8bd6c671091",
                "file--0607368e-7024-4f99-8bbd-6398cb170247",
                "file--7cc2b5f5-fcfd-40da-aa2c-30e900560253",
                "file--4d3e9e0a-bd8e-404d-8670-3a4af7e36e7d",
                "file--5ec44a08-1b5c-4eed-9028-3267dcd5f4a2",
                "file--5e7bdddb-192e-4552-94fc-f64f40bdbc31",
                "file--dfde298e-9cf7-4454-8e1a-8eb3b2e4c759"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://github.com/Neo23x0/signature-base/blob/master/yara/gen_mal_3cx_compromise_mar23.yar"
                }
            ]
        }
    ]
}