{"type":"bundle","id":"bundle--283e890a-fdab-5603-991f-8e1e18030aef","objects":[{"type":"intrusion-set","id":"intrusion-set--c11085c9-4b9e-5dde-a5e5-0a52797ddb55","spec_version":"2.1","created":"2026-05-20T09:50:08.131618+00:00","modified":"2026-07-28T19:36:44.386+00:00","name":"APT2","aliases":["MSUpdater Team","PUTTER PANDA","G0024","TG-6952"],"first_seen":"2010-01-01T00:00:00.000Z","external_references":[{"source_name":"APT Atlas","url":"https://aptatlas.net/actors/apt2"},{"source_name":"mitre-attack","external_id":"G0024","url":"https://attack.mitre.org/groups/G0024/"}],"labels":["nation-state","esp"]},{"type":"attack-pattern","id":"attack-pattern--b097873f-481b-5882-9241-8fcd529dcc80","spec_version":"2.1","created":"2026-05-20T09:50:08.131618+00:00","modified":"2026-07-28T19:36:44.386+00:00","name":"Dynamic-link Library Injection","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1055.001","url":"https://attack.mitre.org/techniques/T1055/001"}]},{"type":"relationship","id":"relationship--8b9bbe99-404f-5188-8ba2-3abc32576441","spec_version":"2.1","created":"2026-05-20T09:50:08.131618+00:00","modified":"2026-07-28T19:36:44.386+00:00","relationship_type":"uses","source_ref":"intrusion-set--c11085c9-4b9e-5dde-a5e5-0a52797ddb55","target_ref":"attack-pattern--b097873f-481b-5882-9241-8fcd529dcc80"},{"type":"attack-pattern","id":"attack-pattern--7b2d19e4-bdbd-51ea-a2fb-e189fbdc5cd4","spec_version":"2.1","created":"2026-05-20T09:50:08.131618+00:00","modified":"2026-07-28T19:36:44.386+00:00","name":"Registry Run Keys / Startup Folder","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Persistence"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1547.001","url":"https://attack.mitre.org/techniques/T1547/001"}]},{"type":"relationship","id":"relationship--bd1644fa-8444-5d7d-bd24-53b4e64300cc","spec_version":"2.1","created":"2026-05-20T09:50:08.131618+00:00","modified":"2026-07-28T19:36:44.386+00:00","relationship_type":"uses","source_ref":"intrusion-set--c11085c9-4b9e-5dde-a5e5-0a52797ddb55","target_ref":"attack-pattern--7b2d19e4-bdbd-51ea-a2fb-e189fbdc5cd4"},{"type":"attack-pattern","id":"attack-pattern--60160beb-ac1a-5d8b-8ed6-16753d57de3f","spec_version":"2.1","created":"2026-05-20T09:50:08.131618+00:00","modified":"2026-07-28T19:36:44.386+00:00","name":"Disable or Modify Tools","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Defense Impairment"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1685","url":"https://attack.mitre.org/techniques/T1685"}]},{"type":"relationship","id":"relationship--457c3220-931a-51b4-b8ad-9d2138bc0801","spec_version":"2.1","created":"2026-05-20T09:50:08.131618+00:00","modified":"2026-07-28T19:36:44.386+00:00","relationship_type":"uses","source_ref":"intrusion-set--c11085c9-4b9e-5dde-a5e5-0a52797ddb55","target_ref":"attack-pattern--60160beb-ac1a-5d8b-8ed6-16753d57de3f"},{"type":"location","id":"location--a41caef2-fe04-5da5-bc82-ec135954366c","spec_version":"2.1","created":"2026-05-20T09:50:08.131618+00:00","modified":"2026-07-28T19:36:44.386+00:00","name":"France","country":"FR","region":"europe"},{"type":"relationship","id":"relationship--16d2b02f-1656-5d68-965d-11c7bb9c99d5","spec_version":"2.1","created":"2026-05-20T09:50:08.131618+00:00","modified":"2026-07-28T19:36:44.386+00:00","relationship_type":"targets","source_ref":"intrusion-set--c11085c9-4b9e-5dde-a5e5-0a52797ddb55","target_ref":"location--a41caef2-fe04-5da5-bc82-ec135954366c"},{"type":"location","id":"location--fd98b554-2d31-56db-8bc0-812e65009813","spec_version":"2.1","created":"2026-05-20T09:50:08.131618+00:00","modified":"2026-07-28T19:36:44.386+00:00","name":"Italy","country":"IT","region":"europe"},{"type":"relationship","id":"relationship--a01c8132-f520-5770-b4df-1adbdee5f814","spec_version":"2.1","created":"2026-05-20T09:50:08.131618+00:00","modified":"2026-07-28T19:36:44.386+00:00","relationship_type":"targets","source_ref":"intrusion-set--c11085c9-4b9e-5dde-a5e5-0a52797ddb55","target_ref":"location--fd98b554-2d31-56db-8bc0-812e65009813"},{"type":"location","id":"location--168ae1d8-d8eb-5440-9d21-d02292700adf","spec_version":"2.1","created":"2026-05-20T09:50:08.131618+00:00","modified":"2026-07-28T19:36:44.386+00:00","name":"Japan","country":"JP","region":"asia"},{"type":"relationship","id":"relationship--0a86c557-3c7c-5c23-b959-c2cb117a902e","spec_version":"2.1","created":"2026-05-20T09:50:08.131618+00:00","modified":"2026-07-28T19:36:44.386+00:00","relationship_type":"targets","source_ref":"intrusion-set--c11085c9-4b9e-5dde-a5e5-0a52797ddb55","target_ref":"location--168ae1d8-d8eb-5440-9d21-d02292700adf"},{"type":"location","id":"location--e65fe67e-b17f-5bb9-b32c-402d6a5aa451","spec_version":"2.1","created":"2026-05-20T09:50:08.131618+00:00","modified":"2026-07-28T19:36:44.386+00:00","name":"South Korea","country":"KR","region":"asia"},{"type":"relationship","id":"relationship--29344ba5-1b71-5f51-b740-58e45cd64665","spec_version":"2.1","created":"2026-05-20T09:50:08.131618+00:00","modified":"2026-07-28T19:36:44.386+00:00","relationship_type":"targets","source_ref":"intrusion-set--c11085c9-4b9e-5dde-a5e5-0a52797ddb55","target_ref":"location--e65fe67e-b17f-5bb9-b32c-402d6a5aa451"},{"type":"location","id":"location--b6441ffb-0865-5bb9-9d5f-f800436cb4f1","spec_version":"2.1","created":"2026-05-20T09:50:08.131618+00:00","modified":"2026-07-28T19:36:44.386+00:00","name":"Taiwan","country":"TW","region":"asia"},{"type":"relationship","id":"relationship--ef5a7ed4-60fd-5b8c-89d3-2d32e999180b","spec_version":"2.1","created":"2026-05-20T09:50:08.131618+00:00","modified":"2026-07-28T19:36:44.386+00:00","relationship_type":"targets","source_ref":"intrusion-set--c11085c9-4b9e-5dde-a5e5-0a52797ddb55","target_ref":"location--b6441ffb-0865-5bb9-9d5f-f800436cb4f1"},{"type":"location","id":"location--ea514d88-d8fb-51d8-9162-c666a0ebd505","spec_version":"2.1","created":"2026-05-20T09:50:08.131618+00:00","modified":"2026-07-28T19:36:44.386+00:00","name":"United States","country":"US","region":"americas"},{"type":"relationship","id":"relationship--a857d2bb-607d-5348-8045-8df49faa4b6c","spec_version":"2.1","created":"2026-05-20T09:50:08.131618+00:00","modified":"2026-07-28T19:36:44.386+00:00","relationship_type":"targets","source_ref":"intrusion-set--c11085c9-4b9e-5dde-a5e5-0a52797ddb55","target_ref":"location--ea514d88-d8fb-51d8-9162-c666a0ebd505"}]}