Daily IoCs for 2021-11-21 (MISP)

{"Event":{"Attribute":[{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"632af9e9a7501d84f8371c9ec5dda5778ff9c6a7473b18f492cb577e19cf562d"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"734870ffcbb1acdd8d0036af45fbc2a7d1af60e3068a28c3354cbbebed723e2c"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"bd360396202db6f50c02812d7fa89ceaeb56254b2cca47520742240da95e32dd"},{"Tag":[{"name":"mwdb:family=\"AsyncRAT\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"97c075997a06e163fae83ab9e475128ec0fdd990a1f1283457331b3554b969a6"},{"Tag":[{"name":"mwdb:family=\"AsyncRAT\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"0aa5a976f617dfda8a6d3c619956c7651d4bda280c34c9db5f025fa2fc1f079e"},{"Tag":[{"name":"mwdb:family=\"AsyncRAT\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"641be49146f8a139244504b41a6343e0376ddf58c8d4b305f71652b904a5cc3f"},{"Tag":[{"name":"mwdb:family=\"AsyncRAT\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"5d3babe4f7654f72b1790d98cded865a10fab119cccef75c5263f0ea7bf87ad9"},{"Tag":[{"name":"mwdb:family=\"BitCoin\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"4634cfd628a15ede016045c73bdc2a1e6ae7079343ef67cd648554795d369b9c"},{"Tag":[{"name":"mwdb:family=\"BitCoin\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"5f9abfed013223d8de212c3990615c4e39d44145fa8c1df31e2e882ad2786279"},{"Tag":[{"name":"mwdb:family=\"BitCoin\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"85e1d775dc30b3aee7e9038481dc96d1f3b8c7e8350e72d61da119f63ff1abfc"},{"Tag":[{"name":"mwdb:family=\"BitCoin\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"edd2a707014490affc74d5b8877b034c0c9cd83c9e25e65d9349b750260a7ab5"},{"Tag":[{"name":"mwdb:family=\"BitCoin\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"ba0cc884e63ac8399a355b025488f41783ea46d922812046e721b0279fab2c6c"},{"Tag":[{"name":"mwdb:family=\"BitCoin\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"bb8fad5cdc71f7f31c1131498690f8a1893033ddbff76dfb1992ef8dcd6c59bd"},{"Tag":[{"name":"mwdb:family=\"Clipboard\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"23dca7ac37231894ffa15e7de289c7372c5728c93afa301d4bf48816b86a929e"},{"Tag":[{"name":"mwdb:family=\"Clipboard\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"3c5ff8aa7f6ae6f4b6cd55e8f59d65a2a1fa8c3b5808afb20bc64b6200d2c431"},{"Tag":[{"name":"mwdb:family=\"Clipboard\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"fe9b6918979e23ad4c8cdeb803026500aec4743ba8d2a01935299866545977dd"},{"Tag":[{"name":"mwdb:family=\"Clipboard\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"6bd770c7bd07174a93d1ae29f9255a8f9b39bf03b1503906a70685d87a77b3e8"},{"Tag":[{"name":"mwdb:family=\"Clipboard\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"35895ef1e12dbf7ac2a13604b0bc56d433044ea44c49977a66ef02fda3628fe7"},{"Tag":[{"name":"mwdb:family=\"Generic\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"3dd898dd3de02ac3bbaba06dbbe1204e92dcf7cf7332b860023fd612d79d7aea"},{"Tag":[{"name":"mwdb:family=\"Generic\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"61b29f21207a3704ebc2369ada3d2b9f0e3266c98610b68588ad6d721336131d"},{"Tag":[{"name":"mwdb:family=\"Generic\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"623a56a34174f3dcb179796205294124918996ccc8b56062b419ab8354df35cb"},{"Tag":[{"name":"mwdb:family=\"Generic\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"793bd89a2a3215dc2bcaa5d65926d9a771f48b34eaef54dcfc670efd4304838a"},{"Tag":[{"name":"mwdb:family=\"Generic\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"a7c1d6066177e4250d5bd52a6520bb3738b092f55817c89281788bb83b503fea"},{"Tag":[{"name":"mwdb:family=\"Generic\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"08a05c5a6150ef724613fa141b0eb354f51ea17fb5f9df4a43e361b740eba19d"},{"Tag":[{"name":"mwdb:family=\"Generic\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"13c9c24725c63b3e0ee843d1919d422eab479f6f2608728134c662204d94eb0f"},{"Tag":[{"name":"mwdb:family=\"Generic\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"1210bda28b4c3a5a75893ec717053fe14221d905afc4d182bcfd48df7e366a00"},{"Tag":[{"name":"mwdb:family=\"Generic\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"f7fde2c53835b923d1fa60cfc8d2cb6ef71fcf4c94be3450e7fdb4b37e8f99f0"},{"Tag":[{"name":"mwdb:family=\"Generic\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"f4f130abba01aa931e7575c0a3ecc47c4881d3a8d213b200a47a2795861870cb"},{"Tag":[{"name":"mwdb:family=\"Generic\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"473a8bc102fd824808c03ffd90ba721e3b72995f78791423fa7a2ff33598f337"},{"Tag":[{"name":"mwdb:family=\"Generic\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"1044d982ca91c8e93ebf71487f50132d4b82cf2a09b5124788d70da8b8cc68c4"},{"Tag":[{"name":"mwdb:family=\"Generic\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"5ce979f21cb1d0c029870c4dab758a5b9c7749db47594aaaa1113aa9dbb8eff2"},{"Tag":[{"name":"mwdb:family=\"Generic\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"98f2a4be94c133ae661b39f01deefd75abbcacf23fb290afd3fc6e454bf7e0a1"},{"Tag":[{"name":"mwdb:family=\"Generic\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"6660926f4d15ff1d27a7876d25c51f75416a09698b11eaf1fdeda23ca4b6f572"},{"Tag":[{"name":"mwdb:family=\"Generic\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"7d9837888b68c12c5779430900bda5f8225239bffec36a67b8533048386b1286"},{"Tag":[{"name":"mwdb:family=\"Generic\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"9a5bfa646463bc2e37ff598eacb9d6696476895d6d3bbdab56e0b70568bcc5c3"},{"Tag":[{"name":"mwdb:family=\"Generic\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"d69f7ab8d250402b23b253cb663b49bd094d4664241702b72cc3ca71aff52761"},{"Tag":[{"name":"mwdb:family=\"Lokibot\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"1423514b1c09a5d9121296624d597674c97f772bc2891d1b29acff3272579ec9"},{"Tag":[{"name":"mwdb:family=\"Lokibot\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"d2de8e1d2b9cfc75e071ce959713aba45f14ebf73f8b2f61ef4d1020681f875e"},{"Tag":[{"name":"mwdb:family=\"MicroClip\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"9d25b3604e58a4acd3f92c13129772e13dbd5f993ed79ded350b37343646b979"},{"Tag":[{"name":"mwdb:family=\"Quasar\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"1072615c765e5a2ca92396eebc3c7bef6dcfb5dd75f0823b335fefc4e59d1f27"},{"Tag":[{"name":"mwdb:family=\"Quasar\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"1deaaa9f369f4126c70979c4de38c3147ec951c40f6540e973511f809069bd3a"},{"Tag":[{"name":"mwdb:family=\"Quasar\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"89fb165bf8f7fc62bceaedde38b5cdd4c31b5cfda3b6fb1a7f74eddb3f1fb259"},{"Tag":[{"name":"mwdb:family=\"Quasar\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"84e88bb632074b9318595472ad9b047d9c8bfe4de928a5536d162510fbcea70c"},{"Tag":[{"name":"mwdb:family=\"Quasar\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"0737256b43d29c1f2d982aa7fb356e3994511370a7f186e5e072bbba9acdd808"},{"Tag":[{"name":"mwdb:family=\"Quasar\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"0645f1718fd6f7add9f55d0b2e30f3d67e7db8fd0ebfd45326b15260db86ebc9"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"3e39794e623d90dc04ca81165d51cd6043318f1bace9252f2cf267fa247f9064"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"88c0e41b8406667c4de6268768fc382e93763dfa2831324bbad5bdbb94add44d"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"004d24427227ddde6e8e60851ea918d1f3a7aa88187f9b0de860cb08b2a8e5d5"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"aa6beacbccdc8af13eab22be7abdb839a08286625e7a1eed4cdb634f1fc50398"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"81a1bb24ae8a11ad1d5898b86f0a4f3b5b4905792fce596af3fc994272e4f66d"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"726746813d7c1900f56f8a23d0bd75e87268527582caa1488c8a4e529766079f"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"4ff01dbd4238210af52288b02f66ae04663b0b95bfe5e8e2f5165402b058539b"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"6713ec2b69e5192bf2bfb85a8b7d8fdd3109324331c01a5d0856a2a2b45e00e7"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"65350ee5de866f54845c13472cc7e0257b55715560ff9696ba2d4dc0494991e6"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"fa78363d3a169b3fae91a745836160e6aa3685d7f24d2e398edb0656c4cd7edd"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"867dd8ee5eb8c686ac3bbd95fa89848c78e37b475635945828f61d59996e26a7"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"4b3e6535c85b9cb31c47d279809ec5f7ae27f2409beaeb7b597250b115e9bea2"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"f10a55cbc920a4b6a4000087d199c782f6f131debf89dc02d6b8d44bf1c8cd2b"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"ee33a3b6f160ac159547272bf6aa0726b3c89ef256961fad3cc45c9220aacff7"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"efb1a67d6c914be02d25dd1431f67110ba5dda365b33f928e950e292856673e3"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"162182dc55594ee769bc830588561c7ba9ae2be7d2b2139b0b2dfc485cfb2fcc"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"e1e65f9c773cc00d08dda0f9971fbb971c033d32382bdd1a59194adcde2c3e7e"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"8aefef5f5140ce25911648d420a112f007998ecf47b2d79a88d5eade49d48cab"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"09cfbddd9deb3cbcb96d615e4d39da78d275d513bc789a6afe6416ce5ab8c63d"},{"Tag":[{"name":"mwdb:family=\"Remcos\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"449c33f2127c186ec3304d4a6979831b41776c8a09357f2f572f0fd40a2732cf"},{"Tag":[{"name":"mwdb:family=\"Trickbot\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"5664540717f0b16abf9b78dd8a16c2ef925f4a7afb298dc2da322b3168389ffd"}],"analysis":"0","date":"2020-10-07","disable_correlation":false,"distribution":"0","extends_uuid":"","info":"Daily IoCs for 2021-11-21","locked":false,"proposal_email_lock":false,"publish_timestamp":"0","published":false,"sharing_group_id":"0","threat_level_id":"4"}}