Daily IoCs for 2021-04-11 (MISP)

{"Event":{"Attribute":[{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"32c55da78adb5873fdb3b5e96a2ab6fb74d50529da699adf8b85e532ba7f4a90"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"a5897bb9b5f977cda82c2ab27c6e868a0d293244a22cf60fe661b46173b8e79f"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"9f693db7614129ee50af1b6765fe78ae1d319e6aa19f3e675a79c72df0520ad1"},{"Tag":[{"name":"mwdb:family=\"AsyncRAT\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"6ee5ea407399568fc239d35c32535e979cc8a426d7884955b7fe638bc6131502"},{"Tag":[{"name":"mwdb:family=\"Encrpt3d\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"fe66b058a2e1bb463480adc591af85364603eb6e3d568b42262e6e86304b96e8"},{"Tag":[{"name":"mwdb:family=\"Encrpt3d\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"34727e348fc1577f81fb8a9c1cefba9307c751c0b883f12c7d304e73944423ef"},{"Tag":[{"name":"mwdb:family=\"Encrpt3d\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"51d3a3438cc94f1d0d07eeb88254ae1ef9acd103a33a2ad59d3a42b1c71dee0a"},{"Tag":[{"name":"mwdb:family=\"Encrpt3d\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"6f967e05541e54b5af1806c5141188f4c423cd672b098e0b583e6e8ebf291ebc"},{"Tag":[{"name":"mwdb:family=\"Encrpt3d\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"0fa87416659c1d4981aeafa1ef8e569d20687f7663902085f9ab69a629ed5731"},{"Tag":[{"name":"mwdb:family=\"Encrpt3d\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"49e44ca1cdf3babf1b1fee30d32306e89947d7cf56720e69a82dfcb1298126e7"},{"Tag":[{"name":"mwdb:family=\"Encrpt3d\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"07835f9b64e0c9d13655fa0fefcb95be77376cc18f3cfbf73e41930b5530d9c2"},{"Tag":[{"name":"mwdb:family=\"Encrpt3d\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"bea850025f8b553ac9f470001e3023862c6d27609bdb9589b00b4b4e963e1234"},{"Tag":[{"name":"mwdb:family=\"Encrpt3d\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"4e51570adca6c5c90623a023a2f47777041546aee8ee06fe6caab75be7085bd4"},{"Tag":[{"name":"mwdb:family=\"Encrpt3d\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"a76fc0b3a17a6d48b8a9aa82c6e0db995815dff309a3f2e3a0a901e9de143f82"},{"Tag":[{"name":"mwdb:family=\"Encrpt3d\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"b99929de8aaf7531fdce2b811742fd224f56bf1e4fd50c1d56368e988de9df7f"},{"Tag":[{"name":"mwdb:family=\"Encrpt3d\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"c0b55590c4f929796d479ffab266fb264db9a5f35e5209cc3e1799193f35cbcb"},{"Tag":[{"name":"mwdb:family=\"Encrpt3d\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"b1ce20010f19547a0bb4dec5f975a9facf5d63b8613cf897380baf694c94c782"},{"Tag":[{"name":"mwdb:family=\"Encrpt3d\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"d5f3bf0fa58668b20e776e66734c474c44188b6094fe2d7af0e6fae208ac6602"},{"Tag":[{"name":"mwdb:family=\"Encrpt3d\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"e5fc34fb19ba5994b25b945dacec90debdee1fac867afd00c00947483c150e18"},{"Tag":[{"name":"mwdb:family=\"Encrpt3d\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"0af08a4edf7802e0d797e5d1be57f066b6db0c25e4268ba1048d89fe293d717a"},{"Tag":[{"name":"mwdb:family=\"Encrpt3d\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"4df8d74dcf12b8f71f36f4cfe3d35633dce7c423780323086c08697d8fc41737"},{"Tag":[{"name":"mwdb:family=\"Encrpt3d\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"b782f1c26bcf681b0695944d7c3ccbc1fe6ad277d09b101aac9be1343ed98086"},{"Tag":[{"name":"mwdb:family=\"Encrpt3d\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"da11945087228a789ae953be629c418bd49dc572a15af924ac27e3c34ed5bb4c"},{"Tag":[{"name":"mwdb:family=\"Encrpt3d\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"017d848354d6749f40e2850ce745c7a9cff996f9fb59028c5682c34e8b43ec35"},{"Tag":[{"name":"mwdb:family=\"Encrpt3d\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"b7276b13b3b9399d4ca09be2e347125610c34164b83bedf94928e2a85f493e73"},{"Tag":[{"name":"mwdb:family=\"Encrpt3d\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"8939b94a3e13f8411d9e1ba300f475f128ea9bd386d94f85ac0611ab1e50aa44"},{"Tag":[{"name":"mwdb:family=\"Encrpt3d\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"4f56dbd31d610d15d54b558c639e5b852ed03aaa42fe210c0d95ad0f6b463cd1"},{"Tag":[{"name":"mwdb:family=\"Encrpt3d\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"2b210b36a6a696c165d3cf0b28f29e5b61777a826e29063f5075c1e338622878"},{"Tag":[{"name":"mwdb:family=\"Encrpt3d\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"febd26f18aea253d26cd0549e5fa32e9747e13a5cf41b90f9f8b8c0204a4b4f4"},{"Tag":[{"name":"mwdb:family=\"Encrpt3d\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"682066dd4fc515797fe49cd1906588509678838950cbbba8282d7cf01f6fa551"},{"Tag":[{"name":"mwdb:family=\"Encrpt3d\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"681cb90c36a82973fb5fba653459d4584bfda3322f6b834e452e132e3edf7df6"},{"Tag":[{"name":"mwdb:family=\"Encrpt3d\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"deadc60787d5bb2ec597e233583dcff770814c576eca520ca10e7bbfece61278"},{"Tag":[{"name":"mwdb:family=\"FlawedAmmyy\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"133af1615fbbccaa23539b369ef23dfed375626746f212533ff975ec1165f2c5"},{"Tag":[{"name":"mwdb:family=\"FlawedAmmyy\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"9c711abf56181897762b131d27e7beae405cc199f69018eb5df4e343e74b78d9"},{"Tag":[{"name":"mwdb:family=\"FlawedAmmyy\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"d39c8e33fb70f415fa396022faa3fb5cea2a20d932546ea59f3b151ae6953c3e"},{"Tag":[{"name":"mwdb:family=\"FlawedAmmyy\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"1831806fc27d496f0f9dcfd8402724189deaeb5f8bcf0118f3d6484d0bdee9ed"},{"Tag":[{"name":"mwdb:family=\"FormBook\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"da03fa70ab89de07cf3dad3547c45f576c29b8e783cf895465db3fd5d7f72d3c"},{"Tag":[{"name":"mwdb:family=\"FormBook\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"680d5f98cd089a73e5902b3ff4e91511430c2a2c07cde11b44882fbcde670395"},{"Tag":[{"name":"mwdb:family=\"FormBook\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"48b3081dc157057d29e291b0023fcf613fb5bea2ab1639b966e26b3dd3312ef5"},{"Tag":[{"name":"mwdb:family=\"FormBook\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"d50a30d5f860bf7e0baa13c83bf55bfdf827291f6e3913af99f8339d0d26996e"},{"Tag":[{"name":"mwdb:family=\"FormBook\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"6ff1aab59b65185696552624ee65603a77126246b4b5aea95e465f472914247b"},{"Tag":[{"name":"mwdb:family=\"FormBook\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"a48a4f0d917d131353d46e23144550e83a39b26ab311287e4cdff30c009d5f66"},{"Tag":[{"name":"mwdb:family=\"HiddenTear\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"188a788960d15df85065cbc52f537434f3abd41aabd3299531fb58dfa98bbb1a"},{"Tag":[{"name":"mwdb:family=\"Nanocore\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"9829c2298ab32875e7379274c578fcbffcddaa36a262c74f69d113217913e5ca"},{"Tag":[{"name":"mwdb:family=\"Nanocore\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"52d72d1af0ab2d125603529108aace2feed0e8d26286e1f1989c97a0629f88a7"},{"Tag":[{"name":"mwdb:family=\"Nanocore\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"3232edb50bfeb4eb38e7a6776d4c8badf53b3f35e815898eeb235589f43b21a0"},{"Tag":[{"name":"malware_classification:malware-category=\"Phishing\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"88527fb710478e1c54c6540fd15c0734bee1c4d1724abefcb84d7fa4102b8411"},{"Tag":[{"name":"mwdb:family=\"Remcos\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"3275e19466784eaf056bb0ba994c7b96fd262672fd9ac0a8d7d10c74f11d964a"},{"Tag":[{"name":"mwdb:family=\"Remcos\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"113b0d1d98805bbfc9b5187c2813c6db194460fe4bbd65e72ed1a2c8d24aa9a5"},{"Tag":[{"name":"mwdb:family=\"Remcos\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"b642ac99eb33d4f14fcacc181cd1ac63422f9989fae37223804d243738afa9c1"},{"Tag":[{"name":"mwdb:family=\"Remcos\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"71fd48574547aba90dd367aba63b39eb468e78f76a8e46410217d39cf7bdbaea"},{"comment":"Unknown Malware","category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"cffc3bef6cdd678c176c77795fa3eb93905d99d21bcc6f031ad863421176e4ef"},{"comment":"Unknown Malware","category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"b70ed93170fd89824125d1240276bee6198edc240e6eebf855af1f5748e8c2b8"},{"comment":"Unknown Malware","category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"ccaaf60a5afb0016ac1c1cc5f57df5cfe1fbc0a950eceeeb43bf2382e0c6b385"},{"comment":"Unknown Malware","category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"2672ae4c34c0febf5f635e284349ca8fe98268885040771820b89809971428d0"},{"Tag":[{"name":"mwdb:family=\"Wintennz\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"053d2084d7fa92c034a0dff0b0fa270f3b451c38fee432cf1cb8c47f4313b386"},{"Tag":[{"name":"mwdb:family=\"Wintennz\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"18895a31a02b8f84d637011b0b506994706043684b81c814dc76c639f7cc6dc6"},{"Tag":[{"name":"mwdb:family=\"Wintennz\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"6d7882d7af023ecae918f523f8857e3d84fd34f08a70794ae3a178da0cd4ede7"},{"Tag":[{"name":"mwdb:family=\"Wintennz\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"ca871af9585bfd1c69606e1ffcde45d16b342b17acf1a1d9f7bb0b1b4b6f8200"}],"analysis":"0","date":"2020-10-07","disable_correlation":false,"distribution":"0","extends_uuid":"","info":"Daily IoCs for 2021-04-11","locked":false,"proposal_email_lock":false,"publish_timestamp":"0","published":false,"sharing_group_id":"0","threat_level_id":"4"}}