Daily IoCs for 2021-03-28 (MISP)

{"Event":{"Attribute":[{"Tag":[{"name":"mwdb:family=\"DanaBot\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"f4f79c6adbd9208b174a06dd50c81dea572cc0d2ac59f3c99d42bd511cd26408"},{"Tag":[{"name":"mwdb:family=\"DanaBot\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"e2e79ea3ba2ad91155a5edc6adf2f3e07facdf7bf5d064b1d492282654f954c9"},{"Tag":[{"name":"mwdb:family=\"DanaBot\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"e3fd3bcb68a3a0f09e8bd168b22bcc7bb448ba4bd284ec6d5c02bab7568a87ae"},{"Tag":[{"name":"mwdb:family=\"NetWire\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"c0b7f83f13c13ce352e0e103596e99eb3e52b7dcadb400e29886b4db2a01e23a"},{"Tag":[{"name":"malware_classification:malware-category=\"Phishing\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"92e7ce98db17f3df11cc51c79befd9f7d23e3c48c09d5e80b2dc1bfe148d808a"},{"Tag":[{"name":"malware_classification:malware-category=\"Phishing\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"d99c57317f08d6c0c2ca8c0a4ca048b1d756926e921af918aa61f24c1f2e4e17"},{"Tag":[{"name":"malware_classification:malware-category=\"Phishing\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"89b292af9914da287404515092bd982eb1712c18bb4f20e3aadabb80ef17f5bc"},{"Tag":[{"name":"malware_classification:malware-category=\"Phishing\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"d5acd8546e24924f0077a7e3aa4de2f77bde1875992cf49cc9adb8f789762138"},{"Tag":[{"name":"malware_classification:malware-category=\"Phishing\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"e6fa957bb1d1e8eea4867be338f0cdd3581b68a4cdab6e65cbcadb74db7fbcf2"},{"Tag":[{"name":"malware_classification:malware-category=\"Phishing\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"0f9b1bafab3c192561a2844710c8f46a9f7b3007649c6994b129c2dfede98fa3"},{"Tag":[{"name":"malware_classification:malware-category=\"Phishing\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"c51d90a15b3b7beb733c39cc5a623af17c48eb7269c25fdb427c8d286e3539e9"},{"Tag":[{"name":"malware_classification:malware-category=\"Phishing\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"0c35419e0c2807815cf99a25b7f64be991698a7079d89ab6df31dac675325935"},{"Tag":[{"name":"malware_classification:malware-category=\"Phishing\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"cd3bfbb5e02b59d63ca3f83398ddbf7e22c9b1cd7357d6ad7db5a057940f6487"},{"Tag":[{"name":"malware_classification:malware-category=\"Phishing\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"ef0e90c0897328b3a4c6e0ad7e4c6c6f64f5c56c8efdde03b83912c8a93275d9"},{"Tag":[{"name":"malware_classification:malware-category=\"Phishing\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"b679e4876eadcf8e16b5249c294bbab8455256ddee3dfabae1223225e195bdfc"},{"Tag":[{"name":"malware_classification:malware-category=\"Phishing\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"d3aa6afe575f94319789de35a7918674bb53c083548259a501acf03735804593"},{"Tag":[{"name":"malware_classification:malware-category=\"Scam\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"e837c3ebebb754d1ebe8f8da28cbf47281e8e8dd13c92cf8cd172e805bc3a7fc"},{"Tag":[{"name":"malware_classification:malware-category=\"Scam\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"bbe1acc3e573b5224702f386da985b54b41a00f2a030cf07fd4807baedd634d0"},{"Tag":[{"name":"malware_classification:malware-category=\"Scam\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"2ff86b9afa98da23a9bd022ff4fe69ba53043ee379e331cdc6966ad9d9659bc1"},{"Tag":[{"name":"mwdb:family=\"Tofsee\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"fd8325bbddfddc44dac7fb8fe24109fabfc8ffbfab07b6ecc8e1cb3196a4ca60"},{"Tag":[{"name":"mwdb:family=\"Tofsee\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"3a10ac8686200c52a22990c9bc6438110b63d7e9e148d0fee48fa48ed614e01c"},{"Tag":[{"name":"mwdb:family=\"Tofsee\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"36f56846e17922419f456453b3fe7e85ee95e0aed1fac5cdbfed9174e1523add"},{"Tag":[{"name":"mwdb:family=\"Tofsee\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"3a1c2633f3edffa1cfe64d839bfaaf1ee9a770506c5973c2f731d82ee4b92175"},{"Tag":[{"name":"mwdb:family=\"Tofsee\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"bbda9c5253d8812f47f85a3bea9594d2f8e3d35947b32b733a3bc48efcf18581"},{"Tag":[{"name":"mwdb:family=\"Tofsee\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"8501dc331081a8fdbb9f6a5789a8317acddd6ea7d5c0446f359df9c4922f9f72"},{"Tag":[{"name":"mwdb:family=\"Tofsee\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"4c2a773e72f88fd51340d3afce41438aa7d62d9e9de793068e5bf8b4593d81a4"},{"Tag":[{"name":"mwdb:family=\"Tofsee\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"f421917b20970ef55b91f717b90152c486c4fc27c141f49fe3cdc57caa1c9858"},{"Tag":[{"name":"malware_classification:malware-category=\"Trojan\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"b7590c955ad6c0ecc21d3fcc9b8f1dc37b300d44562b7df3d64f6aa62dcdccc6"},{"Tag":[{"name":"malware_classification:malware-category=\"Trojan\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"fa5a317dfdb2e1d37f4f16aa7e3e35f161b846f3ecf9cd0e3543fd406a505742"},{"Tag":[{"name":"malware_classification:malware-category=\"Trojan\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"5f3a35ea107fb044d4000013eca5de0cce03b6b656d5b9a52a2ca39f6fd7507f"},{"Tag":[{"name":"malware_classification:malware-category=\"Trojan\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"3837793bf62fccd64c7294b72c20339d0f97cf05ee92d952d76f73a55be61b91"},{"Tag":[{"name":"malware_classification:malware-category=\"Trojan\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"3f98926d16cafc6ff73c236224517e9583767beee9cf84306bb1445189728f0d"},{"Tag":[{"name":"malware_classification:malware-category=\"Trojan\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"7e74cf405bb56414540d3f6d67618abcc240140464613e58642aa4831d38a4a1"},{"comment":"Unknown Malware","category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"dca28bcaf4bfaf9f866fc35f82e814b28cf8b1d59266723c99340108c728f112"},{"comment":"Unknown Malware","category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"9a88ff199c587829392e283ac2f5fcb693b88ad1b7680c5d33939703de832209"},{"comment":"Unknown Malware","category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"4399a8bda7683eaf8e113c07522da79e8fccacbd9ed46d07dc9fab9679848994"},{"comment":"Unknown Malware","category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"abed22e095471a547c7d729682d44c63a352c41d911131b88efdc0955fab6dde"},{"comment":"Unknown Malware","category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"d82b8bdd055fceb860db7a4e386e6cacdfcc5b12f103cbdc3d066fe4fdb0e0f2"},{"comment":"Unknown Malware","category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"bc95bcbb879006d2a3e5f8bef6d7ec8b8e9368d4fe14e6cd4abdf1cd5166bcc3"},{"comment":"Unknown Malware","category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"b6464a18cbc852599d0dc45323c1c053746692ab6429e50b31c5ab2fe85a40af"},{"Tag":[{"name":"mwdb:family=\"Vidar\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"09561dc7327f636ddb1418801743d6d3ed055f049959fe06977667e5b71e1c50"},{"Tag":[{"name":"mwdb:family=\"Vidar\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"df196b2615b4f23fd269f1d8dab0194a7a58cb2d6576c4056b8832b9fa6dcf16"},{"Tag":[{"name":"mwdb:family=\"Vidar\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"b980f2685624bcf40030958c8076a4895d063b0c957cfd996a3744f47d3b63d1"},{"Tag":[{"name":"mwdb:family=\"Vidar\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"0a7e8a8ca5abd7a2598c8a04521b0cb5d006bc1fb212c0d94a9de7d7d579ffb8"},{"Tag":[{"name":"mwdb:family=\"Vidar\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"f4df9040832d67af1949d46498759820450fe65e8039343425af77be55ca54d1"},{"Tag":[{"name":"mwdb:family=\"Vidar\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"5ef0213daf45d7b4aea2638df093e92a3355aee82745d0c6416776f1eeaa8c01"},{"Tag":[{"name":"mwdb:family=\"Vidar\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"2f9c8e775cbddc92532180a38b561b5b4348b2f3e21235cd59154182556576e2"},{"Tag":[{"name":"mwdb:family=\"Vidar\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"7789349eb5a96b2b4048148a1361a3327e369646ca520115d390323bdc556d50"},{"Tag":[{"name":"mwdb:family=\"Vidar\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"cbf28602a19732e7648dd1c009a9c03c215f430fce28097dcca3f0450b23a2cb"},{"Tag":[{"name":"mwdb:family=\"Vidar\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"684555c2afe1692da11fe7570bb868a2593570619589c38bc5a5e89d7f356b69"},{"Tag":[{"name":"mwdb:family=\"Vidar\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"fad6365f807e9d91de8b30b7ff4fb80fa3ef377a2636442c3b8736101867ba9c"}],"analysis":"0","date":"2020-10-07","disable_correlation":false,"distribution":"0","extends_uuid":"","info":"Daily IoCs for 2021-03-28","locked":false,"proposal_email_lock":false,"publish_timestamp":"0","published":false,"sharing_group_id":"0","threat_level_id":"4"}}