Daily IoCs for 2021-12-06 (MISP)

{"Event":{"Attribute":[{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"5b1f61165a613283c813dc237de14048406492f937bb16508d450f7afc421afd"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"30a8fd72ef16547dba5a0f75c3f395ed0d7c2d3b5114fabb8285910597be77ec"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"a53c7b7319c9b196904e140ef8907436de651f1de0798d033ccb7fb980d1a3d9"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"c6f9c4cba68de103d4588a02b0bcc98349f6c1154600aad6422fb3aa200a45d7"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"b11ac821224a974690a2aa8536a31ef3931eecc252d016a23d73b12536d5258e"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"57165c811efa7269e30758b2ba2ddfafacf07ee5e1a8e0224f099bb5f21f1086"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"4d6ee87ff6bcd87f7bfff7b5ca4c8af2807ed2d03f3cb9d036ed73e17a1bed92"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"a41c3584941f1e62e97a9c8d8db2146f74fca49939b2dc84828548c14331ab2b"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"3b59c5abf32fc419f9d32a3ed67c131e41703bed15d6e95526958c6adb5445ff"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"9b631ebff6e0a18df03694b833b680ba568f0c760427a8f1d54973ab9f4698c1"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"08c8837abddb38d8a7228b47cbe0f8fdae32e0b9dd192f71b6cbf187036b973b"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"94e0532735faccc80618e86f7b050deb3091b2fbfdfe6eca8075f031fbd2fc46"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"58c629d8bed0d9301d37dc7b9d07435ed976034cec2201f3a1221fecc8641402"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"d0fc76c807806082c2e1940d60837a03ceeb1d4eeb3f04b62c8977e3d74f8d15"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"dd7c1293e2755da7e115e0bd8da90fa1d61e60b23e44017907bfe435c2a1b9ef"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"8481aa55d679919cd517860d860f390f0f0bfcd4e3625fedddd81c8253de9b20"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"c4c3567907b8d9013ceebf34a0b4b98e46d4055926174eae78fbabb1baf382db"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"df21ee835f6c3aff5d550ef9be63f198e349a35064c6fe1864e7dd5eeb5e1303"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"a7198ecd851f8420d4826282c3ea472e31840917a2b06f7659b66a8a97645c0f"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"360747c5e952921a60c2d01a41e4b09543d5c943b38bcb15859398f41a7e19f9"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"b92a613876d5460c5741e02b6c17b749249339157d7cac66ff46758fcd2cc73c"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"b1626c65a103c92a6702dc18793abcae9ee8c2199bcb550f5d8151fc54ea1aa4"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"42d8f7a07227c8fbc6aa790663591bb39e63222e52592fc10417e1558da7cf2b"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"0c002b81c804e26afef63976610acf9436c4cdc434a1c3e7da36c3db134ef945"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"62873e2a125ace6592155a8a98734074a8053cdbe1141ca7d6683e6383e3307f"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"8a05711bd540d911bdb7adb5cd70ef49d3b9f5e0de5c7eff2e7efdaa85ee8c53"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"2443e2bf86eb293ffd5bc7e71143d832abc5156e7433b15dee0e2508debec169"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"cf026c1b8607334b981d7e898a84b9da4d91636e63893e02354d6fbd5417cc6e"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"c7631405c39bd36c82e9a6489fc172a366d6bdd15b461eda2ca1979b817cb839"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"173f706f9d8baba2b23572d1d9f5ee8a01652ef314c79d19ef310689298fecb7"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"fa313fd95cc98f9ff97728ff27009380af2f9ae3bb1d39c2571e2025d2d53e92"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"ab491ef96c5a7866d7c0946b972911ecfa2cf05c5c8f532d58cb6c53ab267b4b"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"8e8f2b03e1d62ac25c3d95b0761f44a29e95acea37134dc86415e6861b60575f"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"40a404b4cf0250679368d7c5b84dfb963c3ded1e86e8e53e370ab54a2f2382a5"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"9e52450a9320cb2919cf963cdc239cdbf85efe224910e2f25d74c0ef495d7f92"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"ef322d52f5f72c44be0a988d476cfd69f1e370c922aab8e71faa3abd11872c27"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"74b01edeb72a379cbbc763554a7684ed11836f243211570f7ecdb316783363d0"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"7e6168f77b90883870833ec3725d81b84f05f99d00c7a64cb3842498b415e603"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"21d0b814dd90584fae06e0becf106562bb491b951902de6a05d66d0b41c5d855"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"d2c2e6a1a44eccedc8689f6f115860d54b500e24378901177b827f35b891e9a7"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"1ca98eb48f6147f3e441d882595aee97b98d450375e0c0df14fc61d6b115d732"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"71836ec77f55ba3a51bfe8eb8e254da44918eb84c7e40ec669c7f992d4e65dd5"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"d635a02a16bdcb62bb6dd8ae199cc5efe49663417060b286224535e6432c71ff"},{"Tag":[{"name":"mwdb:family=\"Amadey\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"71becb912ef7808fd94f9e4009eb8d05edf716dcfdfeb13900c8748e6266150f"},{"Tag":[{"name":"mwdb:family=\"Amadey\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"c7be8c46221ad3abb42023dacbfd9c2e6c5a229284b1c6d37ba916c207d667fd"},{"Tag":[{"name":"mwdb:family=\"Amadey\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"b8086b28e3e484018f7131b15a0143bbf85c5d9e1fe12de8703f4849c9b8a6e8"},{"Tag":[{"name":"mwdb:family=\"AsyncRAT\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"ad126706e53dd4d69b47adaf431bcb27936882725ca74d8f852bd3416476314d"},{"Tag":[{"name":"mwdb:family=\"AsyncRAT\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"7b6b38daac33765205fa376e53eda45dedf102d39365208a083bfd324c5a13c0"},{"Tag":[{"name":"mwdb:family=\"AsyncRAT\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"5e949d278af13122d7dcf70722f612f2772ca6781a50f529da23db220d80fe0f"},{"Tag":[{"name":"mwdb:family=\"AsyncRAT\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"11dba92af0462cb18ac9c9ed81f104530819287f32be261915b706f83f6e04ad"},{"Tag":[{"name":"mwdb:family=\"AsyncRAT\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"2d508a94efe27e19a0dfe85c2272331d9a1374d81e66bcca3c7f2f828a6c0b4c"},{"Tag":[{"name":"mwdb:family=\"BitCoin\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"d848da8fa93bfa66776822d7681d3b10598ddf69efde6a9f9128e2e3f542caf7"},{"Tag":[{"name":"mwdb:family=\"BitCoin\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"db746814cf3e5ec566736936a2786f6dd297b0fe165cc34c6681a73bf5b1f9d1"},{"Tag":[{"name":"mwdb:family=\"BitCoin\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"8f92983c0b62df24e10d9754c115b1fddb43a5fa1a8f9d86e0bb8bde509dc023"},{"Tag":[{"name":"mwdb:family=\"BitCoin\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"54b7cafd9cf0534269760bd386516da944ed57935c6cb815c5b89866f0d6fc18"},{"Tag":[{"name":"mwdb:family=\"BitCoin\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"47e2b9d18762b81536a9a236a382302f9fcb3114e3723a2e90277b903448b536"},{"Tag":[{"name":"mwdb:family=\"BitCoin\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"d223e6e836d93bf5af48c21fe6ec7a9e31dd4b351111cce77f0b3cd0a2679c0a"},{"Tag":[{"name":"mwdb:family=\"BitCoin\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"b2e99f16ae56083a4f5fedc4d0650ff09db74dded6782cda21279617116aa379"},{"Tag":[{"name":"mwdb:family=\"Cerberus\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"45db73f4dbdb660435dddad2b7192be273bcaac0fbb6241ab29eb1b199157695"},{"Tag":[{"name":"mwdb:family=\"Cerberus\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"60c34023b44916e90fdd4850917de6ef47885e18c8e5f7d74c2cab2b87bf029a"},{"Tag":[{"name":"mwdb:family=\"Clipboard\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"4b89c6621588d5974b419f6aa7610ac8df584564a52a8555d32e190bc4f089f9"},{"Tag":[{"name":"mwdb:family=\"Clipboard\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"fb684a660b2d8e9fcbe32a3c318ed5784ef465db7694e56f0194691fc526094e"},{"Tag":[{"name":"mwdb:family=\"Clipboard\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"70be1706b1a15425a0ee0bd13baab118dca8426d8358315c88c87dd40b9ba16b"},{"Tag":[{"name":"mwdb:family=\"Clipboard\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"5f644edcb574810a3b55f4d5a7b2e9fe4755447b058afd5b604e0e0cd1ed840b"},{"Tag":[{"name":"mwdb:family=\"Clipboard\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"bb5f705bb8a5febfde53aeac8d595ff0d81da1035e121066fe0c943959d13510"},{"Tag":[{"name":"mwdb:family=\"Clipboard\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"eecfc59a88b626a75d2c4f2a578b4d3017c511a70950b82cfe5b59b90d6ba65b"},{"Tag":[{"name":"mwdb:family=\"Clipboard\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"25015240858f6bcb6bf902d9295ac0fb95f097b17a6079ced8d3efb3c345dac5"},{"Tag":[{"name":"mwdb:family=\"Clipboard\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"b02ebb34b35f0cbf2e33d3eca493f3d775261366baa1e9af7683de8266dc3857"},{"Tag":[{"name":"mwdb:family=\"Clipboard\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"01b6e82d776829511283a7f7773234226d593a009db6c1f1125d43fe090b054a"},{"Tag":[{"name":"mwdb:family=\"Clipboard\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"140432319c843b675678c2c0fb4d75aead27b109fcfc6fc92c4b91e5c6ef47b3"},{"Tag":[{"name":"mwdb:family=\"Clipboard\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"55d479da2764fe3f91680a7c842cb2f31f8b53fccc47a2c216dbf6ebcce5c05e"},{"Tag":[{"name":"mwdb:family=\"Clipboard\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"f87a4cf2e9421a0a5d80a687505116cac7ebe9f6864848798fd8e401142e3e4e"},{"Tag":[{"name":"mwdb:family=\"Conti\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"fc7b8319184444f46e40f6b20f3425ae4c8c9a7ff27236bde01ccb62dd48c7e7"},{"Tag":[{"name":"mwdb:family=\"Conti\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"b7c672a27fbce6c19fcc4f164e59750ac3e4164d21004d21bf7d82133d8036e9"},{"Tag":[{"name":"mwdb:family=\"Conti\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"9278f699c264a8900b9e2d00188991865c6ff3c38c40d95ab222705a68d16e9d"},{"Tag":[{"name":"mwdb:family=\"Conti\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"65b6ae7920cbee7fd9d30f6b0e0bf2102090200f7a47e2d5237eb124b2d26adc"},{"Tag":[{"name":"mwdb:family=\"Conti\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"ee93d7c53b631d33dbd2abd36af51e6880f73ab3be8d945f357ff3b4f8e0270a"},{"Tag":[{"name":"mwdb:family=\"Conti\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"e00fd91efb00ef5c4096eb52a40188f090888018f9c340b48ceea8db65d0a11f"},{"Tag":[{"name":"mwdb:family=\"Conti\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"1dc9ca76545f967f4411aa1fb1834d0eacea4297520b7fb8aee1745d019008d1"},{"Tag":[{"name":"mwdb:family=\"Conti\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"c36728e99f92b081dbe0479781d414c5c85b2ebfa35e46c9151efd4caf2124f8"},{"Tag":[{"name":"mwdb:family=\"Cryptbot\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"0982093fa97fd91b15f4dc1db6bb27a2fecd436d431df52ab57357197aa68cee"},{"Tag":[{"name":"mwdb:family=\"DCRat\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"1d5a04cf9b35555bbd47e9c731b7b58fc7c61f78e220f0b29bae9a2fe24a2e5a"},{"Tag":[{"name":"mwdb:family=\"DCRat\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"07aa7e390ecd5d9295b75f8ed032d17e87f91ae8bc05cd6e5e94df2d34d672df"},{"Tag":[{"name":"mwdb:family=\"Dridex\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"1d65b78c43961f3c8500eb3c3f9caf619328a0d497176ec2e952a60d39f9f473"},{"Tag":[{"name":"mwdb:family=\"Dridex\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"57aa703752848a455123aacd1d37fda44204d90ac787d66296c62fdb623f6809"},{"Tag":[{"name":"mwdb:family=\"Dridex\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"11bbe276fc5110d8a3301f15b298530e9c223ca02d1115767bc37bd75500e10f"},{"Tag":[{"name":"mwdb:family=\"Dridex\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"a6392108cc0f4c3b515adefd8fc4f598de6c4b02c8128e68b4a17ee8a614935c"},{"Tag":[{"name":"mwdb:family=\"Dridex\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"84d80a7a5034d7e9775731bedc0f00c8c6c7eaa98d2d693f32d3294ca06ecae5"},{"Tag":[{"name":"mwdb:family=\"FormBook\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"1cbfaa8a18eb1b6aca5e3e487fbf74b278473d8be3caf45242a67ff6a1f58856"},{"Tag":[{"name":"mwdb:family=\"FormBook\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"a3209bf6cfd9b6286923251b6d5da80997c6b3a51ec3bfb922388ee5e8944ec4"},{"Tag":[{"name":"mwdb:family=\"FormBook\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"920b2a34a93f5add23dbc71393cda484518b2a23ced20e57864a069469999999"},{"Tag":[{"name":"mwdb:family=\"FormBook\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"aa63c68f906bdefa1e0a20719f8f5523a5d154f2be10dfafb118c44f9c0a3b45"},{"Tag":[{"name":"mwdb:family=\"FormBook\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"b19fd4dfc771a8d5f623d780c5e3f184072a267c37ec9b9c04b77cc2c341d685"},{"Tag":[{"name":"mwdb:family=\"FormBook\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"5f41c8e6da11a0b75eea8b9de304fe54da16779c6e1046c3c0bea59b1b695061"},{"Tag":[{"name":"mwdb:family=\"FormBook\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"06590d9c81caf0a4855c2a31c7bbe55a4646ffcb24cb165278e0495b3cf8a250"},{"Tag":[{"name":"mwdb:family=\"FormBook\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"6bb12880471e391c169e4f52380239e3efb6b7f28e8f7e9f4989b811a094e733"},{"Tag":[{"name":"mwdb:family=\"FormBook\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"d2b976a493c6d3b694dba0e139cea1d4943c0176a807109a9ab045a6b23b75c1"},{"Tag":[{"name":"mwdb:family=\"FormBook\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"d58a433d169950695149f4270bf15c27d298d13e8a6f6280014bce5d37cd67aa"},{"Tag":[{"name":"mwdb:family=\"FormBook\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"9d22cca0ae82cb205f826d7d2e0b034414e436f4a3d70023616d05ad452876ed"},{"Tag":[{"name":"mwdb:family=\"FormBook\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"c7a89255767729cc8f5dbd610779baac706af799ccbb1a4945c55a77632e671c"},{"Tag":[{"name":"mwdb:family=\"FormBook\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"af2a8024939f13bee37b6d3a35aa5df93e2a6b11cede4bea19493c4d704b050f"},{"Tag":[{"name":"mwdb:family=\"FormBook\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"6d272d83fd8d27f2c5879a183ef48f944047efd9198fdec9cec10eb3d0ef6760"},{"Tag":[{"name":"mwdb:family=\"FormBook\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"fd7d542aa6e922020e6fb15fc151be03a967ca01b09c75cd267302b873f1a79c"},{"Tag":[{"name":"mwdb:family=\"Kutaki\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"03cad3daf3961919497a60d07e9a91745e240bd8d8b0db7ccef34525cee87f1d"},{"Tag":[{"name":"mwdb:family=\"Lokibot\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"5d292d4801d37591a78cc668219f7a7279a830fbbe01dd8e4bbe4a8a7d43f127"},{"Tag":[{"name":"mwdb:family=\"Lokibot\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"105c6a65575df97241ddc6b81c72fe929007105cffe748163ce80cdcad8c8283"},{"Tag":[{"name":"mwdb:family=\"Nanocore\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"2ed84c787d3d34d170ca4592a2b7a15eabbd727b5e72bffeca6ff7ec8617b354"},{"Tag":[{"name":"mwdb:family=\"Nanocore\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"07addc6c7780994991690ca20fc353a6af5a7ab5cde0dfe338889d2ab2f30716"},{"Tag":[{"name":"mwdb:family=\"Nanocore\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"47b4951dac1deae9dcd6bb2006b40b2c64a66be0919f6e56b6233e7fb8f15a11"},{"Tag":[{"name":"mwdb:family=\"Nanocore\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"90ef6927186aa43dc96d5d5e258807f1e5347b6432e0c18e2d5a2ae84c9ef80c"},{"Tag":[{"name":"mwdb:family=\"Nanocore\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"4cdd7855a86c978530bf4570ecc6b496c3167a59b872de4ce0efcceb65920a57"},{"Tag":[{"name":"mwdb:family=\"Nanocore\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"8339e4628371ab00f5c713a058ad7f16b46580b75b31d06cbf27d72f2171f5cd"},{"Tag":[{"name":"mwdb:family=\"Nanocore\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"b7b8c3960fcbd9f2a8d327f0f7014e9a45a69c8cdd5639fddd2c26d9b4a91d87"},{"Tag":[{"name":"mwdb:family=\"Nanocore\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"a06e30827c6c8ca0154c68a7b960353ddcb1c984fa29c975450121624a518b17"},{"Tag":[{"name":"mwdb:family=\"Nanocore\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"99d32d2dc8c4d9b35bd85cc6038d1accdecbd01755878835538f0d8d3d9f89e2"},{"Tag":[{"name":"mwdb:family=\"Nanocore\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"360e25395b838e2a3813acd28926d552c51ba36966214f9b212c670a5c19c344"},{"Tag":[{"name":"mwdb:family=\"Nanocore\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"b92c62e3c9dcf204419b61697382a9b3df62aa432da1c490aa7d6b789af78712"},{"Tag":[{"name":"mwdb:family=\"Nanocore\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"cbb5ef70b8bca65890504d63dabf98c9e322af996a9380e66de897e717c76e6f"},{"Tag":[{"name":"mwdb:family=\"Njrat\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"8859685e5de4d1fdab2dbbfa6899ccb8bbf1b8fb859abf129be79b19b0b87314"},{"Tag":[{"name":"mwdb:family=\"Oski\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"5b2586963af14d1153f19fffcdc2ae9951668dae1a56c15ad9ef7d8cabbcb21a"},{"Tag":[{"name":"mwdb:family=\"Oski\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"79f2322a266f7ae7af5686670d8e8bc93661506340aab5e9d63fd23517bbbdd0"},{"Tag":[{"name":"mwdb:family=\"Oski\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"3d67ced8c8394bdc10e76835caea07dee4729e86bc665a970b6e1b5af6c33eaa"},{"Tag":[{"name":"mwdb:family=\"Phoenix\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"9f4e207bcb2b0f16dab07a0a18ab7ef8e50d955d0bc7c37efd2131e7aab9f436"},{"Tag":[{"name":"mwdb:family=\"Phoenix\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"f9f9a6bd680df783b0f4b005af4557da8a4ce6e84b1a1440935763dc44cccb83"},{"Tag":[{"name":"mwdb:family=\"Phoenix\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"f7ac9f1d654571249f850f8b7cf437d4f5e339350bb56ef4808dc0ca13b78ea4"},{"Tag":[{"name":"mwdb:family=\"Phoenix\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"8303f7eae4b7cb8020a8c0c1a24ee427438fbbcb2803da6b0e3fd8aa43da6910"},{"Tag":[{"name":"mwdb:family=\"Phoenix\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"0acc207ae41db509c7a7e6479df162a88e259fb2131cd7f5975df4ba76596147"},{"Tag":[{"name":"mwdb:family=\"Raccoon\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"4bb2e211a3844b88fd193fb121208c3a95c83af1c649f2d654461fcec7441b50"},{"Tag":[{"name":"mwdb:family=\"Raccoon\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"0fb8abf91f7a4e91c1f62782f01480e5262f058eb9cbe48339e3d2842c2aa460"},{"Tag":[{"name":"mwdb:family=\"Raccoon\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"9c6fa478118c7e8e76636754a40396924323fa5731609ded0d1b44113db461e1"},{"Tag":[{"name":"mwdb:family=\"Raccoon\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"bec84374ec69284617428819047e712e66452381442e679d8b882b2db41ffbce"},{"Tag":[{"name":"mwdb:family=\"Raccoon\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"d0a2d38c92632c54e617a3a347f36fa57baeda485329bfc4504b472101b65b73"},{"Tag":[{"name":"mwdb:family=\"Raccoon\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"304d44b59e457f07939380678b8fb59b1f6b4bd449bcaacf87aa150c3fa311e6"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"a3354e6c95d35e6953a647cd7de0d22b7a71f46585701843e50e5e5403d05380"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"d0b4422d89a43bcf86b4557058c0698213a4e51dfd9cd06622d4dfffd32afa8e"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"798c60924c6b08df1910546234ae359ce49554eca536d48ce99e5d9ee5986b5d"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"fb3b75d3366be57ac8153eaf0a023dc91dc285877fcbf0f6f1068d4c6cf89fee"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"d15df4ad1f5c17c22fbb9dde04824516ec28ad023190d4cc079374148c74326d"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"4f839b281901d8ce39176ab5ca0ff5cc54209bc4a1d3d1ee2f41327b0b29571d"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"f47acc45c6e8c1d0533f99157700ea03dd435ce98425397d145f8faea5160728"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"a9a05ad6bbde5758085211b55cf2d895c0c191f1610118264bf0201060cc8941"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"85e85f13b3b91bb3b4275af13bea178920c51072a1f60676ba7c14f356b694e1"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"910bfbc1aa289605ae5e8324b3964de6619f03de882c84c984f585e242f416ee"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"4dec113ab62828103628275e5302b3542ca62eddf98b81eaf0331c542aadf98d"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"050b73ccd77d1e80b8982741a1f3d6e29b331abd8cacd6b219d20035dccbc33f"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"7879a27cfe4ba0135019ca0a07de6fa50f7e2932df1f0c79aae4dbe9f5e0b7d6"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"46f64c1974b7fe11effde5e9f98c47a5bba0a71c2274e5db436a6a2b7ffcedb8"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"c62d71d8d8394949fe7d834f4026833b06dfb6b3c06c54fd1014e1fc13428726"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"ee3e7d2742d255dff6fd48dad7a579290559f3c014ddc0bed1781a4a89c6d5a8"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"ba14d67497a2eb70d97059d6ab756de7d1e5502b6a2325998541fa80397c071d"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"551d3454f17c490e53c20d8584d4b6a356beba95eae611c1eaf524e76f4ea722"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"4eac12423a78201d89bf682621b5be5409f9667140f853115ed151c4af89abcb"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"a164764cbb99eecc87860d4b8e8be71bc2e6094b243cc36946eaa573f2d34dc3"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"86ceeed4cf1642869ac16d1089e68244bb2b7612f943519e0adf94e284fdd99a"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"bd719135c207a07f0e75419a02ab2dae0711dab5041ef73ebc922bcee002d3e6"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"087203d17c8f1f6250dda06b39ef51a2b2143e51f4ad267d4dee07b0211dd7cc"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"2b636e7a274493837e96311e4ef1efe626359ecbaafcb0bd5414c4c3fe7ac4bb"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"2fa0ec4fba8fbe880368beedbefcdab2c49e530be8c582657ae43859f737d318"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"73361bc6ec7dff0035b4d09b12f7a00df3388447ff8b0f653ee6c712aef50463"},{"Tag":[{"name":"mwdb:family=\"SERVHELPER\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"679c83aee6ed627ce5cb4641b798d461363ff103b8894c6f1808114018b5e7bc"},{"Tag":[{"name":"mwdb:family=\"SERVHELPER\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"25fc99f93932f10299fbe3b9ee2cad331f9d6ada033e6ade943b8d779f4dfe7d"},{"Tag":[{"name":"mwdb:family=\"SERVHELPER\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"c168afed57a9b2960b58ff8a99afabcac9eaf4c341cf489f412d27d9a4494e54"},{"Tag":[{"name":"mwdb:family=\"SERVHELPER\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"741cd5c361878f530e5641891a34089375b53d7f52eebb98e7ed9195bb5b1a72"},{"Tag":[{"name":"mwdb:family=\"SmokeLoader\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"820fc220522ba757bcc3bbef4eeff4cb3561cdc751041d07fb81c120b86c6d6a"},{"Tag":[{"name":"mwdb:family=\"SmokeLoader\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"9da9adc5843c38ad49875dc106533003fb364066af2b5c2c36f6b5381d04d1ea"},{"Tag":[{"name":"mwdb:family=\"SmokeLoader\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"e2566524bc3426344ecf9dd2376f52a25eceede6968fc255028caabfb6f32074"},{"Tag":[{"name":"mwdb:family=\"SmokeLoader\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"b5a09dd81f086fee711d34b4856f420079cd6baa759f90cf32e093dc6cc0c379"},{"Tag":[{"name":"mwdb:family=\"SmokeLoader\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"71cbc629b7297c4fc9475b3a164b86c8a65eed9bf21b3450a8d8ae77a4693970"},{"Tag":[{"name":"mwdb:family=\"SmokeLoader\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"5ab87d852f59491384478304b6abcdf8b0e3c03ef27b50cb60ffdcefedd337a8"},{"Tag":[{"name":"mwdb:family=\"SmokeLoader\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"15f38004d3c9f7e8cc38cfb0f08f26ce43e57fdda944dc293217370996224a20"},{"Tag":[{"name":"mwdb:family=\"SmokeLoader\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"a6c7307586add646c353e553da6fb9a19a11ef07ada1861f8b96301cd902c81e"},{"Tag":[{"name":"mwdb:family=\"Snake\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"b2671f0862bd131625b51f19d72bb64cb51a0e9a0e816cc7d269af91407e56b9"},{"Tag":[{"name":"mwdb:family=\"Snake\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"c660d6a834aa41d44968e788436c795767f7480b92eae198f4dc2306c69e113b"},{"Tag":[{"name":"mwdb:family=\"Socelars\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"e809de77025fae2018a564cb128acc982a6e99dd26980cfd63c7fcc1c1f5d20f"},{"Tag":[{"name":"mwdb:family=\"Xmrig\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"6015dca5bf8d09053d0fe17b8fd10ab361ea260e2900c071de0c6aa70f91de18"},{"Tag":[{"name":"mwdb:family=\"Xmrig\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"b374c39c6c3171107eac145ca8cce73ad61acd6726505b3bdd345b6aa2b3952d"},{"Tag":[{"name":"mwdb:family=\"Xmrig\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"fc4d279e5d25f6728f0440d4c6687bf082393da4a63ababf00f428d83a7a4ad4"},{"Tag":[{"name":"mwdb:family=\"Xmrig\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"ee183792c122aed123b5b7e111911a5d61fef56053449d5cc11c262c1315c9cc"},{"Tag":[{"name":"mwdb:family=\"Xmrig\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"4535de41278b2d4487e8f51de5851d8623de81e68060fe42d9ecb2cc23c4ed06"},{"Tag":[{"name":"mwdb:family=\"Xmrig\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"475f0a4248b9e80094bde9a2307603df79045bb00c158b8ab77090f686df932c"},{"Tag":[{"name":"mwdb:family=\"Xmrig\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"ca8c20c4656290e65a69a52120280898c0b33156986f788038f09bd946151fcf"}],"analysis":"0","date":"2020-10-07","disable_correlation":false,"distribution":"0","extends_uuid":"","info":"Daily IoCs for 2021-12-06","locked":false,"proposal_email_lock":false,"publish_timestamp":"0","published":false,"sharing_group_id":"0","threat_level_id":"4"}}