Daily IoCs for 2021-12-12 (MISP)

{"Event":{"Attribute":[{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"0702e6eabe84e53d2816c30e60be81507ed0ade43e9de14370bdff811ab6dc2a"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"a2246fe430ff14345692d6d572e9b7dd90fa7c8650fa6110435f552330ba535d"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"d53230a878024bb535019434db90d64d46a72bf2c7073c7854454a83242616f0"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"97fefbfe7a7e1733095cc8120320d1f05c9c4ac2a976c6bbbc7b90722cacdb7a"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"1dbff78596dac68de4322e692a45af783a966807eedde313faf1e260bef253eb"},{"Tag":[{"name":"mwdb:family=\"Amadey\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"fc60164d3da978e1140d70085a511d9862c946b6a02e9dc4202c8155de14b682"},{"Tag":[{"name":"mwdb:family=\"Amadey\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"9712448b7d09842ce3f16d74fce76158d597aeeaf24380cc7cdcc3100ee75133"},{"Tag":[{"name":"mwdb:family=\"AveMaria\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"c0c2b1d917dea63bf022141d68b71297a77b98ed0e5e0abbc8f7ce13b8e625ba"},{"Tag":[{"name":"mwdb:family=\"AveMaria\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"22f10a7710fe687bc4d4821f8e8655ff83f57fa840625f08070a2632ed283e3f"},{"Tag":[{"name":"mwdb:family=\"AveMaria\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"d57da61d0420b89d15bfb4e92850326be2cf806522cdf282529be376a6ceb0dc"},{"Tag":[{"name":"mwdb:family=\"Cookie\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"cc10c90381719811def4bc31ff3c8e32c483c0eeffcb149df0b071e5a60d517b"},{"Tag":[{"name":"mwdb:family=\"Cookie\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"d939b063fb6627d89d6520d62fb5bfe3610bc86804c1f979d6ebba0b05ac0795"},{"Tag":[{"name":"mwdb:family=\"Cookie\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"c55a03ca5ef870fd4b4fdf8595892155090f796578f5dd457030094b333d26b0"},{"Tag":[{"name":"mwdb:family=\"Cookie\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"1b89605a34b3bfabde11e3844657c609cb700158805e118c45a41cdab931e093"},{"Tag":[{"name":"mwdb:family=\"DCRat\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"afcfd47da9583a3d614b28f69512a608d7288cb3ed3c05f469a2ea254e43e683"},{"Tag":[{"name":"mwdb:family=\"DCRat\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"faf037c823df0e9b900c40dd3e97cd724f278d7b35441ed797aec8a269b01996"},{"Tag":[{"name":"mwdb:family=\"Hydra\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"22023f59544e6f2f24531e6eefea2857af15035447825bd0096326de87ad229d"},{"Tag":[{"name":"mwdb:family=\"Matiex\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"fc2878c2c7f6caac1286e1b16a096997ab8e6c85bdd31a46c830da8babd165bd"},{"Tag":[{"name":"mwdb:family=\"Phoenix\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"84f60b6cf38a4c9964d6a8282ae3bb06d8facfdf19063c7de130a40466ce6cf7"},{"Tag":[{"name":"mwdb:family=\"Phoenix\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"10e45b921dbe9b83080810ecfac2d670fe6dacfed6a2dcf50180f327296c2ef4"},{"Tag":[{"name":"mwdb:family=\"Quasar\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"5a798749fb402c247027a6f2df1cfb96aad563fc5cea9136e3b84aab4d53b22c"},{"Tag":[{"name":"mwdb:family=\"Quasar\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"88d0c12a91e5b09e612abb6f8380db7c9046d2456bfb6ad1588027bae939c18a"},{"Tag":[{"name":"mwdb:family=\"Quasar\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"6b3cf21dff7d1a6088621d0a72c8ea0cefb8ee0cab0aaa4fc3e4e7b72bb0f7c3"},{"Tag":[{"name":"mwdb:family=\"Quasar\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"b90386d6f7c7f67b40c76870b082abe4d027c611db3641915633f236c2b89e47"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"0b969852c5e1537663d690bfaf170f4a00d9986f54d8469e55cfbc9e5cb3fa5b"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"b742487fbed4df6e1d1df0e7307b7470eae959744c67b74f3fc5fb4e18fd6904"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"54c62f5297bee5950a83ed9c0aac1ac534b3e2d7a57e0e1fbb911996c258e9f0"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"c601c3c8a985802f580574dda5228c2865e105f769988e75066439175536c3fc"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"61a67e7a91fee903c4473a2b6cb88fab959d01a833a1dd8ad806bad569099465"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"ced8f8282cb812c84e5dba01aa7e205e4595673f3188a5c84da6da7ce6fe8c46"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"b39c858766d31fba41aa2266a4e518446c87e9f724e1092d79a24f009a9ec2ef"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"cfba163df8952076490a69d3baf5ec7628698ccfc5d70f9b7898b1aad87d3757"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"0d7502674c03677da5f6ae1a3908ef7afda02af510cd35b801b531ae33aa7571"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"a7ff8da851917902fb2e459981db15963c7a0d2781c3e631279a41fbe08ab965"},{"Tag":[{"name":"mwdb:family=\"Snake\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"b3b7ed4c3f05a2fbb6272696a819006b3e658da47066efb92f77fb4f024bdae3"},{"Tag":[{"name":"mwdb:family=\"Snake\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"f41b2b9934c2ff02932bf87f2019133adb2f557350d416cbc87c9543f2818d5a"},{"Tag":[{"name":"mwdb:family=\"Snake\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"9a0004731a4a5c5ab2c3c1527549db45ab6818d3a12ce68b891f278f82612122"},{"Tag":[{"name":"mwdb:family=\"Snake\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"8a5a1a5e7f6314a2a43c42afd25fc92751405dfa206e2aeb686c7e79cb578a06"},{"Tag":[{"name":"mwdb:family=\"Socelars\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"069e09d53b325b4c5f3d9ca60583f183b30a2fd6dc3b13bb2aca962df8d89255"},{"Tag":[{"name":"mwdb:family=\"Tofsee\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"1a6ea53e6cc2924a4b52723db0acc27a0239e3cf51d88e7a355c9251342a0e46"},{"Tag":[{"name":"mwdb:family=\"Tofsee\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"176c930c19ce6f6659889f10dc19251a31212fca020dbb8d98c6b984bccc30aa"},{"Tag":[{"name":"mwdb:family=\"Vidar\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"8a60708b01dd9eecb3a8efd0bfe73eeaf92e81f0b8b05235273674bfd61b6280"},{"Tag":[{"name":"mwdb:family=\"Vidar\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"01845cb48046e1114b77ed09e84b8116b4bd44189b49a43ed1faf06da12398cc"},{"Tag":[{"name":"mwdb:family=\"Vidar\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"55b3843f458355fb166ae8cd64e288501db879fe4f14755812bb42acf9a459c2"},{"Tag":[{"name":"mwdb:family=\"Vidar\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"02161cb688047bfcc7bab5501e244a05f7bcdd97d640705992384e1a59ff05e0"},{"Tag":[{"name":"mwdb:family=\"Vidar\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"7b14edad256eae48e304a32ef9c1670967ccc1d93cf29fde2e043f51f9d46b7b"},{"Tag":[{"name":"mwdb:family=\"Vidar\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"462ac883b48e80e83fe902b7a446962d9d59fcfbe8cbb0dbe5bd6809c04d7423"},{"Tag":[{"name":"mwdb:family=\"Vidar\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"d99248400b86453ed47fb47a26a614c7cc9a4f7e9cbddd078614be1b28035c1f"},{"Tag":[{"name":"mwdb:family=\"Vidar\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"fabdea4d70c789216c108f607b806a1ab3ee2f7b1b28e42a7c3b09eb3b4e5f88"},{"Tag":[{"name":"mwdb:family=\"Vidar\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"9c65b6ddfb81ad8d393b4d2664fbd95534cae92ae04a62d52d0720aaefcde1fe"},{"Tag":[{"name":"mwdb:family=\"Vidar\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"e699aec54d20a6b6ab919b7f646ced7d4d02c9349f9cf6fad08992fcfcc9866c"},{"Tag":[{"name":"mwdb:family=\"Vidar\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"648382c8fc300d8638c82ad75d1588438386b8951b41e5e9e161d76bba6e6ac0"},{"Tag":[{"name":"mwdb:family=\"Vidar\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"77f43dc539a8176c16045f28ce3f088641791294413f1501def4d0f108d321fe"},{"Tag":[{"name":"mwdb:family=\"Vidar\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"d98ab3719d690a67f3ad50e07b31ba5234c85d0bbaaf14f240d57cf52d362587"},{"Tag":[{"name":"mwdb:family=\"Vidar\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"3838e4366fc007494a9a6419b9e8b1ac53274a3b50010a6e55c3a2e2614d4205"},{"Tag":[{"name":"mwdb:family=\"Vidar\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"2b4b011eb6894974ccd29b598c3bb2f92b3f34a9a6bce27aade886dd2e190a60"},{"Tag":[{"name":"mwdb:family=\"Vidar\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"ea041993f7f95fa31f6d1cae78c9149d06b00fa7f5e0669f2fce13046b8a4d8a"},{"Tag":[{"name":"mwdb:family=\"Vidar\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"351831cc027bf24ed9010e395a26a6750d7fb8f57db40ec7ea3a9c1d50ea8ee4"},{"Tag":[{"name":"mwdb:family=\"Vidar\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"20ffa4f018c2bde1eda32a3ac74933f4f91bea6a5f740dfca59faecae22e41e9"},{"Tag":[{"name":"mwdb:family=\"Vidar\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"39d5204854ee28ba317a2baab9a73349dc2c79e011563ec3680eb51f43601a1e"},{"Tag":[{"name":"mwdb:family=\"Xmrig\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"03803f106b25eea135918b4ff9e7f20ddf30b16cb3374dd430c6238db785963a"},{"Tag":[{"name":"mwdb:family=\"Xmrig\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"c02f21c5d3d0f5dea109dbd7894f812b5f0c4a5c4bf1180a0960d84b75667b84"},{"Tag":[{"name":"mwdb:family=\"njRat\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"a3ee9ac3edd5ece7b4c02143421f478e48f45ae733f14537ef8bd04e59250d1c"}],"analysis":"0","date":"2020-10-07","disable_correlation":false,"distribution":"0","extends_uuid":"","info":"Daily IoCs for 2021-12-12","locked":false,"proposal_email_lock":false,"publish_timestamp":"0","published":false,"sharing_group_id":"0","threat_level_id":"4"}}