Daily IoCs for 2021-01-17 (MISP)

{"Event":{"Attribute":[{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"2abdc693e6b5d427dc922403a652131a0e0adadc4e41db539ac925e64bf79e7d"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"7c81cf27aeb8f7e8afef5b1cc6c8fb2c654c844d60336931e31de3a8d5c224b2"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"d0f03821a9da19b60057402c27c413c2a846d9ecb5c1607b9bb3df5695018a6d"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"3604102e2ebe7aced15d74e0260ea0db6ef7d2c4ce7a0073b5cb422217734d26"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"19f8a9328f40f5e0bafda9ceaf06920ed38348754b764caa8bf6d4708d9b8310"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"1d393fbb3ce754ea699462c2778587a7f2451eb23be2bd5084c95a46b20be8af"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"e6725c9fe8b368d6dd212d900809eb4fc326bf4c02003f6f1650a4b8ffa2c8f6"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"f2e4c04e7a431a31773dc93c61e006fdfc3811e214dbe492ec4a843482723374"},{"Tag":[{"name":"mwdb:family=\"Cerber\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"8f2dd3d64e802f26b70f0fbc1d741b57b32cd8a64f5372a7480d38fc2865004d"},{"Tag":[{"name":"mwdb:family=\"Cerber\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"a062bb5e774424c6161d28a7030c2198d1c7dbf7353730961d4644ab07fd79d5"},{"Tag":[{"name":"mwdb:family=\"Cerber\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"c5ecdde65e22a7cd4d86d687eaed7ca46e24dddff60b87f60a99859649d3eaee"},{"Tag":[{"name":"mwdb:family=\"Cerber\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"1e35df7ff523a953aab06eae5a7f123eae05cc690c87dd2e444925569afb26a4"},{"Tag":[{"name":"mwdb:family=\"Cerber\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"7fbd05d3b7f7944cf5318bcb7af9333323cbe732e69a897099b4ec93cc82410f"},{"Tag":[{"name":"mwdb:family=\"Cerber\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"6097d4e99611b5a5bab70b748d176000385a0e79e1161a8a94ed1677fc7ff9b7"},{"Tag":[{"name":"mwdb:family=\"Matiex\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"a667492e48dac205b7fd4dba38dc551fef88fc06740286fb567dd8e1e538ffda"},{"Tag":[{"name":"mwdb:family=\"Matiex\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"76b112f9c74797a671f5a24af0fac28bf4779c3399defd827dc5ca40cb55d5fe"},{"Tag":[{"name":"mwdb:family=\"Matiex\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"fbb821f0b247f60dfed5cf2585887f3952fa32d33fdfb68f2b56987755172386"},{"Tag":[{"name":"mwdb:family=\"Mirai\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"5443ef631375259cff0d0c81eebf4ae767943521a7d21357c0f8f5b0c38cb4a5"},{"Tag":[{"name":"mwdb:family=\"Mirai\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"dc5d0ca03004bd68998ac013ce207792fe74164f090c9094eae56e4710a69118"},{"Tag":[{"name":"mwdb:family=\"Mirai\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"e49afd7a578e5eb7d88e75a0683b9bd62864ab7c94f8598b418a5de91d2a88cf"},{"Tag":[{"name":"mwdb:family=\"Nanocore\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"dff4966d3bf96efbeba2797304f65d35a7257185e701619c368415928315f6dd"},{"Tag":[{"name":"mwdb:family=\"Nanocore\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"81a60083be2cfbb222ab6eb9adccdcc48db81912e4f7c66327676d7041af1798"},{"Tag":[{"name":"malware_classification:malware-category=\"Phishing\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"cd7b95760858383fee7b68a97fb2aabfde233c797e530aada6c45a351eaf4ab9"},{"Tag":[{"name":"malware_classification:malware-category=\"Phishing\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"c021d7d615be8a1345ae4d9906f0d644996ad88c7c558e554e2611f9184222a0"},{"Tag":[{"name":"malware_classification:malware-category=\"Phishing\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"15b64c7a34b23867251c5ba16d67557ea1132d421fb3d75b32ebbf5524117796"},{"Tag":[{"name":"malware_classification:malware-category=\"Phishing\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"a01164e50d22e517d96063e8addcd1065f42c017abe4cbd429d0e73cfa81287d"},{"Tag":[{"name":"malware_classification:malware-category=\"Phishing\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"1b8e489ae1ee884f458fa389d03082b6abc2aa8ea18d2f394e7f7924bb01fc5a"},{"Tag":[{"name":"malware_classification:malware-category=\"Phishing\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"77b28d55a563effd5c04166bc3c3ab8148a1ef63e5c59602a6fc6ae3d39b5aff"},{"Tag":[{"name":"malware_classification:malware-category=\"Phishing\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"b9741d4efd239bf90cef423ef5e226dcec5a79c0624b7a5c73bb9218d0f4c220"},{"Tag":[{"name":"malware_classification:malware-category=\"Phishing\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"11707d658b5dff02554ed63e9dd2138d46bc573084f7fabb8dfb1e384bc0a55f"},{"Tag":[{"name":"malware_classification:malware-category=\"Ransomware\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"0d701159969acd5fb9bbf6b526fcf8cbf8fd05b48ba0ad4c01af41b8b5b45f72"},{"Tag":[{"name":"malware_classification:malware-category=\"Ransomware\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"a5d2f70f4857621c6c21f7a00c3871001ffb053a5ce6304e19e18db81e6e3e6f"},{"Tag":[{"name":"malware_classification:malware-category=\"Ransomware\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"57b824192849e7d1711642737dc08b33e53df13bd32ffeececc4ced49d569ec5"},{"Tag":[{"name":"malware_classification:malware-category=\"Ransomware\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"6b2affdfb3fe673b22ba6108fc78986ffea8167c5f3a80834e48378659d0ea83"},{"Tag":[{"name":"malware_classification:malware-category=\"Ransomware\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"94be0c4af61e979ad2064544708807fcdfc4b63115ed885ed0067ece04630a7b"},{"Tag":[{"name":"malware_classification:malware-category=\"Ransomware\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"a993ef8fa65abefd111c63f2376b2d02a08d6eb136ebe3fcc2f4b2389b773995"},{"Tag":[{"name":"mwdb:family=\"Remcos\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"999c9e17b0d164a69bb0224a1231420577b2a4283579e59572f90c32d4daade2"},{"Tag":[{"name":"mwdb:family=\"Remcos\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"b73d9f58cf91002a9acb33700ddccd1820884893831901256a1407db97f3868a"},{"Tag":[{"name":"malware_classification:malware-category=\"Scam\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"b8adb49972c733e536b48be66a451f932928693f4657ee1c7ac227efce93c56b"},{"Tag":[{"name":"malware_classification:malware-category=\"Scam\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"1c31f9da69ef32879382bca8c71d8e8666bd1ecdeec1f9e6d7b64d30290b10c6"},{"Tag":[{"name":"mwdb:family=\"Snake\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"af4c48b6437d29cf1ee59c2932000bc654d63012de3967b577ffd487e5907840"},{"Tag":[{"name":"mwdb:family=\"Snake\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"622b255f7552f990c5d1f97c3ec9fad77b589b88961deec7b691794d81a7b9b4"},{"comment":"Unknown Malware","category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"32ab9e985156c64d7370930c4dffc1efeb4da612e6391d12509fa7ebdc07ee06"},{"comment":"Unknown Malware","category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"43aa703bc642ce2876c56fcea1663f72a8055c9e9c356d5e3dadbbd6076ab80c"},{"comment":"Unknown Malware","category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"f0e7b749aff69752c3488cc4fb304e97a69f51a5c7e51e64f1246bea5d95fcf4"},{"comment":"Unknown Malware","category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"ff9c394bbeb08124d5da877b1e3d1d242aaf364093ddc47c2dd4ab24e99ec364"},{"comment":"Unknown Malware","category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"3ff59f2c384ad056b5e5c03f0e31ef748b35e931a9e34bfa19b83a81bfe77f9f"},{"comment":"Unknown Malware","category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"c7c1f24934326ae676aaf4a55f7522c143264acbf062f21b852803e16692177b"},{"comment":"Unknown Malware","category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"2796232ddd75b74f77330b585a175f1ccb19da72c123e78087fa5810c471d224"},{"comment":"Unknown Malware","category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"a76a6c2268dcd52ca8d435c264989f48c46fdc9caf6664b360df77fd00f8e4e6"},{"comment":"Unknown Malware","category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"5b6a017d7072f944d9cf36409f833cbf8176a8051a7d150549fc3dcba2bde1c3"},{"comment":"Unknown Malware","category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"323f14ed473da4cd2d5becfd41128a208f7841f2f167ed64aa4aae3270c4e157"},{"Tag":[{"name":"mwdb:family=\"Vidar\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"1b7bc78836c832c48b86f5c5406741018af99062461b8f4f2f9e55c8fcc076fc"},{"Tag":[{"name":"mwdb:family=\"Vidar\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"679135c7e252a191b2f413bfa57ede99f6cd7dd8a3c0bd8e38dd48bb8d54de85"},{"Tag":[{"name":"mwdb:family=\"njRat\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"6704c8f945da2f9b442d99ca997c6fb7665678b58ca6e40c2a729968967c6b4d"},{"Tag":[{"name":"mwdb:family=\"njRat\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"1d68f1d17060d1f258a36b461ff6362abef1cdb0ee608fbf97293cf6abc5e815"},{"Tag":[{"name":"mwdb:family=\"njRat\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"538251ca335e95594496d8310e4a40e6293af4ca4c3e4a93244ff84fcee05ad4"}],"analysis":"0","date":"2020-10-07","disable_correlation":false,"distribution":"0","extends_uuid":"","info":"Daily IoCs for 2021-01-17","locked":false,"proposal_email_lock":false,"publish_timestamp":"0","published":false,"sharing_group_id":"0","threat_level_id":"4"}}