Daily IoCs for 2022-01-08 (MISP)

{"Event":{"Attribute":[{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"95ae69dbc63faff23863868b000b563cde2443da85c6b50b50951a1206aa4e1d"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"a612b4736bef50a4d1dccb200fa3f59c17cc51e5488f4dd6f6a5361b6b4cb2b5"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"d16bd368a25e14715ec80632e2cded64efd46dd4260f82922b5c64108b2d1437"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"26ebf72aa78d94e16210ceff4850bea1e0e1ff792ee6a48d65c470d5f0532946"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"f0fd61467adc06d117f86ff918d39f4b813d96052afe06f3056c1b117bbf9cb5"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"479836582c186f38d566916585f633413d6516a764b2da6e1feb31823f547d25"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"52c06f50200c67f29d539ee1467eee1a6049230c1d7a8aebeb7d44da5924989b"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"4bf09c9861bb150bcd9fa3ee482e21b981e183e48afe9e741be6cd5bd27c51f4"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"54c55ba26f8e14191cdf95d26b85b95e85eea781ac94bfaaf9f08d9e8bcddc11"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"99411f26d35fa8f0a9ea957f87c63eea48146d012061d75de91d99f50d613b9c"},{"Tag":[{"name":"mwdb:family=\"Amadey\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"e70a8d5fe537aa2f7bb4d014ee5c35a9c169adab64c4e034d9badd8e8641f26b"},{"Tag":[{"name":"mwdb:family=\"AsyncRAT\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"07498877e79ec7e25b488ff9c1504d6a1eb3f51640dc91216b1713d73f518646"},{"Tag":[{"name":"mwdb:family=\"AsyncRAT\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"d11317b61362ef7b66521a5f0e443d5710a4c6e3fde794e7b31e267b4f909f2e"},{"Tag":[{"name":"mwdb:family=\"AveMaria\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"1db256fa3cce592295bd86d187c652debdbec86569e3c61d2893902e7a2bc2da"},{"Tag":[{"name":"mwdb:family=\"AveMaria\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"fc9399d6b40b6b8a27c41b1db3c28bd3a598022f1d03d2008b2be33f3d986089"},{"Tag":[{"name":"mwdb:family=\"AveMaria\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"547a73effa2789bdb7c8d66e020e0ec86974de321362e97319be1e6d3fdaf8d2"},{"Tag":[{"name":"mwdb:family=\"AveMaria\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"f18d093dc2f73438bd3bed54a6d9b58f3f1910f71f60128082ffccd7dc3e40d9"},{"Tag":[{"name":"mwdb:family=\"AveMaria\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"fd41d5a7050b93d03cea8f9dde60e7af8a2514c0f6999ff1f4e509075a42ccdb"},{"Tag":[{"name":"mwdb:family=\"BitCoin\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"c5c881be507ed5d4facd2376196dae763c73fa5227c3578eb7bdc84082409e84"},{"Tag":[{"name":"mwdb:family=\"BitCoin\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"ec02fd13630771e3a257dab4794de67e59446fa04ed869dd015849a7ebe49488"},{"Tag":[{"name":"mwdb:family=\"BitCoin\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"5eac63fc61a6c010a8be021bf6d86d377f03c10fcd447c1342d0aba35ae6b68a"},{"Tag":[{"name":"mwdb:family=\"DCRat\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"e302f8c082411820c99e7b66d6cd14a3ba8d79e961101bacd8233032e8ec4e2d"},{"Tag":[{"name":"mwdb:family=\"DanaBot\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"a0d4f217ad2cc44fb6fb177af8b6d4e3044b985144c602dae976dd8824d34f10"},{"Tag":[{"name":"mwdb:family=\"DanaBot\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"72f54186d8a2867022b001757d401b80551eac4fda29f39a70a2246266bfbf7c"},{"Tag":[{"name":"mwdb:family=\"DanaBot\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"9d2210fa5e4046ad3c177a4301744e1ddf753801ea7b822b2034ed533aee1aa8"},{"Tag":[{"name":"mwdb:family=\"DanaBot\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"f67a04424fa4bb6c3ec526f42beb3dd9454b2b9bb2b4ed800c34448bf3175dc8"},{"Tag":[{"name":"mwdb:family=\"DanaBot\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"d6ad4908842fb4735f5d3d757eb5316739bdf64c4b37ef4597e37c3dfa53231d"},{"Tag":[{"name":"mwdb:family=\"DanaBot\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"cf10cad3b15bac59bdf48a71791d3affd9f13606e8bcc7311756a1309f866e9a"},{"Tag":[{"name":"mwdb:family=\"DanaBot\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"7d3b2e91c3cfb16df02f63b973c69a2047b8031295a49e4fffa0fad3dba975f0"},{"Tag":[{"name":"mwdb:family=\"DanaBot\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"79d5a92e6ca45c70a7e6ba9696b7d09192b46a9831f00482d1aeda36d5a00445"},{"Tag":[{"name":"mwdb:family=\"DanaBot\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"a51fd4d01935860fd54cf9055d6de32a00f580c4522ea28fb434a519c22e136b"},{"Tag":[{"name":"mwdb:family=\"KPot\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"ce82d4823d35d70b941eed97aad3a8d3dd271a0f64963e3344d0efc7ab3ab298"},{"Tag":[{"name":"mwdb:family=\"NightSky\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"5ea96f2187d39cdda3ec0371d90dc7c595cb74808feed763044e38a73b306ece"},{"Tag":[{"name":"mwdb:family=\"NightSky\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"2b16a883da04f4a5b65e77066dd30b6f60199ff0b03fc247dfd15bab9ea2b5ae"},{"Tag":[{"name":"mwdb:family=\"NightSky\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"ca35aa464a2b621ede552a102931c39ba57105eef80018b3cedaa428c3c31358"},{"Tag":[{"name":"mwdb:family=\"NightSky\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"fd24c2577efc8d8d0babcdfe07252b75c9d8812828928338953d0cd3421c504d"},{"Tag":[{"name":"mwdb:family=\"NightSky\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"4c8a967dac5e89b9bd55c7e9ab97017e0bac1e0edb4f021a502eeb46bc31c529"},{"Tag":[{"name":"mwdb:family=\"NightSky\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"bed2b9ae7f55cb83c2094aeb306e183dd665d8fa2bdb643a9ee520826a430062"},{"Tag":[{"name":"mwdb:family=\"NightSky\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"794aafcad184eba9fa9d7f2a0394f67fabd2151264e1c580f663e412cacc686c"},{"Tag":[{"name":"mwdb:family=\"NightSky\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"2fff9f357fe60ce84264ff90cbae6ee987bc89addebc4b7c2e0df15f716a1a31"},{"Tag":[{"name":"mwdb:family=\"Njrat\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"57933f53bc7915a61cfed96f47acdcb579117e9a3b7469812de2b8184e144f7c"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"f343a1d754bab67b192879d80c7c53cc6af3ca524e149f2e7f917ffc60d28331"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"9bac37cdb854ad0e3ab0ae38fc690aa9bdb9f7aefd0ede9dbe4ecde6afb1a663"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"115d04150f524c103ca08e18305b0b103a3767336e19404235d2017f4b233ce5"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"2e8f175f14ccec51e35ed3e99c7543881d918877df9bb12724e1ea51123c2ff5"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"25c62d00e133b0d16c61e9ebb30ca2ef0bfbd7c5711aa62a57a2ce251d43d241"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"573990449fbdad62203fd4018a2941c1e4839c07ef93677cc45cca5fbd3882c5"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"8617cc60a5231c3f4259bbe544ec723813e33d3b8a71f09bf6a03c5a343ad72d"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"33c657632473bab8d739a4ddd3b45e6c05ee227c897236ef558bf3d6ce186aa4"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"38e0886a8d58a18c370b6f8710e61e732f0abc03783f77de37177f1f6a00a279"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"8e801fa838e860c1ab10d65fc39a3ecf78ec758561a4d3fa69e35deb2f5eb013"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"5aba100c05831932958d84f93c77b1d5adcbfbb07685ee58dcffc035fa266e1c"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"1388e957020a3909ddc6a9570326c868ecc12a6e39f6029e1cf8b2c342e1fea9"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"7afbff30f47ab9d8e3fc2b67a72453161b93424f680c0caf270a57e05dd2478b"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"af01a7c85a964816f29a90703ab0db0e4afda17e5ab4842a0d7f353284f17646"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"42b1ca590af128f8192b595841ccdb7132d5e933b9836eae4fe709115f9a626b"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"57fcdced3f604edf43e4576f17b23b49ea593fc8dd8194081edbc5c96def6a26"},{"Tag":[{"name":"mwdb:family=\"Remcos\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"afc7f0d0ba88a7da0f06394fd5794d0df80f1d4900d4444eba5bf05a035df382"},{"Tag":[{"name":"mwdb:family=\"njRat\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"4508d96492ef503a79ad969ea885b9b3574158e64fc3d13a41e7ebef007286ed"},{"Tag":[{"name":"mwdb:family=\"njRat\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"86c43915d81769522d2ca2a0a43907a624502355a109286e121c5cf363d6ba36"},{"Tag":[{"name":"mwdb:family=\"njRat\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"de4e562c74f0e15ff99add8883953ad5fae2856be71f2f6b5988bffd314ac6e7"},{"Tag":[{"name":"mwdb:family=\"njRat\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"8edeafcac47a8afdb8812fe48da3941e659a260e0509b67983a158d5debdd308"}],"analysis":"0","date":"2020-10-07","disable_correlation":false,"distribution":"0","extends_uuid":"","info":"Daily IoCs for 2022-01-08","locked":false,"proposal_email_lock":false,"publish_timestamp":"0","published":false,"sharing_group_id":"0","threat_level_id":"4"}}