Daily IoCs for 2021-06-27 (MISP)

{"Event":{"Attribute":[{"Tag":[{"name":"mwdb:family=\"AsyncRAT\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"a15672ed6103f48b11d5378513d964fd8a61cab1e0ee4856c565d40684ce71f9"},{"Tag":[{"name":"mwdb:family=\"AsyncRAT\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"51a9ec00920e2f5b63dd9b86f7ed6930e75e6e33dad3079645da55e81306b58c"},{"Tag":[{"name":"mwdb:family=\"AveMaria\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"77df96c27c7f6a89143ffde6817c801a23bab495add1998e48cd087141ae23f5"},{"Tag":[{"name":"mwdb:family=\"Backstage\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"3f3820058a97f02cd3a4934fbd83696bbd876f3f6c04c05704ead9c42fd767f6"},{"Tag":[{"name":"mwdb:family=\"Backstage\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"ee2fcb4582b7599178044c662bea3fbc261f5627f164637238037491c09d5865"},{"Tag":[{"name":"mwdb:family=\"BitRAT\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"3ff9859077c8d645a94a891fd78222e2ce41e95b45152a5b99ed45bd49126b00"},{"Tag":[{"name":"mwdb:family=\"Clipboard\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"e69ba0397b6c88544c8f65fe32722ff7cab21c92d98cfd1a092c56fdaa663a99"},{"Tag":[{"name":"mwdb:family=\"Clipboard\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"b6f7d08666ed5c5309dbd3902783735ee77c1d8ab19e410af5c687488f21557e"},{"Tag":[{"name":"mwdb:family=\"Clipboard\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"e79fd058ee6f388c8b28bc3b5dd676de1bdfa9fcba6c6df0e05c63f9d11b1486"},{"Tag":[{"name":"mwdb:family=\"Clipboard\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"393aac4cba99e10526596a762318a76c8380e1283ccf01aad2b10f5e5b0cbb90"},{"Tag":[{"name":"mwdb:family=\"Clipboard\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"ec9149b7afc19f03a140be2f9a2b6f7d362e53d9a853f0dd3d6fbe02c8e502ea"},{"Tag":[{"name":"mwdb:family=\"Cryptbot\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"70bfa098c9ac14624741bef9d897fe6f75a141f503cb6d88f1115c4a22043da4"},{"Tag":[{"name":"mwdb:family=\"Cryptbot\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"9262d9b2198f8191c7bd22f7c895e0c2ea31b11f6efd49f1254b666726bf08b4"},{"Tag":[{"name":"mwdb:family=\"Cryptbot\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"306a93e8818c684322aa77682d5a0ae0f99b24b610b23bfad1a87a4dd3e03e28"},{"Tag":[{"name":"mwdb:family=\"Cryptbot\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"fa9557d73260c45c24dc89bea350552dd4969b47de86e8da3ef37f6206ca53bb"},{"Tag":[{"name":"mwdb:family=\"Cryptbot\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"bb64a225be46ada55dae603ee1967d1de3c8c71e7c699347980cf5ddd928a05b"},{"Tag":[{"name":"mwdb:family=\"Cryptbot\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"d4d11b50e407772e4a6963a5694175665b526848260202c3689cbab99ba54ece"},{"Tag":[{"name":"mwdb:family=\"Cryptbot\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"1bba51752ba8189f597b709217e831d42f917f32d6289abc5d144679f2017d6b"},{"Tag":[{"name":"mwdb:family=\"Cryptbot\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"ab57ef95721574b692ca38e22f73d7371137fa12a3cb7c91bdeda907d6903ef6"},{"Tag":[{"name":"mwdb:family=\"Cryptbot\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"2a01c5af02900e96b60a39a261a679f4ce4a4f2252615036cbd2e2e68b66821a"},{"Tag":[{"name":"mwdb:family=\"Cryptbot\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"a38c3cdee418e685244ecda9849961590ccc85ac9853f6eb4e329be942f48e01"},{"Tag":[{"name":"mwdb:family=\"Cryptbot\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"989acc65e7f1a41bcb3aa91bcd7b35bd0c556cf4f1e6f9924eac4e87cb663623"},{"Tag":[{"name":"mwdb:family=\"Cryptbot\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"10ff3ea83ba92eb215adfef1542c871a450df55243f78b03dd895d7d89a8fc02"},{"Tag":[{"name":"mwdb:family=\"Imminent\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"6a2f2e1af097e8c7698ed3288f70da4a437811d17d4629bf3c2b7c37ce6b5f08"},{"Tag":[{"name":"mwdb:family=\"Imminent\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"8067ef9073fdb633e0be1d590c03c0091b1801202ad070cf3872e8fda2a41639"},{"Tag":[{"name":"mwdb:family=\"Jupyter\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"bedfa3c630e267b8f4421aa680b544de1d50b7043ec1ecfb011076beab816fb2"},{"Tag":[{"name":"mwdb:family=\"Jupyter\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"9e54e78644f56271cc3966a70b0d6ebd716173bb31373f4c6cfaa77920f60429"},{"Tag":[{"name":"mwdb:family=\"Jupyter\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"a7cf635cb384c9fec9631f66a15ecfca9efb416bdb064b9124157d09724fe9e5"},{"Tag":[{"name":"mwdb:family=\"Nanocore\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"7be85c34210e1841da02f20c765d4bfb4b3de70aa4ff073272eb8d8145b4956c"},{"Tag":[{"name":"mwdb:family=\"Nanocore\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"ffbb196f6e7431ee75947839b71a3ad386132798d67f7937dc9b91328fca74d5"},{"Tag":[{"name":"mwdb:family=\"Nanocore\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"418542b67565f6a5f53b5c1eb09e3b38b6743cb3d2f30dcf5f7147d1beace77f"},{"Tag":[{"name":"malware_classification:malware-category=\"Phishing\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"4b82cfc44029d3d8462d60322fa0dbde20f36c9c6791fa6f9b9f6a96fe44bf09"},{"Tag":[{"name":"mwdb:family=\"Raccoon\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"0ddb144bc0e3e7c1c4a6fadecaf8c76f824b736997b20de85a56dd85f770fc2c"},{"Tag":[{"name":"mwdb:family=\"Raccoon\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"c884d9f8a08c1c46166ff996446f653594d18ef62c1b026341e1a66bcae5a83f"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"9e705576a0bff4be3a34209fbbeb0a08ae5d9c0209d131f599263227cc45fa43"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"4d2bad2c3d7cdc5834aa5ce1b80b1b97e097d0fce66126cdbe7e9a0f5a282c66"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"5013fa9cb0bcbe08b7dca6927deed48efcbb9a515ed5b5535a5f443eec24ecda"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"f371563bbb845b880a8989991d197e1176cff056e07dfcbbd4dc4e37d5c3b98e"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"fa0c1f3d1efe13567f5a99a78983d64cbce0940977ce115ea2c8f8bb510b419a"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"e4a846e065acee4723da1178ebe4db740d5359d9e819d367dd9a31466c2b24bc"},{"Tag":[{"name":"malware_classification:malware-category=\"Scam\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"4cf11aacd8738bec0b34693742d06afb7e18f4034b5e571c4897d05032013906"},{"Tag":[{"name":"mwdb:family=\"Sodinokibi\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"6f8a93be505c69961aa6634ba44a1ea927190d6ef2bd361fcc5c8a1b7a223abf"},{"comment":"Unknown Malware","category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"8b18657a86b997d771a96caf30cf3e68d8656420335ec0f88d81900951a06a72"},{"comment":"Unknown Malware","category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"488027457f1240ac7f7c0d69baa9f4916df808c709bb479fe6dab3efe788187a"},{"comment":"Unknown Malware","category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"5e828d08b33472b71f62e9eb1c6685a92c1db7eb4a5c91fb5e2fec5ea14a6f84"},{"comment":"Unknown Malware","category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"efe01bf88f0eda1652218e2a953e705b48e370abb485bbf9305e642da4844720"},{"comment":"Unknown Malware","category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"e3695a1b7087fc7b14cce5e307c1d5cee16e9efd3e9526a2ab7450981a15d5e7"},{"comment":"Unknown Malware","category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"84b818bf3c06297fb59306bfde8a7afa2d3564483bac7b85ae8f0a4212bc7367"},{"comment":"Unknown Malware","category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"6c449f168c768e5521e9734ef059c561111f40eb0670133bec35102114f861ad"},{"comment":"Unknown Malware","category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"af74442eca44b765d94aff485d5182227f159cdd98d0a47094ccea496ba4cebc"},{"comment":"Unknown Malware","category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"f4f8a4581ed9b3380900a634105828423d54417362f43eae57a31a569132fcb0"},{"comment":"Unknown Malware","category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"b07f20de157ccd909cdd2aaf893cbd3eade27f7a42d142f6fa7fa9d6ef4a10d4"},{"comment":"Unknown Malware","category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"55c779a988df0a5ba3e22bfa550fc86a840387108228f1100a794fe971e63060"},{"Tag":[{"name":"mwdb:family=\"Vidar\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"45c51601ae87676d45f2619955f003f11e661bedc594a8ec0ed64aeac0242b66"},{"Tag":[{"name":"mwdb:family=\"Vidar\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"128b5ed867f0460b48605e1100237451cb6697213eb220f61258e3d51eb4d4b1"},{"Tag":[{"name":"mwdb:family=\"Vidar\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"74d37ff8280cc76fa35d15f019b901483e395e9e62ad27d6d041c4a15e96db1d"},{"Tag":[{"name":"mwdb:family=\"WSHRAT\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"a6c5cfb45f3ad2ad7140c002881e61cd8f292bba74813d9d2cd46510d3413661"},{"Tag":[{"name":"mwdb:family=\"WSHRAT\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"dffe00ea86d1389781808f1c60341bed75b3e538de85ee748145096c6405efe9"},{"Tag":[{"name":"mwdb:family=\"WSHRAT\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"7ae526f6dd0c0f94cae81aac4ad5bf3abcc4ccd943b595ff97761927297a138a"},{"Tag":[{"name":"mwdb:family=\"WSHRAT\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"122b08a2479a0df49f757c074f94299199be158224eca81d0e34a3c7f7df7686"},{"Tag":[{"name":"mwdb:family=\"Xmrig\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"6cd2cd4635d1154d3186564ecdb251a54c5a9d99a5346ce3802bb575f898b44a"},{"Tag":[{"name":"mwdb:family=\"Xmrig\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"94e14f320caf63ca323ea32d23df7d622ccc6376324922de284c09dfdc7502b3"},{"Tag":[{"name":"mwdb:family=\"Xmrig\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"71d8140cb99861843258bf6ebe63533187b1109107dd4f6cc1dd4861515decd1"},{"Tag":[{"name":"mwdb:family=\"Xmrig\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"c94b4e5921e91f0a7f9200c784a9fad4dbe7109351660b8f45294080b94f58e1"}],"analysis":"0","date":"2020-10-07","disable_correlation":false,"distribution":"0","extends_uuid":"","info":"Daily IoCs for 2021-06-27","locked":false,"proposal_email_lock":false,"publish_timestamp":"0","published":false,"sharing_group_id":"0","threat_level_id":"4"}}