Daily IoCs for 2021-12-30 (MISP)

{"Event":{"Attribute":[{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"68ad8aae59d3181ae5d42ca8748cf20167ad8d8d0779fc47b7d6234406fc799b"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"b05304798ed228b2da35af7a3473599b937b62731176a7b706369a743467a104"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"3e07f0f2a1404646169bf8a37f15ca6f3ba3187cea028afca18518763f743478"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"1d75484aa645df348b7832522a8f1f9926549734f92b7398acec5b2c9117d571"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"0cf9e63dfa3b6d09abcca1ac9f12a13eb54d066d9f6d0e4b0697f518849a693f"},{"Tag":[{"name":"mwdb:family=\"AsyncRAT\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"b79c4f2c3036f00524e6d967fc58910b866a4bda910d0b8ec4e5f8a0655824f3"},{"Tag":[{"name":"mwdb:family=\"AsyncRAT\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"875ddce13022bafdf9e27f3eab2af78147c589037bf9c86192091e3843cedb16"},{"Tag":[{"name":"mwdb:family=\"AsyncRAT\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"1062da80cdb4f13652df97975fa945677062866f4372c05433912a0cc1359b10"},{"Tag":[{"name":"mwdb:family=\"AsyncRAT\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"93d81e2dc35607671d2169890bc3e39d57c4e67b224317f56b5e63ea44ddd30e"},{"Tag":[{"name":"mwdb:family=\"AsyncRAT\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"6b73c1a53a14178d81b0d703ecb7227e5c169ac3a04b4cb169c342db8c736bfe"},{"Tag":[{"name":"mwdb:family=\"AsyncRAT\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"6584bc68270df457d3430776e5d50531a2431f891a6716ed2c9641568de0dcf1"},{"Tag":[{"name":"mwdb:family=\"AsyncRAT\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"d065c2680f2839a990e76208370675d91f26b22b4f261d1ac719cfd312351bad"},{"Tag":[{"name":"mwdb:family=\"AsyncRAT\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"2568251040acb82859e2944aac69d01701c95d89d3d28e30a02b5445a0946ca1"},{"Tag":[{"name":"mwdb:family=\"BillGates\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"8fce2532def883b5e2deef0a08544dc4e586474ac7d8f2a01661fba80e923e1e"},{"Tag":[{"name":"mwdb:family=\"BillGates\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"8cd412b2cd8883163000ebfff829e8e083ffc668d9b6a6c4ed3d0e94b0bcc12b"},{"Tag":[{"name":"mwdb:family=\"BillGates\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"0f31b2b43e5a106965f948b8e525211929c3d4d7218c6ee09d28528ab70526a5"},{"Tag":[{"name":"mwdb:family=\"BillGates\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"e9790d741ca3ba415eba13bf14f5501c1783976817c95767fa51cf9e89f5bab5"},{"Tag":[{"name":"mwdb:family=\"BillGates\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"9a7bf93d67da1284f8d6303c6a3e325ebf88e64c301d1c79ab4e52459370e05c"},{"Tag":[{"name":"mwdb:family=\"BitCoin\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"5c25e0135e43c41d0ae0fb45f86b9e35854c22248c3435af4ef4036328fd612e"},{"Tag":[{"name":"mwdb:family=\"BlackNET\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"d6b1b7e055ee0327e28c625b337ff1259376c9b10d5594ce8ed794c7a11d5682"},{"Tag":[{"name":"mwdb:family=\"CobaltStrike\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"b951f9aabb30855de4682e924b036397500885c2fb328203156c30456f70b41a"},{"Tag":[{"name":"mwdb:family=\"DCRat\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"5ed80f3e0c9d4c92b05864fafffd410becd10235c0cb34cd1ac46090dc83f293"},{"Tag":[{"name":"mwdb:family=\"DCRat\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"e18ebf2b8d3519c6b282df5ec727166cf6a64be98417fdd76bf891c0fdf1062c"},{"Tag":[{"name":"mwdb:family=\"DCRat\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"1d075c1ea60ea19ed8e5456e89715fafaf9daf614113e71f2e81dafd4a903a5d"},{"Tag":[{"name":"mwdb:family=\"DCRat\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"97bce2b4536f07a3269fcca71c9768c9d516d065be0e538b17badb90c32a6554"},{"Tag":[{"name":"mwdb:family=\"DCRat\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"f523f286bedc9f318f22999f1b7c33fe0241cadbd30f5767ceabfc8d08d39984"},{"Tag":[{"name":"mwdb:family=\"DCRat\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"488aeadb7b5bfdcf2b7bf7f25518f6ccaf136e90bf81409838d7f8051938d076"},{"Tag":[{"name":"mwdb:family=\"Nanocore\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"33974944c4407a1ea2e675b9018334953a6717affa1114b917e165097ab83993"},{"Tag":[{"name":"mwdb:family=\"Nanocore\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"8bf0518cd0c607aa51073dfe422f6af43ab8b43523bd0c182cc6172c9ecb9072"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"712ede2d4372cec5c56fe03dd765a1dbb9faf0f6f1f50f5eca9b51c27c15ab76"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"6dacf21c5c0ad69c4064931d8f3bc50f611c42b0719825eb87b4e85d8c466a33"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"58362d11500b981c0d5b54b2a4edd45ad61a2baf522e75486983181134ee0b88"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"19469d26a781545bc0347ba1ef6d885744ec26c525eafd7034155b1095bab742"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"32c2e521b122e3a0f527f66bee2854c148186f7a40c8c7da14e96a24a5cd1a59"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"1454d62c62fb1017536868615ce8ce18280efd823e1133898a93965951fa7772"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"22c882e91f2cbf65cbb7f7ca96363f0fad3aff31d892aba0177e02b6b4af1026"}],"analysis":"0","date":"2020-10-07","disable_correlation":false,"distribution":"0","extends_uuid":"","info":"Daily IoCs for 2021-12-30","locked":false,"proposal_email_lock":false,"publish_timestamp":"0","published":false,"sharing_group_id":"0","threat_level_id":"4"}}