Daily IoCs for 2021-10-03 (MISP)

{"Event":{"Attribute":[{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"a7dc1b812cdc25fb3eb7a0e8e9e32e75a395b35621ac0f743cbccfaf1da56b51"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"cca4280c183311cb32ac7b94b903827fae8f123d875baf45972dada6d0a92992"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"e3e139bf613e0813cfd1c3c82643986985d1ce57ce772450c196cdcce367380d"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"21808d167c5318035f816fa79227b0e03387e338087451014b900f0faf81c5b8"},{"Tag":[{"name":"mwdb:family=\"AsyncRAT\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"169123f7a5de4b7bb18d95b12aa3fee7105bbbca80ce4f1ba2415e4222c83c35"},{"Tag":[{"name":"mwdb:family=\"AsyncRAT\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"aa5cc189a5088b12e88827e19f0505fd4b51212151b54957dd5551dd0494c393"},{"Tag":[{"name":"mwdb:family=\"AsyncRAT\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"0b037d8c383e5857ec8559a8d1fdca1bcb7ea38153dde83a0a4c6bbf4e565955"},{"Tag":[{"name":"mwdb:family=\"AsyncRAT\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"3d5b95c431d459d33a0d4d04c9eddca8c0253e28c66c5a1ae21c017af11a0806"},{"Tag":[{"name":"mwdb:family=\"Azorult\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"c23f6fca54db5b24cdfa147ace4444b4bbe9872a864716141f9a06854abe536e"},{"Tag":[{"name":"mwdb:family=\"Azorult\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"394c61c695af669dcfe4d3dcf73de5099ed8e7fea036dd25f45ff6d234f9547a"},{"Tag":[{"name":"mwdb:family=\"BitCoin\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"21f3ee4c865d930b2c8e194a01d4eb00563752e7e04cd380996a19b969d510a1"},{"Tag":[{"name":"mwdb:family=\"Clipboard\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"f1f590959ae3ebd7df821c91771b5e11623027ab8069cdece8e8d7ab535e1ed4"},{"Tag":[{"name":"mwdb:family=\"Clipboard\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"cd6f4032380cd399d9320ddf9bc6f805838e455f9ab39e84100b30307cf028db"},{"Tag":[{"name":"mwdb:family=\"Clipboard\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"78dcb7173014d20606d9cab68d8f68d546589c5cf9b1425f01eef6f688422173"},{"Tag":[{"name":"mwdb:family=\"Clipboard\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"722284975daaa77a065a7e3aee819bfe57b3b40d86788b0c9cdb361a3d422fbc"},{"Tag":[{"name":"mwdb:family=\"Clipboard\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"c8fa94b44224e6f9aac148af7a6e2332f58e7af9b3cbc1cccf4def9c5831a9e0"},{"Tag":[{"name":"mwdb:family=\"Clipboard\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"7c6ddf60a155d86ec4578ceba29a9441caec15057cdd3ea3e10671953321d29b"},{"Tag":[{"name":"mwdb:family=\"Clipboard\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"f912a95b8a36d7f744bd700d1db441469ffd776ad49facafaf2149edac7f29d0"},{"Tag":[{"name":"mwdb:family=\"Clipboard\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"ebffdcf404c05459424ced83ae338ab5b696d77a1c5a66043052f5ccaeb7f6c7"},{"Tag":[{"name":"mwdb:family=\"Clipboard\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"fb24bf4f9e71cf50ce64a44a69ed9d07bde17c61f29532fcc614c3a6aec6e55b"},{"Tag":[{"name":"mwdb:family=\"Clipboard\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"8ae16749f48f5be56bb6ac345017d53ad099647159cacf8f422377139a411b43"},{"Tag":[{"name":"mwdb:family=\"Clipboard\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"3088892249e0b5e960b1364aca441be4722f16fe970dca79e2795a10cca5cfcf"},{"Tag":[{"name":"mwdb:family=\"Clipboard\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"cbcd7e2f28228411a6c974dfb31378055e3497ab1f70db91bfc880fa2a0a6127"},{"Tag":[{"name":"mwdb:family=\"DanaBot\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"23929e55e778b19860e2343cede8f6b41593f19cecd8be28ac1ada67dd3fcc8b"},{"Tag":[{"name":"mwdb:family=\"DanaBot\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"0a9d8ed52ee273ce006ec59003558b5aabd5116bcecfd78b14082a6c29d6cc6a"},{"Tag":[{"name":"mwdb:family=\"DanaBot\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"b7417e62b2d2ea2ee70231738e79d0c780b089f4b04f9e7563157980b6b4fc13"},{"Tag":[{"name":"mwdb:family=\"Gh0stCringe\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"4fc0fc113fcf5640ca67092b33ed370f4787840c557af38e8f8e26e8537cde7f"},{"Tag":[{"name":"mwdb:family=\"Gh0stCringe\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"d3e4de688f126d12120a1ada3bceee8c852ad1cde0f06522334a5570e76173cd"},{"Tag":[{"name":"mwdb:family=\"Lokibot\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"73aa6a93cdbcac2032e8a25e186a8e52ee018e221a98733190c183d978f2c9a5"},{"Tag":[{"name":"mwdb:family=\"Lokibot\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"784f22f31bacf9e57c6162d31282e75fde015c4a74f6b126a9255c4a38be8a38"},{"Tag":[{"name":"mwdb:family=\"Quasar\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"01526b381acd09438b74ca04eacf96cdc8f8fdafb36e85be9a099223db630f72"},{"Tag":[{"name":"mwdb:family=\"Quasar\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"6358c51fd88da7dec8801901b4262038b849410f5d3a9412a9b3c6be87b85c38"},{"Tag":[{"name":"mwdb:family=\"Raccoon\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"3e40f7f21045cd80edbb61f9add86be3e64ff92d6b8f0a2a6862adfccd4f959d"},{"Tag":[{"name":"mwdb:family=\"Raccoon\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"28b3174fd360767d40ba8fc7425e5283a6900222dbe2fe365ff3bf5ee4105479"},{"Tag":[{"name":"mwdb:family=\"Raccoon\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"293b6f383d97d862a250bede1d0fb7d5f64e124dd2124f8a0c9300178ce63f17"},{"Tag":[{"name":"mwdb:family=\"Raccoon\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"3a4d8d17d3edab2bf880e1f7302f7aa268ada30a99f91289e63341da2aaf5976"},{"Tag":[{"name":"mwdb:family=\"Raccoon\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"5d4b5c255c24c109ad11df1469e4515cea1deacae8c896461c4a0307736352bc"},{"Tag":[{"name":"mwdb:family=\"Raccoon\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"9008964f9bf171c761bcc2cd80322f6d3165f5837c9ac7651421e89a0e8461fa"},{"Tag":[{"name":"mwdb:family=\"Raccoon\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"fa9e067be162eb6f3b3d29e04f65fd13e1e33210e153cce635f8092e64482f5e"},{"Tag":[{"name":"mwdb:family=\"Raccoon\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"13d64ea9d98adb90dcbd7fec75d8932ff4dc6b11ef206472bb8919310c8c6924"},{"Tag":[{"name":"mwdb:family=\"Raccoon\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"21312eed3ffc74e52d14b61c6791e785272b7e685e3c67b72321fb97858f56d7"},{"Tag":[{"name":"mwdb:family=\"Raccoon\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"475722120581f6be40fd6f1e14dbeceab8e0bd4da4054892669fde0245241814"},{"Tag":[{"name":"mwdb:family=\"Raccoon\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"774e2e652ad3d2c07841a504968277fa949ba80a30e621fc340efa68ee0403b3"},{"Tag":[{"name":"mwdb:family=\"Raccoon\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"ccf6e3c00b178519d0f0a26947db14950e32282b65b779bf2a5ff21ab2fd4618"},{"Tag":[{"name":"mwdb:family=\"Raccoon\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"a8180497b3670425ac073f544fa2bb502f94e064238ead126a73bd0b3683af9b"},{"Tag":[{"name":"mwdb:family=\"Raccoon\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"6468e058014074558c7d2f81db2d08d4f662771b147c608eea867191ceeeab09"},{"Tag":[{"name":"mwdb:family=\"Raccoon\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"c3bf65401ec1efe7d49bcaf30073800089212b8d8dd5b8c56cdbcc661c713d88"},{"Tag":[{"name":"mwdb:family=\"Raccoon\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"6d9d0b24b0b08441d2b1b2237b29e5ebe08c778ca38e76efce385bb2073f5fba"},{"Tag":[{"name":"mwdb:family=\"Raccoon\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"00e52b5aa58ac02f6994613f3543de19dd99634d889f61e8a79cd793858e5a1f"},{"Tag":[{"name":"mwdb:family=\"Raccoon\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"e0b642c24bbaa80348a1a52973bdf57a8b92762fd61df82ca3f175a091495524"},{"Tag":[{"name":"mwdb:family=\"Raccoon\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"a03b57f78314942cee33c051deda4bdd7faba3fa8eac197e1a0f7695db5a05f3"},{"Tag":[{"name":"mwdb:family=\"Raccoon\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"c6f7cd8be820d4a42295aafce7f9178063a1c4f849dfa1c14e35765b3ea5e5f0"},{"Tag":[{"name":"mwdb:family=\"Raccoon\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"1f73eafb1b8706810f795bc406e6145fecd4826d7d72ed12cfa96d1a472c221c"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"8a807f511b5c9ec2d0f13a4a1fe592a940332be9b7677419ef366bd6a066af07"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"d87424a379e04507a8f4740fa1a8832baf8b5d86ba555006c6929ecb98a573b6"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"2583f2deb656ffbf62f688fda8bb164bd3fb2372065c50383b54cb3cd5c06dfe"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"49661c5ee88d50c8a4bb78cb5e75bb4cf269664b2ce58af4954836c2af91707e"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"274a036706a05b28109dfbc6a28edc7656477d6c2c6e4d871191146fb328cd81"},{"Tag":[{"name":"mwdb:family=\"Remcos\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"772a319b31a1922eadd022f30aa60680e911f758d4c81c4dbf16614cf7791f0a"},{"Tag":[{"name":"mwdb:family=\"Snake\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"cb1a5c64d2fcc6dba0e44f663b189fba2cd7389fd058a2910a710cdb777be5b1"},{"Tag":[{"name":"mwdb:family=\"Snake\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"290e4b2cc3c8ea0e2991c852dd3a0ace93441690b1b2386e5f919fc0909bca30"}],"analysis":"0","date":"2020-10-07","disable_correlation":false,"distribution":"0","extends_uuid":"","info":"Daily IoCs for 2021-10-03","locked":false,"proposal_email_lock":false,"publish_timestamp":"0","published":false,"sharing_group_id":"0","threat_level_id":"4"}}