Daily IoCs for 2021-10-09 (MISP)

{"Event":{"Attribute":[{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"ab5f206ea219d42512cbf85bcc29ee4100640d20126f62a9895edaf653812a7d"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"1f7262c61f588272d11a6bf35c7503c1aa46c006ae60515d56c87733ca4e0dd8"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"bf96595eeea1325807085d73c8d097ddf2deaa45f2b5fe0ddfec17ab59942de1"},{"Tag":[{"name":"mwdb:family=\"Anubis\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"49f851f1ba64d6a80cca4d3cef8742a889a21604fd151e018d5c3a50b0de55b7"},{"Tag":[{"name":"mwdb:family=\"AsyncRAT\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"b8d05057f704eb77c5e15fc63991d53a2ed73ce81344dfc1dc6596d7d4222c70"},{"Tag":[{"name":"mwdb:family=\"AsyncRAT\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"5537d9206032519b37482f2d6c10e31981c209f5eaaea93161667af32d503632"},{"Tag":[{"name":"mwdb:family=\"AsyncRAT\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"ecae783028769e8706c47c2677526806c7ead84c13712f954038728f5ed41952"},{"Tag":[{"name":"mwdb:family=\"AsyncRAT\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"23253d79981d4ce1d2c22d2c2f928b116885b3453960702dede30170ca8d4e73"},{"Tag":[{"name":"mwdb:family=\"AsyncRAT\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"79a5feccd7f03cec5d2db7155aa5a3e2bdd1220455a618b75245b516405a303c"},{"Tag":[{"name":"mwdb:family=\"BitCoin\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"b5cef66e007363acf81c269c5ea4111016efdacb1792a9719e41d40412721942"},{"Tag":[{"name":"mwdb:family=\"BitCoin\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"a5801d29a200ba60479be888d7c5bcadae08e0e635d069a797af4232c7f06a8f"},{"Tag":[{"name":"mwdb:family=\"BitCoin\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"9f5ae9dc29fa51639525f81a75ae08f5005b9662e1e143f90525c99ef7b089df"},{"Tag":[{"name":"mwdb:family=\"BitCoin\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"24fb30b87ce395cfbaaa89689014386c4c3c440471a06d667ecb004f12e8078a"},{"Tag":[{"name":"mwdb:family=\"BitCoin\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"0462fbcfc0404494f67c48c1a68e636d4e1c622574f1cd6f6cb51e79b6d58e8e"},{"Tag":[{"name":"mwdb:family=\"BitCoin\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"65271b092ca596c35962bdc21ad244d365abcc4d69fde5baf0dd27623b185c06"},{"Tag":[{"name":"mwdb:family=\"Cerberus\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"11b438f975018edefc4a9ee3339fc3fa5182d59234cabde7f115bcd4ff74f1a1"},{"Tag":[{"name":"mwdb:family=\"Cryptbot\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"ab2c8662c8101b040f3b5e41eb3639b1be3ce9da6ac155f7a4b0fbe63bb3fde3"},{"Tag":[{"name":"mwdb:family=\"Cryptbot\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"ab49897a4dfcffa57ec5354b4bc9bbec550232c425207ab53e0fce194282f76f"},{"Tag":[{"name":"mwdb:family=\"Cryptbot\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"2f5703ab2aaa5639f12ed09b78e73c08d3a551e0f08106a3d749330e4401f912"},{"Tag":[{"name":"mwdb:family=\"Cryptbot\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"493fbb043d4219979c0f6f15b61e2d21b70665b1e4ba04ebcf45c1dd013be7a3"},{"Tag":[{"name":"mwdb:family=\"FormBook\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"c5bf60fe50896fc79ac25b76f70f2308ff992e783da412ef880f4b6d2faa3b43"},{"Tag":[{"name":"mwdb:family=\"IPack\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"3271b5bb8547e3299a52783ceda59df71b2c0b3a6d3a4a29a03a0939e841aa37"},{"Tag":[{"name":"mwdb:family=\"Raccoon\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"2e026e962450eac11b250c3dabf68419c7443f93339ad0aec5dfbaf090961027"},{"Tag":[{"name":"mwdb:family=\"Raccoon\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"8694a45a295efd9a5114eca3c41fd4338e6ba029f497be4f66035ebf375cbd38"},{"Tag":[{"name":"mwdb:family=\"Raccoon\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"746cfbc5680b908b13b7c7f8bcc8b59f0d7da8ce86ac5c12bb616889fdcfe291"},{"Tag":[{"name":"mwdb:family=\"Raccoon\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"c39d96311181bd623c17bc6fb5c3cdc6b5a28e738b8ecf977368947d06e87710"},{"Tag":[{"name":"mwdb:family=\"Raccoon\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"f22d4a1729b3e55190d224087c7569623012ca99978b01e3649714bf71b2ec04"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"a499012f1e62176f6721f108d7e5e709e672bb0bbd6d5fa57cc13493c11720fb"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"04d891a34de099604ccf8e9dd7c71725f7a1e44417c4d9ef1d3825073d2162e0"},{"Tag":[{"name":"mwdb:family=\"Remcos\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"eacbc16952b7054f007d23689d214c3b93874466e6ef5f95c7fc175c37d5da6d"},{"Tag":[{"name":"mwdb:family=\"Snake\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"02c545b0dfaa2cdea6507d109ffc8739782cc6a560c57e7061f9c15428a3720d"},{"Tag":[{"name":"mwdb:family=\"Snake\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"0ac53297ab7dc31fa26958cbcb4b5a42b8160a63127b254e98edc3ca96d2c14c"},{"Tag":[{"name":"mwdb:family=\"Snake\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"4cd75e599338c0603e29e4f01178fbb881803eebe0867c0a2469e71d870853d4"}],"analysis":"0","date":"2020-10-07","disable_correlation":false,"distribution":"0","extends_uuid":"","info":"Daily IoCs for 2021-10-09","locked":false,"proposal_email_lock":false,"publish_timestamp":"0","published":false,"sharing_group_id":"0","threat_level_id":"4"}}