Daily IoCs for 2021-05-02 (MISP)

{"Event":{"Attribute":[{"Tag":[{"name":"mwdb:family=\"Adware\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"dda7079cf3da20297c388364b4bad1c3d5ffb0edc8e5a7e1a34cc20a7260b08d"},{"Tag":[{"name":"mwdb:family=\"Babuk\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"b2868664ac8e06a5c33b650d24342f6094d0452c481b41bcdbf39ebde572f3b2"},{"Tag":[{"name":"mwdb:family=\"Babuk\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"8848fc62b67fd6f8947c6bb6068f3182c4c5f9eaffe2882b0f3dcaee69230c71"},{"Tag":[{"name":"mwdb:family=\"Babuk\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"173e75ffa34d070a9bff1d5f3afe12f9dec60b270d604a65a19b43b67b705f5a"},{"Tag":[{"name":"mwdb:family=\"Babuk\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"40bff436d7e1a066bc98ec746a72bfcd42eb09d9139580572486d388e2cf984d"},{"Tag":[{"name":"mwdb:family=\"Babuk\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"974b607975ef30a72f5a7c07c190a55af9bf2290ea3e72b39698a41d5e3df239"},{"Tag":[{"name":"mwdb:family=\"Babuk\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"7c4ef35723e8ad70ddd0acbadc9df8548fec21aa9bee92fede44ec4f6f5f383f"},{"Tag":[{"name":"mwdb:family=\"Babuk\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"41735d95f8ef4471ac6ba5db7e8b3d6dd5ba9d32d9951da0468101249992e778"},{"Tag":[{"name":"mwdb:family=\"Nanocore\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"2ec21b4548b88633396a3bc85eed7f1ae41014707d909d33f13f9cbc126fe9bb"},{"Tag":[{"name":"mwdb:family=\"Nanocore\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"f5e1c607a3bf24cf6477894658704c9400ea4fb7c42122b8249aa68a7e228d09"},{"Tag":[{"name":"mwdb:family=\"Nanocore\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"1211712d27d30cf9680a38deae8fd931267eebefaff347ea8179874eb28837c3"},{"Tag":[{"name":"mwdb:family=\"Njrat\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"c86f4b0ba418353a162e3ea9872bb66f0cf453710cba93d8e3f27234e8b284f3"},{"Tag":[{"name":"mwdb:family=\"Njrat\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"05dc087d135191992243d9f824dd677948825ab9c54f6f44e76c5ced63749c9a"},{"Tag":[{"name":"mwdb:family=\"Njrat\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"ee6e95d72568bc5a413540435e385befcd7a79052446d403a9ee1729f9c5a549"},{"Tag":[{"name":"mwdb:family=\"Njrat\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"3a7d66694894634d0780125d3e768edf062039d7632c5749976d4a43a7130dba"},{"Tag":[{"name":"mwdb:family=\"Njrat\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"d56d0c25380a2d547450c1f1f3374535e2689fe40d894b2b542921b16802a56d"},{"Tag":[{"name":"mwdb:family=\"Orcus\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"3e4ef7b0224b4601e28838ec6319634315025d824c1404a2a9e114139dbdbe21"},{"Tag":[{"name":"mwdb:family=\"Orcus\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"a22f48f8311869ea019de57004372b3ce4da2757ac5ede342368b0bc381fe857"},{"Tag":[{"name":"mwdb:family=\"Orcus\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"d20fc189729837d2f7b39f976fdcc66318b7c5358001d13057b46c32d36a5260"},{"Tag":[{"name":"malware_classification:malware-category=\"Ransomware\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"fe5f56b5280c7e5875bc102bdabcb1df4750b083a05f155097aca0e797e84624"},{"Tag":[{"name":"mwdb:family=\"Remcos\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"653bd8ff2c1014348a5751d89addd6d5e9249359ead5ab73830d7b3f1812eb12"},{"Tag":[{"name":"mwdb:family=\"Remcos\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"210d63272f04545a7b964c5712b0157a9e9801500e063a15ecee4b2de2c87254"},{"comment":"Unknown Malware","category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"0ac09f314874e7e667ba9e8814742b0ebcabe9294c33c1be2ef71df84b13bd4a"},{"comment":"Unknown Malware","category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"1d05dbe616e7975c31cfc6017f39fa5578b68847aa54390452a5acb0b521fb46"},{"comment":"Unknown Malware","category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"1189773a74c0f2e6ec68ed08fc9c6114a45108066c80050fa897956a4686691b"},{"comment":"Unknown Malware","category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"411d5d967868fabcff2c35b5917977eb2973473f29d613d6b78de108752d4956"},{"comment":"Unknown Malware","category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"fa0d2686d54ba8a835c1ca8d717c6f87801b7ab626818aaebfb1ad0cf8906963"},{"comment":"Unknown Malware","category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"8a4417657dca1e03e571560412dbc9b295364992b8a74368fd2b3f5fc3ff7765"},{"comment":"Unknown Malware","category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"366eb44a7a0aa5bd342deea215ec19a184a11f2ca22220304ebb20b9c8917e2b"},{"comment":"Unknown Malware","category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"94c80f90184cdc7e7e75988a55b38384de262336abd80b1b30121c6e965dc74e"},{"comment":"Unknown Malware","category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"afdd0f1717a74af01b88631d17a2f29f89d21ca2e3be0fec0678e7a1e20712d5"},{"comment":"Unknown Malware","category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"259d74f13271dc51eb4db4b733fb1589038ff7819e849d2351e899f67de218c5"},{"comment":"Unknown Malware","category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"1ea5cedb64318e9868a66d3ab65de14516f9ada53143e460d50af428b5aec3c7"},{"comment":"Unknown Malware","category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"2df15131cd18fd1941adc26f014012b437ccaadab39f1f5dc10282a68e8f9923"},{"comment":"Unknown Malware","category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"3a92e312ffd3ca92579d46ec52e3dcb1b09bbdd11fe7c6a735e8546c7d9975e0"},{"comment":"Unknown Malware","category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"28264751c982d30b9330e6c1475ddb9ed28be6a2601e8a5f33b6ba49a3d9f5f2"},{"comment":"Unknown Malware","category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"857b56b62f408ef1e34e68dc6d48faab8811f4f16df677c7fa46dc6633302ef7"},{"comment":"Unknown Malware","category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"9f126ebd25640b3162542de48d945e6949c1548eadc787443a23f797591aff0d"},{"comment":"Unknown Malware","category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"851111047274e04d03744f1224b145dc815060b8cd60b3fa8406990a64aad032"},{"comment":"Unknown Malware","category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"86348a24e2fc42737395c012e538440ae07b3dde7df5a6716f0e259d31889cae"},{"comment":"Unknown Malware","category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"3143bea6d765dae5cd0d9e60992f53994ae0de02fd3304271243c82f697fc267"},{"Tag":[{"name":"mwdb:family=\"njRat\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"5f653fd448c9ce4d5ebb5c4e787b0920b98f875dde99253d38dd845c54479b58"},{"Tag":[{"name":"mwdb:family=\"njRat\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"cd263f2c138c25e1c77d341df4300109d116928df3c81a8218020996dfee72bd"}],"analysis":"0","date":"2020-10-07","disable_correlation":false,"distribution":"0","extends_uuid":"","info":"Daily IoCs for 2021-05-02","locked":false,"proposal_email_lock":false,"publish_timestamp":"0","published":false,"sharing_group_id":"0","threat_level_id":"4"}}