Daily IoCs for 2021-11-27 (MISP)

{"Event":{"Attribute":[{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"d30fdcf3c1e63aa03fad165cf11e1006bcc6c52330592fa11cd8d8a1eedc3646"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"56dcdfe65f71161dde3c55fd9097fb971831c7f89fc2112aab928c04386e6e1f"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"6be0d4e0aaaf670379c0962a23581da7e4834deccb410686a32990ab3f72c54e"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"6203c00f900259f28f13edf194b6697caa8bbd75cae36c6dc61a1ca8a59c68fd"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"cf9bd1c02c585d023fa90ff6b0eda9396ba2c6f42761328e5942045ae3216170"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"86eeadd7286c1a7d2460f3d6fb099bd26ec12623b07ee90b423ccc3416529bc7"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"06ac82e3c0ba3a5f1d557e0922be6b684cd977c46f6bf76668edfc21a089e811"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"a389632ff0afb1d567d27ecf384e402322f84c98f99315d37fde488804226347"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"90550e0278c126b303b0bef5949eec43d444346047cbcf53e5b1a5e8a17f53bb"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"f8689850225e5ae7c8d3720cdda3ee51af39111816fd2797669c568c0c081bae"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"81b11c3463db6618788ee5883b39ca7bbadfad39bbbd5a02e0eb1e94d7e80130"},{"Tag":[{"name":"mwdb:family=\"AsyncRAT\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"8f179d1f3162ceccf892644c7c07bb4f881113a01985a5544e29542b0d6fe6b1"},{"Tag":[{"name":"mwdb:family=\"AsyncRAT\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"3a3032f28b080be56626c4ff6c345fe83457e4148644026b4899e6aead5bd570"},{"Tag":[{"name":"mwdb:family=\"AsyncRAT\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"1a5ae467e2bede8b58af11f9f974e8d9bd72f464078f52a19e125fb1299d2039"},{"Tag":[{"name":"mwdb:family=\"AsyncRAT\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"9faf4231fb22ff7aabd20ba170acc5b90bf0fde6ace52f750d065e5b0633c76f"},{"Tag":[{"name":"mwdb:family=\"AsyncRAT\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"19019311222c7226c5ed48eaec321e411b836f171be5d0f429bcd3914ff2ee8b"},{"Tag":[{"name":"mwdb:family=\"AsyncRAT\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"f691a797adf527d7b16b9246c9677edf09d8e92165c1a01ba8a4b0d9c02dd620"},{"Tag":[{"name":"mwdb:family=\"AsyncRAT\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"d37e8eaed6eedc33696b51d5b8d782f026443847b6b043e16091367f89c44ad0"},{"Tag":[{"name":"mwdb:family=\"AsyncRAT\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"06d4cfd155d05fddf481ceb6da93b5cf549b24f48dbb5810f2530acfb3a2db61"},{"Tag":[{"name":"mwdb:family=\"AsyncRAT\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"f07ce81464cd8f1442dddf56b517a20b55099f84492ed2944e7909f7268d4b8e"},{"Tag":[{"name":"mwdb:family=\"AsyncRAT\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"4e33c3028737a39a2f4c0d43b0e1f9a4855c58488dd6afe9fdc936f253620b6f"},{"Tag":[{"name":"mwdb:family=\"AsyncRAT\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"7e8766bd1512a2798cd2c730589e15bcadd84fdfc95b0d04b280103a78506dce"},{"Tag":[{"name":"mwdb:family=\"BitCoin\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"04eb9535afb2c3ffbb450c3617f9fe9a39434b7a45b6cd09af0e4bafc0aeb25e"},{"Tag":[{"name":"mwdb:family=\"BitCoin\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"833990804d459870448fdb9a0f74f6b8f5c59d395a71da86f347cf7a74f858d2"},{"Tag":[{"name":"mwdb:family=\"BitCoin\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"404ad7f747eace6e3075fbac34bec21756435dd6a0c9104c29c54cf2f5d78e05"},{"Tag":[{"name":"mwdb:family=\"BitCoin\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"7f428024fe7f323ed3aa576d8f355140652419a5380d8973d98207f74fd63334"},{"Tag":[{"name":"mwdb:family=\"BitCoin\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"0fb920dde5483459c023f6a24e3856fd8b79f48ca1aa3da2fc475ea09d2f8dfd"},{"Tag":[{"name":"mwdb:family=\"BitCoin\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"f870226ebc3763dd4ed19fc2eee15776a7b7026d88419099443c919fb191afa9"},{"Tag":[{"name":"mwdb:family=\"Clipboard\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"2162b1f7324c8011266006a38e02146b03f1b8531905c483af83e3a9361a3c79"},{"Tag":[{"name":"mwdb:family=\"Clipboard\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"dc143f85f30258f0f9e25198c0b67c6b5667194a53b1d6d46238498eb2e593f0"},{"Tag":[{"name":"mwdb:family=\"DCRat\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"7e942e56182c2a564b3cfc21ee3faba7e4dfe398ddbf844a6064d7829ec5f119"},{"Tag":[{"name":"mwdb:family=\"DCRat\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"c2981f567db9e7b4accea75a416e2c400e6a2575988642ed1efcf2291180b305"},{"Tag":[{"name":"mwdb:family=\"DCRat\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"dbfd1391452bc96b3475dfeda0d2e829a72a4a11dd34eec7a725dd438dff1b8b"},{"Tag":[{"name":"mwdb:family=\"DCRat\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"7ecfc4821ff1ec3a0c0c81039bdd10a5b01dbee4deb49418f3bd194062b14af6"},{"Tag":[{"name":"mwdb:family=\"DCRat\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"2f25d1ae0eb9d3b6311dff08fd2d2cf9b8076c3eb707cbf4181b75947dcc75c8"},{"Tag":[{"name":"mwdb:family=\"DCRat\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"d4e3f1909bc0fdb7cf7b2ca4d4997f9fc004057ad0ae40857b25c261d3f11156"},{"Tag":[{"name":"mwdb:family=\"DCRat\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"78c3edf317db7b00801273f1430097b12cfad9814ce74a728591ee06daa8fa0c"},{"Tag":[{"name":"mwdb:family=\"DCRat\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"4854644610be813bd60b453bbe36e7d71484576018486961992e5e36315bf15e"},{"Tag":[{"name":"mwdb:family=\"DCRat\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"c6f2c5736c669f4a5d4c0a5911985ea0f1066a080afcfb5faf79305ebdcd5690"},{"Tag":[{"name":"mwdb:family=\"Djvu\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"176e48c68088a040419cacbfaa33fb5569b867e432487bee64f9955079041489"},{"Tag":[{"name":"mwdb:family=\"Djvu\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"df9159f90b4bc9415cdcbe4197262a451077037faf4ad44e778d768e97c1b4cf"},{"Tag":[{"name":"mwdb:family=\"Nanocore\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"49ab3f9f91eb40a412a7c48d03a876072e43ea7fde3686fec926793df169fe06"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"f71f89f421bbfa5e0259b54e2b0b59faf764a4eb62445e6e4ec5787187b85ae9"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"d6ed1121a95f3c89ac53466948f22fd03c34f450ebfb4e9c60acb281be5e58d3"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"a209c94dfc0016b92e634d3efba6e997017f60c89f314a8ef5ebeaec77629bc0"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"c8985b1b1dd48d07ec7675b0126bed9190a4157eff05d7493290ba1f09817d98"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"61c88f35590a639ac2fbf7e4cb6873549753c3ff97be6de464ae7ab1169d2584"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"3b3281feef6d8e0eda2ab7232bd93f7c747bee143c2dfce15d23a1869bf0eddf"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"c9f7bfeb926d16bfb7dcdb0fd8c768eb0cef9ecb1904426005d9a599bd976b8b"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"077568fbda3c8ad0bc10e618a7cfdb74e8787e56104aab856f0a430e1838098e"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"10bda8cde03ee5b25fdc120ee28e335de54de0c8afb18aee1dda4b302110d542"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"a944c7f66e5fe90d0067d56b320a61d234860ae8d7fe71a61768ca3fbe1ccc14"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"957f253b1c0aca309013bc1d78426ef723803555aa98e707a7ceecaba8581203"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"0428125808208688f048820edba8be134d27861b5af8e8af6a178a88846cdde2"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"45670332cd565c8a0c773c8c60e0c8cbd95d9484e0eb979aac9cc3f23734ceba"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"6bc9e360cb557c801c14149db4a401ccc20a8aab1092617c63b02efc46a86bf5"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"fd19ca661d985422a6832453652e4d4a011f35e21775f65d70e4ba4bce66a6e8"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"0e162233b79a835f69c38cc9a5c6e19e83b48ecefce9f1e22d41b44e5150cbfc"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"4b93f6cb98354616be8bf422311a01e681e70fcb051b53560cce94a6bb02d537"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"12c43e213332d6b50b44b7ad72b4f5b35c9dee3a42f16fc3eeb964f3c0cceb59"}],"analysis":"0","date":"2020-10-07","disable_correlation":false,"distribution":"0","extends_uuid":"","info":"Daily IoCs for 2021-11-27","locked":false,"proposal_email_lock":false,"publish_timestamp":"0","published":false,"sharing_group_id":"0","threat_level_id":"4"}}