Daily IoCs for 2022-01-01 (MISP)

{"Event":{"Attribute":[{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"a04ba8b34f085d1333655f5bf384c2ad2e16cee6c18f9569e75744f974bb4aef"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"79a1e2cd90f125ee008cf283b3bfbde3efe31d3291812a2e18194680b5c77af4"},{"Tag":[{"name":"mwdb:family=\"BitCoin\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"b2a5b282b91df9293450c3570495800cab173545524fed91e3f32e732ebd012e"},{"Tag":[{"name":"mwdb:family=\"BitCoin\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"b0d3fc7c9aaf8ea05b61edc14a5017ee390d455f75d60e16d4fb8b72fc5d4548"},{"Tag":[{"name":"mwdb:family=\"BitCoin\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"92561a2126c31ee34edef41557d2c312a3e1f4b9909c99d8ca23d3cae19ee173"},{"Tag":[{"name":"mwdb:family=\"BitCoin\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"588923b5dbf82de5793c49d09b2d68b862228fb57ba821492179761e170c5e24"},{"Tag":[{"name":"mwdb:family=\"Conti\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"e7f84e989d280dc56d4833343f3b03b43ca7715d89f82b93a26f8df15df2cfcb"},{"Tag":[{"name":"mwdb:family=\"Conti\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"d4450201fd4579cc8cbc87f165d8dff00ed6558fd78df8c979d69b60267dcc76"},{"Tag":[{"name":"mwdb:family=\"GhostRat\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"941974b349d806cb905a01b088dcb5d73863639d054f9b91baba198c3f8d2392"},{"Tag":[{"name":"mwdb:family=\"GhostRat\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"a382e49dccdba44e276a698229fdfec723c19672cd82be859366101a61f47bb3"},{"Tag":[{"name":"mwdb:family=\"Phoenix\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"ca71921880f57c2916fd90388d33ceacbb70485e7db221ab3528f9cbc2124dc2"},{"Tag":[{"name":"mwdb:family=\"Phoenix\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"d9105f9e2a7c5b1c34492a98990968f8b931d9eae03523c0bea1a7a9f7744dad"},{"Tag":[{"name":"mwdb:family=\"Phoenix\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"7199ee135194a2347884e6b14499c88a7a534f9292b35c9f4bbda9d645324a64"},{"Tag":[{"name":"mwdb:family=\"Phoenix\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"636525606b9eac94dd84c46af89559b3fc8a9dab52ef43b1016861b3f77e2074"},{"Tag":[{"name":"mwdb:family=\"Python\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"51eb3ea5ab222588fef4a8f40f4ef1f40abcf64ba7b3ced2824a792242159b30"},{"Tag":[{"name":"mwdb:family=\"Python\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"51cf30573e4156739350b499053200bfb03080ea1e026e438b6a25d8208d54a9"},{"Tag":[{"name":"mwdb:family=\"Python\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"195dfa75591c2747d51bddb1fb94956c278226b9c42757d984ab503695dfd647"},{"Tag":[{"name":"mwdb:family=\"Python\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"5a3199d0478a8bbd7270d551f65fba7f998fe264acc730326bc7957dbe91f8c3"},{"Tag":[{"name":"mwdb:family=\"Python\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"b59fb3d2c1626c74e2f9ad8a07b578b24a5eec955b4547319750a8971dc1ff94"},{"Tag":[{"name":"mwdb:family=\"Python\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"21be74c4ff4a04bf0e7dd241a731f08be2869a4865fb843605e09e263fb4ec83"},{"Tag":[{"name":"mwdb:family=\"Python\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"7d3b0c58a451f20587f7892e01e5ffe88ee813e86ef08b541747e7bbbf39f3c8"},{"Tag":[{"name":"mwdb:family=\"Python\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"06be18adfa286d49bebb3bce7e31bf3015db3b56ef48fc0fa67f46f67bf95bbf"},{"Tag":[{"name":"mwdb:family=\"Quasar\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"636eade7adbff93edfb59548f6861fcf4e26ff9bcd2b413a1fb5cac290e1e05b"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"5341deec106e09723d3b14b071800340422a76b5a8234151a456ed9e04e81e3c"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"d0ad854d3b5833ebf0a0a91f93591a5a588f4b45e25a0dca4694e98778a14542"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"2edea1a69f63f65182b87515275daaf7cb3f4988bd6ee04523a9cb3f474b2b07"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"54d233e48725ad524d5b6d0106045a94fde521ca2b13fd5cd1c04c3d7ca5fc60"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"171dafa0a56df8a3f3dd0187df2536df22dc65de41f9dd51ae0e10a99cdf430d"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"fc5ac411380777de4d423a7379c7ab6f37442b0aaf8bddd91af1119b726caeaf"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"b3e2b00ff55af48deef8e28788bf67c173f6e29abfbcce5bac4a696fad28bb8b"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"732abb7d7fcc39a40050000bc49fe1f0f8194cfe96a107ccf43d61a4e2368e02"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"03cbe105cb59c2233116ab2e080183fdd8b617ec2a61052e3cf159ba9313ed10"},{"Tag":[{"name":"mwdb:family=\"SmokeLoader\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"9ed81a80ff7b51eed1be9022a43e2cf6dcd6c6c74dbbda497deacdf627e20587"},{"Tag":[{"name":"mwdb:family=\"SmokeLoader\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"e35984a57082baaa547ef6229bd1a3143510f041323f73a4d1ce001edb1f9a30"},{"Tag":[{"name":"mwdb:family=\"SmokeLoader\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"92ba8383ed7118beeb3c5a8ee0656c7437cdf8658bcc62342dfe41a3a08a8595"},{"Tag":[{"name":"mwdb:family=\"SmokeLoader\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"2366fbd5724e9da7e42dcf3a2ca9a6d72940fb02f50520e9333a6007543d133c"},{"Tag":[{"name":"mwdb:family=\"SmokeLoader\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"3fdf21f7ad2430c552a8dc34c6fbaf82d95a0f44b9a7bd514d89ad3d074d345f"},{"Tag":[{"name":"mwdb:family=\"SmokeLoader\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"546999c44230a0d1ac480138772713b91c31662edd30c286ab8f8bd35baba2fe"},{"Tag":[{"name":"mwdb:family=\"Wixawm\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"1c32631542585ba1a81d426e4cf5f7464f51e09571a6a1dd52655609cb163619"},{"Tag":[{"name":"mwdb:family=\"Wixawm\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"c493ec9069a581d2f4a773da44491acfec8c9db62fa0cfe58507c8f43f3a44e6"},{"Tag":[{"name":"mwdb:family=\"Wixawm\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"b8d690a5fd56d78c7c29bb82507b17a101e23bf71fc02c94462ad4027fb78003"},{"Tag":[{"name":"mwdb:family=\"Wixawm\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"dd95c613dee64924c47f9b8301e1d2f2ddac4103ab0033481f6f1679cae31ba3"},{"Tag":[{"name":"mwdb:family=\"Wixawm\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"cfd938f1b6931e5b114cfe1623db1aab420edf4700bee7ffa457259cd3acea26"},{"Tag":[{"name":"mwdb:family=\"Wixawm\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"c29826b1bc32b91d63b6ff6876456436ed5e74e3288fcf2f10a1fbcb62a0dce6"},{"Tag":[{"name":"mwdb:family=\"Wixawm\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"0d5ad7e82ee0eb8f798ba7c47ccd546c2d399424cc5ff255c410164394ec7861"},{"Tag":[{"name":"mwdb:family=\"Wixawm\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"f3ff026598a62b0b7bc73fee4bb2635bfc22cf9d4f085a4942ef5359a10d31b6"},{"Tag":[{"name":"mwdb:family=\"Wixawm\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"ddf1cf06cbf09316fe27e57ba8b5162f6174cf766041736344721b4de07d60b6"},{"Tag":[{"name":"mwdb:family=\"Wixawm\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"2bcca46d3d444e2fe9f20e1b83119e73984ba8338508b3697abda8eff0e2837e"},{"Tag":[{"name":"mwdb:family=\"Wixawm\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"6cce3cc72193bf8b489f02eab24797e95dce5693e046788ab9faecdcc176c49d"},{"Tag":[{"name":"mwdb:family=\"Wixawm\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"e5094d80d681610b01e3cf8393e2f9f78adf63e76b74d14bac276a2903215b0d"},{"Tag":[{"name":"mwdb:family=\"Xmrig\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"e2060201046afa90e737ae2e489a9c3c3f47828cdf298c3e3e6f166320230250"},{"Tag":[{"name":"mwdb:family=\"Xmrig\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"70f381ddb2639c99b887a096041b66477bbb85a7c411b56d74a2eaeefff75602"},{"Tag":[{"name":"mwdb:family=\"Xmrig\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"029f8f927cdce3c957e6ff0c456f0259184055c1c05ca11c3c7b9d240448ae72"}],"analysis":"0","date":"2020-10-07","disable_correlation":false,"distribution":"0","extends_uuid":"","info":"Daily IoCs for 2022-01-01","locked":false,"proposal_email_lock":false,"publish_timestamp":"0","published":false,"sharing_group_id":"0","threat_level_id":"4"}}