Daily IoCs for 2022-01-03 (MISP)

{"Event":{"Attribute":[{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"0ad604a10f104218d1026f5b0e515cb7b4bc25d95abaac6307c37136f672e064"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"b29bccb769dde928c7cba9f36275abd21498b64233f56bb3839b6de2055ff31e"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"e11978585a001159047fba3b5ed8901385c0854f26db38dba4aa921d63bd09e5"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"d30730b8dd5876b3b6125e861c48bcd3f563c1db8d8e7da98786aa3f6e3d40e3"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"76689590f9e541009d33ec8a34f1aedf7587ca4a8e942bee8e3692bccb8904a6"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"bdb71fc41ca74046e3e879483b603b8ad2dcbc8d7bbf6bc9f079772e47f99131"},{"Tag":[{"name":"mwdb:family=\"AgentTesla\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"89929733252d699088129ed01277898b2ab5ce2619f336ca83049868f2b3998a"},{"Tag":[{"name":"mwdb:family=\"Babuk\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"4da5225bdc8cfda8a5ae52033101717209c6ba1bee210148b165cf26fda3193f"},{"Tag":[{"name":"mwdb:family=\"BitCoin\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"4caace19dd8336929374a313e0959198ebdb1fd37f2de738ddd8795ce2764c29"},{"Tag":[{"name":"mwdb:family=\"BitCoin\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"a1d0727470709c53a1eacbfbf47eb4c9e83aff4c7ebf2161f8d925dd62c9cdaf"},{"Tag":[{"name":"mwdb:family=\"BitCoin\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"9d507d9aa889c7195bd34ac9e7640e82745fb21bf5e436b019623b9720282df9"},{"Tag":[{"name":"mwdb:family=\"FormBook\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"33dd1be2efb1cb9cfaf01bdec2e362aca98d4d4f1f00d540fe0fe2b5a6d875d9"},{"Tag":[{"name":"mwdb:family=\"FormBook\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"fbfc9fa499af65c95ad6cdc5f2176d46ca7eddb6c553e383a65bb572cf00f0ab"},{"Tag":[{"name":"mwdb:family=\"FormBook\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"d3c3519e30e5c8d6485b91f7bd63529ef294c63b5da4f7d059fb4c22cd5c9d4d"},{"Tag":[{"name":"mwdb:family=\"Lokibot\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"b81b502e281bc0b2350909e4d3bc2f0695ca1113d44785780225c2d4e0244ff8"},{"Tag":[{"name":"mwdb:family=\"Mirai\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"49f62f9c67dde65ffadcfe7e4fc4d78c025d33fa1f7a472be6c88a37240d2d77"},{"Tag":[{"name":"mwdb:family=\"Mirai\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"073dbe730b5020c97528cd825e1941c63d43ecd3d8f3fbdde23d6fa8dd0e90ea"},{"Tag":[{"name":"mwdb:family=\"Mirai\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"22212e777fa40e94e655eae55440961e66c693d520a6ee0c12dc5c606080d775"},{"Tag":[{"name":"mwdb:family=\"Mirai\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"80cdfee1db1037db670d2c404350cec825c877d69f5869bcf35d4328a05a7271"},{"Tag":[{"name":"mwdb:family=\"Mirai\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"3d53a88a1e9b282583027ffa81a866bb18459384cdff91e4890af29cf5aa55aa"},{"Tag":[{"name":"mwdb:family=\"Nanocore\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"8de953938b8fb2d222892012da5758cefe50de064f61416c2bc2c6e6f019352c"},{"Tag":[{"name":"mwdb:family=\"Nanocore\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"b434068c48ef1f37b2e102c7f67c636d79c1aca6faf8fd97ef4c8756c1fb388d"},{"Tag":[{"name":"mwdb:family=\"Nanocore\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"7f61bfc4d195ef0e26c209a2f082621879ab5f2aadcaa9feaa9b194586239c19"},{"Tag":[{"name":"mwdb:family=\"Phoenix\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"fce3c127d00d099dba55a850fa03b1a5e978f5ae6c90cb3ea07ac5f8f8df8103"},{"Tag":[{"name":"mwdb:family=\"Phoenix\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"c791924544847b19870bd1d9bab29573058de6b1510c5100b9ce4a44676411e5"},{"Tag":[{"name":"mwdb:family=\"Phoenix\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"143118505b8a8ca7a7d7d75b05701897391b2a232514ab10beac903672ec86f0"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"9f9db3a4b988430fcd073668807718a3153aae590028d5b66dd293d04ea879c9"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"b02b23a290705f3fd5f024b46b484e21aab3ab4ea867fb79b5f426246b7d4d40"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"474bad74c1a84da457da6cfc6ff327690fd3e9a1f04221a15b0de3376f4bd7ad"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"6a10aa633c79bc7e963d64b28807abe57d0b1467db1076e49cff68b86d656db0"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"9b85ce554834aa93d8cfd00d75c9b674907809cbb3e0b6dccdaac5e195a6d854"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"8d5ed9efa77109eb91c78908c4e8e5fa2d60b82a2c3ff11dc42aa2432a0a48da"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"0c237a7eeb1df5c1f9a31e3cbc21bb9542e0250badaaa93b7c0d59d6bdf8126a"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"a8159973b5ac769fa2e1498a9b42de44e7d1dd26b67937190e116ed9c397973d"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"22db4969788773614d4802747159e302361cfaa11895808cc60e0f923ca8d5dd"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"72738f81be8d83dec9101decb353914b506f229b1d3202301fc99608adbe16ee"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"4da68a9a5189377cf9a5c8d8cfccc756a9b77144f9d7acb37f624204134f024b"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"dc514ad8447f86b8a14ca57d66e5737a9ab38fa76f01121204c43548b2207bac"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"4f80f6a6c6b398c7757cb04b0bbccd504a214957c641f389dbcf3073629b5a71"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"c610b719fd263f51b017aae5095c75df54b4ce0721b4359e2e20fea42fe4d741"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"8fc4db3138e9d5d07b70d229373271eba708d5057cba962129eae05a217b9104"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"0bc78b7c85f56566d4a7d5698935a3b4147648588cda45ee1b320fc2489f4c4d"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"bf49dd8a03a975c1509ead7415e935baff9085a649439ec2f3d316e1fc0dbb3d"},{"Tag":[{"name":"mwdb:family=\"RedLine\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"6da198512831ea302b4c7046e80460a1387a2124af241f79037f66d62faaaf65"},{"Tag":[{"name":"mwdb:family=\"Snake\""}],"category":"Payload delivery","deleted":false,"disable_correlation":false,"distribution":"5","object_id":"0","object_relation":null,"sharing_group_id":"0","to_ids":true,"type":"sha256","value":"8b50c938229f25f79543d786b2dd7df127c1fa79ba0f8acea807741aea401310"}],"analysis":"0","date":"2020-10-07","disable_correlation":false,"distribution":"0","extends_uuid":"","info":"Daily IoCs for 2022-01-03","locked":false,"proposal_email_lock":false,"publish_timestamp":"0","published":false,"sharing_group_id":"0","threat_level_id":"4"}}