{ "14beacd2-5110-462d-b243-59a1f0452b80": { "event_id": 10830, "created_at": "2021-03-11T12:13:28.543568+00:00", "updated_at": "2021-03-11T14:22:24.620101+00:00", "name": "Campagna Lokibot italiana IntesaSanpaolo", "description": "", "subject": "Re: Bonifico", "tlp": "0", "campaign_type": "malware", "method": "attached", "country": "italy", "file_type": [ "zip", "iso" ], "theme": "Banking", "malware": "Lokibot", "phishing": null, "tag": [], "ioc_list": { "md5": [ "a7a6d213a10c65138a08b38fbe4aeff2", "8fa3691882c6d39642f187e0b515ab51", "1f3042b471fdc9570578e239aec6b783", "f3195cec271b814d5685e87205de5bd5" ], "sha1": [ "d3e34d17680016db8159df7c4432604ad426a0c8", "086d9517a70094846ef5ed49d8270b772fe82c8c", "30c2c8524ef9ca0731b562bbf96fbb62aea11ee6", "5b567334a945f867122bb9d8ded4e6523df367b1" ], "sha256": [ "208bf5bd921730999c9b7a3163f8d56e31590b0219bf889df8c06026fcc40732", "f3321fe61d09a3df23c3568956a9dac9bf718c7d097eee209b79a7e1a6f908b9", "2d63aea1476a560c8e47b6bd283fe2eb7be382fd0cc659ad947be16de8781b7f", "2feb2179db05739155451570d3d7e22378abf0f3342db3c1388380aff66f7b15" ], "imphash": [ "7275cc361160acb1b7fe9f93d4ca500a" ], "domain": [], "url": [ "http://gilardoni-it.xyz/MY/five/fre.php", "https://cdn.discordapp.com/attachments/815826525907582980/819517149865050122/Eorfw" ], "ipv4": [], "email": [] }, "email_victim": [], "ioca_version": "1.0", "organization": "cert-agid" } }