{
    "532a052e-ab13-4db8-a4a3-48bce14975b0": {
        "event_id": 11383,
        "created_at": "2021-07-21T15:33:41.541029+00:00",
        "updated_at": "2021-07-21T15:33:41.620181+00:00",
        "name": "Campagna Hancitor veicolata in Italia",
        "description": "veicola FickerStealer",
        "subject": "Notification from DocuSign",
        "tlp": "0",
        "campaign_type": "malware",
        "method": "attached",
        "country": "italy",
        "file_type": [
            "xls"
        ],
        "theme": "Documenti",
        "malware": "Hancitor",
        "phishing": null,
        "tag": [],
        "ioc_list": {
            "md5": [
                "4fcb584cd86c3a04b7e3357922204cb5",
                "338378927b00cbe6aa8c6620057755f9",
                "24190cd699631d16521dfb588b2571a3",
                "270c3859591599642bd15167765246e3"
            ],
            "sha1": [
                "e227a8a338166dc97e360ca9cddda5e007079c58",
                "3fd7b142d7e0dc0ae8350197585c2d0744027c1c",
                "546a86929e82babd0ee6f970d7729e3bf6a14698"
            ],
            "sha256": [
                "99c4b9083ed613bc38904eec3e37d24d3ca092067ee54e373cc3c8d6339857a6",
                "e746a6d562555f4d2f840727c9a9f8967dddcf100bd8d5f48a6209b76dd43375",
                "fe62ee36d2ee6bedf3181beb5880115696396a51fe65870ade1a0af60a22f128",
                "dee4bb7d46bbbec6c01dc41349cb8826b27be9a0dcf39816ca8bd6e0a39c2019"
            ],
            "imphash": [
                "cb664df5fa904736e15ac44ff006d780"
            ],
            "domain": [],
            "url": [
                "http://anithedtatione.ru/8/forum.php",
                "http://falan4zadron.ru/7hsjfd9w4refsd.exe",
                "http://pospvisis.com",
                "https://bahujansangam.org/insaneity.php",
                "http://feedproxy.google.com/~r/niqab/~3/SvG763Rcjf8/contagion.php",
                "http://wiltuslads.ru/8/forum.php",
                "http://feedproxy.google.com/~r/ddebvhnpl/~3/r564Ba1JvaM/haggle.php",
                "http://feedproxy.google.com/~r/hvkrnawm/~3/A_mGDDju4y8/insaneity.php",
                "http://thervidolown.com/8/forum.php",
                "http://feedproxy.google.com/~r/xrhjqrnh/~3/QrS209hUWag/hoping.php"
            ],
            "ipv4": [],
            "email": []
        },
        "email_victim": [],
        "ioca_version": "1.0",
        "organization": "cert-agid"
    }
}