{
    "ec1f9d1c-1bbe-43d5-ae47-c387143e2154": {
        "event_id": 11573,
        "created_at": "2021-09-20T08:55:25.305273+00:00",
        "updated_at": "2021-09-20T11:07:16.071304+00:00",
        "name": "Campagna Ursnif italiana BRT",
        "description": "",
        "subject": "BRT - Avviso affidamento spedizione",
        "tlp": "0",
        "campaign_type": "malware",
        "method": "attached",
        "country": "italy",
        "file_type": [
            "xls"
        ],
        "theme": "Delivery",
        "malware": "Ursnif",
        "phishing": null,
        "tag": [],
        "ioc_list": {
            "md5": [
                "9a024750ca83441f6a1eb0357207f832",
                "743e07c4c2ccb80ab58c041d6388e685",
                "85ab6c35926a052f491728055dae0872",
                "79832148a283baaf88d8270158cdddde",
                "242ca0c987f3b4ab2083131df6435527"
            ],
            "sha1": [
                "c5af42bab5d14e63c1cc257989ad25337c8f137e",
                "98451fe991746d4fb0ecade9a0bd318ba4eb9b6a",
                "2f9955c3b27932a7b35436dc384d687c63a987ee",
                "17974685ecf2d2820e1877747a41b4506c1c057d",
                "b74a83fff39fe91097e502ae214e8e9ce998e4b1"
            ],
            "sha256": [
                "1b13ca64d43c95a3e8fea7a7c41fab2d1a0bcfe80575145d4342c3672428f307",
                "67ef95841bc7c2beb6b026a121d69305eb2a4d424133e92c61da8cc6ace62f55",
                "40e053cd684acf65d6b09d4fef7b227c0a72ddf616585a6445c18775fd651af6",
                "5657bb527b62a7a83fb6542f2f80f50d0574dfa0b26a26ff26deb9029687b19a"
            ],
            "imphash": [
                "cd2b2accf6f5647aaee6930c65d7bf5b"
            ],
            "domain": [
                "nkdlooooalksloooo.nl",
                "2e5118d15a18ae852bf94d91707ff634d9d8354fef492f",
                "jdkloooqppwopppp99.nl",
                "jkdoiloooooo1.nl",
                "claritymodules.nl",
                "kloooplooloaaa.nl"
            ],
            "url": [
                "https://flashgran.com"
            ],
            "ipv4": [
                "193.239.84.205",
                "193.239.84.207",
                "193.239.84.206"
            ],
            "email": []
        },
        "email_victim": [],
        "ioca_version": "1.0",
        "organization": "cert-agid"
    }
}