{ "f258157a-16b2-4f4c-9c27-6fcc2a7f7fff": { "event_id": 12089, "created_at": "2022-01-10T11:30:03.697628+00:00", "updated_at": "2022-01-11T10:13:58.435951+00:00", "name": "Campagna PEC sLoad", "description": "E-mail in italiano che fa riferimento all'invio di una fattura elettronica. L'e-mail contiene i riferimenti anagrafici della vittima con lo scopo di confondere la vittima al fine di indurlo ad aprire l'allegato. Questo \u00e8 uno zip con due file pdf e jpg finti ed un file WSF che contiene il codice del droppper.", "subject": "L'oggetto consiste nel nome e cognome della vittima.", "tlp": "0", "campaign_type": "malware", "method": "attached", "country": "italy", "file_type": [ "zip", "wsf" ], "theme": "Pagamenti", "malware": "sLoad", "phishing": null, "via": "pec", "tag": [], "ioc_list": { "md5": [ "82645fcd6721b92e2448414377ac5fae", "9886453abbce39327262c689ce5c212e", "1b459f1bd36b56a51f57ec9e15498e83", "114f82c8305f162f3b9c5aaf59b9f131", "cf750a44f826c0b07c7cd053defa9763" ], "sha1": [ "988cc1369caf09a8c5d087dbc3d9b9d72b54be55", "4f47899b33b02668aa079e57151b43c5e686a07d", "55d7d910b90f13a53bf522ec2cf5a9bfd24c5de6", "a22a581e097e249f7d9a912b74b58ffafe4ef1dc", "d2e47ad0b36c8a438499eecdbc164a1809069936", "62586e873fd8dd48262124c6d1949d5bfb072c1f" ], "sha256": [ "85d8e8fbfa899b3bee81589a80d61640d61f50ad299a8cd63fdfc598fea2de05", "01a563208abd9c8832db82b2548fba9dd2fa15c8b5269b553622c7ce00481819", "a216abc00c8980a51a4f7de26c8cbd83d9e0348a6646abff85c6caafe907da4d", "d66196210b61851c3dd27356d60e850f4f7f3913443be31c150d0301ab1d7dd4", "8617823458e82b18cabbc5b9c3cfe3ba82a6426642d96584e8b48bd259e82410", "99187eb9ddda0224dc41a99d7b07a648774f49a1a51232c817bb82ae11e972ce" ], "imphash": [], "domain": [ "nutrizehealth.com" ], "url": [ "https://nutrizehealth.com/cave/BRSLGU37L01G999U/first.txt", "https://nutrizehealth.com/cave/", "https://ghujnyuo.eu/topic/", "https://jhubyvgr.eu/topic/1bc2036dc6f1e2829e0e1dc8a7cd717f" ], "ipv4": [], "email": [] }, "email_victim": [], "ioca_version": "1.0", "organization": "cert-agid" } }