{
    "19ec525d-afb7-4b43-935c-f1b9e38755de": {
        "event_id": 12148,
        "created_at": "2022-01-19T08:47:56.853606+00:00",
        "updated_at": "2022-01-19T08:55:26.570054+00:00",
        "name": "Campagna Ursnif Agenzia delle Entrate",
        "description": "zip con password: reclamo#22",
        "subject": "Commissione di osservanza sull'anagrafe tributaria",
        "tlp": "0",
        "campaign_type": "malware",
        "method": "attached",
        "country": "italy",
        "file_type": [
            "zip"
        ],
        "theme": "Agenzia Entrate",
        "malware": "Ursnif",
        "phishing": null,
        "via": "email",
        "tag": [],
        "ioc_list": {
            "md5": [
                "6bc1764fcba9352dc459fcfaca6965c3",
                "947fe47db34a2654fc7aa76ec2bebec0",
                "c0bcc476cdeb5998228d6bd08a6de548",
                "d48642df5dbb50c20ce87e938634e010",
                "4f48695ea7a9ffbd212435d95f2e145a",
                "2a4a0a40b03177e3f614155d2d47f1e1"
            ],
            "sha1": [
                "0b07b01a9d1eda8d5d0b6b96d01b240faea4cd46",
                "0dad129e40cb623050295d901e8ca05c25785f00",
                "6e2d76945861c48a2e4552d87583c1a70e6525a2",
                "1c97c20a9e5c0186e28fbdf2f86d2b4c1e2a0088",
                "035caa219c0b098eecdef7f00f2b72c4a6cbf017",
                "358796d62fb21b6749ae151a4d89a42e64727f80"
            ],
            "sha256": [
                "d7e95fceac8dc9b9f4c29cfadf743643010e3d063a467c54fcfb08c305b98a07",
                "02bb7e5eda106943c37400103a651d11d1ebfd5f4b0a550874328c2c82340923",
                "f51995fc718d59cd364099fe0a3ae414d2b020156fee5a9fc9f69ab5eb01c869",
                "2388c14754eebf7234f736181621312884920d7963efe956b796a6c0f0c59649",
                "10fe2acf1675e9e1e684a9165374fa37f30623f71c9d10d45029c098b7805cf8",
                "ba70eef4ed848938610c8600c6b1ce359e7335acf03f2a796d1142090f7d8354"
            ],
            "imphash": [
                "7790023abe9e706b7ca9941ca04b698c"
            ],
            "domain": [
                "www.nnnnnn.casa",
                "museumistat.bar",
                "nnnnnn.casa",
                "www.nnnnnn.bar",
                "nnnnnn.bar",
                "liquidazioni.bar",
                "linkstat.bar"
            ],
            "url": [
                "http://museumistat.bar/drew/",
                "http://liquidazioni.bar/status.dll",
                "http://linkstat.bar/index.php"
            ],
            "ipv4": [],
            "email": []
        },
        "email_victim": [],
        "ioca_version": "1.0",
        "organization": "cert-agid"
    }
}