{
    "697a6952-1b66-4255-9a3f-e9b29e121e68": {
        "event_id": 12505,
        "created_at": "2022-03-07T08:21:41.062011+00:00",
        "updated_at": "2022-03-07T13:32:38.538609+00:00",
        "name": "Campagna Ursnif MISE",
        "description": "",
        "subject": "Circolare 07_03_2022 , informazione aiuti per le societa",
        "tlp": "0",
        "campaign_type": "malware",
        "method": "attached",
        "country": "italy",
        "file_type": [
            "zip",
            "hta"
        ],
        "theme": "MISE",
        "malware": "Ursnif",
        "phishing": null,
        "via": "email",
        "tag": [],
        "ioc_list": {
            "md5": [
                "23aa5d9fd217e604d8b2d1ab305e4bf2",
                "1bf3b0f0bb3c5d9973a5c810931415cc",
                "3e3d8896712c945eef68ef00186027f3",
                "20a281a3d328b5dcf7f2011815c717b9"
            ],
            "sha1": [
                "13f32656db2fc7a8b6de088dd5e2620f89481d23",
                "2400df5a3fa04d9143fbabef6a0970b8fae1e64b",
                "e71af67c7dc3146499f1fa68b92286b1da556d9c",
                "03a0597744b623d4c9c26b1470324f78315b4fe3"
            ],
            "sha256": [
                "fe2a28f8b0e7e846c5f8937fea1444dd0efe9c9d05539f85e9e9d03e5261addd",
                "9fcaf7ae5e2b5e2a4e7b34c37b5f6f1a539c07bc258379314b7590582b859147",
                "6cb1b01c6f9683879750785381afb7c7f84d6264dbc91b4eeb7f231b9f7996e0",
                "1c94ff552101b549d89207a0ed966aa34041ec7f25db6869f13557540b480f9f"
            ],
            "imphash": [
                "e3a468e33131e43ff6cb0ed3ba60251f",
                "56aa77d2836dd63b5ae5aeeddf1ff659"
            ],
            "domain": [
                "customlines.top",
                "premiumlists.ru",
                "customlink.top",
                "forumlines.top",
                "linkspremium.ru",
                "agenziamail.online",
                "agenziamail.tech",
                "linespremium.ru"
            ],
            "url": [
                "http://customlines.top/forum.txt",
                "http://servicelinks.ltd/",
                "http://customlink.top/forum.txt",
                "http://customline.top/forum.txt",
                "http://servicelinks.top/",
                "http://forumlines.top/",
                "http://agenziamail.online/images/",
                "http://agenziamail.tech/images/",
                "http://linespremium.ru/images/"
            ],
            "ipv4": [],
            "email": []
        },
        "email_victim": [],
        "ioca_version": "1.0",
        "organization": "cert-agid"
    }
}