{
    "ea23f506-ce27-46b8-867b-1f7d37459f54": {
        "event_id": 12707,
        "created_at": "2022-04-08T07:50:54.334991+00:00",
        "updated_at": "2022-04-08T10:55:55.041489+00:00",
        "name": "Campagna SpyNote APK ai danni di Poste Italiane",
        "description": "sicurezza-posteitaliane.apk\r\nSpyNote v.7.0",
        "subject": null,
        "tlp": "0",
        "campaign_type": "malware",
        "method": "linked",
        "country": "italy",
        "file_type": [
            "apk"
        ],
        "theme": "Banking",
        "malware": "SpyNote",
        "phishing": null,
        "via": "sms",
        "tag": [],
        "ioc_list": {
            "md5": [
                "4fe2d12c67a7f5360dd6d57ce2402e6a"
            ],
            "sha1": [
                "88f57f24bd29231d6e5d6ac6c326168503afb51b"
            ],
            "sha256": [
                "c3ee6bc6f4e23981757b452c7b0236048a48b9c875f4d5e25266f8262fe208c5"
            ],
            "imphash": [],
            "domain": [
                "ksnews.info",
                "8.tcp.ngrok.io"
            ],
            "url": [
                "https://www.ksnews.info/sicurezza-posteitaliane.apk"
            ],
            "ipv4": [],
            "email": []
        },
        "email_victim": [],
        "ioca_version": "1.0",
        "organization": "cert-agid"
    }
}