{ "303dbb68-4477-425e-aa9c-b40b94732f68": { "event_id": 13582, "created_at": "2022-10-04T09:04:40.759206+00:00", "updated_at": "2022-10-06T10:20:15.831516+00:00", "name": "Campagna Blustealer aka a310Logger italiana", "description": "", "subject": "Bonifici (SWIFT)", "tlp": "0", "campaign_type": "malware", "method": "linked", "country": "italy", "file_type": [ "iso" ], "theme": "Pagamenti", "malware": "BluStealer", "phishing": null, "via": "email", "tag": [ "PureCrypter" ], "ioc_list": { "md5": [ "559308153e8716d398c70573ab598c3e", "1bc86fd799e8ee48a45b74ca01d536aa", "478fa2651379b17d7e979af2354b0b0c", "6363395370e30df891a2c52dbf29aa48", "011ede3136753edc4b1982a990c10caa", "aa183e496fed7c426b3fbf55c78139df", "038fe0881ec1839ad146fe976dddc6dc" ], "sha1": [ "1235966791eea756ce7e5516bdbc071859c0560d", "1ce4f20c688408eb9c074b4385ad96dc15931b19", "a12b6a15457e46502b0748f89ccf4a963082f809", "8565f4e3539abf37b626e5a70e93251b51486368", "c3201128b90e69e5a76cbc28ff848f5b79a38a3f", "567a1839fb2e69b1f3959f368262665fd2730836", "1518de4f8746f6f975eb995d79ec60b261845895" ], "sha256": [ "d732fa055241a61b46f4e2b867d41916bf66aa0c4030c948b7cfcf1b567c33cc", "46c448666ad8300643c8f42807cac9db14ba882c23eb45ce4aac4f4284fc0cb7", "8662c5563163a4bfd38e68eee91831b3c07e30c022ec54bc58c381c53bb1f679", "384722f5f4ddf25cb47145b8848968dc6477121d4fbf05058c832c5a0f5b171e", "4a2c6d08f5580e2d988b1d1ae967099103468c6db0868b4596b82b3e4aa7e331", "4ae02902dc6f3ea9a2801aebdc9099e4766c4190269cb9d5c8ec872f2c2229f2", "1bb31625967f178fe19619375912c6f805c8882d1bb4a5c2dbfed7a657f58eca" ], "imphash": [], "domain": [ "dorkedmail.shop" ], "url": [ "http://45.155.165.63/br1/loader/uploads/Ref407582_Dpgosegj.jpg", "https://files.catbox.moe/kzq7t7.iso" ], "ipv4": [ "45.155.165.63" ], "email": [ "health@dorkedmail.shop" ] }, "email_victim": [], "ioca_version": "1.0", "organization": "cert-agid" } }