{ "047f40a6-3fd7-4d59-af30-267f026d27d6": { "event_id": 13981, "created_at": "2023-01-31T09:48:03.647674+00:00", "updated_at": "2023-01-31T10:28:13.728431+00:00", "name": "Campagna Ursnif a tema Agenzia Entrate", "description": "", "subject": "2023013043827", "tlp": "0", "campaign_type": "malware", "method": "attached", "country": "italy", "file_type": [ "xls" ], "theme": "Agenzia Entrate", "malware": "Ursnif", "phishing": null, "via": "email", "tag": [], "ioc_list": { "md5": [ "34ef40251bf0498fb0d07bc628fe6dc5", "009820c5ebc50b2c6c142c43b76d50ea", "c419654969c1c15b835888f018fe42a8" ], "sha1": [ "23e4b0ed9b813fde06d363a9bd2203c51d861bdf", "4b42620fbcb2bfdcca26de9d955a58c2159e28b8", "c60b8038e313f8d243fa56b03803297ce42cde53" ], "sha256": [ "06072724949dd9a1fad58acd4086cde0267cd8e1b2031b90c2d4bf93e249acba", "1b3b1ca6973063eb1db5400f7d484da6556d3c2649be87cd7e1c9b0fcf30518f", "2e8c953cf0ad1a1833baf1aa0c15e9173d6fa5a3815a08a7602b2bb3a58f5d28" ], "imphash": [ "c87688a4056ff5023a5fd00d0e4be4f4" ], "domain": [ "doplertool.com", "lookingerty.com" ], "url": [ "http://91.215.85.193/jerry/" ], "ipv4": [ "146.70.113.161", "91.215.85.194", "91.215.85.193", "23.227.202.77" ], "email": [] }, "email_victim": [], "ioca_version": "1.0", "organization": "cert-agid" } }