{ "dd77508b-fd22-4f15-9f9d-5ecd53ddd435": { "event_id": 14081, "created_at": "2023-03-01T12:10:20.249601+00:00", "updated_at": "2023-03-01T12:18:27.285435+00:00", "name": "Campagna Ursnif a tema Agenzia Entrate", "description": "", "subject": "Ricevuta di pagamento - Transazione n. XXXXXX", "tlp": "0", "campaign_type": "malware", "method": "attached", "country": "italy", "file_type": [ "xls" ], "theme": "Agenzia Entrate", "malware": "Ursnif", "phishing": null, "via": "email", "tag": [], "ioc_list": { "md5": [ "0c960307b8659514ecc0bbd918601217", "7eef266a2f5ec24445d5e1beb4506d5b" ], "sha1": [ "bbec96a3fc89745befbab1c9bf6b9bba65be8fb3", "7a09b61a34287032952c1f4b13fa9c4a22321199" ], "sha256": [ "d427864741cd14ec923c6aaa663d0e8c5a71019e3d1fbb25df2a386d1354463e", "104763a142c5730f2e27244181e40447d194545ffa327c75e8c727ba28cea425" ], "imphash": [ "8b2be6e82e1a2f5b6a6ac4ed9979b98b" ], "domain": [ "fireclier.com" ], "url": [ "http://94.140.115.195/c64.jpg", "http://94.140.115.195/c32.jpg", "https://cdn.discordapp.com/1078994957249040426/1080101930178719814/s41.iso", "https://cdn.discordapp.com/1078994957249040426/1080101999590244393/2.iso" ], "ipv4": [ "94.140.115.195", "46.30.45.60", "91.215.85.151", "157.254.194.151", "23.106.124.232", "135.148.67.88", "157.254.195.117", "159.100.30.187" ], "email": [] }, "email_victim": [], "ioca_version": "1.0", "organization": "cert-agid" } }