{
    "487a5f08-34b0-48c7-856c-39647ecf1052": {
        "event_id": 16836,
        "created_at": "2024-09-16T08:40:59.417535+00:00",
        "updated_at": "2024-09-17T07:09:56.129812+00:00",
        "name": "Campagna Vidar (errata) via PEC",
        "description": "il payload non viene scaricato, la pagina presenta Basic Auth",
        "subject": "Comunicazione di richiesta pagamento della fattura a NOME COGNOME.",
        "tlp": "0",
        "campaign_type": "malware",
        "method": "linked",
        "country": "italy",
        "file_type": [],
        "theme": "Pagamenti",
        "malware": "Vidar",
        "phishing": null,
        "via": "pec",
        "tag": [],
        "ioc_list": {
            "md5": [],
            "sha1": [],
            "sha256": [],
            "imphash": [],
            "domain": [
                "excite.it"
            ],
            "url": [
                "https://excite.it/q87sppx1vtrk",
                "https://excite.it/8k7egkwzh46l",
                "https://excite.it/tv2c7q2nqizs"
            ],
            "ipv4": [],
            "email": []
        },
        "email_victim": [],
        "ioca_version": "1.0",
        "organization": "cert-agid"
    },
    "7875d408-8ce7-4ece-8fa7-f99f6e43a128": {
        "event_id": 16853,
        "created_at": "2024-09-17T07:07:14.308496+00:00",
        "updated_at": "2024-09-17T09:30:32.598163+00:00",
        "name": "Campagna Vidar via PEC",
        "description": "",
        "subject": "Ultima richiesta di pagamento finale per NOME COGNOME.",
        "tlp": "0",
        "campaign_type": "malware",
        "method": "linked",
        "country": "italy",
        "file_type": [
            "js"
        ],
        "theme": "Pagamenti",
        "malware": "Vidar",
        "phishing": null,
        "via": "pec",
        "tag": [],
        "ioc_list": {
            "md5": [
                "9091cf91eb2e404959c334ff74ef9099",
                "6c206bf6258fedac7c89bcff7ad2e671"
            ],
            "sha1": [
                "c0c4df36859b0189d190608bb085e7fa5eef5524",
                "0e35875af118832f75e8d7009a60926c5291b611"
            ],
            "sha256": [
                "25ddcd652501fd57617a84a9c1d58ec4cb7f2290654e47f78c9666b9d9a75c0a",
                "c01795aa813e9584cab8d713dc668b14cccc1264e01637d0d8b0595d313af835"
            ],
            "imphash": [],
            "domain": [
                "vendenostucasa.com",
                "asuhvziuez.top",
                "dhdhlceabcgmnil.top"
            ],
            "url": [
                "http://asuhvziuez.top/1.php?s=mints13",
                "https://iladx5psxtqn7zwes16ws2ctgopm7bv7b7cqo9x08q613.vendenostucasa.com/ifot08",
                "http://dhdhlceabcgmnil.top/v91fgl7jikhtr.php?id=ODZKDRGV&key=85481297591&s=mints13"
            ],
            "ipv4": [],
            "email": []
        },
        "email_victim": [],
        "ioca_version": "1.0",
        "organization": "cert-agid"
    }
}