{
    "5a415cb3-f1bc-4766-bd80-09cbcfa0339d": {
        "event_id": 18137,
        "created_at": "2025-03-25T11:05:02.875065+00:00",
        "updated_at": "2025-03-26T08:20:46.344867+00:00",
        "name": "Campagna italiana AsyncRat via PEC link a JS",
        "description": "",
        "subject": null,
        "tlp": "0",
        "campaign_type": "malware",
        "method": "linked",
        "country": "italy",
        "file_type": [
            "js"
        ],
        "theme": "Pagamenti",
        "malware": "AsyncRat",
        "phishing": null,
        "via": "pec",
        "tag": [
            "MintLoader"
        ],
        "ioc_list": {
            "md5": [
                "a3d968c813578ba880e56f830b9e0c1b",
                "e1722c964526159a48f86373b20484f0"
            ],
            "sha1": [
                "3870e38f7304551ff7be8d2db2328ec5781a92fb",
                "0f0a986ceaa26c6ff21e98144119ff5a4d0e0de2"
            ],
            "sha256": [
                "5c3555e3b74e3010777c6ec069cb4fef79b534b4e5ba1fdbe57b0bdaf770efd5",
                "51c39156bf9ac3c714772ccad4102031096d2d1586a83231995c01102710bd69"
            ],
            "imphash": [],
            "domain": [
                "kpopshopee.com",
                "laziedud.com",
                "lakelandbuildingservices.com",
                "lentesxmayor.com",
                "legaltechinalgeria.com",
                "land-experts.com",
                "kldtrading.com",
                "thefinalwarrior.com",
                "ebmmnhkldkhdlbk.top",
                "terramiahampton.com",
                "mgibfgcefbdahig.top",
                "herophombyre.top",
                "dhyt77wt6nejou3j3b3fd8nh8hvt6me6x8yburw.terramiahampton.com",
                "khemtittravel.com",
                "kuduworx.com",
                "kikikosmetiks.com",
                "kumarshailesh.com",
                "khidmapluspro.com",
                "killerlingerie.com",
                "laptopexporter.com",
                "klamertcustomhomes.com",
                "kootenaiindustrialsuites.com",
                "lazyverse.com",
                "learnersbschool.com",
                "kroughlaw.com",
                "ksshirts.com",
                "thecoolestaccompany.com",
                "legalghid.com",
                "kingdomentrepreneurincubator.com",
                "lazywbarn.com",
                "labordistrict.com",
                "thefuturecannotbetrusted.com",
                "terpenaid.com",
                "leadsandsalesfunnelsystem.com",
                "khaleejlife.com",
                "krisztinascreams.com",
                "kinglawo.com",
                "kidsfreesip.com",
                "komikofilms.com",
                "kidthingy.com",
                "laurencebouy-sophrologue.com",
                "sweetcalmcbdbloodsugargummies.com",
                "kinder-nation.com",
                "koikards.com",
                "legalcryptocasinos.com",
                "techiesaavy.com",
                "kingcakeaday.com",
                "kwwholdings.com",
                "kolkatathunderbolts.com",
                "kharagny.com",
                "lavandagardenia.com",
                "lakestcharles.com",
                "teknogentsia.com",
                "ksdfdev.com",
                "kikiwear.com",
                "kmaxleathers.com",
                "lethekarma.com",
                "laurelandhardyimages.com",
                "texasboatandrvstorage.com",
                "thekaffeinekiller.com",
                "ladygrit.com",
                "thecoffeemat.com",
                "kimopress.com",
                "ldvbeats.com",
                "textocar.com",
                "thearenaalliance.com",
                "sweetworldinc.com",
                "landscapesantamariaca.com",
                "theinvestingnetwork.com",
                "thedetailingspecialists.com",
                "thaicucdao.com",
                "lapaauca.com",
                "lalbhatia.com",
                "kingopay.com",
                "letherox.com",
                "klaretaal.com",
                "khojees.com",
                "krozerco.com",
                "kutubshop.com",
                "kidspiritliving.com",
                "khanandkids.com",
                "lakeorionplumbing.com",
                "kyleesmith88.com",
                "knowyourdaddy.com",
                "learnbetterwithai.com",
                "khoratek.com",
                "termiteshelp.com",
                "thediscoape.com",
                "kondeycoralgarden.com",
                "lebworthy.com",
                "task-board.com",
                "komotonekobox.com",
                "klamathfallsclones.com",
                "tarasaraswati.com",
                "klimtal.com",
                "kindafree.com",
                "lbcircus.com",
                "kooters.com",
                "latamcor.com",
                "lakesidepoolsandspasaz.com",
                "kschoener.com",
                "kunleamoo.com",
                "lankahealthinfo.com",
                "landscaperbridgewaternj.com",
                "kisuites.com",
                "kismetinsaat.com",
                "tdl4llc.com",
                "taughtbyapro.com",
                "kknovelty.com",
                "lancedanielsconcrete.com",
                "lawbirdy.com",
                "labdealz.com",
                "thelazydayz.com",
                "leveyphotography.com",
                "kubiedoo.com",
                "laleurre.com",
                "kisstutorials.com",
                "lasix40mg500.com",
                "le-brush.com",
                "kingdomglobalsvcscarpetcleaners.com",
                "konshow882.com",
                "landscaperbeaverton-or.com",
                "kungfuhighlandpark.com",
                "kirawoods.com",
                "kravebrewhouse.com",
                "kplowplow.com",
                "terrypounds.com",
                "lavoltus.com",
                "kunokhar.com",
                "tarablara.com",
                "laurelandhardylaughtoons.com",
                "lascites.com",
                "lenderless.com",
                "kjintlafricanmarket.com",
                "khalismarket.com",
                "kymgable.com",
                "kinkfits.com",
                "khalissmart.com",
                "kinoflo2.com",
                "latermoney.com",
                "texiola.com",
                "thailand2023.com",
                "leavefree.com",
                "ladyjblog.com",
                "learningcurveapp.com",
                "thegroundingofgroup6.com",
                "kidsboon.com",
                "learningworkstoday.com",
                "leveragingyourhomesequity.com",
                "konstantinosioannidis.com",
                "kstarnew.com",
                "kinder-nutrition.com",
                "legalaat.com",
                "labwaterpurificationsystems.com"
            ],
            "url": [
                "https://dhyt77wt6nejou3j3b3fd8nh8hvt6me6x8yburw.terramiahampton.com/PaMgpF09NE"
            ],
            "ipv4": [
                "82.29.184.159"
            ],
            "email": []
        },
        "email_victim": [],
        "ioca_version": "1.0",
        "organization": "cert-agid"
    }
}