{
    "905ca4a8-5f3e-4f9f-8f0c-651650b7ff61": {
        "event_id": 19053,
        "created_at": "2025-06-23T17:33:17.102309+00:00",
        "updated_at": "2025-06-24T15:05:35.730039+00:00",
        "name": "Campagna XWorm",
        "description": "",
        "subject": null,
        "tlp": "0",
        "campaign_type": "malware",
        "method": "linked",
        "country": "italy",
        "file_type": [
            "tar"
        ],
        "theme": "File sharing",
        "malware": "XWorm",
        "phishing": null,
        "via": "email",
        "tag": [],
        "ioc_list": {
            "md5": [
                "ae08491a15711b82fc32873b9c730991",
                "77b12de6d5e8b2ba87ab8d7deeb7f21f",
                "3a086603c7392a2d4e8f7ec451bf3285",
                "7c61974448ebca8c624c024f3b76ae12"
            ],
            "sha1": [
                "8a5ec4d686cf233b6f950cbca800c247e9851496",
                "5b6f5a2a14cfb1b088095f9be10ed7a2ce1afddb",
                "a56ccd7c7bfd0036daf714a0f857b405d527fad3",
                "bef3b24c98819019e3a2173b19efd7ea23e4c5ab"
            ],
            "sha256": [
                "d965f50abd11d24df258bb9c544c8719b82fa92a8b1dafdb65099824e805c4d1",
                "0190b9f0694ae659f5d83bb0dcbeafac9de1244a59a5550ebf959c3bf2098c47",
                "bfc12d4d2462c919ff225cab92df822b5f74ace52b2b8fe8c10d5024170b25ca",
                "95921be9c01fa8f78dd2f1ebee10c76dd7a996c55f57c0d7a4f3561faa8727c1"
            ],
            "imphash": [],
            "domain": [
                "privatedns.huishengzhang.com"
            ],
            "url": [
                "https://webmail.aruba.it/newuismart/cgi-bin/ajaxfile?ACT_FIL_DL=1&PUBLICUID=@1.NmhhRVpyZlhSQldEbXFBRm54VjFwSk8ybzlhdHA0OWI2dWN2YnIxMTNjdnJnUnd1RGQwOTU2NDBCeEU4TzRyYw==",
                "https://webmail.aruba.it/newuismart/cgi-bin/ajaxfile?ACT_FIL_DL=1&PUBLICUID=@1.NmhhRVpyZlhSQldEbXFBRm54VjFwSlZXdTN6dVlxTHJSL1JIbVNUS1h3MXZwUmpxMlozVDRYbkZaV0VQTmlTRQ==",
                "https://webmail.aruba.it/newuismart/cgi-bin/ajaxfile?ACT_FIL_DL=1&PUBLICUID=@1.NmhhRVpyZlhSQldEbXFBRm54VjFwRHB2TjJmNzJOVTR2a213MUJka09peDcrc2hRRU1pcElGcmFRVFVaNmI3WA=="
            ],
            "ipv4": [],
            "email": []
        },
        "email_victim": [],
        "ioca_version": "1.0",
        "organization": "cert-agid"
    }
}