{
    "66a6d78a-1435-4413-b0bd-509859002aaf": {
        "event_id": 26367,
        "created_at": "2026-09-24T08:35:02.196708+00:00",
        "updated_at": "2026-09-24T11:30:00.436104+00:00",
        "name": "Campagna StreamRat diffusa tramite phishing a tema Ministero della Salute",
        "description": "",
        "subject": null,
        "tlp": "1",
        "campaign_type": "malware",
        "method": "linked",
        "country": "generic",
        "file_type": [
            "apk",
            "bat"
        ],
        "theme": "Aggiornamenti",
        "malware": "StreamRat",
        "phishing": null,
        "via": "email",
        "tag": [],
        "ioc_list": {
            "md5": [
                "cbc1517f1bf90fbb0b14de5bb9b86033",
                "4a9a9c7d729ada38d9b00a143094595c",
                "bbbd18336918a4aec56860d47f956b61",
                "b8c1b1ae890701a255c5672af8dfe626",
                "53e096b113d041f716122d4e9d4bd0f2",
                "093862c9d9e6b2295651902d33230f6f",
                "75150dd6814448ac3ab355decbb36476",
                "eb47a3637cbbe3973094df3730eea540",
                "6fc18aef1e82b3353712b793d85060f0"
            ],
            "sha1": [
                "50c8ecb409b4b68f248a00434853e95b998299bf",
                "a25411105810a75885926c3d69ae33aa6951751f",
                "4487e5ab05aa9e73a9dc7a0fc9a899f14c885f1a",
                "c50d83c5a287d13aaab51939e91872356ec28bb3",
                "7a394d3b013f6392eaa4431aa215883988a8863a",
                "99025a47ecaad467cfef784e010b1f85c1ef3f57",
                "2210c194683a8a75196fba1e8c6986636934c124",
                "1f1fe9afc3b63f2b3325be2c9d5c1583ffb3a20d",
                "df5803301e0163e3bf6d7e22e3f1d06241dbddf1"
            ],
            "sha256": [
                "6a297ef7357b07886ad14cab61b88222c95616420c0d36cef3746511f346fb92",
                "f4115181a5ee8192dd6d5a180e7b5979fe262a76c48dcc4f6dc889c296322d59",
                "d3a7938d10a6cd114daa501a05d89f9db7bf6f396fa4d72def92bec08cd7bacb",
                "52c18aa6496d3e522aa274924c4919c556cf174054e2da7f7777e4e888011f9d",
                "e38a08f7c8936c46453ddd8f06b0eddd56fc11967c09b4ecae6e78f1e2a41f3b",
                "c28f5f558213d986652296d5ce9d91e12cc5cd3108b8dfff36b0e763ff31b9c2",
                "531349c5569593443346d7f143361b550fd5d38229f711624b8bfec0c09536a4",
                "bd183756b5512f7caf908c3fc1ecaad93ef2db7af24a74713c3abcdceea18900",
                "7b38338df3a51b13cc1ec0e7d4d6c9b1d1492cdb7e9b8cda1de7462cfd2257c2",
                "ff72f3c0767a7bae48fcd9e343ec8d0242425bf212dc45e30c1338af8039286c",
                "af46824055a717ff316302dce903db2a11f51dda04c4792b9edc53ed9daee0ad",
                "6215f00baa4bf18bab5792fc796bfc5555917240f14f7c7e672d956888d75c96",
                "32beb0ba7e5050f3b78e06b71de10a4a149196bdbbca65be6d5030002fab7a7e",
                "7175ec90d224c47132e7fb2dee114995d7bcf665bafa59a7a761a9be1f03ed8e"
            ],
            "imphash": [],
            "domain": [
                "crypto.com.v4476.com",
                "salute.gov.it.v4476.com",
                "meet.google.com.v4476.com",
                "google.com.v4476.com",
                "v4476.com",
                "it.v4476.com",
                "com.v4476.com",
                "gov.it.v4476.com"
            ],
            "url": [
                "https://salute.gov.it.v4476.com/SSN.apk",
                "https://salute.gov.it.v4476.com/",
                "https://crypto.com.v4476.com/CryptoV4435.apk",
                "https://meet.google.com.v4476.com/GoogleMeet%20Update.apk",
                "https://meet.google.com.v4476.com/",
                "https://crypto.com.v4476.com/",
                "https://salute.gov.it.v4476.com/api/telegram",
                "http://51.255.9.163/images/onhnfke.txt",
                "http://64.224.17.115/pictures/2.jpg",
                "http://51.255.9.163/images/2.jpg"
            ],
            "ipv4": [
                "193.32.2.245",
                "45.147.28.59",
                "51.255.9.163"
            ],
            "email": []
        },
        "email_victim": [],
        "ioca_version": "1.0",
        "organization": "cert-agid"
    }
}