{"Doc.Downloader.Emotet-6744157-1": {"category": "Downloader", "coverage": {"AMP": true, "CWS": false, "Cloudlock": false, "Email Security": true, "Network Security": true, "Threat Grid": true, "Umbrella": true, "WSA": false}, "description": "Emotet is a banking trojan that has remained relevant due to its continual evolution to bypass antivirus products.", "hashes": ["14e4a394fa5994ce2ff8047f2bac46b385a5a6510205e4c65930c0af413c935e", "500a319207a744b8d20c4bccb1c0b5b4f2fafc228cf05dd6bd2cb19b02444f58", "53402a103a73ae604657be6e171cc017957fa1f3638fcbe976ca3af694ba0b7f", "6bc0481d7b339a55f6493bfba40bca7819a3799a39b5beaf09490aafed45bc24", "82448e012786f528fb7946640e84c6beadf34de21130a69bdc1538d4cc8cddf2", "8d74c083778f9511c01916d183301686ac09a7011bbfa8f744a5816dc244340a", "94de7534a45275daa06e0189c6bd06ca41176b3da93303b5fae677ae92cbb92d", "a2d01ed549ffcdd8de59939e7fae64d1455309ab7b8cbbaa6aae8f626803319b", "a692ae61c540f3138866e74cd98aab9b368fdfe36233ccc408549a69a5a2c86f", "dca6675566e48fbab773ad8c64504b809f8323ca48a8771d0a80ad7ccea1a2de", "eb6b88afe59ff4fe3068586f6eea31a174deb0956f9fc72df68394bb007aee05", "ec383b84e5038f061921a2a41b27d8635465826bce5636b21ede0fe061895972", "f3641ae9463763cac44325547c7a6aeb954e8cc09a4ddf739c8d068c443761c9", "f49cfd859d0cde4b95fbb1cd277a2e0668ac8bdbbc5e215af7da159e108ac5cd", "f99dd238a630895697be11c2a551a3874a315b6f5a7bf752ab06cab6eb69e7b9", "ffe52a1f56588e88eef218987e89a4caade5125e3a4478cb38ce85ec7733e03c"], "iocs": {"domain": [{"host": "lionhomesystem[.]hu"}], "file": [{"path": "%AppData%\\Microsoft\\UProof\\CUSTOM.DIC"}, {"path": "%SystemDrive%\\TEMP\\~$18_11Informationen_betreffend_Transaktion.doc"}, {"path": "%SystemDrive%\\~$9441806.doc"}, {"path": "%LocalAppData%\\Temp\\781.exe"}, {"path": "%LocalAppData%\\Temp\\mq0dgaud.vrd.psm1"}, {"path": "%LocalAppData%\\Temp\\xxlgesic.vav.ps1"}, {"path": "%WinDir%\\SysWOW64\\dimcloudb.exe"}, {"path": "%WinDir%\\TEMP\\9E64.tmp"}, {"path": "%LocalAppData%\\Temp\\CVRF911.tmp"}], "ip": [{"ip": "182[.]180[.]77[.]215"}, {"ip": "45[.]59[.]204[.]133"}, {"ip": "67[.]177[.]71[.]77"}, {"ip": "87[.]229[.]45[.]35"}], "mutex": [{"name": null}, {"name": null}], "registry": [{"key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\DIMCLOUD", "value_name": "Type"}, {"key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\DIMCLOUD", "value_name": "Start"}, {"key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\DIMCLOUD", "value_name": "ErrorControl"}, {"key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\DIMCLOUD", "value_name": "ImagePath"}, {"key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\DIMCLOUD", "value_name": "DisplayName"}, {"key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\DIMCLOUD", "value_name": "WOW64"}, {"key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\DIMCLOUD", "value_name": "ObjectName"}, {"key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\dimcloud", "value_name": null}, {"key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\DIMCLOUD", "value_name": "Description"}]}}, "Doc.Malware.00536d-6741218-0": {"category": "Malware", "coverage": {"AMP": true, "CWS": false, "Cloudlock": false, "Email Security": true, "Network Security": true, "Threat Grid": true, "Umbrella": true, "WSA": false}, "description": "Doc.Malware.00536d-6741218-0 is the denomination of a set of malicious documents that leverage VBA and PowerShell to install malware on the system. These documents usually convince the user to enable macros that, if executed, will download and install additional malware on the system.", "hashes": ["2f6d9e97206c5bf4937e0d6670d164594415a8941b0ef1b1bb1e4ae0e582e816", "43b28f32e670fce395b4dbbc12998dac81c171f6ff8fb841be4fce90fbe741d9", "57b720358b65e7d57cb0d8abad9b4706271c23a14ae36cbfde7b89d23ecafa23", "5eabc1946ae11fe7e59e9f7ea9160b2ec7060890bb8fabdf732617bd2c2c0d47", "7dde66dbf159d5c9663b2ed51e834b69e47c43191a12702e0e3a5507426ad070", "a77242cb419e6f7fa611d48ffee9e7ea181458c0969d120926610966b11a6335", "ba9a8a1a4e15c6d94763e15a8f51f67b30a6c663ad5c610191d516db518bb139", "e51d13605afc35735e4f46844c93780c9879608050fe909c81951e9ca08a28d3", "e7b86602d4f64895cdacff52c443f64639aeb506b04f695775569c10b1633d3d", "f89c4ecce06bf20400d5110573e84935af0e93149de5a0fde45dc7a9f0b1f9e4"], "iocs": {"domain": [{"host": "222[.]222[.]67[.]208[.]in-addr[.]arpa"}, {"host": "suggenesse[.]com"}, {"host": "legicalpan[.]com"}, {"host": "gulamicros[.]com"}], "file": [{"path": "%LocalAppData%\\Temp\\5jootfr4.adu.ps1"}, {"path": "%LocalAppData%\\Temp\\e2dn4nhu.cmdline"}, {"path": "%LocalAppData%\\Temp\\uju0ohji.0.cs"}, {"path": "%LocalAppData%\\Temp\\uju0ohji.cmdline"}, {"path": "%LocalAppData%\\Temp\\uju0ohji.dll"}, {"path": "%LocalAppData%\\Temp\\e2dn4nhu.dll"}], "ip": [{"ip": "92[.]242[.]63[.]202"}, {"ip": "95[.]181[.]198[.]72"}], "mutex": [], "registry": [{"key": "<HKLM>\\Software\\Wow6432Node\\Policies\\Microsoft\\SystemCertificates\\CA", "value_name": null}, {"key": "<HKLM>\\Software\\Wow6432Node\\Policies\\Microsoft\\SystemCertificates\\Disallowed", "value_name": null}, {"key": "<HKLM>\\Software\\Wow6432Node\\Policies\\Microsoft\\SystemCertificates\\Root", "value_name": null}, {"key": "<HKLM>\\Software\\Wow6432Node\\Policies\\Microsoft\\SystemCertificates\\TrustedPeople", "value_name": null}, {"key": "<HKLM>\\Software\\Wow6432Node\\Policies\\Microsoft\\SystemCertificates\\trust", "value_name": null}, {"key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\PRINT\\PRINTERS\\Canon PIXMA MG2520\\PrinterDriverData", "value_name": null}]}}, "Doc.Malware.00536d-6741783-0": {"category": "Malware", "coverage": {"AMP": true, "CWS": false, "Cloudlock": false, "Email Security": true, "Network Security": true, "Threat Grid": true, "Umbrella": true, "WSA": false}, "description": "Doc.Malware.00536d-6741783-0 is a family of malicious documents that leverage obfuscated VBA and PowerShell scripts to download malicious binaries from the internet and infect the system. These documents use WMI techniques to launch the downloaded binaries and can deliver different types of payloads.", "hashes": ["1e0bd69fa2c12403b9077c42ebe1bd4d997cdd3d8f1160e7fcab0e52b2965a51", "24b727b94bc1ef9b3d99ae6cfb0333db51321ce3646a78a20f59f2accf2b4207", "39a3e2237ac464b2eac90dfd103fb9829cd6dabf425c72c1043678a47161ef08", "5c534ae4e830cf73ddc02a19368138b60bfe0cd8ab12d1bb89106872fb735539", "6ac5f9318f1a4db50373f4763edd01aa85aa3e6d8637149b52deb23478acb358", "6cc51b903fd07d87102d0d6eb7d6614b75921a5c1210993f67d0fe21effb45a8", "74df3318eac202ebbe0aea03d0fa5bdfc5fcd4feeb7ffc972fbce8e69f5597e5", "7f96371e446f1b9ddba9fddfcc8cf0f07beb26de8a2b1783414f0cf5f4c50530", "893b067586eb6d303aae26addf02f5bf4bfa2bd677cd0a96b1ebc20b05c3cf38", "90cb72a9707af427f9dc874a44f26511ef7d9c82606783aff4d609e15f2bb441", "97e01b5a1cf7a4e79c383ae6fbd1314466f75c9c03c5c663193b05ec8eee4fd9", "a5795dac579590b099f9fb41037aa8febf3b0423d64990f496a2c3698f874f04", "ae5bdac5fd5fbd09c0cdf2940291bef19ffacc0324a5ffaa56976934fea34c6e", "aeeaca88ec0fb0e4a6fbbf07824712100522a73c0607f416e377ad4c87045a3c", "b85de0b45a9634af9cf3a4026af2d5e743457dc9b284c89c704b0794b2565fd2", "bfdd22f0ff5728885bbd364316e74f544a7fcbcd487f3948aaece5ba0aae1e42", "c971f20312204409ac651ecb7b1a3eb50034f0362e4e96fc86be2d4c4afe9c84", "d12832f6d0c374bd6525a7ad1458f3e8808bb8fb3e1c73cdd3e23d94bf219aaf", "d236416e4940fdbee40f8e8457ab28ba9fca779147c92475222d9d92f26923d7", "d4b688389477443d6e8ce9963e08cea45208e54a44a43fd2eedce6a4c0d183d3", "dc2fcd6b057c26db0218ae05928653bba568a1486490aa4d052efb5c9c80617d", "f14c41e682010bb6ebf436d83b2e97f7f31e07aff46850e055511b49cb851f36", "f272476efe9202bba15dbb7cf7c13ef3918391f7743fa4267d220cd103ce05a3"], "iocs": {"domain": [{"host": "nosenessel[.]com"}], "file": [{"path": "%AppData%\\Microsoft\\Word\\STARTUP"}, {"path": "%AppData%\\Microsoft\\Office\\Recent\\349314338.doc.LNK"}, {"path": "%LocalAppData%\\Temp\\icn3tzqs.qav.psm1"}, {"path": "%LocalAppData%\\Temp\\lgisqtyq.v2z.ps1"}, {"path": "%AppData%\\1bb228b0.exe"}], "ip": [{"ip": "92[.]242[.]63[.]202"}], "mutex": [], "registry": [{"key": "<HKLM>\\Software\\Wow6432Node\\Policies\\Microsoft\\SystemCertificates\\CA", "value_name": null}, {"key": "<HKLM>\\Software\\Wow6432Node\\Policies\\Microsoft\\SystemCertificates\\Disallowed", "value_name": null}, {"key": "<HKLM>\\Software\\Wow6432Node\\Policies\\Microsoft\\SystemCertificates\\Root", "value_name": null}, {"key": "<HKLM>\\Software\\Wow6432Node\\Policies\\Microsoft\\SystemCertificates\\TrustedPeople", "value_name": null}, {"key": "<HKLM>\\Software\\Wow6432Node\\Policies\\Microsoft\\SystemCertificates\\trust", "value_name": null}]}}, "Win.Malware.Mikey-6739644-0": {"category": "Malware", "coverage": {"AMP": true, "CWS": false, "Cloudlock": false, "Email Security": true, "Network Security": true, "Threat Grid": true, "Umbrella": true, "WSA": false}, "description": "Win.Malware.Mikey-6739644 is a trojan that installs itself on the system, collects information and communicates with a C2 server, potentially exfiltrating sensitive information. These types of threats can also receive additional commands and perform other malicious actions on the system such as installing additional malware upon request.", "hashes": ["19e073fb9fb7811440e873ae60578b28c06b0aec9e21d730f8205c81b7ababf5", "201872934f7f6674af89597d1a819f79cf843578aa9928191561ebdb637a53cd", "243e098e78e1ff111354e231fac6b01e69f473cb10c27f2485a568316c0395df", "2b52ef895983a4778aaa66dd90cc8bb296ca3b96b891c087c4fcf483d5bf48c6", "3c66d120d27778c2a1110170ad85eed2313fcc5cf55345cdbdc283ada76a86c1", "42228a6bafdf985fc02536b17990299589d967ad44d22dbefdb2dbc44681741b", "48437e0f2c8bc5f0d3f46fec63ce26b3b66dc65610e3c97b4fa8a1b643c8e2f1", "4a2364a4b3e8ad43b505a616486ef537159c8b8df9fe140977c9ab6aa1bad658", "4f80b59c35090b1dbdf94f73770c222352555e7112bec28efb189e3b340b4c2c", "633bcbf980d9299324b3b0baefe80954f06e41a6f71267bfc83c8950a8932696", "6705cf85955113629d95a7206deb524f82ed5a3fe04666d98423b944c3ce2156", "6f74c88c2c04eb117c26d5283d83ac4735928bb50f76b2104be36f8101466aa3", "70a7d3ac821670090237f52308fb6b1ca47e032d3de9267584f59abe247e536a", "711c1db67575b1a795a4aeb439ada79ab8a7cc98f2c68cb0e2beacafa5d044de", "8f815fbcf18c1bc554756233e3fa7d326645a30809042b068ac03daef649c307", "911ce750a17ac1e43d53087630b1e3af416619aff2d086b89b6def0d0bfa927d", "95aa51bc0016bf055d53f1d663b560c97d15d19956787aecf8af7933e6765e5b", "a3347f536bef48b877e49fce133e86b864ef657137ab73db60b62436e2aca7b2", "bb99c43836000b751e3fa1deda851b646f02be036ad9d86a09adb7963bec7b69", "d3edf8ca17f1b41fa96ea9b4377d5778a7965345230425730940444469ce57fb", "da37e831e94b3f7226688cf7f201ef4c032d393ee25bd2437d826a21e08c03b4", "dedb1d0c69521f7c47abc2e6fa925642269fd40a00ea21270b7b950cb101f7be", "f3dd18c0de2af39bfd1dc3498de48e31668f6fdeb89065dcc9e7a81ae6c5046e", "f980768d4d68e75b6d83cff0c80ec153a80bf700f7df3bd53fe9f06bdafda01b", "f99b50470431b2f91b80f3acccbf179441aa24bc702d3f2ba08f4f9f2357d6c8"], "iocs": {"domain": [{"host": "statsrichwork[.]com"}], "file": [{"path": "files\\information.txt"}, {"path": "files\\passwords.txt"}, {"path": "US_d19ab989-a35f-4710-83df-7b2db7efe7c51551795182.zip"}], "ip": [], "mutex": [], "registry": [{"key": "<HKCU>\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Connections", "value_name": null}, {"key": "<HKCU>\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings", "value_name": null}, {"key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\5.0\\CACHE\\CONTENT", "value_name": "CachePrefix"}, {"key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\5.0\\CACHE\\COOKIES", "value_name": "CachePrefix"}, {"key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\5.0\\CACHE\\HISTORY", "value_name": "CachePrefix"}]}}, "Win.Malware.Nymaim-6742391-0": {"category": "Malware", "coverage": {"AMP": true, "CWS": false, "Cloudlock": false, "Email Security": true, "Network Security": false, "Threat Grid": true, "Umbrella": true, "WSA": false}, "description": "Win.Malware.Nymaim-6742391-0 is malware that can be used to deliver ransomware and other malicious payloads. It uses a domain generation algorithm to generate potential command and control (C2) domains to connect to additional payloads.", "hashes": ["079c12699c6dbd13e486a4c7db333ec114420da38acde8afe4d62219c62afd82", "1e12e3edeb209993fd7d5623fb10f342dca54e101ea8593348d8cc9e72e91384", "303f8d6644e52783c8d4ebdef5d4e720803e828529eef24607806cb6041d1adc", "31605081f5b8b138ff011fa6e796e6d2352160ad4a97ba07de4fbb38dd1cb41c", "5056a547e092c82e74a2da61a5a90eb2a7e7e551e39a3387753917bedf8c3130", "57e97b8dbfe3e8831b9b7bbcaef974e7d8c9422a15560453b0fde22b0fe3dc94", "86bd123441e1b1ed3f37938b58dbc572b844e7ba8e59506ccd41fd0d9d950628", "87c04d2500b70ebf0865d5ac5889f13bdc86d0a137dd1a20094a3308b52ac191", "899752fd8fbe560e658be72bf03a3a774b6dcb9d2d14e25da862d7edce5d9fbf", "8afc084c965d1c0091b61744c7cc5bd9cf5cb48195a6b04096dfe80ca118fd26", "91e2920a163dec32f3edd8ff50a8b545fb192ad3d75c2ee96db6ac9b01f373dd", "a20d48b79e72d3fc229929af39560ac26504fd31d20a7b29b81a4624eda6a0b9", "a98b56d5bd9e67da1d1052cc044af7f45cc0a6472093799466d48e6f841016db", "ae038c14c8eb49ecd135bb667bc3f96dc38e40e6df58d8475f2298b0a5a3c69c", "cd9fa3f18f1108d2c1fefd8f978c167de8139c66c28638bfbc799c3b7b1cfd5a", "e694c1f807a97327fbbed467fed853c289e014d368dffacde9b8b62c2f68595f", "ee133570f883ea59f5ddd1f71ed9c6d09b0d7291c639d33d7991fa3af9956f84", "f359d51daf2f35ce8f2f7a0bd82b29db843caf8089cf9eff9b6d95fb503fa071", "f751ceca4b32c1af8e890a727aa2c65c63015798b380518af8255722cdbaca5f", "fc1edb4659342e728ad83ac651f7d0d34532ad1f184796a1bed495072655af56", "ff3a4f6aa65acbdd0c82c80041809e019802e4f700f0b2a5748bbc40b45889be"], "iocs": {"domain": [], "file": [{"path": "%SystemDrive%\\DOCUME~1\\ADMINI~1\\LOCALS~1\\Temp\\fro.dfx"}, {"path": "%SystemDrive%\\Documents and Settings\\All Users\\pxs\\pil.ohu"}], "ip": [], "mutex": [], "registry": []}}, "Win.Trojan.Autoruner-6733593-0": {"category": "Trojan", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": false, "Threat Grid": true, "Umbrella": true, "WSA": false}, "description": "Autorunner is in the Esfury family. Esfury is a type of worm that commonly spreads via removable drives or platforms with user interaction (e.g. emails, instant messages, web pages). When executed, Esfury modifies multiple registry keys in order to execute when certain Windows applications are opened, including security products, registry editor and task manager. Esfury may also contact a remote server to download and execute arbitrary files.", "hashes": ["00de9aefee7e84028781e5d88e23c7ac53d8a10aa97116411d43b6532112fa16", "01474c0dacb671b37172b985d8e96bb688f2e4f6f8975a6bdab76c3ebb6ca29a", "0206ba28fd335c6470736f976885f5916375e114ce442208f30aaca55525d41c", "027b08647ec8a4976897114dcac6810acb215dc13805edd0986d4bce04528f59", "02e94f61d5c4da2b4a3b8991278a77e937da0de55b2f5373f804344cae73dad8", "033c6325a22ddee4d621558106fd297407f31e0713c7c2314024e8cbcdc0a5b3", "05d0ef6586355e9255a5723ae5909602de6def71e64f3e1838211bb0d3c9de81", "06bdc32de83eec39c9153b7944b8abc0137e3b69c80ac02e74d6903c656915e7", "06e53af6c4bde93f7a9da0b90408e59b701d1ced02c5fb14fba45c7272452367", "082831142fe7826130b5d5ac7673d9ae8f7f56e126348283e77fc3c88f4d5b0b", "08617dcb9523e28efed1e47917b6f9dc6dfb534c6d0d7df0888e977099f4db71", "09a8a4d6b7e8d68dcbf7279923f5d8322e4d46dea86ca1da0f553bdb1f5fc222", "09c40f54a73303ddf1d6170f3cd06778583260e82b7dfe155a2f804346aadfc9", "0b032c40e0877bd1c4aeca8bf56b87d0daacc781ad2cb025cdc7c3944074e816", "0b979d82d329160c7f95cb8abc9ccc8e0ebb4f981ee321342e84a29ff33687f9", "0be8709e38625829811638c2460a8eaa993569df882f4a7263747f91bd08970a", "0e47b656aa6dfdc797ff650a7d1800639f7347d2af4fd0ae6520e02ff0cec9a0", "0eeb8d4cb796e8460ea5c283deed8788356822e6a7916c9cec496dc7cf4f3ab2", "101217714340fcd5d1194ac746d2b4c9d42f739f12b983ce33801d2baebb71ab", "11e0b16cfcd0e45c21a1fbe9b7b14bf019f3e2ceb7894eee8e458eb6a7571c34", "12e12efef70cc7824ea45771c844393d1e1b878a86def41acc01093249bc7e19", "1374cf423bc66983991c7fd3e3767aedf67094cf5a3eff6eb695112b51dc5e6a", "13910ca1a7fbadf757c082dde5d1724b6b46d36b9eae47d1bd968c66a67be3ba", "17ea3123406cb0ef21c174f4f27a89d4cbd5b61ff1359ec9b8c756b311ee0f4d", "183b07b0a5e93388d391deeac811b405d0cf46c66f3817efe535780a6d06c10a", "19244087eb68582a8778c11e4ce12fdc626d488dd361c42f6da96451c223eff6", "1d4021379ad3cf1e791746d550864109cfd5eb6499803bc3b7ffcf8d72de9588", "1d423cc7f0806b5a485aeb0c89a2fb92e0d2c873272e67db2bd2473c94ea99f9", "1ef451060756fc1ecb7178f8c9539659875140b6f90bcf44bbc673cfdc738483", "201a04ca8a8b9a902606fcd11612ab3b5fd1d2c9e0763d5629242c9b6c1d47bc", "21ed5f159c2c7002eb7fad25251959f2df12913e906a492cb50ad6190e03233f", "2280cabc57b632c80cb92a2b1ec0aa5d596656b9bf789db2bdbca9e9bf194605", "2523c414d9e0904e4ddd7eb9e8bdfefa36789817e79a6c5e597bac54909a6d9f", "25e09a5f6a76f1baeff04b24158ebc65e492928fc9536af22159e0d9318ab151", "28ba8c9be7ae3e03909a0828b7e0144ec2b7b0c5c30c6f15ef0f4e50eb15a797", "2af43fa03aaf67d9784c3c4e5982fd5dae27c23403c02e5ed6f88cf007939c18", "2b10977925a036216fc9613cbbe07c6976d5bb9ef3ea81ffa8909a88d35b0dfd", "2c8f9a21fabc6e3acf1aa9409b5b0cddc082dd5f5219429d24f2bb269ce27430", "2dc0c9bf3814f39c954c6daa353eb585e0ffe03214f749ca762b51fae0255a9c", "2ef258b61ac0a1bdabae869dac8af1586af66e892c0f74a0e31068ac32905ee7", "3076c99575792e30468f2396d7259804de5938c5a7ccec07a4a6917f65bed835", "311ac544efcad708181fbeea2d883ef6685acd4abd88673df09fbbaf2d44c6c7", "32d2923ae3aa2ee4d462dce7805191c5cc0873252b1c6637b916bdf4f8bd6c0e", "34ddcef60938cc958ae554f4c7becd7e069b87af26cd28771f33e457a42e0d8a", "367039789ac37ca9d81c3cf7cec257af7f4584a017dba466a4bbbc67c6732f60", "3a6b2352054e645fc7e56e5a00b6c651316139fd1b9eea7383b0ddeb73ff0c5b", "3d608ae0a7e8359435901f1bfd93c994fc865710622bd6a4af7715c4731a443f", "3f085bf65d05d0f5ad6b1e4942154fbccbd1588658249f9ad7f79875c7d36157", "404baa98ec56c1cfe69bf3bf6d13359048b63875592fbe11a9b301833b65b152", "40cb910d1c4ee133df01603dd15b59119e492ec2cccc9d67a369bf8a84f47194", "420df7dcf20399ae13cced61f31ab1cbc3b012c9a834249f920bce4363b46e2b", "42829c5955d20560da4a91ddc7746bd054a7eb0cc945f9d357d5c8813df84265", "43920c8f5fda7214f2c6e68cfe41ba0d0fe750503d78b2fecc11c299240da9a3", "44934f0c398a85e68a0f83d9f769b2a29c7c9cfbb084e3e9cc359f2ba384f671", "47d2b9903d3db1e9440c53c56fb6c28b81195d3e830b0c890ed34ee4203a0f03", "487956f85d04e4529ab0ca06ff16d5b4d52ae6f4d7c92d0704db6864c4be7368", "48dd0d79f583fbc75bdebd9cca248b904f5aa8a648773c3a8bd054c4cf15d9f8", "4b4f9a17aaa6fa4436d5d8523903309422eadf201f828a2ed422ee3034214a8a", "4cc53c51bed05eb3fc362b8a8436d5ba43b8c31ed6ceac9d3fd0d2fb521a9049", "4d0eebf647888a689635eb66fb4b94538c4f65a215deb1e1e9aecd3712ca6369", "4dbd4c9865609581a0fabeda200f9510da9f290184f690b87a2577e628545426", "4ea351a4b844ae6ecf9d29d715c04daf65fb46054f90aec2a4e3979de576d470", "4f0c3194229de3b5f61171a346de9dc46c4dac351602ae73ab790dce6e78d36f", "4f7ccd012e2ec1768af3c006cd3f301fb54b3ddd5cd3c259ad60ffaa0d2057b7", "50a1f72c8b8dd87bc584fe4d45929e587737a6bf1ef231a4a63cc366605382f4", "5131d9969b39e5a5ee29724d5b779164ad3ec9d6124af10db3f47c4a985c83a1", "51328a8872e0e070c36675158504714050c26502d6b5465aa4349a6ed51939fb", "53144f1d755a50f0ab2ec3bafee97a3afc71d50f75677b082a8bb0b2377e135d", "553c68386d6e0b01ef3acdf908f8ca2607f8c36e2b9e3faab352cdf3563b6fdf", "5595e4366ad6a4e76440f4c7f984bed7ae08b9406e218344ba50c024fc5c217e", "5607e927d4da8745e3b6fc0a0f7ad9a04aa41b2d0733be45460d51b0d3534f88", "5be4b6a793368ed5b5aa17998c71077a8c5802860f2ae6f5334a01be256e60ef", "5deeecba0e89ba749e72e636e9c2f7e40d3267ef0453e9bf0b91961c9098305a", "5e0d311ee6e157463d2032e07b61cae1061b5205d4ffc9f9efe38fd496a4feda", "607defedf0a5559fc6189c47dca085422a4ebe9e5e8ab01450ec4e15df067d4d", "613ed5b796ca89bbc704a1b4705978a7ca577e05336406a77c9bb74deed096b5", "62241cc47c056e58a756a9629fddc92a29dfad8a4889f5f7a59526a1805188ec", "6741cd93e13b4ed0283aadd39e53e496f41fe8cc51116679a8bb6d5d49e3fda0", "681abc6ead028a2df3f4e2dbcb8faa3db56229256850df0df20b0c3552787fd1", "6aace1df806c5ea61c8e282d7eef7dfc66320b4466099f391987c666067ce86c", "6d42824657f6cdca771c598d6249be6b7fa45b4032dad6d5432a6d6003269a8f", "7055d0debae6892dca386109c4485fd97b438a5f3280c106e854da7fd64f89aa", "708e0fb4c32222efaa4bb11c2a2abdadd8d164eafbf86d72cfb7b0cf13c43822", "7235823a7762b49704a1f165b3b2d924192e12f491e5eceb96577115477ac138", "727e4cfeb3eaf0657192e0a2f7d1317e772b5b3c5d315d1533174c7bacaa36f0", "737bc3eb44b6b459c13a4577879ad00d75dd069dc606428c74037ffb4cde923b", "75d85ac9f6e4ca0cdc820680a566638335f7ce8e58c606ecc37ecc43395e37d7", "7604b495acdedd9982461ebb722f3970f3ed71c303f7d7db73cde76246fa6eec", "762ccad9fa2f25742122785667145732fafdb8d7451927029a9d210c0312c892", "781ccbf539883f5fa92298d39886e7d038e14a87ce4ddbde2797d64122b0dd3a", "78c911e6d43eaf4f7a15520c72db7d70bc9d427f594fdd85d2bb56dac369d874", "7a983b1c9f6fb780d8e261308a14c1cbb3f8e045e56c23205475e03767c6049b", "7c47776ea510657efb9877e587118681c736ebfa1d6136a98b8ce4cc5cd3e2fb", "7e1ae568b6650aa5251351ad89a37ff144193c5b00ec26cfecd04089c9b6d4e3", "7edd1d208d4e402416ca27309427aae01e8d5b7287562a0d37003c8115ee6e67", "7f0327d04891eb84643ce9d038b5dfaf5bca19389e463292aa6d30b09b2f9dc6", "80650a0510fa19ebeecc5827940c4b7d47dcea9cb54ed7db0c66cad27f70515b", "85dcbcf8545712170a1fe4f18bb9acbcf51ca30366c32e29568e40f2b320b984", "87d553a703b694a6c2b23c11fd4aaa4cf1ad94bbaac36f48e8fceb45d2fc159c", "88039e72747cb1b19a516e6403dee91256df989cc6f0f3790f596ac8e1adb1a6", "8907c6cf201209945b4443f515b0572016b831368bf6e8013e806cc84075a69c", "89656811a18158303826475a2c9b45278a594b59a356340dc72d5440a1b08ff5", "8bbf08f15f67df71d4152a23adab1a446518dfb9b75a27ca9e8c10a3a6f8efd9", "92891c3b65dfed3184e0340182932a36b1b2ec43d0af75690713394a7e4989f3", "92e8528aa417d5e3b21b18648da891a74f51d3324361e7ff9953ac108eb7c240", "9321aa0f715f66e261fa3f8344afe7556e32face7daf2d406e1bfd288d13a8c9", "94b21d4733bd93b6a06283a75ee2e77202d72d212786d5a2aa916abf600ee224", "94be11a007f268b5acc415918c6ab1991d828af9685a71be4f84bf4ec1b9e2d0", "95925346ece4216ffedad42421837f76d2f5eea8ab71709e38b6c685145adc94", "98586229cc556df57bcb4cf8f7a20d867833273646f33d9aab5732390801abca", "998ba9130870db6c4c0f9ab11e9f028f9d388abb5843020b64ce6ac00bd139a2", "9a04a7a8f3c8add7022bcaa2840ca718a6e566c05170b9e4256992e0354a4171", "9a4cb29eec8109b577d4985986bfdd52581f12ab2e7a61c9ffbeba9df5b67bda", "9cf2bcaa089fe32edd9aba75cf417944ab5cfa21bc1edb4a36e92d89c1173b10", "9e974c032e3c6e579960b3a537f618a5b222445fc187e63fb984e3e456858768", "a098ed9e500132c2e0f52830bef6fc4e0637f9611f96341c0314586753368e88", "a0da735df3d97bf56d867e70423c4dd520a85f42a81347a224823e73971a8d93", "a2697b2ee94f60689c386d7d0746b89f03d38fb136ca846943036cae28cb70ed", "a3229afee8a4320a712e90137482cc8081ac80d7c8c1c630f1c6d82774a271bf", "a478bf4958dc7a7b8bbc691cf3d7e703f33dff7b4f40c8076395605760104e30", "a7d17c1b4dcec8c64864dbf5312553d31b572812fed193ed8dd5253f30599326", "a82b512b37356ca8aac934827539f752218c91a214ead801134b5f1e4018f5fc", "aa0a0b14f3449f1933d69944cebbeb26b4c6686ddf9f00584809e18209d1b0aa", "aaebc73dea2f3e2a5f9b1be6925397de6dd4da1d102d9205a7e29fcf64c4e86c", "ab5ba3c1727caf2f1b5bc73de4968fc65d4df18478555b00f107614af7ce43e3", "ab72b7137ee7d241e12c15c56e5178ccab49555320aa3b5c212a4c3466049e8e", "ab851cb659b8aa269d1affd927b2520b77d58324904767bcb33f68bf4eda6c7e", "ac0be4bb0f0190be05feb3a1f2f0e36748120c9dc79a66bbf59bb367573db30f", "ad5ba2f271178ab8ee4c4bb56cc3de1da35020eabfdc22d06fa22a90a47908e8", "aec8724d0dadc2be635fe3cc73762492cd2f0ed7c88449465500fb2f245a82a4", "af13f5778fb6153039aafb7d0026fdcd7efc0667d5420e4b21f90f6dc2dad4b4", "af15dc935b9724b60eaa33747a6b4c7390ee9c388ed6a00d8ad12cb78ce6ad79", "af5a40970641ccefb05d0a8c0823927209a40362d8409b770c6fca19347f8cac", "afa7c3687cbd4b7a3a8651ee893d12b21cc16fbee0a3ea6fc0c958f16e00437f", "afcb263bf483094e0befd427de5fc79933f3fe51e84cc14bf3b36d6aaa3a0617", "b017cbc419d4167e53dbb716ea7550b4975c8236e8c08c3c2c0a846ec830eb59", "b039a3a7419c8ee917fd227837d306435c882e3977313654b2fa78f5f3cd60be", "b06d5c520e27a5a4c2a945f1ebff27db586c9ba8199b6c343d0377913c4eda02", "b0f04979f1d29941a78395a1aa0ac55062afd07b615d6c7d8d60cf8897f7ff5f", "b1d3e106a9f58eb5452a33bda25a8a9a33e17c9a94e2f0e52d0dd5eeb596ee82", "b2253c2c6fbf603b9adf3e602ece2a88b74b18b981fc862a75d47a4cccb6ddc9", "b2818b9c57117e8feb4b305adbced3e7a3ad70642e0c70f05840c7f94f6de524", "b33a5dac41d67287ba25c8d26b90a11eed905eaacfe69a6ecbc6842e2e530d64", "b43c720f744ac1be7e5960dd2b69a4edb7e99e73390da1953af3874dbf19c3a4", "b49c548f76a43b8771890be89b35f7ad83a78be6b0a5f18e98002e609ca62949", "b4c7225a7c3587f50db3838eb0962b084413f9fa04169f448a7b043a9db1b8b3", "b562a2d84826b9c0f580ea919169e740aae5b4ed8b543c5649225e70a3a9e452", "b586f11757721d120ba25d516af478c2d26b49fa47a07c8dd97557532203cef1", "b61748b482452b8077ff2b85cc6efe9d7205071bec4a38680371a4f872cb3daf", "b6377cac9d7e77ab56edadd5f69ae7f398974e260105c661bebaa63ddb61d086", "b652d94d05a3d4aba618a3b004f4ba19e8e680fde600a086960f638a6035ad31", "b68b810e1dbd5e761810dc77048a61082948379155e303ab04eb4c7f51fef311", "b7423d0ddb42698367559d7c8c4eb55ade16059a215c8663d30463130bba9495", "b7970b7528d8927d134c7f036bb7396e296cb5a0ce7389e566002d4082a30d30", "b7ae8b5f772f73f7f16c3c14a8401b52e0087d77e0303f056abcd5e5aa0aa663", "b851d4c15d4d749ade1ac4f35c67e6339b48cc33c6b3ff2ddf645f63768727e4", "b9466b2aa9205d6d915eef0ab75fb8aaaeac966aeceb69e598be38e0107fa1d5", "b973a05b67ab70c8a145a7c0fa59afa7afd30f008d702da192cd62165d7df97e", "ba1357138ee9cd4bc69b85fd427e5f334284b809dc4f8e56bee822eff1f61325", "ba99135e1348e96b6fcba68150221c845213d7b6a7ff419dee2e8e3ec3125e66", "bb08cdb202138a7c7bcaa3b10aab9ddfad87443c05c002cd5e7eae3467b121df", "bcec3b9ba8569cb23d51b0467a80cb8a40585f2a40364c409dfe193d9f735a54", "bd013e4f7482100fc156cb24a8d40b620258a86c927e633b9c30a234015f6e41", "bd3edd171dae603d9020ca245c3f70f5414d652b3fb2e8018d9388c783525e17", "bd3ede19fb54ad4b9f9107115e48eb05c61d0069bed03860c6f1b0d97c80d979", "bda154392b70d183c5b5a6f7e145b87519b6e76e4bfeec14be5ef8ea0db6bcef", "be4ab98d15e40a76e7e4e7894fe425be550409dda0d2b24bfc0e201bd7cae5fe", "be5e340f62c87c09e41e364de74bd67fbaf20f860b5778db813e4b36c7684ef3", "be880accf485d3db3415c36c34f79eb92fbd118e8d96f3187f1f2b0f2f90669e", "befa3a233569fcef13fa32b66fe5be012b6c50bc7f9240d7a8b820776ed451d3", "c0679dd06a4155b48fed2671a7444df55cec031b5b3455586ffffb3d9056aeb7", "c09eeee0d7cf44cc18ea18900a506e111ac673d2a2df94a407c80049892cb262", "c195b0c875f1022a5b5a72dc6c1c0e146521146e1eb3451da082221b1990eb7f", "c1dcaeeacd7f79d5055de0cfb84261a933b2040050e4f87498c51b840f8a18ab", "c1dd6a727e1fb23d22fda5f6e1c607f1ecf1fcc3786783e28354709f88bd434c", "c23aba588fb2f0a3d65428c75308d7709ef11750268f31366a7d8878fd42d41a", "c273f3d237ad8736527d59d4833010952537b402c7aa2c6a53a98ed5693fda68", "c39eb38076d08b6f01fd79eb1e169fa18b242c94fbcf8dada52cbb725d916e0d", "c3b624782a3bea963610160c1981b9a7d579c74d42ba7fcc78c674c33e6d2ac0", "c4151eab08fdfbd8bb8b8489212ddc730dfe83115865cbcef1437fcea8fa0241", "c51c12d6d0e81746e820da8e7d23f7ac054276335020bd1c61edcd0eeeec0b31", "c544475ef243c8c38100804df3ae91f818caeff157557eab51e7de4cdd50daa9", "c591e923c624e3361e29fd8833556739752d66558cac9dda7b3d1fe8d3e92848", "c5bb07151b5ee39880236d6ab63e28a5f845d69de83160732dceb7650874975e", "c65deef1b9458fe6a2025c3473d543ffdaeadda4c2de15d7ac2aca96d62eff01", "c6c221f78ef0953667b29de609269a4aa99dabd385bd0b1b4fd3658e40d25b3a", "c78a5270801d69c5c2f463f5f67f7ce0c86b93120ecaf94506cbb8c12447e8f3", "c92a121c7394d2b6c60f99d857b354cae8b3e6451fef64b6d3cdfa125955f1c1", "c95f16dae970debf1c454b675fb406c37dbd1c37f6d30319ec2182f0f887dba7", "ca2be87687e0d48ef97e5d088ff4748da3c88880adeef9ec5a982adb4eb6d606", "ca4b05e7d89cdd6aea904d4021491cd7621631d99a0a3ec299dc66fcf5ae3901", "ca89c094266a8f44452ec715dccc4a5ef5088ad2ca3d9208c71fbcde375e53e9", "caf42cba62736128451455f138761c0e0a3df3a1efeb08ba655744cb967bc33b", "cb62862a8650583f3d950867f89e54ca616d58fbae06ff9fa9f0f59e08750b27", "cd4344cda8ffd0876f83c2c99e8bff5ca4f7f3ad5077e9eb6925e3810bf22451", "cdb6b1c0f2f9a158e9925a677ec0bc11ef5196e7e72b5b2d1fd6b4cddc867183", "cf6235f17807a52a23853bc4f6150d9a8192609a8149c45e90685095223e24d3", "cf84d3d4feed05b800dca183975f88379afa25ce667b96ed9bca03f7b3c071df", "cf87ef0e3057b0e64661a2baf16504ed3bdc5c994d9ea40620b45e342a934e98", "cff17353a163a56701e0ee1cec138b83500d86f85322e5d3a77f05fe134fc49e", "d06bdd39429e0c80f994c8e456b584ec9157445884879a22206c0aea6927e981", "d096ebbf4204b3fb504f87ff71d10c58c40f613d914ed81dc0fd041f25360874", "d0e7433d8980c39e148ca789f4f90362a6c9fdc204d2bd15017fd345019103ea", "d10719c665f0d39c4fdccced175786a7af8e3b7b50e89ad09bbd07eccd2c990c", "d206aff7abd0838d73ef044b30caa646bfabcb91aa3b91e816fd110dd960f7ef", "d29b684d172b67390734eb9d339a0060579d385665e333fb18dbf79974605439", "d2ceff2df5a33bea4d608acb40a8306536cf6bf0a7cd44977f3558ddcb54693a", "d3994933591aac91cbc54ce9be7ed878e8964498667125a774d0d83675c0ffa9", "d4898af5a8eaa9e6ae0bb5548feef95b38f7ead8afd72ef1f3bbd0e0e768108e", "d4cc423212a5f0c550abf2ca6d4579485c4ebe7ce12163ba03b851d55352880f", "d4ea445c636e0c0c10145bc8832e1ed0db95a8090973adef0beab3436a0259d3", "d5b3ad0803bace23dfdc1e9243bae37cb9bf3fc6a3b18f85b2564fa2555d38be", "d5db7b5926e94d266901359b3fe41f8339becaa2678e4c2d7f9124209f9224f6", "d72f494e4a44dc0dde7c6d7ef3ad06c8913a5013569ae0bb016c07eb22352711", "d77154f8ab4b635dad09a90c7cd44c8c5bd4185f984a55b1750748e821cd2f67", "d7b851e30c0deecc59f494a93ce7f02fe3fe01331cd8ee7ed1c9ff02e6d853e9", "d809a98eb2597865f3d40dbb4bebbd56382c5edf9e87c2ca5f1646619550c1e4", "d88ad78ac3c23dae82bd7012cd911ea891aaac0e3d54adab18426ec707b35453", "d8b5f54065c4aa575201f709d7a7421e6964fccbdc69bf5432b64b4bb6240d31", "d91c2e2c03f9de03edd9485209c6f47b15896a19d709a1f0ca21e176962d2be0", "d956f45a346d4987e053f20866093755491727db1394f8a4545846c85b230f59", "d974710e83bd7ec849afc4e0e7f20b704f75044dc089e3eb09a5578dce4603e1", "d9d01eedd0abeee1ff89da2877fa73c85748c90ea21ef260dd1b945e096f28c5", "da4a767201f6a8f770630eb5513defcd0786f8983136ffcc8cd4457d369e83ce", "db4896f16b87cfd768c74f705a65b21c9b90b89efdb4b2cbc469ce306ece88ef", "dbd33f0782766981e854e288c4d3165815bfe75b2bffa4ac457c1da569b176d8", "dc7d2009349542a3b1b5f5c741bafe62cd5e409c41fdede1a07e1fd6f9c07d1b", "dd4280e2eeb2fbf937fdb21eb6d6f7236bde813280eb2fbabc7eff8acb4835a0", "ddb132957edc24ff98d35f38d033f4b791b5e86363efedfc58f2629744c168c4", "de1402fc5065dabfbbc076e3c68d8bc824cb3d1d496d1a5107c60b0659ba5645", "df82612122040d8ec77044bd1098b5e7b151be6ca35cd5564a17f74a29d5e62d", "df9b48db05eff34aa0e668ffec838dc3ea68df71b2e9d3ccbe5877588c4d6de8", "e017ce967d986cbfda8402fcc6bb23aaf6bdcb2a0af8d9189c238d4ce4a8b509", "e08beba0319a33e8061b0fa1e6f1467d7b9bbcc6c633da74dfa458b28b60ee4a", "e0f0511b386a55058bae07de9ed5b7ecb839143f28a8c9f74f810fb3b090c981", "e1aa92c454950520cd60853b004b3e0c9857a0a26d7920931ae3bd16f3e334a2", "e2de0859a6c388a37472fa89a74ff2b730224b5de2684ed040a5dc5d7edb25ac", "e2f55249777815f5106f1f0fcb5a06f2999daabec1ffe7d4a1da05085fb6e83b", "e33caf937f7fd9fa67ea2326954ef60d8b7fc88cbe84d81887ffcb60b2acce0b", "e3cb684a747d533e74a26c172199978f65a5a750b9771d8250010b027f4ef1b3", "e3fef70a49cdce4331efcec80befd58d8aea3bd9c9e1b9cb88cdf66d7116c205", "e45b90f78ce2740e77a2497f09d399347bd6f5aa511bfe3651e9d1f752ace4d7", "e45c02870c208eddda37e91fc0108972e154e44131109e8459c726ae8b0ca13f", "e4c818b7c0308f340ee697850bba873871d2de66a553ed9caaa9152ce28ef755", "e52a7a4a50f6cc1445124c2213f27d780445ec341c40e79f7bb4d01728c6999a", "e5e88f6467d064f61b5e6f920e75c5394fde69b882d3d8f90e35394ac307a7be", "e5f1f3b30e39370aeb84b81b521f15dc36fab983e87b128f199e93cbcee3b7cd", "e60828f8ad2fd2892840d2af7cdf29d2d7e3f92fd2489e53d8e138fdbe37327c", "e6209601cccf6d1fbc08130cef9c18f4b8b606337fc0781996451f66c8899035", "e6500437d7e092af962db2d04f27a9e552c44e04d4886cbcb82b4835f0827a95", "e6a20f3f9defbee2e747da87edafa49c02e35263b25850d37ff35cae8d63edd3", "e6bd241b3de9c66588337dd1f86dc9d251a21d69b8f692820ad5a6942c077fda", "e6ea22b8db0b8b0cd535dcc90e002f8d27351a5fc43dab2dc7cf4d0de4c8585b", "e72aeded53b1a0b0ab2d1bbbc2b2555728a214a9372ee3b8221b30f11036d59e", "e7ee256c619a19aea411803bdba471c960c242d1d2803b2c64fc706568c337b5", "e848fd728559486f9893c19b400ba75dd0927908d81cfbfc374ab419d75137dc", "e96ac2bf929a2943db76c2f0dfc5b716fc44bdacdccd61eb1caa1929a5ad82f2", "e98c3f9c21f57acdf747224eba23fbcca1617656d93779426d80895eeb590a71", "e9a749b4897ed91aa4886a8f4d834ef594a24af881b2fc038b18d8d2cd4fe2b4", "e9db8c784090aa5c0424b8fd87f1f0bd70244b3e9a3b548e68db56c5a9b230d1", "eaf2c446d0ca5b8640226b9d70625aaabb68f414442633696229d63e4c35c7a3", "eb588847f7e751c561e0cf6ca65778ab4e5b904deee4d5cdc38995cd00bb35af", "ecdf37f27d00efe5ee8cad823332c195526c7bf831707d17033c97faf71f51a1", "ecffeef48b64551e595dee968f754f20e4ecf4181e554bda5ea7c5d95def9574", "ed822627761d6a7898dc6abb2287ac797e68474c89651ce9f9d81335a294d182", "ef420ad08af5110b182e8d0adb6b15f814d9ae9fe952f6b5ae98fb51be3c2ca6", "ef81e2e0e8ff3af4809b84023431f16e21f89c2a526bde1df2ed64c48a96a8ed", "f04aec8392d24619f12b5adbcfef6fd6282868664956b8571ae7d981f96514cd", "f0be45bf79abce525720b09dfa4e67b84106462e88dc8c2dbcd9ebb8b04bfffe", "f18ca45d2059c3ac112e7938d4fb0b2c3d0c275c7a9f9ee879d5c046a724b690", "f1980cfe4a10b7d2db881f7ee6a0d229664a9736b07a12113f8a92f3acdb73f3", "f22d7dfb58e8a03db3967933480ebbcdb048344651956de93783156cae95406f", "f361b784320db4a512e561c1a74f519a7a4ceb48b9fb0a08d0ffef088263141f", "f3be84b76b01287443ba6755e4152ebc8cfe880908f82f8adb022df9dd7f4b22", "f4071ac44c0cd14f7decdddf6b7d6522be08fd760d87d6508511b77c1d18ebe3", "f4992646efe9963ff9acd7b5d24f9aa9d3870ac18385e714325b56cef96600d1", "f4fa98b901078f92d73eb4c15f4d2b8be57a1ff9a468a3289b83d37ff656168d", "f529770d419ed6251b971948e2739b252deb7c50ba5ec673e6fe7dc46c4b0318", "f533e1f94e9154d7312e2b656672150d587c0bc8f35b05957388ceb742419048", "f5cb21cb255a879ee2fc375d004dad10248e07bb6e454de7439c809f7578a05b", "f62f9e870fb8abe27dce13b2fb6e57540f874d119d31562ce84d7fe6da708f52", "f6a9f7c04d1a04784e2fcbe8f14f2d84d47bc30bcf8d7b38f9d916140f60b802", "f79d148827721f3abb13c8036f84a17962ef20404a44529e6ad6b448570da783", "f7b397ac38257138477a8b157d976f1fd1dd077fd96a95ce2e7a1c0e06f324c8", "f7bd596f28234c64680cae5e471361284aee0ac0447695a853ab1212ed59bef1", "f8907a6ac7d590e5fa0048111e301ca372e1be367046d50f0cdf9cd052fa6616", "f899fe198eb3c34c2125d61665e70f0df6a1f72620e0cf72eddc9ffbee5873ac", "f961d58b6fc36f13f0eab06251a42b1293cc4ba7d2282ea218ca16b03314dc50", "f9d7970ce27bc928d0e723832c568ed7bd2e30063bf78d4995b34e74b4ab5e5a", "fa03b7020680e4d74d1428ed51a08baf3117781854e76bad72978f16b4c53c98", "fa718cd4a8ad1cbaa47c64525d0b9fd6d442da7e21d9aa70965bb9faf3915d2c", "fadcb116402aa8b0980473fa0324d4f828a1bdab3cc66f3bbdc2ee38d1556544", "fc5f60333d23904e24284e4e355c442512c36d4204f67c99c2d2871fa419e0d1", "fc815575c4c0f080ad0917a63c976413c8ffc248454f622fdf762f9c830e26f4", "fcd0db05256c4187fba22ac34dd9848f9014b2107156743742ceff3df4d64e75", "fd12e2ff385d695142a4004c9a312f70bcaf6ddd40ff6b327c140829044d63f6", "fe1d871d9262ed9821886b96f6e161dddcfbac458a8a63751950e9f79ed5a152", "fe28a287ebb5c847f2a46a2e2a3c23a0f962b4a9873a1ed0555ce6d5524d52de", "ffa0f8019866ffd41c1f5b898726718600abaf5bd2052ffb3fa92838c32a14a0", "fff8be77122be7a3a11fdfc43ed1b5bf3d8567dd7d24bdfb8de90c4450d09732"], "iocs": {"domain": [{"host": "kz0t0g6xn457m449312vx962m32v69[.]ipcheker[.]com"}, {"host": "17d98a5d[.]akstat[.]io"}, {"host": "r0u603u61y8999y[.]directorio-w[.]com"}, {"host": "4o91sy32347o7x636pk2084dk0p66z[.]ipgreat[.]com"}, {"host": "8s8908905t67uc0a75zm35c78xq0ex[.]ipcheker[.]com"}, {"host": "7r3u5sm670kplbt6w1036p7ployl36[.]ipcheker[.]com"}], "file": [{"path": "\\??\\E:\\autorun.inf"}, {"path": "%UserProfile%\\27F6471627473796E696D64614\\winlogon.exe"}, {"path": "\\$RECYCLE.BIN\u00a0.LNk"}], "ip": [{"ip": "204[.]79[.]197[.]200"}, {"ip": "91[.]195[.]240[.]94"}, {"ip": "72[.]21[.]81[.]200"}, {"ip": "23[.]79[.]219[.]185"}, {"ip": "67[.]202[.]94[.]93"}, {"ip": "50[.]23[.]131[.]235"}, {"ip": "23[.]3[.]96[.]25"}], "mutex": [], "registry": [{"key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\IMAGE FILE EXECUTION OPTIONS\\WINSERVICES.EXE", "value_name": "Debugger"}]}}, "Win.Trojan.Gamarue-6739927-0": {"category": "Trojan", "coverage": {"AMP": true, "CWS": false, "Cloudlock": false, "Email Security": true, "Network Security": false, "Threat Grid": true, "Umbrella": false, "WSA": false}, "description": "Win.Trojan.Gamarue-6739927-0 covers a family that, after installing itself on the system to survive after reboot, will spread itself to USB drives and modify system configuration settings to weaken its security and disable certain features, such as the task manager or the Windows shell, in order to protect itself. It can exfiltrate sensitive data and receive additional commands.", "hashes": ["06c823cc443447348137467a2951dd2d34b4ffdcde178e6d1700394ef5e2793f", "0defd1806fbfbddfd772df482ca562d31e1a01ee9a5d4a5a964d6729bc6051e5", "2da83ddb169023cb60622ef6e297b65dce69151c803fd29d53468b5ec2c6dedf", "2f90ed051dc82a7d8bc389debf88284495f96f56a51e36c1a4a1e41634c28fcc", "3e3decd6f11025d59dbb0c0457b9e5e0353a063d53d5725a3a94836819613a1c", "42fd138ce68919a322202dea37bdafffefca7cf9bb91eb47591c0b6957126478", "44e49ebd375b57146ad486e37db18e7809d01d51c0ed55e8d8afe9c43d3a5485", "478ea2c130bd95ecf1763952f2f644a8b175184284f9713cc35abe0c6f6f848e", "4d60b0ae61b9ef56997be59f7c896f2a60e81e28d267cbcec52a75140e05aa16", "59751557033163959f841a10157e94f1c9fa8e5366a910644f1966a125ad9b35", "5ff49224ceb338b6b35b7303c68ff3df9f87099ffcec50970627a06e938f510a", "6b82c968572a2ab008cb8bca2816d3f7cca491c059aee6b1e7a693b10580e073", "84b9a43ff01d4b6be671749b56dcf724c0c4553153dfa336730f36b42fac6969", "884ae2b467d21f8dbf65bce26b08a6659d75004b22f1af5d7ed8e4198c2688ae", "89653d4159192e8df7843942f543e4a3dbf00e89dc3f957af38778202159ec85", "9b082ca14ca1f7f7244f1a6b93062c01a8c336bf3ef6cab707a2aada4214178b", "bb3f180271e5b2f30e1bdb9e80c75539dc8fb06870cccf571f77cf123297d432", "cd80fcca97cb88cb92da3d5fb396b24e102001d3efc06082e6e3dfded9f8ee0a", "dbcf9f6802b6ab0d218e47c44113e589ecf753dc7701e695bd67e9fe057fbabc", "dfb4bd0bdf964886571dc6dad423d5a6894683b59f6620fa2d426b8a81cad311", "f1ac70e09fc2deabe8184133b0955841be63928bd5f07df647ba89e795701e07", "f4b168493c04afd24a7d93d620122da9483804215f86f68cae2c532a2a5883a9", "fd24deac9cf57d3de7884e3766ad3cc982090fed9068e0b4a02d68cbdb5b9369", "fdd6cf898a92f3343b73400f330ee522ee8d6b947802138c7c17c6c0db82bbe1"], "iocs": {"domain": [], "file": [{"path": "\\Autorun.inf"}, {"path": "%LocalAppData%\\Temp\\wmsetup.log"}, {"path": "\\??\\E:\\Autorun.inf"}, {"path": "%LocalAppData%\\Temp\\NoPorn.exe"}, {"path": "%LocalAppData%\\Temp\\mplayerc.exe"}, {"path": "%SystemDrive%\\DOCUME~1\\ADMINI~1\\LOCALS~1\\Temp\\NoPorn.exe"}, {"path": "%SystemDrive%\\DOCUME~1\\ADMINI~1\\LOCALS~1\\Temp\\mplayerc.exe"}], "ip": [], "mutex": [], "registry": [{"key": "<HKLM>\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run", "value_name": null}, {"key": "<HKLM>\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\", "value_name": null}, {"key": "<HKLM>\\SYSTEM\\CONTROLSET001\\ENUM\\WPDBUSENUMROOT\\UMB\\2&37C186B&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_GENERIC&PROD_HARDDISK&REV_2.5+#1-0000:00:1D.7-2&0#", "value_name": "CustomPropertyHwIdKey"}, {"key": "<HKLM>\\SYSTEM\\CONTROLSET001\\ENUM\\UMB\\UMB\\1&841921D&0&WPDBUSENUMROOT", "value_name": "CustomPropertyHwIdKey"}, {"key": "<HKLM>\\SOFTWARE\\MICROSOFT\\UPNP DEVICE HOST\\HTTP SERVER\\VROOTS\\/UPNPHOST", "value_name": ""}, {"key": "<HKLM>\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Folder\\HideFileExt", "value_name": null}]}}, "Win.Worm.Brontok-6739140-0": {"category": "Worm", "coverage": {"AMP": true, "CWS": false, "Cloudlock": false, "Email Security": true, "Network Security": false, "Threat Grid": true, "Umbrella": false, "WSA": false}, "description": "Win.Worm.Brontok is an email worm that can copy itself onto USB drives. It can change system configuration to weaken its security settings, conduct distributed denial-of-service attacks, and perform other malicious actions on the infected systems.", "hashes": ["005aeac3a2685665e22aac6270c7effc4718c92737ace9f6215c1f3e93adf632", "007cfb6540762317643054786cb91843f5f713f879ca20d2abcb63a02ab9c87f", "010b717c887c1f7d8a0f08d73b01f37b6d7a871e2f17ea9dc60a1bcd379b0f8b", "036e59256be20eeed60c1dc49f2182089bd22bbe5aef75bbfe234f9898571d96", "03d0d49484f05ff4461d8bcb40c42c38f72cea2c5b673e93f1329dfecb3824dd", "043f25f1981421906c255dd5379e878ec4c5a359c9492abd3880eaa3176a4578", "052f01970798eb34c728da985358f05ba47134e84c381c96cea52f7274e74d31", "05dbbe0b660825cd4f2453b1afcd483ee3523771bc22a743e913f5e867fa063a", "064e0bbb5470221d65b575e930c7b615af574f4f8395d573afbaa034ae4ffc6b", "06569b13aa7a18eea8a863c768fe47468e505a898a9b689c376ab3cb3f957b80", "0676fd79294f4ca277380e44085176012b97e5e07ab652009ce85791294a6f95", "068f0a2d6b99b2701ae41325851a6fa258059c535765c2eb9ba30fd94118b995", "0721857c17edb718c984d002fd24e754672e3d2eccaef2dcbc78f7ce0a902eac", "0830ddb3dd73dbdbe524db466a035a85ba2e1eff6de24738d7ab42acd4ce4da1", "08fabe5f7aabaa4e2f8a432f9e8287c7c80073dc05dc4fc9e8590f1bf15c25c4", "09600f1b158f792909a105e155bde59e24f6e46322a13b7109649d15c97689da", "0b70dbba443121a8aed5e4adb630737a773622ef16415034f5e1ef7af9a18d28", "0b7a26dd115453a5530b387338b18d05d826e5ac3174399567f03376e2e67335", "0c902a3a4a2a36d64351861dc4d8c2ad74a1415aff9b5f71ffc3e740a691483f", "0cb7d5f688faf979b0d53200b507c0ab49446e2fc798635dca699ca6bfc2cf53", "0dc9618e5edc34a8ada892b5c5a403eb9e64eb8e51772d35f4ee79959bccb686", "0e8a750df320de2ee02b70b9c27b77d835ffe4c0c57b0ec6aca73e2df78f39e3", "0ed1e47a487b750d9fa86743fe7d8a285292bf68169d61a0097570dffae443a9", "0ee895125c27f3def3a2a60a2c16b9a66e0c2752337e621ce3cf0a2d70372aeb", "0ff2198fa27c38bfbbaeb1e56f28696ceed254b749ee3b44d1163d41ebac534b", "12716f18d0ac69fce0f71f7b582b67866d7bb5f8ed6918b5f70758677c276208", "1367ded4e74ae0cb28dd9da3c594df1072b6aa95db6b726a81481f75b8f2b197", "137de35243fa65e4c8a5d7208b9c00a07b7231f05b842a204d5147de00a670ba", "13a6bff2962b29f36c01be2e09d176bfdf470eb24fd8be3f13bc03adc0b9b856", "13efe42cb7c91694b8b41700c43b7f39ae9bb2394636596e85f5cf697b2c05a2", "141acce47b66717f718f0876b3515928f23a48ca19454ab80e4f3004a28d59ab", "15c8a1e70d1f903850a1d8ec981c1e4b768782d5f35208b7530d57346834140a", "166c99824eb284bab840d14e78f1c536b2f3d4c873e5580f508efa3ee6412e4a", "16986bb177e5ec67b8c0ed191b72f6a5fc9b9e951156f89202d1853b0347cb34", "18c0d8f8ece451c2423919f98cbe34667524873f0da6bc8eea917ca3c25c55cc", "1997b806eb036f4d50a269905ac1e3d4ba61e6af51065ec836fe0099552da2a3", "1a66438df52c5d33c7aa79de69dbf8994f40b537f1b653fa7932ee60c43aa604", "1b27f6d2085bc4c1296c962b99b449af8f0a1c0d108544199274ed8b8af6562f", "1c1c6c77572212fdb03260126068b25d3ae2ae3b10f878d4837df0fd11cfb454", "1c4bf95c1d3e4c8afb3bf47c33fcbfa4e89cfbe94eaa87f5845f6e2e51457903", "1ceaef855b3fb5dc06957340ae3d17158d3aafe71e97b72133210a117e50b2c9", "1e34560dad1ed4e7f8553536bf62198c0c62166b4646c6b7f1def8b7c7f2f1d5", "1fb79b60633e7036616f5d24de7a34aed125d65748452ed5b52a0e6d5ff43b5d", "2050b2274458edcd813010b0c353140b0fe4e648beaa64c2096cd779a1793ef7", "20634a44407191df015664141ef665b6f3aa981fbfc299cc853e8f9ddcee9c01", "209809ffaf13c89dd41e16ae395218ecf721ef9b5568ad52e843319202451a3c", "216208c262d7bf261fe9d29d417dba8a6bedbfafdf15ffdf4bd21df35d829453", "21bd39548b769a15ecdd39672d0e6f91bfb74ce6d7e1f6c83c709d9e12d9b82e", "2265c76f556733bfad8df87389a8e21a3ffe43d71d7944cb2b134c8eb50a4860", "228e085922addd06ea7f447e568a8cc7db7448d86ae3a6bbdbd972925d763029", "23679fb96bfc005bd4d6788f9cfcfcaa6dc370f93c626e9f2f5c3c5fb95c7c10", "237bb2c4346695fbcdd8c2dc74ba549163061bb9af2c0041a76e0dd4ed493e24", "242c7313ca90b87e87b6462b9ceb4fe6267b9b43794fce29038e8bb35d4772d3", "242c83440c40678f35394016c474823f79722c4fecfe7e3362d3a06fdb2dc738", "248f39237f5f4ca81515d01892bb3f53f69e3468c2592e8b59404c63587080c9", "25a3b7e8f1a502125dc95fc9fb242f9cf05eac79fe3ce1257264c1394622d6fa", "25f380709d1ff1f2eb1c51fb2a4fca15ed5f0e1873b443798988d802320d738e", "270d4a01f6b27747f0e3eeb225ffb8f2b181d377ba23d143e9c135059112a3c0", "27c4ec219746cbcacc4ff60c12907c3a9bb814f321cf2316ab1f2c86a5041165", "2812ac635bd1970c742cfd9780c6e11f914b66bf96277ce05569a183047a7cc4", "2920320a44423baad2f538ea29826d37d333d75b96e6f842eb08b2f6231972e7", "2952eb626485b466035dccba95899d3b5c1f820c8e734e2e4d581dcab8f207ce", "2978735b95ad2eb79b35a5d9ae9c64a52c39c01241ffb6a7d8f44060a3eb565e", "2999e2b0270b557aaa30dd44e9fdc2451c1215aaa97ec0d235b0311a7f705b8b", "29a00a1c601fc510f30d298bf786805cd82fe241db92174ee0be167d7ae0de90", "2dec99bb63a1805f42b8e9ef5f1c52e907a23d5d358a3603348f045a8d560467", "2e063512b7c9f232579177b44744330b7fc509b5105ea459397373cb3ab6d971", "2eef76e3ce1d5672e7f1a2ba3a2d16790d6e900104c8b0996d49a79766eb2d56", "2f512541fbf2873e23820b77ed333ec83e1a7e8c7b5a964197e852858563ce85", "30f5c6199f8ffc20bfeb18a6315aa2f4c9f738886ace4d16522a7dff9730cd54", "313c4544f5e555105bf88d5ca61133e4790256c87de39b14be0422364e908049", "33f1230374d9158b7ce8d2085c45688f91a000b1d1a8ce62313dac523eb03b18", "35770a1d21260e3732a36934ef26b944ac6c59810a7857fc511b0c7980fa3457", "3609603d5eb8f990eb48d793282831933cf8430fbe50a6e5880d7d68db9ab30a", "385ea8b9eacd01a7c1dafe8236c49b7c219debe6d5a509021ad5553814273a27", "388eabc65c3071344a756f7e50ecfa7f58a738adbeb1c0b1bf52e9fb3cd1b615", "39029d9811d01156650876c88a9501f773f5658c70f8717bbf7b158deaad8e7a", "3ac16c19bc6e48d4cf0e2173b8c2a16fc55e027f11de293e6717098e467f72ee", "3bd07060b34d660b5774003dd26b500cc2a9e72e20fd747aaaaa960d767b302f", "3bd7e983e4aa0594c767efe6faeeb435ea4dd7554840ccae5896c9b4b5cd9758", "3c87e59f96da20e52484073b88f0863fb23fdd5ce164e08899ddab83daef2a3b", "3d79161f447e575551e260af5681ed97650607ce3216e3dbd779b960df821196", "3db5fd54b3fe257147a6ac6e3da10ef5a1fa57618234dca987cb895f7ce72360", "3de146ba5d4137fdb187f289474811235a4f1e74fa881f33c3ca9c139daaf1cf", "3e55867b872d4af143dc8ec7c958dad7460637a4e109e5e210052507bdd37ecd", "4152533118926f6d0039d7828be2d1a5a6a97d62442180e05249b6b4ca629f19", "415e8c38ed467540677a8859fb387a67a7fc1dc1ea03cac596bef1016781d9a0", "417e4dac594704f0731297c72d2aabcc51ccb9606857bb2d50d51a1b72d995bd", "420826cc615d4672f0fb8967547f029745e5b0a4d2d1c8ceca22be81688ac4f2", "4257f0cc5ef88694df05cf46ba254c3d76c5e9fd4bbc196bc63e7f933c42bc4e", "443312b9fc5c6ba0bbc0b46af2cdf6e33ef23f3ec9760a2715b2d7ff9eb41ef2", "45c5b1f1295b94e3c07a7c7cbdfaf589715800b4c96b27921c66b966fb94ca04", "46c84f55b2e71840affa60f1f3d4443b30bda54fef909abb797b8fcad97c4bf2", "476d20fa548df3a83115ca1e9c4d7f9cf7aba5ca7ba8120e915a19f0f89107ae", "478bc5cfc8d0e73d63db6cbfdace1d137f26d918933fa4b4b83f21cf52a01a0c", "48b2d0162d89915c28f7f0cd8cfad1577ce3b9a97bca4e3ccadfbf82d0430b13", "4a4bc8e892c1e250ac55edb69bf3048a3afe57722da4db56a94112f232ae3d81", "4ae180ee9312c1ad0b0ef0ec0b343acaafd3d60a5343b1a0178d75ab1958c86b", "4b11a2483a8f4cacac7d08ba4f2b82aac94c089583343c1bca50d235eec78794", "4ceed4c04cb2d89c451a16ca0e6f2d86611bda216c53e31db18e58f6818bacae", "4e2801055ce77aab9838f330dec0bb1b7db0bf261508d2fc01a6fc1716208920", "4ea629708e6e9152fe7ebbd4b3802dac130f64b7884b8d6a7e1cc6e6f85af7da", "4ed4c69ff6648afa80ffe3f0a3a314e732d431105b80d04506be67ce9ee6b4d1", "511da991072617f2a329470cf33b49a0b417a7130bf509c84d1bdce14dfa5400", "515149f3850a5dc2ccb03588934c0479a314ae220a3a134915fa55672fdf9f74", "528650feab58345b6a0c889e92da3cc3bb17bc7b73be830d5aed9d43071f5943", "539da100ef00ca87623cc93351ff279ef62eb31ff5103b83997bdf9fd14a520e", "53b519240c0882b98c5e5ae50caac89fd1b89fc56f992a086d1b67e95dbbef3f", "54c0e15fab955bd67a5278a6324a29463f7d79480faf0567a67b10b97e1f5430", "551cc902c263c9c3e8bb0aea1a96633b32a2eb0869a374de50ab3a8c45c00080", "552dadc472f45ba1531ec1dd2937b264fe072194d413ff51e048b80f72f0b1cb", "553263baf0cc3cf14ab6e1df3af3c2e1fa27466ae36be95210cd48171171b701", "56b753066c15ede339ed9ddbaf0e95774de5bf99d3f7fd42151b806919cf5ec7", "59bff46bfc1c3abebb9631e79dc377ce874cc7ce1dbd814cac06592a1e899cf2", "5efbc20dcdbb5532ac6c02df399e1d90116dbed8966bf4dacbc1fa9aa2f46ca7", "60805c2fcc3f0fd6dceb1744bad1fa9bad7bfa0ac31fd9da5dcf7fc258271400", "618aa166a111df247b6ef63d5c33042f056039b65568fbb80bd31d5d43b80225", "62e8db99be223ad58bfb9d2bc9221ec3204c6efa5887e3524efdccdf85983f57", "63d68f85faf552f2c4953e3680c1c68427d10f2746cf72e087631c105aeb8f2a", "64ba03a155d83ba13febc9addde0d9377e21c51b3b5d6e13318d872006e20076", "6511c427be01a1f936919fd06edf38a722c2ad3e1097fdfad2674cb866422dc8", "6547bc0cb5994f65e6b437d2e985ed4a72fb92d5fa0303f2e6fdc43d0b3611dc", "671d4f40d3d442d7660dc7327397f3830292cc5c7ed251c83191aba5e13c7636", "68688ac9c9c065a33da11197982c39351329479c13ba09c59eedba71e337bc4e", "689a4259c1b3c9d70624a76fa30973a85aba282749dafba528d8195a95f91034", "6a423c4659874564945691c3e1f332da13dfd9599520d69f4a50c8f2a24df89c", "6b143c02a85516649b7ab512aa5d562397cb21e2661c30379c469c0bb77d201d", "6b6ca236197b043aebfd6f65abd72eec2679309dbec801d41a3f196f508034ed", "6bfc9ea8d8d77a632416536d56e1acb2342b11056d5a60b3942330d8479ae70c", "6c93498c19f697bede076b244199c77e4d77e7ffb2b5354856a4b6568663b574", "6cc317c0522e4ec3f48e9fffba07f9c5f5455f30b33eafb4dbad23835836502c", "71faf955bd92fe28ace4e01ab84d4af5681bee0d5abc88a994f8ca3c098a1048", "7234b348ed7546f4748a0575d29d4ced247ce266f7ffa49f0f432098b0948b77", "72a53651fc7f7a99e0e0a77fa257a3334b3c19004820b4d606821bee4bec1c51", "72f7990536ee61f5af796ee6bad1afcceb4cbf704714bedf755daa9e8ed5e5eb", "735fac72da614f9ec2d0fbb064ece1f26b3319d2420dd6daed5e98a05e03e79b", "748a98bbc0c9d331c81ef5ba1b966df381d6377a3cd62b8c583c9db635cdc1ad", "756593f511a04160d5c7d1899f3b4caf33184c188c62437db2f14016598b8c70", "75fabb20465d5be3beba927426545a6308bd0b92b7b2eee53d59c74a5fc6735f", "763895cf8655effd5694b5b61e4e8a9bfb7af1bf5ea460fb290e5dc8e211acd0", "77a71f6b858f7fabaa79d437e958169e3f1c85b6ad816fa9efe776b39f96c0e0", "7808517f510a3f18113ea48d2a9b1171b3ddb4c1e1b95fd5ac0891079fc05727", "7904a073e9f1e13912a541b2ab74c1faf0a767d60ca0958862bbca411f83419d", "795fa3ff3c9431900e679912723f0fc8b5a97311ed4c0ff939402c00f3e37924", "7ab41df1241edc3dbd5c802175a34f9188e7309f0fc7396a340c29af87f921fd", "7acaefe5f8bb90cf67277b64e2300ffd1f56b1bc3c60c6d6da4c3688443a600c", "7b998106b9e21bcfd7679ffd32eeb76130e2e428b194776b07e84db947e4bfba", "7be9dc16759e6355c67f72c9954f7804029964a65c9cfd208eab0383dde6d60c", "7c47a2bd764abce10a2490f0c231f13b3a02e7ceed5dbf570d227aa8dc811d5e", "7c4a360a8bd197d7cf00c0d901df27366737abece39a650f874eeda070449e71", "7db2e9f07e3e294e0c3c9ed98201d702bdffc16b16c8882672f6c286f5c16c7d", "7ea3812568e6a7f062efe00ad61807a979f10e98b5823d9699b190bed0cfa2e5", "7ef5fc0446f78f25717bc31e314e01439e3c8132664f8330b731d2aa64fcefa0", "7f5db474b04b7df87760f5fecda83f4825999aaa16751712c71f702c4592f85f", "815d49be05bf0e00cb3373c613da72aa7b58aad453c72de03ccc54cce7a8c6f7", "830b637fe30e08f4a81aa5673c798d26b798efab7cb703171b0fd435a5112f11", "834592cf49dc886af82204581d0cee27174be01e8cc2ae6db7b60b4d440aa3ee", "835d9277aa36c4d7cc15e235074cc89b1d486a7a04360be49fca14c317d3ad75", "839a882927d827731fd3ce32cd0c6c2150f3f821db98f170e8f87ddb80579117", "847cbc9479852b5c6cde1e8010acdc8ede503bdf5be21cb36912aed28e90c178", "85e1c159260b7b8fe147901e4c0d334ee5e4ee970207039f23e9336d94091390", "85ec8c8c1b3e74de9415f181357daa4380f739c47c7fff57931d76766028a909", "864a4c653f6e706450c1819fc1ac80915abe7e0aa454b67e1d83a81a8efe75cc", "869e966a284bca2d170584caeb35876bedf9ebb693b607d1048aacfcc952213b", "87da1eebbe3ffe50de4e9a29e6228aa4cbb9ef6e665aba5480351b9a84775582", "87e64e235152d33a3bb9c476cb62bb8020e21048ee96407caf9c56ef327f2915", "887a525b1ef2ab20ccf2a263daabf36e26ea9f10170edab2bf81059d0ec24c67", "8a7739c8177781e6b3575af011467d0bb4e57941f3fbfdd5c8b8e43e4950d54f", "8b1fae195d4c8d453763961df37a7dafd2cb0e956832db52012f7e64ffa51f31", "8b3ac6aa99e82ae3a13d0ddd30462ae1e98d2474b0f53bcd2a1409b9e05e2007", "8c8c1fbf0e12f210f84da8427cd45add14c24a4877690a86c64ae190a1c52f3d", "8df1116bd54fe9829115e50f558da12799e37ec6ddfd7fe1e3cd5b9e6d0c8640", "8e0bf4883aa1675c57cdb8c60d1880f389567ea6bbcdbf826480992f599fd0f3", "8f51e48666fcaa801897b2855b5d0382768c0b9215ae10eb0a03a8fc3d00276a", "901a51040a70c95a1640c122a34ced2c6919feec34d88a93cf32eabc4a9d9638", "902394e7490702508193527a46c95eb81ef12c8489c2304082780b58c95be68c", "90e10d835b411a6dba087896b14200054119c09c4b6abfd714a95fc05847f9ae", "9116b2e86491fcacbb41f148e7bafcf2a0000cdb1794c47c5dce24627445613d", "91e57b86993da45dcdefa9743cfc4afec27aea6db6449225b93b72911586800a", "92054834fc116f94f7c1124931016a61698540e95c5fe65dfcd1e8ee14f4535b", "925cba0e99d527509dac4540837df147e86ef0b6a51f42805559b633db6681b9", "926959c79d188588bef9b545c4510619e5f6b8d0639825bf2d291fa7b4673a32", "93f9942eea4748f2de0fce0c799cf475638681a92b590b517959d9c0d372ff80", "94173a75ffc7d9896b237024f98a166207d7d3f21305c0a5080dffc3a8bc8910", "9507e96a9e4bdd05df5bc7bc5da88126ee96628a4621ce86f0e574f86bad170e", "95cea0768fdf2d3b339bcbe7cc831a148c0fa1f617858e79387e0888e50bbd31", "97f477724c0a9883f1b5e07b924a08c56eb6c3241e839fba598c0f05a28f3993", "98b381c8f23843d4cde22bd0839c5258013801ddbca5703f80d7a86f12101327", "98fe4364a7c51dc18d6efdf2dcaa58f328076a5528c7d4d113c3955fe8943017", "9a84e6b352f510c17fde5b843eb0e2b8aa9bdb5586136a5ba7f1762889362c53", "9b074b1a8210ed8a7da752802b720bf5fc4d1466d8a49734af50707628e76b0e", "9b2fa2a1ec44eb3bd9000a8d1685e0687044e9dce1b2751c6083cea372bbeb9f", "9c4cdaf2d8125dba66597626b6b6ba7ccad253402d7137d335f7f6e44bf4c7ca", "9d35745845696c810f5e6eee875e592dc3db3ea5b43a4a5c215a75e2983f1334", "9d6f309d0774a9ace218fdb1580fdeae81edb45c37e5a26e6a72d78ec73f297d", "9e59bf10d9846e5eb1ec12c4f486ce932dbf7e1eb60634c493fc29e3c262336a", "9eb36c3608163a817596539fec3c68a33f8df389830e78410080b0e1c6715395", "9ff1a932092d1c73ff7a66cf180710a5d99330ed88901a36e108025635a0b3da", "a0e45016ab90e3b91b3eed6c39dac322c242dba1526fae11568bb6775eda5882", "a20026b05f631d00aeac806120a8edf5411b9eeb226501db96b9046ea0bd762e", "a22652cb1b06106f0c57f010f290135a85593f17221e15ebc40eccfc1b7fa4d7", "a25054b5fb52a9f0fadd039a10702b2ee0d24fbdc1dadef693fa497d636aba3c", "a2557eba05af7d8691a11bb9bd0625c5916ce522497cc1b1eb0cfdb7a47196cf", "a2806bfa5da669560f32fd9a78e76dbf123dd04d4d22d9d22f588cbc2a5e6492", "a29f59d403f2be1f730e9de864eab7a7bad6c6ecd5ca5cb163335514e256c979", "a2cb5490a4d0ea4e03efc2a923a795cb003fd2538ee532f522a27108cc68d207", "a302c2a05358523ac68a920cc3ac5d5b1310d3dc0eef21fb94c6b1ac68e4c7dc", "a38e83cc2f864166bc1d56c34b7e41397185f50c4d49988a6c0038e33c808eba", "a5088d14d80fb3c2882169efbbddb16f302d6c0b9472ecf6c40ca264744c45bc", "a56ed2eeca8c2be89c1247f02b631ed0f6dd1cb64ed9a80fd1f196dae1d547b2", "a6bc5d34f24bab97cd3807dd2b03e446ed02c01b956410cb54865b70b3b05a88", "a802a52264feebdbc1a1446713913e6b7b01cc6f5f8b9bd3df857ef9dba80734", "a8e9e360f0c6abd05feb8d1bc154081941ad46f549df915f03c27c901809a2d6", "a94f0282aaa9207d6a9fea705ddcea9c329c3647d17e888253c487fa48859ef7", "ab5e4d11fa7a98ae5fb5099c13a3a0ac9de99057e4b704de59cc70b6eff9f8e8", "abe806a260516cf2a12b970ac92db6a64f467200bfd75f5cbd5105c5fd2db8f9", "acbd1a72c4086984c68dd8f5e056802747ef1a7528edc2f947e26f9886c8da28", "aefb56891c47401ba42d8556bcd9cd84e6460eb618249f580a4002840ad8b755", "af130f9bd8f4749ad71b960237547c26ae5e59017351cd2b232707e8927e6040", "af503bbb34d465879bda8657d0ca0765a56f0ed75876a84398c687a0b3003b4f", "b0f5115e42f939b51b4d0c9de68e12756aeae89705620ec6762cef3446c856fe", "b1df8303228a0595922a661f43f982564bd72ad56ce700cdf1500c3f82f1117e", "b33f271cca91715f874ee0f1b342429b53c492cff46dd207b74a7c49d20e7fcd", "b37ea3b98a89b774e944f14cfcdf92cec0ae25bc9005b19a75e3af99e1f70c79", "b3d8c1296a9455e2b7fafb54d512f7f8e35742b5adf0fabdad929d6297b32050", "b44f7aae6677812b46db0754385d905c937a94d49e675c08bb8b0d8adbaf04cd", "b49e45edd0ead29a9d2b62c739ba6dbd09d54c2100fb918da891f167654447d7", "b500fa7e7307cdda429827526bfb4d2858d1c86efc9b9faa04e60fbc4a49f7c3", "b6b5384bcaf94946baae79dd8dcfb30f12b79672093e20d04b35c557608162e3", "b8e799f5a3012fadc175b0f7e7659d30c7ddd2b947c634fb2f9503e833d569d3", "b9eeac82110e31a247f244f8df3fd6ddacad61b5d44d6e1b14aca4961b6f0ab8", "ba7502ddfbc688bf96978037df57cdd1ec2b27cf9fda6403799e601c95c9abb0", "bbead4b1625cde794d34fe99f3000041bd5117456c68dd74322d1c8d23e34493", "bc166bd830134a5f5126bf9d65dd1938ba83bd48a8398c786297040d7328063e", "bc6abfd31c319c10aa78f949e276ca9a07f6fc3ae48d4b04adda82563da358ce", "bcf70f5ccd87c22d4eaad2b476602caaf94b59038cf29c7d7343d8745bd9966e", "bd7d0123e65e779b5f381ded4e4193cd0eb8260fe209041ac6f54c5bbc4d9aad", "be4eb6e3f6e0cb1a7422658c3d997ce5800068e7fbcdf6aaf1f4cb62df666c04", "bfe2d0924cbd5d719a86c247d1de89e00546469173541ed474fe3ffcfecfb7b6", "c38bd23a5df48a05920670aeeb070d839a8f83f6a1f5022c9c3e3c1c5093844e", "c3f86f053739ced3b49a415d7e94598609766367391404b769a0eaa9da461c83", "c48f532f8f42f8f94c1504541edba70caa6d516cee025f949cede0f8ae1da101", "c50eb3854ebce8480a055ff7ac269ba1ad4aea9a6ec79e9e056e8cfab5fc80a8", "c6a085405a40520278d57cd1c6712fce9f0d57fca7c9cf6d9e0c9b5082b1758c", "c6b7524521ea0ee5d95da8bb5ccd5510dfac0599ba2ffdd27ca0fb74b1968a00", "c84788e2a99d00e85ecc7cb081c03c361d4c95877ae051b72680e30a71265315", "c8f9d0f6831b3c217406f5786894107951dd20bd34989cded8acbc73e027cce8", "c97759f06b95d646dc6780aed0122a6b0fed50a6ebddf50607330b32a2c35bc3", "ca13f1012249c39cfc9a1d4bfbe4f0eaa25a50c27afe38ed7903d533039f7e7d", "cbe650e6ed2ecdb179cca41d1590cedfdabbe8dead7ae0316e1927bb033128b0", "ccdab796a895f6de39fe7b1ad7e686ac9fdba7be8f109868c4863ccfacfa14dd", "ce15ef79b794a619fc00ba2544a1acb2210f9d5fe189d70469267488242cdd03", "ce2ead80b1b433d9aba459b3657b76806747f04744011bc27f039a1163bac9d7", "ceb6aa9c8e8626d4075a7cfd994c19c480b79e5f6b96da4bb72300e4dd1b9f43", "cf1cebd842126a028dab449677c23389bd1181fc6d8703bd335517fff74a5555", "d04cfc6eec63a3685962f9957183c654d08c28400a9765791f07532c719948b9", "d1a662796069984c5e6d4343ca34e521838f3a7e4712a78cf6361254b654b0fc", "d29595d6ba3e2ec301bc74b3d0d85aaead7cbe362c5f5d68f430c5d61296071c", "d3538d0c67cef68d5972f5d6f7ab3453a208cd243d91cd64f3ba0f96e6e35a34", "d35aa74b95708b7bba5024d92ce8282c328b7a510b068873cd13bb8e64e46a97", "d39562811059d01960ec1d70a32d11090f71d5ac947e874ba61a7e0ccd867f22", "d3f665f54497dd6a306e4c1335b48208e570bd85649995e8fe7b13d1fd4acd65", "d55b458fdae9b7ce076018407a54ec83088b9f694f460377570e349c70bd50ef", "d6209a25dc99afb287be74435ed7c378b8de4caa6da8ea96941a84f3f91c15aa", "d79b4651b61dea4e2f27c08b6732694a587dc4df2c5c9221eb6f0dae48a6fcd1", "d7ee59606df9ae4684d6cfafbfb739f003169dd515297bde70eda9d4ee0395d9", "d7ef9a425cfc270ddbed689674fe3d013e980cedb80c6e06362fbb8cb0c7a57b", "d87104ce88be587c6a73ee76ca02e69f68b6788cc901057e021b551b99a188fb", "da31a21e4b442c6fac19ca9df77d0dac89096d225cc2913c4ddb8a027b4e84cf", "dae6072e4a0dabf4215074f1c97d8546a000ca2b6dda85e50ac792d20af30871", "db7477fdeb698b0b7606ffe8eaa836f1baea7db360fcd5d8470c4dfd43419db9", "db979bf36505a0bc53cd5fabbc9897cd2cf9c709745030d8cc38eaf0f4a8060e", "dbe4f1bc2a6ffaaaa0a54b0b63cc5a2fce9de6c1d8fbaad1faa63102c93ae104", "dc1068f220703fb26de1b06a086416fd47cf37f8b17b2004e07310f8da698ef6", "de29b143bfd9b2557828f9ce1d0a6df455a5426e54f62503e96f1e1d634624ff", "de48da46fb0ba009ed8b7c01a0c706ef3169f1708f0a346560248b945c7b2cac", "dfa4a94453abe6daf2c131e13b113fbb99fc0c688a3d3781835adfc459890f65", "e022426320f530e7a454d21092ab1b217a9ebb06519c5b17558b45caa7ab7862", "e1bdea5c454e01c7dec32a098c82e23b382ed4e27587758cb960994fa57c5cda", "e5c2d05e5dcba16503d93d6533e1c04edb4821fdbc9f26e92f430a83675d4028", "e5dc2ff6cc8c79fb52cbd0e477f4121c282479383e04e8bf0d58f950ba620475", "e764a555f5a759e3f0b5f048c7557b0cce6d0707b52d7b4e4c410cf1935077b1", "e8149d9ac2e64686be4ddf8332ee96fa17f75baa8fc46579627befa4959232b1", "e851d818ee2c901b4f530ea5e2c36fdc2baeeccfdf82024a38e39fc089ca2c44", "e9a51df683eb435818b7fb4690b4753186fded0e47a924fa396c6197c7c024e8", "ea3ab58a31b409de66369a878fe723917914d0d190f3f6d4392a642e34574841", "eb4598ca30874767f444f40ce30642cffcc2ca58f4f82c1330282e072b41ac9c", "ebe522915056bdf01a55faa4ddf07e9054185382233447e7f43bcd9e568084b5", "ed64d983f4acb38015e349bdafd15bbc6d81320513149946081ede43b1217d7a", "eea463ac64e87e66cc2b0dcb3842f2065bfb98a6dc55c5d0f779c669920f0537", "efd78e531390415daeb13c87423a7d8602ea127f20f6f2be8067766749c13c62", "f1df76ddd3f63c915ea1e341ac68c65d21f48dbf0af2dec5472395003d52a65a", "f2bb0c4002bcce84acd6f322ac84b8139d9b9b941d8f2cf302e0f97f83ba81e4", "f389f2fb8b766b1c970dc050ef5ff348ea36c1be16cb89e98f7f792e80b59c96", "f51f15760edf7c45fcd4ec70a6b7bfb26b21e0493e2d721743971546d1a56030", "f598fdedbc4d7d56a3530f6d05db70faf5f47c7b967fbcc7eac31fee4a483e1e", "f61888425079efdf88343e83feefc5ff2142be5fa3a5d30701cc123ad129d44c", "f7bc2e943bfc944b090368bbd8f2f7d98f4a81801f4e0009a8438814c12a8a95", "f989051b10fce24ebce9a500c54cd4e17988a8089fe7287df6a0ece4aa88c46c", "fe42e6c61129e11db1c83336b958047536aa1eb908f29b1c78c9d819cac78865"], "iocs": {"domain": [], "file": [{"path": "%SystemDrive%\\autorun.inf"}, {"path": "%SystemDrive%\\Documents and Settings\\Administrator\\Local Settings\\Application Data\\WINDOWS\\cute.exe"}, {"path": "%SystemDrive%\\Documents and Settings\\Administrator\\Local Settings\\Application Data\\WINDOWS\\imoet.exe"}, {"path": "%SystemDrive%\\Documents and Settings\\Administrator\\Local Settings\\Application Data\\WINDOWS\\lsass.exe"}, {"path": "%SystemDrive%\\Documents and Settings\\Administrator\\Local Settings\\Application Data\\WINDOWS\\smss.exe"}, {"path": "%SystemDrive%\\Documents and Settings\\Administrator\\Local Settings\\Application Data\\WINDOWS\\winlogon.exe"}, {"path": "%SystemDrive%\\Documents and Settings\\Administrator\\Local Settings\\Application Data\\smss.exe"}, {"path": "%SystemDrive%\\Data_Rahasia Administrator.exe"}, {"path": "%SystemDrive%\\Documents and Settings\\Administrator\\Local Settings\\Application Data\\winlogon.exe"}, {"path": "%SystemDrive%\\Documents and Settings\\All Users\\Start Menu\\Programs\\Startup\\Empty.pif"}, {"path": "%System32%\\IExplorer.exe"}, {"path": "%System32%\\shell.exe"}, {"path": "%SystemDrive%\\Tiwi_Cute.exe"}, {"path": "%System32%\\tiwi.scr"}, {"path": "%WinDir%\\tiwi.exe"}, {"path": "%SystemDrive%\\present.txt"}, {"path": "%SystemDrive%\\tiwi.exe"}], "ip": [], "mutex": [], "registry": [{"key": "<HKLM>\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run\\", "value_name": null}, {"key": "<HKLM>\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\winlogon\\", "value_name": null}]}}, "info": {"origin": "Cisco Talos Intelligence Group", "publication_date": "2018-11-09T16:11:48+00:00", "version": "1.0", "warning": "As a reminder, the information provided for the following threatsin this post is non-exhaustive and current as of the date ofpublication. Additionally, please keep in mind that IOC searchingis only one part of threat hunting. Spotting a single IOC does notnecessarily indicate maliciousness. Detection and coverage for thefollowing threats is subject to updates, pending additional threator vulnerability analysis. For the most current information, pleaserefer to your Firepower Management Center, Snort.org, or ClamAV.net."}, "signatures": ["Doc.Malware.00536d-6741783-0", "Win.Malware.Nymaim-6742391-0", "Doc.Malware.00536d-6741218-0", "Win.Trojan.Gamarue-6739927-0", "Win.Malware.Mikey-6739644-0", "Win.Worm.Brontok-6739140-0", "Win.Trojan.Autoruner-6733593-0", "Doc.Downloader.Emotet-6744157-1"]}