{"Doc.Downloader.Emotet-6894115-0": {"category": "Downloader", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": true, "Threat Grid": true, "Umbrella": true, "WSA": true}, "description": "Emotet is one of the most widely distributed and active malware families today. It is a highly modular threat that can deliver a wide variety of payloads. Emotet is commonly delivered via Microsoft Office documents with macros, sent as attachments on malicious emails.", "hashes": ["2ed65e9a1e796862f97eeebdf46152caf4f7f4204b801287bafe5b11e948ee1b", "4c9295e6906108f3dc926a9591a148e4e2636a893d4d2505b35a0d030635462a", "563991d43d484069890ca97745c1d7267c918afc260d31a52ec5bfc899a30c94", "848b0b2455cb049ec8dfa798592de326b67abe036ae7a637c8aa3ab9e91f5cb7", "a06d630f62bc13cb49c794bf934a4a3dbe8cf63f352304e71c056199a065958f", "a42af575f713389ca1b0cd0156dceb753c1728cfe7c0e7a6036c53aef2d2d3fc", "b9f83bd5eebbdabf1cc5ff8587ca2f12a91f4905538e65587b35bd8bf1132e9c", "bf0ee1f25309aea8e27968f5d927fe8d05a66437cb86102d367305e61ec9f5d6", "c60eb3d68445ab0471aceef71bf75182d9d2f92e3ef3ab4fb148d8852dd2c5d0", "c9bdfb2d6ac9e493bc391b2f64b48d8d5cde10645ea921951b23112e6d73545c", "d818fd24d2ee5426ca535b7c966021cafbe7bcbb68b9d6ce420b9006859f2df0", "f3d7d9b36113ffc6aa4388f4d2f3f52349a3ba0984f9adc696b1a6d9db4108e0", "f832543e87f24eaa23f85c8976b79d7e49d1b4899f5358ba54a71b7c5f803e2d"], "iocs": {"domain": [{"host": "emseenerji[.]com"}], "file": [{"path": "%UserProfile%\\208.exe"}, {"path": "%WinDir%\\SysWOW64\\SCwdrA.exe"}, {"path": "%LocalAppData%\\Temp\\CVR478.tmp"}, {"path": "%LocalAppData%\\Temp\\iidzocqo.viy.psm1"}, {"path": "%LocalAppData%\\Temp\\oflithzz.nz2.ps1"}], "ip": [{"ip": "181[.]197[.]2[.]252"}, {"ip": "94[.]73[.]147[.]237"}], "mutex": [{"name": null}, {"name": null}], "registry": []}}, "Win.Malware.Autoit-6897734-0": {"category": "Malware", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": true, "Threat Grid": true, "Umbrella": true, "WSA": true}, "description": "Autoit is a malware family leveraging the well-known AutoIT automation tool, widely used by system administrators. AutoIT exposes a rich scripting language that allows to write fully functional malicious software. This family will install itself on the system and contact a C2 server to receive additional instructions.", "hashes": ["0df27d70990f8b8ec8b3df25cf1eb9666bf92526095da227080a0372c60aa588", "287d43060fcca28466206776b5a147e83d3fd7de4230f1cd909953daa12d0156", "43e9ecb0c189695bbb533ec47746edf76778aa1a8b0266f5ac267f79f5cef03d", "4634ecfa0699f7408c84fc3c2cdb42601d372777237eec1fe0a58868ef693c1a", "5721c80fb52b4db900819b1738db0ad82c502eb7d79e152edb9f2e371f3c9664", "6635eb7fc5c7c454b6c5c19018820e249318c34305420cf27392c171df491635", "6b327d6a88a18c1167637a8878bf441cfcf567e9c1e19a95c27b93c16e69b45e", "7642637e654417d9add1a62ac596cb8d1d84f793749e9e4cc92a117e33d56133", "87d5cafaf2e1bb5f56caa5aebd24fbf9941db0e079ba854fb9aaf3bce4c819b2", "93cfe8d255a490ac9f173ceb7618a019a25b9246b87e0493acaa20dda799950c", "d8c4ea9786f6ddc62da7b3555b3efb138ca0c4a0348be83ecec060618db2c276", "e4503c499e82fa0bce07fd10fdcf132d4a0933d309973b94823366d97a05c4e6", "e48da123e2e08dd9f62abb56e630b8edfe4ea7977149bda53522bebacfb10d00", "f51011fa1fbfdf0be75a9300931d33b850b601a01d1a4bfab33c346e3fdde5f2", "f5bbc3ec89ae91eb6a25cbdb66c4a95b1756298815a50a9e0ce2f27ba57a878f", "f95c285f6632fecd805fab3e79d018ab4e34e2c230adac317a94ca55b15fd35b"], "iocs": {"domain": [{"host": "charlesprofile[.]website"}], "file": [{"path": "%UserProfile%\\archiveint\\adalsql.exe"}, {"path": "%System32%\\Tasks\\Gfxv4_0"}], "ip": [], "mutex": [{"name": null}], "registry": []}}, "Win.Malware.Upatre-6894504-0": {"category": "Malware", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": true, "Threat Grid": true, "Umbrella": true, "WSA": true}, "description": "Upatre is a trojan that is often delivered through spam emails with malicious attachments or links. It is known to be a downloader and installer for other malware.", "hashes": ["15e6ce12614b3b296ddd76343b5703d87beb736b162128aedca6499e40ccdfed", "1ad3cf284008b50456bdfd4b8b6bdb0558e5667c34d1406bd7f879b33e8cf6f5", "24ebabc590cff41db4261eea662c91d3e3d48bc7da2be03009fddac26861117b", "3ea2036f27be61f73ef313f78a094c767164becbcbbfc9c4c7a33f3160d9f2bf", "498d367976283785672c2c695e29ad7b20a2b0157dc1dc13acef67426da96e58", "4c9b775952a0b574d258a982b0fe3bfca25f450b7e4ddc76a20981432135afa3", "5d9721eff25abcb7d7a4af4af2d0dd568b181375186ef20a024cb9408a1b3975", "68c841e9b1e4d2b2cb65177913d0a7152decd5ecc15f9d424897f2b277ef75c8", "7f26231615eab934cf6cf7d54c9ded34b04fc068fd9ee274b4037843ca22c69d", "80e7912b1921cfb610b2b43d5ca74c3aa5c6c3edce4aac9bb554b58dc9ddd6e9", "81c52a86cae959eac3382cb9b72a8afb47db16746b9e9c3b9254dc0353174530", "886515171b4b044976140bcfe2036796c80320072f54ad60078203d7523aad1c", "8a53bf2d3220ef740147699a1a801cc58e4b48052b9c5569f3659ba1a26e3a6f", "8b241d4a533f3f6ac4819a22e7c1dd7f18556e1f6f835584973902e63ababb66", "945055c780e4f5855616bab1b2b94807ae603c6b2c8cedfb0dd5f32a4c07a784", "a3438650289b8b3025f6d08414af69cafc016080868a0a30d48239716eea2420", "a95e1d9364069d02e6f844461cd9e7525f1c3f7a07960486403fee266f0fe8c1", "abb26593cd2fa77ee16fb0640465ec21592cda8d370c13a2fb74836e065b8f69", "c036fcf79a071d900b32100d015fc16bff5d82044139b6098eebc98009d2b056", "ca0bbd8f09581c6c0920c782a06d66e5cad25ce672f22e4ca0dde4ea98b905a6", "e45189ab53b35195f4676bc9081a605dc28cc79e26047763ccf2661d82120221", "ed75f96c614623b6c1aaa793cd8239c86049635d75406339ec778e7ba23eb317", "f9ccc2fe7e013cc9ee47eecc3dde93f6bae4aadc00a421254ed6fe35370b6984", "fcc0294acfcd7e2231d83841cb31e88363f75efab063c79c4a193f2c0cc26460"], "iocs": {"domain": [{"host": "ncaappraisers[.]com"}], "file": [{"path": "%LocalAppData%\\Temp\\opera_autoupdater.exe"}, {"path": "%LocalAppData%\\Temp\\wadly.exe"}], "ip": [{"ip": "139[.]59[.]81[.]114"}], "mutex": [], "registry": [{"key": "<HKCU>\\SOFTWARE\\FC6A75BE78", "value_name": "0521341d"}, {"key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\6C5692EEDA48CF842254", "value_name": "4DE9F1CC8F5AEB40A9"}]}}, "Win.Malware.Ursnif-6896385-0": {"category": "Malware", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": true, "Threat Grid": true, "Umbrella": true, "WSA": true}, "description": "Ursnif is used to steal sensitive information from an infected host and can also act as a malware downloader. It is commonly spread through malicious emails or exploit kits.", "hashes": ["002c189b365fecdd1a985d49bb4fb006c15efc47b1000defbdd6f4af1c11a19a", "02a860f30efb515b8c290d7eec3aaacc31e13db934b950c12c46c2b418f44c6f", "0698973ada3bb251a5d7d24af6532bfe757f26e21c5ccb4683ea90fa22000d31", "0bf3ad196d5c033b96508b82a4627371b410a4171a112fe87749ffa35148e700", "4e8a9df93d31b02390be3f76e8092bb8dd1296da7b583f0ef7d1e0a4b621f5c9", "50e11389b6a65a77dd2806b0101c00c3ecab05c885904d8ed93fd7d5a22caa29", "65365868838db8f45660946e8cf4e48420fef2f191087adff2c8525e1e9b92ab", "68ac70dcad46e80bb89338cc239d9c7942a4d7baeb39c783cf7f3f41338afee6", "72ea94949e5a93a9470f528c2e19fee632f1c35e6592e7466d230fcd4425adca", "8b07ef958d6f3f94cb45580d4aaa99202870f35e6c309d94894c5601c861cfff", "8ee22466de53f493c666b1f805bfad58f4b9d33b657e266dd65724efb96002e7", "9124364a4c9db508a438403d4742db5ba39542753f2a67e4b1f77854962ca1d2", "ae0f77690e47a8662efaa1507002e3924c2d0986e6c1cd39d3d775e53ad982d2", "af421716811ae86cf1b9cb4c1615ae152515f3dcbe3bef603737d663839bf520", "b6ed38788fd409ada58fb0446d839eed07783e79b829e75ef031d67a53a3b62b", "b90a9ca23c1b2667d8a8a8e14bd3ccec4f928734e91dc28af26e69dafb991668", "f5bad2d671dc5b30fdbc93304e2d9b194033cc307099eae1d58cee17a2cb717a"], "iocs": {"domain": [{"host": "kkariannekatrina[.]company"}, {"host": "f61leeii[.]com"}, {"host": "qmitchelkp[.]com"}], "file": [{"path": "%LocalAppData%\\Temp\\~DFDEB0FC636A1346E9.TMP"}, {"path": "%LocalAppData%\\Temp\\~DFCE77235CFE7E5202.TMP"}, {"path": "%LocalAppData%\\Temp\\~DFD0DDA0AA1947567A.TMP"}, {"path": "%SystemDrive%\\DOCUME~1\\ADMINI~1\\LOCALS~1\\Temp\\~DFA0E5.tmp"}, {"path": "%SystemDrive%\\DOCUME~1\\ADMINI~1\\LOCALS~1\\Temp\\~DFBF00.tmp"}, {"path": "%SystemDrive%\\DOCUME~1\\ADMINI~1\\LOCALS~1\\Temp\\~DFD9FC.tmp"}], "ip": [{"ip": "91[.]134[.]203[.]113"}], "mutex": [], "registry": []}}, "Win.Malware.Zbot-6896522-0": {"category": "Malware", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": true, "Threat Grid": true, "Umbrella": false, "WSA": true}, "description": "Zbot, also known as Zeus, is trojan that steals information such as banking credentials using a variety of methods, including key-logging and form-grabbing.", "hashes": ["00ffecb86e72d9357a6bbd15b6354fc9213033f748d9b51b597fcc365a9e1f7d", "010d598fc0465864690982eec5f30ef48c713916ef4e45a8d8d49420342df428", "018edfb60377a0c076e1297bb407cd42b16ffb2c08d4d2aa32b860b061ca5ed3", "01bce31e9de13c804a18643616bc34f64bd1c5b25bf8a10f422e2ad19fb7730c", "02701dff6c0a0f71b66c9cf69bd895129e810a1a13bcb18be9a8388ff7821b89", "02b10171ce53f9592cb441792f91f1d2a7ea1af92e8a814e3bbc42b647afff2c", "02c63a651be113f6b1816a357a97af54141e2bd6d9ce4aa2827a629031b8eaf7", "02e7cf905bba1542c36e54c120d57c583f6bf33fc15a4fea4e8a41187801b041", "0491fc85d831a1f252b61ad87941db7174c53c1b849bc3fa67604251bdbc7fe0", "060b3e97fe90a1c725a41fb0ffd3a01ff7b34c74f1460b68dcf05b668dd5521c", "06b7d5b411bc5c2b50aa6a257b0799dfa4e098a249602c39a3a43160539087e3", "06dea51ea8ec0bbe9578024339ef207c8cac340ca608b519c22999e109514b47", "082549d3ad41312e5014c2ada5b99d6dfabc29f09b19ef4d1d9a7ec1297e8356", "08807c13e43fd5d202c97c68e25c6178445a65cb0c8f957ff3dc17a293b11020", "08d6916f9a64fc2e725d578d1c11c1f77894edc35373d7d308e039bc85e889a7", "0997d72a90fbb50cc4fd395c6d9b5bc38f622f5bd66befc055fad32c19ae686e", "0a5e7372e854b6ab82834abfaef00be3a1713ae3c921f3d693112482b8d91dff", "0aa62de7c50e0d0498ff66687e0ed5ce905f7fe5014b765586ca64c283c2b595", "0bca5fd01e55d40ca9d324e0011f56de76cab17d399f6655019f85cbe16ae060", "0c3fea106ea5b2d0f943580279e0ddc729e210716ba82344a619ab901438511e", "0d08edbe5a8d68b1a6c29fd0956514036a94638e6443db85c37c8e532d15a2c4", "0d9c6fe9e4172a80ad9c912eebeecf2baa094012552267ad70d49d6f583add8f", "0e9189428c742936b52149e2579844257ab381570b9c13d440fb3304b7cfd935", "0ee3a3afec6551c3cdc20836f7d3ae8ac1b20cd7dfa6a14e379ca975d9b342b5", "0f18e6faa5e6bc9e81e5cb5c51a7cbd03589eedae7565d1b270fdb803c78c437", "0f53aa819b68a7d33dfccb5f10f0ae1a6d6ea62e8da773f0e495f7a481da8e24", "0fbd6d75752c76d34595c8a7c0d720656208164ada46bbbf54de7de724253226", "10c2f69d6b5969e887d7202f51beec9e1527cd7a17d2a4f95049602637e28441", "11737dba9bc4b7742fe916a2114af52c10301128778b7197f3476d7cc61c11a3", "11ae54d1b78e186fb794f75dcb6d189e01f3bcd48feacb2221107c90daa18db2", "11b55ccda0b7a03f0c8cdd77d6f90d4099ea5ffbb154bc9525456250b8f9ef17", "11ec2a42cbcc9a54210c834cfc8cddbfec2ccdf10dfb3323df3372e3f255ce0e", "11ed8f2f07009557b1c69ff2381986eaa6cfc383c474be4fffdf6691b86a1f52", "120456300074f700e3ccfa0333ef54ec045c08de44f5f3da5af557a41956b2fd", "121ffd0306975998657f80e1924545d62f5be590443e78c8a5be45202eecfb47", "13939ace260b22dd5426c7cb6d654bac00f67f67afa5572459f9de2850f057ed", "14d6fff276acafc86600fbf4998e89b8fe01278269329b69bfbdc5a0db3e5c03", "154edcc365763c7bb776283e9e6a70c54fcc5b66467502bd3027cba4d47accb4", "157a5a5835240acd91a2b3aee19c5443e07fb6679cfd16db30bfd284612c5d09", "15a891f4e2cdc91178bdb0b859e8fc65335ce334a8b2250336e949725a17277e", "15ccc395db5bb07e62634b5338b909730690e5004bbaa707b3ca56165a42ac3f", "16291d1881e96bcfa4b73f1da45e6a22913ae25d4b57ae33c5837a3ec8ca2f83", "17167c52037f6c3da594a2ba765dd4a087d528fc1806c89cc24432cf4b102c7f", "17a95b2bfbb865f25e64bb83984f980f523b3c0fd052222910f0d099f61f7b8d", "17f64bbd286070bb49e889728e461388e1460aac822e7cb252470ac03feaa463", "18fcc25289b62336fb194f7b3839c2f66780581d2dac3ed44df6521ad62be16b", "1925440ef3860970c3421abbebaed6fd3453b856ceae0e81e27c0611498cefe4", "19c771e0963125149e00144966126c839966291b49df48a683c5737583eb1483", "1a2b12451bc2fc17dc51ef16ba7662ed4996539405ea59ee0f51dcfd1080b4e9", "1bcc12719775c80a2f0071d73baa1cf8650985f8712cf77e413e7ea24a978580", "1bf07394ba2d7388e9f68e53b7beab571e9621c46acb569b21f1cb43a7dc2297", "1cd3beb9a736eba65143df37c9029e963e4e2b2b676ef4017aed41037fdcc6a0", "1cf50e3f221a4afe0b352a4070567d3ca0e89b2bbd45990b7e25defd97050dcd", "1d51d69d242bd51c0947091b3e6c3a8eb7a3bb9bbca529ea23cbb07664bb5c96", "1d58814ea1c83edd0761ddf9f8f1a1b49ca766fe7a7b6e4105b7324be87b0482", "1d589e9ddb816442892ab7831d08f4cdc0e6bbbe4619d144ad1c796bac3a35b1", "1e3d5e3d8235b7f2392edc0d50102acd46febc234322bc4448c3d948288dcd36", "1eb38c6a2a0ea22e8787acc8d38648d66f70fed2bf547304f28d17025dee1119", "1ec17f6d2baf8fbadc54b40d1cc2c7418e112bbd165b9c9ff38689ceecbefea1", "203a9fbc48b2e0a2898c34dc16401514b0c4f9f2415198bb1da8f7da05a55fdd", "2266e8b2b745e0d2c79f01d58884b7b69db91d356e2398c30ad0a579246f7233", "243b2eb80b731f86f379d5330fb4a83417f33384fb6fada7703325ccc45a0276", "24ea31af704f6c3f81d38813429e2ee02fc3f20ce64a300035829b2b43c01d5e", "25c82bb8be821a2ebeb24a6122fa613036b661d716c3978fc19c019320bd699c", "25ed7e962322d8934dba038e2dc1bcbb34dea2337fad2f9d092af5d87467a1f0", "27883a2ccee3315d11e1440ff9be39f20776bb3507c7525ed465da790f7d6134", "27fb21454e1e4fdbc0e6e5e664c5e22f2d419c54cc3d68b0a2ab858c84ce1a4d", "28535e61bb928eb5f3893e5b46128bb391ac595926371c7a7948dd87dc9b93ed", "29077ddb674161576324cb3dde0924578072d18619c48fce33c5f48da4eb4b98", "2918d84e10feef5318fe965d904661cb4eb65f87185afab85b52927b5adce914", "2975984d4ca5307a46d9885434b9540dcb5be6ff709e02557e251f7b0f252056", "29f10654b05c9903dccf13a02ffb72580a9025c955e42099cae686542f6a6fdf", "29f5588792f211eb9071fe750e82848609bd1967f32f29a0b2bd232b6e0fac65", "2a471ea47cc57285400d505eb61d27fbd2cc1871f0b2dedafabf118ef203e752", "2a65d50e43ddc6484e5d26d83ff5aeec215dde30f1a96ecc1c297eaa2d9680d6", "2b9464681f7cb1d68f4919af5bd94937aae1f8b19619262efeb688a7b268ac6e", "2bc5cb78b3d7a8849867ccf02b4d22a03a2d35d0401fd1e875510f9959ca88e2", "2c3cc84f8306c8a45d95f6b0f8e8618cb2b43aae7ebc68b24c90b11b9338b9a4", "2c60fe352c5dd70583ee24076f9b316b3ad11f3a009b4dfc37a1b037d63af9aa", "2ca14f450c6d12b90dd866980ca68ab70d18d9a5473e3d8dc54a9a74fbd92c6e", "2d7aafcd3046fe15d329ce58b939de55729fbea643c1740434f78c90d42c893c", "2f600acc3859fef2023f3fa769ab00454104477d95e675ce0844b1cc5805b722", "2fc96dc019b4036fa6235b26de5020a5347b4c7bb74793a69336afc083901cdb", "2ffceb4a5cb0ea5eb203bd8738620f3df2020c0a587521314647ad7e4f7038e2", "30344aad49876d32a8b6fb6646404126a50602799e6083e216cc8af91b8357f4", "30416af003c06ae2c514d0886353e1fdafa917a40d3a9fe3c7510d5c34cb3d78", "312e930d65dad96bb5678ca46afdfb5c848c76a18552855efdfee2fd5d51471a", "31c38764ba8bb33f52f73c4163ed19339c2649e428135f2ce63102b79d757e5d", "31c5fe1331402081ea5bce67f72805b145ed6e8dd597c41713c32d87b4674c5e", "3202cf44b3ad6e35d9c2c580cc7cbc36889221b75ae21780cec845b80a7779c3", "32b79885750cea1a038f368dcd52e5ab09d4b8c331bbd51f9207038019a71b7c", "32f3d9ed57ba1e450eeb01ed3c24f14aa7104dfb08628bb3d8dbf4dadd10d1a2", "3359e33d2eb8be192728c46f94913bc116437fd03efee6ef3b7022bce97be196", "34b9c28a69f33e6a0d19da06a69349ec8bdf9b4c7dea6e3d0ca2d9178a229cb9", "34ea646370663ce0ba78f5158c78034a4732266ff48349beb5a706235a796797", "358e3cde93a58e599cadc6b0f5f148f5b8338ef5ddee6666de470a30433192bb", "36ea0b8e511bb3e59b5bd1b5a2035badee1b7103e890f0ac9fe615dc14d3d75a", "3714c42c3a9a608bc4ec7c08a28ff684d09e95672fa0a40a51a4cd12a20564e7", "3742a5651cd0903f5750fc6991173ed1ceca62a5cf5d41ff2f04d78840c40e74", "378f3ce1e175d3541812098614390a7ad035aeead6ab70b2c87f622560a63afd", "380a648f844b12b8b6a3df562f5a1cebacacfbcebc76ceff867edef4c3b45ff7", "39d16c716d4397106ba5d6ebe68a304733f0b6fdb40d020c03c3aa27bc1d4de2", "3b3c1b52b26fbe4336da04b28428386c2d2788463b9b7494d7343f863d73ed7c", "3c384c040dd29e9a603448dc29685d64e413e62d7fac348fcd26b427e7b76a97", "3c9eb06708e261febda0e1ac94769429e91fbb24bdfc4f89e1da4447c8595172", "3cc98aa48428bec66fa310f7dd1cd4f4e2961b5a6289d8b63e8f93d3160d0f6d", "3de2e18b61a1dcf01a17ceb97c695e4655448881f4cc2db2aa9c47eb639c51b0", "3e7eaa9ef3279b4625efaf63b26c7771e764d9a70808934b4c70d7c42d939943", "3eed6cb413b1a429a5e043fb2cb1729cb3221b36f9833bbaf2c5c1ca4c98dfd1", "405f8874e1bf893b91b58b90d237091d20230d1e50d9e33d3147bed885e2047f", "409523b6a6846c2823b7e5866271b71c42b1c7b84a335be075261e49138dd434", "41b28fa4fcb303d9519f06d208c1adeb03aca42ea668380fe6883d01f05a6483", "42aad72ebdb708d8debffd6a43e87b6223be24ce3cbe4b16c03f365b015e2740", "4566b8280120ce63a2f63300cee75d9ec081f9845c0a2597e05d5ea53b6c649b", "45a46385f2b752070949b0c95512f739755001a50309795b64787f1ce85c53c1", "462c149f00dedcd4c98f132781b24922ec84d00278ffa864cc8cb348d5f63792", "4637113d8cf7147f2ba869d29fdeb5e913d0de72da54b805e2b69baf56362764", "46a27aae550ec661813a172db462c431bf19867fee55d896bc77e6e1379342ba", "46d214f556b04e7a6a60cfd17a15052778f3b6bfa952c4cff01aab315ede5568", "47db7c8ef305f5481baff2c890d2779ab050a976d19ee803bf60735d01812959", "484a4e23a890fb3645b08a93fbc5ca7e6a4405380c4e5e1dabaf24a3a29b9553", "487836345815178791d24226b8502c69dbfec89860f183a3aa7225b9334b8e94", "49395b8355fe4d664e2c0a04f131e78c7e253dc92b3c46ceb6968ecdfc590d77", "49c1e18d9affa73c1de342173d4183d49af908232b854515d3ee82bcdfc010d6", "49eac757ecd65c46521f658645384222c3965c6df3f2f678297d3c141f1f87b7", "49eee2a5047365803afc9fc64c965790454998afd0e846d43d22809e7e33ac71", "4a449488169e8e270622c4aa7052997feb600e00c83c54cfd19f01d9de70c2ae", "4a5438f6e39435daaae65831d48839ea2af3a83c1480e21abab2b9b3bdd3849a", "4a7948d32da4920e542844a444921881778697c024413e7a14bddc4eba9a7761", "4a8c83260ff2918e172b261a98c53a9016258964e3d6902cfe7b3c2a63a44298", "4b5398a78c34ced2968928f0573b3dd454faa487b332b4a40dde0005368da40a", "4c32e87e2f540a991856b48fcdd1752d65f281948aa8626cc509e5a613d3289f", "4dd69e54419249d1a60f06196cc789bdb641abc8aff0b04f8c8c43416b706566", "4df2e6ce7d0bb5b682be25245fe1f0e7be11d9e9703b5af27d68f17951d14121", "4eec5089aaecdcb587bd3b1e808c661044f7c4f71e17a57076a77430aefdffe2", "4f3f7f4e40cbfa734a943866918dc979a73158f5c8f89f70f2cd4bb8cd9a6bea", "4ffdaaa59fdecacd72af807d0eff7dc775a66049af61b6f73787b83771300f6c", "5183862a6e6a2edb776a4973434f7d48ce799b743f1d6c472dcc62fe03d98a67", "524f265f5fe46103a08d43972ddac950898c7ecdbe99f8b1baf6952ab7690b3d", "528fefbb532347302c8b451cf0656cf838191c9dbc7b0c0bdfa26ceedd445740", "5358c64867aae834708e955fb3bd18770073eef7c0b44b3e62efcbd50287e84c", "53beef887ed1bd052982bb2dd3ca39fa6d3a977bbbda12ff4ad09bbcda59c543", "547579c64394b246994e61d7b0eca130ea16f57c904429439dd1f289a7200cb2", "54a3f51b520d91919fe21c31e67fa36fd9f250e383ef9026a1b209297a7c3f14", "54eb2a102ba568fad3b8963e22fc97665e2a71ec3e3c306e65a75a5907df416b", "5582ead4461d5e7bf6283bd87ba99eb02b5a7a822d3a7c62206cddd7e2fb8179", "558d3b86cbcbad8223414c457995a7f65c9ad5dd624ccb355b62161b9e02af28", "5649474982ea2632929931740a37333191ece873d3b89f428e4efb10048a3765", "5649dcf88e8c917b3613e6b4a47bdfc022b608e1cd1d5a2fbd4568efac66e95b", "568145f67d9cc7d711aaac8b94c5633929d0c60736055a428d66421c6581408d", "56fa2f58aa5c96095fb61275ec33e730fe386c299db271298f8d05a322a16682", "56fffaf9084ad509da62d030c5cc1accfb5460769ab5e327221bdb4169cba9a9", "573fe40abe47d94ac832515c89a9b43ee2f834356a0948a99ce7c29a0de903b9", "57727aa101316e3e52306e6ede8f5eaf059052f9bff5672d7b225fb7ef36e88f", "5811d86966093b3bf8df3be331e6c4f8546a9a755983cad8e2bce9777ac29077", "59c641bf61aa4a11de5b30b78b56d0a1e97fea53e82a95d28466708abe3081f1", "59f27bb470d7c2d0e1760770464444fd7a3a94f44c86847c7200026489c56001", "59fee21b87982602bd1f98ea2038f71174a34feb95cf9301ee6cb81786ce4abe", "5a5709df2498e7dc499096d15104edafaec5509460dd35269b0045f6edc40367", "5c0ffef5f9e6cc25c93aa06f116b3dc867c8719b6d64dbcaf2c73ec14adf501b", "5c1b6c84dcefed58c0eaec0894bd2df0fb1f7afcb3f9e60a4c1cbdd0116c1cae", "5cd6c32ccd84c316725ee10d9a706f3112f38cdc63e8e64c81bedf1376397894", "5d82da92110a43e7d7113e25455f7ec43459ccfd23a093c541e0c192dfffbf1b", "5e46c99067342d0eba437ab9cc77ec1f76e4e9d7526ae3a43f6d59111bdb2e98", "5e63e7621c7bf555bf431a03457cb4cf513d8925d6b10e153f4d4d27d0708d55", "5eb49d3cce141461c333f6e5013f4fd4b0b3d23427750ecd08620bc918232b37", "5fb6b8f32593916fb423e9ae5305b302fca284716852075aab5f07bd44db64f0", "5fc593767807114f0357f68b5f60a9ef7b30985a3913551b631dfbf036bd6ab4", "5fe6f892335c95fbf5041082ce016e6f6d91ab48d3623fdb81ab55cfe6050e08", "5fec3fd5d2efe1dcce224d2ae0df2c28edeb404b3faaf2ecedd19b586de1e054", "619b332d1303b2011fdf14fa2afac29422cd304ff6847e2c702bb0d756a789d1", "61ef0dd359fa189edc8d1262edec29644ba2636d3270a1f82e607b2eccdee515", "63863a8d7fc297da0831cb29d673e68947058fd2ec1c768c59c1163d91b1d307", "63abf11b4f4b881c14f95350db666e7e275b669bf9b4fec0454ec5314721be16", "641e3229e25feb4678bb255756ddc7eef0036298b39d353d2e52b155229721d0", "65506b59de2c532f8f445ea6003851be0ae6a12408135848e58ceb3b59a15069", "657d8073b1713e2def0a3162af702fae2e2df52de9c7a9811142c91b546e6103", "65fbb935f0831c347eada26dbb0a59558007b6b936c7d9298314801e846c63cd", "660f12f8a802a17d898a019340ed155bdfef9fc3753f099f3e31490ebebfd1f2", "6656a0847a9b7672e274bccde1dc3318cf3e5b5850b10d5f62708b25783411c9", "67270a47701080cb6397bfe1dbf61d48d0e8e05162131c8e448f206c83725720", "67545f9db0620c4bffd112841b8556e222854350db5d74c4eac550da3ff9acb7", "675a25daf1e482b6cea028afc001c15f56b6911fbdf2815405ba6ca6d7ca4541", "67f969d0a4be27bc823440c50e3e05d43c9effa181b9114b7f17d7dabef9fae5", "68a1c408f6f24b9e51374029b4a1e723c2bec2b475d7c781f3641ff4794d8449", "68c3ed5c7929bc0890f5a0e6411418ae8d46af06c2b5abeb58eb97073624907b", "69db81b524aa5a5fc7e421c7c9528d81c614625e9f77889423f2967181af66f3", "6a0e91987ed0b4c7d3b9e3e8b9cfa4168344d251d9cb22a3e1a7cbb49c0dc1eb", "6a692873f7fc028722b63f37a2aa5a70f529d8982cd2760ac9f04a897535936f", "6a7d156de556b7fdd7885d604368bf15e71666e577977fbbfa637340011e01d0", "6a8426b2caaef69c523145099f2a1852994742a65eece3d850a1d1dec182ab10", "6a968e67024007835e76502e014e2c859eb2757fdb29e4183fdf5500d948c473", "6ac869d804e42ff58b3e82668c83641ac6d9d458fa2c72a9e430d6837289123b", "6bba38d4a41cedde25d5240e99d6e78682fe6b08e5909ee9dbb309d0999eeafd", "6c4281f12a412951b9cba2eced277478d70e433488256c4d0827f33581d2a711", "6c929bcbfb48302d3831b124383a7b779a8695f2f97d773aeea44ea2fb7aaa81", "6db5d01234cdd27ee1a750fb7e52da0894d0a270b2eebf75a5412e9f48bafa9f", "6de573df3140a5f0d0367a6253b422b35fe8efbe05978f156ea4d2a11a6981cd", "6df1c2d9b325d5811f78cb1e15327e8b5e487d404c695d7dd7bff29020af2ff2", "6e2dd97ae44eab7c82620410140def2d27c9bf4f27aadf497d26718feed411b9", "6e37c949443ca44c09f7cd46ab9392f5489afda824844d46537b43795b236a2e", "6e639313a1a11a9e5e8e3a67ba60ef9b640c06464aec0797f5f47b3b0b4e7f22", "6ec645727a8e356ac7b0ea88745cc9755ac9ac40df4852c7d8220819c38c20ce", "6eead48404e1bf06e8adbfe4a9e529cb9a19d2c80143f4a2ffd4cf5563b6f642", "6f3a718ed72ab3f48c75a63b7e30affea69eb23f19a4c9af0364ce238d38c425", "6fad7e796be044c91a6484cb66f25c3a0fcc717ee38f0c5d274ca98f508b8027", "6fd663623cf096b96061fda057d7434b4d46d759a81c9d2294c16de1bd71665e", "702bc17494d97f0b98554a1489c346e6a48c0a68db020a6fbec6c59d5914d3ae", "7092c22f343122be568951dd2212b296c1193ca7adc2995f4815e07a307a4ea5", "70ef1d6f68b3eb1cd551aec9fb5d7c565b31fb141e198ff3715b1f3a18a9b0bc", "71d87ff6b8f511c9c272dd536ab3a204b20b678998e7e88acbdc854e4b5a7678", "7228c6fb18d927c24a621136c69b67d54a59af3b485c394bdec79efdd3af0775", "72c758062a70707711d5aa5f220bfca3ffd6f05d6cfb3875fe954db5a88a82c1", "743909abd0b67baceb857d5cdef7843abd1a88d683c1729f289f22d7021fd8c3", "74997d76e4b96765e8c32eb5cee02f8ab62a26c66d5f0c585fd33e19c71856bd", "74c3ad5e434f68e67fc4ab9646ec874162f57094417dd37966b39e92eeafd7ff", "74f0b21405b5458666bd4724ba4497edb47a87c3dd070ce5847436d5b03e2525", "74ff7c63c44eaed3e63db501cbb35796c010581de535eebf04c19d8ffda91640", "75271b5c08720fc8780f43ad5a50004403f1cd02d64f1b42c7cb0ee9a43ff307", "75d468f7c98e093181b97a9787a18d008f85695bdb04cf6618e73fdb3bcef64f", "770e0bbc6232239a7ddda2eb31c7042fc2aaa4cd0ce5054729d04236320c9708", "77146e055c9dd81e3b390e627f542d728fd73a19e11c3865cf85d455bc068999", "77ca5f0f95cc00f060fef3f9467271fda6e85e8d53a891dca15435efa31e47b6", "785ac0843eb64ad34f48466be3dc1c15167e1b0a8fd6acd924ab814e72857bb3", "785de176e6a0809845e8ce9c690bf6667ae328de265afff4c23f04ad4e9e4658", "79652593889cd54d3a7f4c6ba8fbec71673152c790861072167694564e491282", "79b3be7e81e338b684ed831ccf1e0ea8ab5f9d6f5e2ed2b5d364b02052413b39", "7a47efd8c479cd629726afbf5ead3a3a66934444474e213712d45c03b23a0db8", "7a865df08f18c496e1956cbc799c5cefaa2c06d55794728b6e2c4253ec8df490", "7aaab3ae5252fbfc8f05d8fc46d0b097f9582fb413db62264da50c8849326cee", "7ac6b221f1f68a160adbff6f650cf25c6fc174fcbbfba015e13b18762f725b21", "7b4b42bd1ec8a5d2630427894f3e35eb4e39a528608bf5f9e6c258eb1a688d14", "7cfd10f8132ef08bc894e8faf25e7b74a317f86638c75da4582bf58c3f3bb3bc", "7d4aae4035168b019a613ea42a541a24750c451736a06a4ccc48744ea2413e2e", "7da6d67df9b4a2b13225e9c8fef67403b1c7581deae1fbb7569847bc17b134d3", "7dbd51f6e2305508659bf7c3b0130eb5e05fc564982eecab9ea0e963be3ff9e7", "7e24b713ab9e372697e6d409acf74277fc6f23790d41090eed5810abed4ad098", "7e875174b0c0bf4a02c42ccf695ce0a9f233d9ecfab6b847339e569227c471cf", "7f3e286c03794486507196ff0d7b50d8b8598238d59a8b5d5952e678ba08d0a6", "7f4274bdb236d9d9ded5d6df95c4d3b839f7f4b54cfe1859fc216c2fb2b2e531", "7f63c1d09e439ae8a7c867efab59fe4b15f5484caedd2577a71022950ef0f96e", "7ffcadd81dab2cbb7bc154770d072bd07eb162238bccd1f6b30f6742a0df3947", "8021651787f48351c513b5e733f96206ef59948ad2f8f5392190ce8b940d0e45", "807181b22ea2ca12aa96343e5958e207922ad17b71553291e2aab8a2e522a2a9", "8153c19fc9acab670a4e7100b6bf1f1dfdce2d2a3368713a1a551e42fff2c9ce", "824bc8feb7cf36823873f20021eeedf43d42404822737e38f63848a9030d3590", "82bb1c3e27b454a094c448ab748b75aafb677f6bde5d61414ac54b6fbb1d2e45", "84108aea180c8ac6114cbc39f35f014b30762763cdccda3ec6145e77fbfc2105", "84955e40977a21a1bf5d2573a84bb3661ae87eec74c9b2fb850eebef6ab9ae70", "861ebcf7c4ef6cfa37ece35496d79b7e923349fe7c38434af874461fe9827a1b", "869420cb322245668c16a7ac4a20a91dc0f6677ee34ec3147a09eec88114bf38", "86cd09cc1992a7a208c3aa230e4e0afc74611a56051c8717755d28a42458510b", "86e23d8ef0a56c6735aff7ea58eaaf9bff8e65fad4295484e454a0a32df8909d", "86f018a70cc327369096343ec75f148f854d5e53e35fd2ee67d023e44508ec33", "873d4ef427d5b1d64dfbe2671c0e1767a86260cbdf3a3cc02e26aa5a59aa4fe6", "877eff11aa641c8354fa0a4767a82cae800421882f6320b80df65d6cd37394d5", "87f5eae40be1c11cb5e3dbbc93cbcd8f9069e0ba602056faf4e62f1b0e72187d", "88cb9e33a1a9dba2d1c6828e821bef1200467e2284273711be2a7b800bb0e61e", "89a33a33038a7bb5d1d74f64eb74ed4cd5c4e2331e1f8f0d18f70b9ae1671af7", "89cb7074daef525dc3386dce1c299622c264f5de2342b155a2e3dc090d9d88e3", "89e98996f4f5565cec53e4a41410d76a2ff095b05e3c9a604301cbe34d860688", "8ad5271f9f09c8910c0c6730bf32572fc5f7087b91a310cf072ac1d293110fbf", "8c49ef5ea5269b6225b06b323ad5a0f5f39d11ec5f226b03506fb6c6ccc4ae7b", "8e9b0e8b4459be9dc57165152c6dd3d884cdcf3c982695daf5242674cdfc3320", "8ef636b3dd7fdfd44c23cfa9e44052987af3a85e1dafa2874c597ea00d9f65ca", "8fb5debd43d34a425a984605f60bf2446b90f61f4ddb17b40ecace80a31674e6", "8fea678af863a54cb7f320c681869fa9c03ebbbdff23df8c1107d2e8baed622e", "90d3eceb95b3eb0ea5f09cab955b43cbc689e8ea823d557e5ade2fad6d709873", "91366a1e28bf6834951930c92e7f94f946f6db3642eff131d6b150cd403f38f2", "91c23060ab5b4b6805e3f88eb31ef33a1b020ae9ff13d9aea5956761c9fdc66d", "91fb74704b606ed2728514d133b8191cd3821b0531abdcc92f515ebc3255a893", "9288d06e5b6ac2cd62823ef6dff459efcccfb5a95c2463fb8c8c7423134de453", "92a01a43ba10d456d0f4a485b1ed52d11b12c64bf678a329b51cdb045acdb717", "92f3f4476e2d15c13704a9505a2c700d5d08d52e78ff557405aca838880fead3", "939449c675fce923666ad4df69b10e419d55f6d0d966a4add0a3195a00dec36b", "93bf952fd1951d6de35e21414aab94ee8abab006c60d5e36b29ac85aa5b178e0", "93dc32da0a61499b3988d9fec12a49f1b548391bc3b50a78af0bc5c78cac584a", "9692c582f56744ed5639f722f080cd2b86bfb7c93739ec24fea4ad5f862bba86", "9714785b05343571f41faed18dfcb25970c5ea82f4ad7ba55726c7349a21cc91", "9736473a37524963b34062f0dd698b64b554e2b6829edc0036d36ed18979c079", "979e504c33576590f2bffbe452cee3cbada337f286dd95124183abaa8305594a", "97e1380c18099d59090eac38d9415fedc8ccae3f299f20641c5aeefab2ff4c09", "97f2cca444b4412cacbb016202c367d5a68029ad3925615517ea0a10ee7bc1aa", "987226545a69f9502309d360e9bf83caa98d275fe7e928541ad22ce7d0acff3e", "9960c9e013bd08097a196aa0cc7a4394b74348195c4e2bc801d007ce249c9048", "99859df71c30518b54f8fb09e4d850ab3e02abb290d0a91cf520ce17350bd208", "9b06df53e3d1e6d3af88d92e5d2e611482ec23d20f17ac8d609d05317748f865", "9c365f9e3215d5ee044b2591be192fb091f4782b2560e60c096ff5bba4431c0b", "9c3eeb9dd713b90eacde9d615f85a29e04f02913360f641e517ad036298d87d2", "9ca0739d2f83ff6c4596aeaa0ee5baac26fe6525d356fdbb0a2590ba4e70682c", "9cfa50307aa3e2b170e965234d8300eeefb45297734841f938712b4855c59718", "9d0b60f4719a5eac21e93a467f47f5c00171c2c3fdb069af074a4fb2943e1cdf", "9d5313b677005909c0795f607a79354ed2406b0e32d62fc3b361934f95c2f088", "9e61064b004c607517d1267f17cd37ab96f4e6ac511c0c38582ba5535d1957ae", "a16995812f1942a3d4f315dcfb1eaca67aded8d01634e47852c8b6ab92796e9f", "a2550e39aec097c9d5f0da9d578547cf3a17bb707456fbc50c446dc983a85150", "a2672a8a88d56987414ba54921f451de11d68e00e26e7f45705c2d759cebc7e7", "a28acc1b202c452bcb50d77bd7f972536226869a502121f98f2f0243bde3d6da", "a2ad8e9e3aa14e386420de3104f58e6b8ae3df23372fc5c871b838f7912020a3", "a355414cb43763639368bb5e4af198a5b2cc7566d607b76583370a4e5d04c48b", "a3d5f6ee677d78d98d50b0ab1a81362084d3d91b07064f1cf860e847cb985d92", "a4012714d17018a955732e6c3df37a8e2e89f79e5355c5bbdc48b4d920da4b12", "a4e41c5449f230acce866fda39edbb913c0dde35763c92e40b9724e90fa91ab4", "a5873a7804282daec1177beee1a56189129731d669ae61728d4a8feb806897be", "a775b9dbc298f91115e19c02258a2f3b12cec71e80aef80f4537b07e1b4ab627", "a81f05765e2dea051dcb14733a6b51d3895ee3eb22de5bca072f2049bd214d64", "a82db99ad7df5e74a7fbb13c916df2125a6acbbc7a31b480c06ac5f7fa0b66d1", "aa2dc3ca921605f3ee22c82e09dab550cc7f9dc55e4bb66ad9d64396af8b413d", "aa7031e93e84ad6202633ddb36a8846c21878be4894229fe2582c753d395526c", "aaae881a989076b2cc7c5cc52a2d5b9861efe06da726d5b10a11d2fe96355f43", "aae4e709f10ae67273e86be49e8702a52a8d2007d16842e408059a9b62964ee5", "ab2483c0b2c447e973732122d1504051f2cb060ef3237947e61ab4fdf5dd3344", "ab481de810bfb6bcdf2cca7d505d08efdbe90d094dcb5c7f36bd69ba9ac78dfc", "ab78b7c496026daa6cbd9876e375067dc513d77098938bfcfe3dfba6fea70cbb", "abac1a96c73bd8dcfea584621babc506dfa0edf78d8229d279c4636af9071dde", "ac5de496288a2f9cb50322811995bf957d70e6befd0fd6e89f4ba30da4b05e07", "ac6fcbd090be8cad608b815052851895bc5236305d9954b874aca03a295e6a1e", "adf708a848799fa5198d026fa389bb17aee976c1bad72d0168c7f4a21b92f0c6", "ae97b7da4194f2cae84d1bc8183c589f1f682fefb5da33aaf96b8c93a6b19970", "aea38698aff6301230fbb7f2b15c6f884473b40df087a600eadf6d0d49d93aaa", "aecf3170c4be919bd8090369ac5c24f70ce9c2484f90ea96736671445ebd62b4", "af1418f091a884d3c099d42650eb55a714a0bec9214b6d833e9f95cde97ad08e", "b03a86f9d06b07f1724983a737294eab6c6b9eceb477d62c7396d9baa9af0bd8", "b0944010cdac403b0bcb9e6bcb8bb0fd08e983dc87560c8c75495eb47471736f", "b11eadc1e170fb88e0bf348286e3000d5db9e30055b354629fa228f1a9f33d5e", "b14a0125a9cf609a53b628978028f8c119ec9ac05da8cf83946afc14f10f4ead", "b1adc8a109454e17bbe00b03641fd3d774aa34c6fc0e06e580ee2ae3dfc4bac1", "b1db7e0d471b0e771da95121e7a62a747bc43f6a34ffa60ebf15703ed93e0afd", "b2401ddfd05724838e1f322105498dfff8069ecdb989789accae3900e446f7d8", "b263c588707dbadadafa2efcf7e4963a8b0c88ed822be454869be6e08dc12d96", "b29ba878ddc1be477e3c940603780501a4d2bd79dacadc4f078186026ed49abe", "b2f6b2480dbcb440854ef061531ffa83a71e58cd92268d4e3096ead59a78d1fc", "b30fab46564aa61fac407fb9e37bcf3ccf46892f281bd13e329c750fec6687aa", "b37b367b9afc9a8525d60535cccfec67e0b24b6231a0005c1087be7869790ea8", "b3dd3659aaf570d477a9ef9ecc03b999ef414daba5f22eb88a6eb8bafb438c7a", "b508110584e8cb171b254b051e990b3db1565bca6e10b698162e0ee0f5ef7b14", "b58a43d8b9ba1a74fcc14c04afe2302234809b0966ac97c4ca865b03dfdc24bb", "b5a6e0d4ce6b48a8af929e5044fe2c2c0599145cbd70d667d8be8e5ab7539d56", "b5c1d3d327bf096fa55dbd20da56a0a273ac52b8f0f40daab9f447770b78225b", "b74b69123dc451378b532cad80a62ccaf628681cb72827019382f8526db84e12", "b79c232b03c4e712c19198f2c63d10525001dec6e51d93f7f9b29bcf57694aca", "b7a662ed535e8e330e5020d594ba2e428e7b1cedc25ab7f42a7b7d6ee976a40c", "b7d4cd00bd7a007aa8d82bca353d1dadc17fa33d10974e28ac17cbb218ba1638", "ba0a8870255b9b097f5892acdd9a5d2d981c098cf4f367b87be615a37ebe14aa", "bc488f9f73f5aeafe276e6d7a9b51ca877fe63c56442c87db34f87010e0c3e97", "bd3d74cbd94795f3c5a30e7a23b1431d3e6c920579d4d95c904f518da03cda2a", "bd762df6a9bf91218ef044a101c068a1f73ac8d27622f87a92eb6b17c2d843f3", "bd84dbd0e6a0c007f522b77efe9bd508e93b395f72afde0b39ca7b1446b8ed33", "bdf544c102549d7bd1e8995f9db641b04005e0d44be7d4c487ad35376978bf1d", "be49df7cf2b60e461cbb4f118efaa53b83556a9e85a234f213f5aa571215d9ad", "be51b969566f1f84e563b774525107643c72552cbd22de2cea97396f8c72ffec", "bf6c4877ca8e7b6d2b57aafc4ff2137959ecb1f915b70bf7a0b82a5cd366eb80", "bfdfc51038fb2baf11ffc415acd050c9446a8dcb2ca09e9923c26c08af70bcb9", "c01ec9039cb58396cb606b30b21bc9aa682f459ddc4b7464a9ebf291fe7fb61d", "c04a67f1a4f806914b272e88d854dda0faf6ab78580a62b87b70d31452c413c5", "c0d7f2ff4a8690e8a9fc82058cd5823350185f00963abe32d163a87f728b6597", "c146e37d73d77548249618e3b992d3715522a7243d2d774cf54602e643de85ea", "c15457f448c0290b2fc1d1b3689aee7576a10711cef48703aeedf8cd8f2164f8", "c1906904b16117c2a0c73d8dc7a647ab4895cc891655228e6b1d00d17cf6b3d1", "c19487e62e4fbd982cdaec64240652b9d5c8b74f0cf64ca4a68c503954214ca8", "c19a221ae432b7426bd6a691ae77b1701d7964e3d0f0b82e90f313cd6800b4e3", "c1a892a4d95f24fb3c47678e26243a9d9621c08d074191233bc521e23226a7b4", "c207f1f720ec6b6e193f299a477834155fafecf2e4c194c727b9a5c5009e4dad", "c260ca0495aacdb170cebeb8377573afc0c9d95473bed56eecca72b26a419a28", "c2a7319d87040611b5332a20686d87f420e985eb82cd2d6b33d0fad47cc90886", "c32523d85d77738f33b5b0cec7e7ab659b2f77d35fe5ce76954b9acbc2a2f4cb", "c3c92fa200b2536c4f31ae4ceac9c49e28b15301abada05604c02abe56d2593c", "c4338fc43f56b1c816cafe5d8cff321634d3465b370f51b96f0318d1d0401a11", "c4fb5010472ce23c4abdce437f61e2a585a4ab29148a92da685f1c7467589418", "c69c721d7213aa2a172dba1c9e13da03b140fa7e2c384f8eff79b60328c68f64", "c6c7984643ec467e3bfeddaca50600a1c97d50c0141595e641492953f8a840c7", "c74a24a8fa13dad5e32f65a4a3a6052e54dfddadc93fc83596dbc69814b4393b", "c7660fbb484ecffea8b1e0f001d9138cd1b35e80f46d9f8e7c699ad455f89b8e", "c768b8efb3a44361f8f609536a3399dfe45965e12df82c19e26a0510d4de0802", "c7d0d806fe4817fd1a236efa0fa5d9bb9684c5d5b1610c72f30a81bc67159239", "ca441de25ac942f9f7887541d0ba9eaa1a8838fc2be33af4b0fb08142ad04109", "cc3fab55608e45307099a454518d285d4bce56ffca343575a4ae09723c7eab46", "ccde362f5bb8fa2a007a2cab777e2c3b26a70fb3d0fac9cb2d27af91d006dea7", "cce507bdd1527747d57a33c5268414b1e0d3ccf76840f3f0d88507e64e1250f2", "ccea7cae9f9e0742f2efec650dc6654e4744e4760e105c078cb3fd87d54ca016", "cd007a3330d466985a3b4d61821542cca70ce9b1a153f69ca8ee184b0a99b61a", "cd2900419a4e9f95b1bf2b1642f8d73be9a7e2f6af0fcb259f1ab9c208c5edbe", "ce84d216b98471128223af6bb872a6d5aae614b7fa272c688d5eb08b21a7d393", "cf02221d6019641deae14c3edca804877450747e548dce5b82b5f0881adcf0bd", "cf4d77b663a2f2441398635881bad76e8dfd283fe2476b374bba84a035a2eb64", "d0242d0a8c3912c77a5aa3b4cf27a6403cee6346d0a34085d64aa19d1c6308eb", "d0bb9fa2fcd05c767c93076fc976e88b4e9019212206f3776b7b30e4128f9f90", "d14c758d6cb636abc5c0f23f1b01e3bcdd9e3f5c7938ebaf8a220d81e838415b", "d1b6e73e41ad3fa55f2ad0957fa3662c96fed35a9818b315b11ba456a2571c31", "d1f3d2bf9c89e758c3c1d51e7da44ef78723371dbdf0078135144999861b7d11", "d3aaebe1bf14140bbc9de7b394b833a3c75f4cde1533451a56c94986537ff679", "d3e38ab285c0e897e7cd4eba283250ab2162226148157396b182f71c41ae28ec", "d3f549238f4264aed13a70af532da45d62567abc62432f6ae707b21f89883073", "d4d929dbbce67e5baaf1e69948ed9729b17f91ca1f629fe56352de0220eb2125", "d54c35deeec9b9f01340e34b1853c13f9284b6d7cdb20d8f42e386f21862c0a2", "d5822838b42243a1acd0c2b87c68c21df7c1d8cd948c39b3bd9992b2ad951820", "d5f5a12104f6e503787edf95496a14f67779994c109d0244f33e312847f9c7c4", "d7801843145e9eeeac42f6dacf2e621d318360164bb1936b8f58876010dad9c0", "d85b6e10a29d0972eb54fc8997d7e05aaa1bc2aad01a6b60e0487ece8e983133", "d8f71666f02566e527c3131eb2ecb76b161fc56a6aac9ecb0c2afab9e3c38603", "d9492b4281af1238955fd04835136c7d816c84b05206086ae27bfcd31bfab581", "dc2bdf7a614427deef5dadd72f89a61e5b04d6a9cf227b464dd239bbd4d997f3", "dc311c008e5c5ec4041b6aff0791d39be8200018ae834eb8134d9e4dc5da1eab", "dc4a37fd9562f51338843d413ef597b93855f749473349e41c524db419c080a5", "dc821ee7523fd81e5eada3bf4658e2c516936002f4883a4c79565b29b550c43b", "dd0c3eadbb2e516a2232b9ebb76f7e7a98bff1ba62ce72d30e860a833fd7e052", "dd63ff42c5b701cf466916b7c7b368455aac61da84cf437769f6136e68f11e84", "de6cd2de29b84d41e8a52b99059025b3f3ff878c97633665ebca5695be71c185", "df3e4848496f13478c6692938deb8cf176eae43b7bd703c3285991656d089909", "dfdb34ce6720a3d47cda8c86921ac9cc964168db9a87b177349eea6fb1a8cc22", "dff9cb9093b17eb2c1e9595936a51287afc88ca19ac24a1f08ed41f9a8c6cbff", "e1649187df55968c3a372ce08db8a8ec77856eb185aa0364957cfda75dd143db", "e19eb8d56945be9eaac6d74c3bf847d47c077bd6d15d654b71d602a8ec191eb0", "e1e7d84190ff9525654d09ce8dbe7b7669e8f232c822d4bb7d9d929da19cc18e", "e2a96d951bcf1c7aaa1c54fbaa573e573c4e0ae85b1b053cf94dd3b56eec8acb", "e4126b52ef1b85d49bd594765b8fc4cc4da6e93fdb7bf1f7b3660df80d1e59c6", "e447eb08b67ae32202bb2570cae12b3b0964dd83704a7fd3d6ca8bcf0a806408", "e448a1f15ac5c2a316a37921e369d84d8b90419acb67915c5e3fd0d7884b30c6", "e4686295c61b3dd61e5acd5a4462c7ae5920a466533809432e43f5aa5934fec4", "e4d317db28515457dd3efca9a6671fac2019e765442b4bc086370f1722e43029", "e4e27c9b6fe18fe00a4c9fb229482243f886f828aeb88460e467fd5edda43df5", "e507d9d1f69600510abc1e6b6e4dafd7048c5365ae48fe2b04793210abcb73ab", "e55ec991127f1a46c0806e48c0b81b6914d79ae1bb2579c769475786b6a96eec", "e5c83d15cc108a0f2b90c301c5dc3575f2d070e72556043bb29ff7936ca7c8dd", "e5f9100a46a0ffaa44084e11b833385cd81db3dfe45ba731b03292af93c530ce", "e674252e42de90308cc956fe08f3684dca4862f124d01ae932e1b52e54e85533", "e6f499856663f73f49444eb7ae88b27b6f0f9289c6eb723d29d2b6c4b3dd0573", "e727cd9129bb7b7c271aa3a09a81ce914e7091c89e48b7262f53b34bf0819787", "e803afccb632ab2bb3f232acde7a0338e583e4b8884b7aad8843349a026c2032", "e87a7146bfee87cadb1d7283e74f162bfaf209dec2c9a785c699ac46d8a11a8b", "e8a4888c9ad6e01971a1c59d4d02e9c686990cf5841b3d595fb38d8df5eac103", "e8b2b56cee9ca7231ccc6aef95d4813fbe8e3abdfac4c94a87e3f5c61a85fb9d", "e942aab0f38159fb5cde1476e7208c744bd51a771f6f24c0b7f1cd52d4768857", "e99c27dedc6754dfce91c845a949796a6e6d11cdf16bc86721a00eba50bd1cfc", "ea32f0acca1da7b143151ad640954be98749a4de6ae741da339f670e8fe8f1a6", "ea56715eb1afe8c43895cf6057c113d7394c33f9db8f4f75923a4e8119c94149", "eb098550baf968ffffd1dafa8d3c2983a6143e7f08f624e3b931304f4b0d9c2f", "eb8222951cde73ee0643c7ec984a82ade4a65b2ed0c427d6bcfe6d6e8f230391", "ebe6b7e5ee7bac9c687193258cb0f55c25427fb9b0935a92ea1d10fb6a326192", "ec2514693743bc466d74c4994ec05c05ab9b5ba50d7ec0a24945fa74d467276b", "ecbf60421cf90775508a14a9fa9f43faa297417bc69f9a86c74b5c39dc780b4b", "ecda06e1ec3904cc92992f58d0f519e8fef6fc5ee8f9d4fabf9768b25d06e9f0", "ecdbb682ffc41a9dfa1db402da02f3d740fae9ca06feb62c3ae6d9029e90af7d", "ece1f8ba75a0f7b49a2408454d360ab47f0ebdbb047a0a8c8f6b42813812db24", "ed767b410155de48cb78fc278e6ecfa437b9da5cd4aefe4d7f45f439523cb83c", "ee038d6c9d9eb2e5f007613018952bcd272bf8de6c5f3ddc90cf3532b65f24d8", "ee495e3165a27e8f26718775e9394384c58252e4766d8a8cdbe12ec5ab42aa3a", "eedc3cecdd2d39b6f3a34129c67f389b25cc9f80eb148e155928123e8b1104f2", "ef3deb847ce1a27821aa68437b819dcb37259ba2e1f65aadf4bfec6416615293", "ef659ad5a9462c334197f5b8f32d39786488673937b9d81312fb957aec2eff42", "f025a568851926ab24a6336b150e9a0b05d4412430b742f3b5c0abf0d6b16648", "f0d20ad138c29869b7cd1987fc8cef5c4f9c5c3bb282969a684d317378183312", "f10c273ae954a4fb37f91d1e10e1d59433c60094676d5c8005b529945c4ebb76", "f10cc2f0e5cf3a1c1475a521a0e8012269ace5b9c7eaeaa3300b56ef94e023f8", "f1eae1efd8e2d37698917648b44f3eb496b1b9ceeabe898b35684f8e996559bf", "f269f4c29c7a1404266bc6e7bea2b5b9561611f65fd9c0a789ac1ffea404ed8f", "f311efed4a3b7413288c1e1ac757b5bf8a89e1d2d110ce35f05623279b343a86", "f368657575030d417f6291477f94a4262eefdfe1d87c0677879f11ed29049329", "f43a71434fd444d521b2db04ddc982e6daa12c5f1775985ad6bd51e50cda259b", "f4a19f728e4e88f6c6197def4687ff14b0b1872bad051f73a3fa7808f5d13a08", "f6538adc2fbad3812a1a053194f1029a678e76447ad3a74b4f8bb777c998060a", "f69fad3a8dac0e1a97f998934ce8405e28374e70d113718cc96e9858437015e9", "f7183ac9e59c54d1186e2f43bcbdf0e0d2a4de11320cfcfc06aa221433666ec5", "f7f0ee5e26f26b668f99a4e7c7c72e0279163f72e20406f7a9c81bc8420a62b4", "f8c2303601a011012f80836dfe4fea71c9e5c4d7b64c340abfd25b4cb600c719", "f911cc539dc41da7b11d988f8822531fbfde832d12f2ef9aff3e41d18a5acf10", "f97f8945581f31738b1ea3e30226dfd905d887e7f71231da6b297cd7b0a4690d", "f9a586f349f90b2a3e092fc2d2c5df74049228bd09aae3a4a8e3585b820fe803", "f9e88f3f9d2fef6b3a13a7a11996e5db0606778f16cacd125abb2c22d8156597", "fa00225a1fd3eb8c7673c73e61584d57659b1d1511ca4aec3746953cf8f5db2a", "fa1b3dceb9294cebaafa9e245ac24dc7fe69810b844655d25fc2bb4d0dd15966", "fab53efc97d72bceb4fb335f647f3a445274805b5e5137b946c2c098c73f1c36", "fae92ee56927e9fda2ade0d0c31f4f990ea07b5e760c0d9a74421198f5092249", "fb2ca965628c901b737781426254bcf589eb2687c42792487fd16fdede06c118", "fd429d6a48963ecdf2394c88442b44ff652e226df6fe2290b4ddaa0a9d09d2d2", "fd78a732dbfff65f336fd41739f66d6b5b6aca6a26b654d9aa036080903e8319", "fe3b81db12cc935109cfa00ffedf171cf0e062d0df88a984e8739ea9badd1d2f", "fe9d8568634716f6f2b68459bc738d9cc41f890ae87811788bb7cbd2954db946", "ffafc8398ca0a5c122484223a5c1c0e40dde5b707f1f4d0efa9770f5b7f6bd88", "ffc7d8118401ee1e5ecd9ad03caf8fb1cb4721d0f7a0c6222442ee92e21e2df1"], "iocs": {"domain": [], "file": [{"path": "%SystemDrive%\\PROGRA~3\\Mozilla\\thfirxd.exe"}, {"path": "%System32%\\Tasks\\aybbmte"}, {"path": "%SystemDrive%\\PROGRA~3\\Mozilla\\lygbwac.dll"}], "ip": [{"ip": "216[.]218[.]206[.]69"}], "mutex": [], "registry": [{"key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\WINDOWS", "value_name": "AppInit_DLLs"}]}}, "Win.Packed.Kovter-6895460-0": {"category": "Packed", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": true, "Threat Grid": true, "Umbrella": false, "WSA": true}, "description": "Kovter is known for its fileless persistence mechanism. This family of malware creates several malicious registry entries that store its malicious code. Kovter is capable of reinfecting a system even if the file system has been cleaned of the infection. Kovter has been used in the past to spread ransomware and click-fraud malware.", "hashes": ["352bc4694ee225e59f50875fbfbe2502a0223daa22b94eafed6e997e71588433", "ae9789ced159c8fe284e49c8352a66070b8a52bc256847be11ad0890da6b1a99", "b93e29b1ed93143a85a7d6cff2cd87b5c12e8923bea9f50923dbae429c950f2f", "dbebf2bbd28c1bf5b327a09fef96cba4078ce033b52488ce936dd53e92302437", "dffa4d8bbde6b5efbc79a4a05df2e4528f5dc991783e81844685bdf1c175b716", "e1161786aaf5ce7cf3938e1a105a150f3e7e6c4ab44e1b6dc26004b07dbcc6cc", "e4d4dfa171983e794cf68492fcfd6bb7312b953d22ae03df64213a5dd6496ee3", "e79f05d135d2c8524a190bd7d22d20674a21c149cc379299011390b932e056af", "f7c9f1a37f688b54b3494696c2ac6898fb6945038f4306737299750bec901b20", "fa6adb0b0a129ada90e2dcef5dcd34c2cae28496689630e7f0415882f12e608a"], "iocs": {"domain": [], "file": [{"path": "%LocalAppData%\\recol\\PqIpWoU.asARM"}, {"path": "%LocalAppData%\\Temp\\ay35fayo.2m3.ps1"}, {"path": "%LocalAppData%\\Temp\\uipfcjr2.khy.psm1"}], "ip": [{"ip": "97[.]12[.]118[.]34"}, {"ip": "95[.]173[.]120[.]56"}, {"ip": "90[.]243[.]251[.]205"}, {"ip": "96[.]18[.]11[.]140"}], "mutex": [{"name": null}, {"name": null}], "registry": [{"key": "<HKCU>\\SOFTWARE\\FC6A75BE78", "value_name": "b97dea2a"}, {"key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\POLICIES\\EXPLORER\\RUN", "value_name": "\u000099297e9b"}, {"key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "\u0000cafa44a6"}, {"key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "\u0000b612d32f"}]}}, "Win.Ransomware.Cerber-6896901-0": {"category": "Ransomware", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": true, "Threat Grid": true, "Umbrella": true, "WSA": true}, "description": "Cerber is ransomware that encrypts documents, photos, databases and other important files using the file extension \".cerber.\"", "hashes": ["001b33940ee8465748b743f0df809eae3a2a08a78af15243312584cce53393c1", "01906006204a9a84fd0dd7d061aacbb093d09a8192c65cc55e3be6edd164c908", "02f66c7648b064b49da5218664d1f5abbe954c6a02f46db9dac77358a0d9b92f", "0830faf3346becd79a49df77f0d181c66bed86d1771622f0b8315e288ba29e77", "0affee8e0b6dce3ec8c453b6a7ac92648bea9006a63c77b7efd36537adabf5b4", "0d899afe8df44ba83ee7b02f621100ed721dd0bd9411d6d0a6e3935baa65cc0f", "0df1130e9f23b007643dd0ed3375528cb08d0496b195401078fbd27d2fa5de10", "0f3c4c70da6c8a58c0f6844eabc40773e0622f8a1e3f13370538112634ae0079", "127d0879d93ff4fb65ff40d723480e62e0144483f4be7da0a739ceae9c446d3f", "133a9faa5bd0bd157660e67bf208cdea7cde346836df7ed3f0619edf9e652313", "1ab65651d3c70301f55f31fa294e215b1c72e9aa7f87d894e493b5e25d2d35d2", "1ad4afdcb9a62b69473149a0e70c38822be0f566b6759922f730c074bffcd09c", "1cd3e3a997e017a9ad7883dbee9ba8c71f416e56e1113c96d13290dd998ad8da", "1df2e8bb31a42361b916a71aa2e816dcc7279b93a80b2613d5dd8681f007cec1", "20e0fc147c170e25c8ba1dbb4e6d0dcafa6771659ba101b67e5b2176d41fb81e", "2232654770e8440f3d4629753cc78bcc97b054c5df003ac3908da5b20d058659", "2b5295639ab89940a16a9b7dc80f7eefbe065fd0bcbdb7d1c783cebd93dd9db8", "2dae95760c360eadeba55f370e3e78e9761f436539ffc3cc1e8e91395722ab4b", "2e87382ab956e8db123f80f8ecffeb61c4461b5c77d6deed2952c68b9a96f3d8", "2ffc4d2116734e50078268c07b7b972d9d127e9d83513d331d13788c7c941990", "31235847a5b061a60d79ad9f634455bfc95ce68667ec4df1fc479d147c794649", "320281163724c2d356f3ba9e7ccab33fa06b584f841dcbed783cb65432f1498c", "3374ca6683d9bb5434fa192eebe615ba6a609cbd8063c47eca42c47bb480e886", "3444fa109868538f1b25a0b4e1e8b1b8545ae88e0dc4a71161e64a868826d301", "369dc38935f947829cfa4c85e8262a594ef9bd1ece3479c980d90e62ebfeea68", "37304e05176a1cd19985ac2e3f37c8103c7ebb0fe3b1c457638f10730134dd50", "380950670d78f24e91f40ed1a2bc9d37255e2a31633c251bd702bd8a7e914a01", "3ae0c75385ca37c423e7ac5e0d44a7662f7e9d16ce74925e179de3e86afa243c", "3af80457a7eff0444d68a50008d6d798887924ec5b24161ec9b67dfd4325dc30", "4000629d9ccdbb4956ff872bdef656d3cda1fb017295f5222a5a0d826dc116ae", "401df411de74323b9dceecb6a4b019339b01a107a9afba9e1fe2252692d2ff60", "4170be2e40b646889bc491054b1a5ccf8ffe50902e335f4d4c3c94edf68c9105", "43bc72d9b30877968ccbedbf1e5c73ff759f53004e02699af39f0c0617876a53", "4508033afa6a5c6e51860cc07ca96214883cd4c5bb1065b15ee6e29fdd091e4a", "473ed62b316ae9876d0ea5d4389b96157af6f9dd16d280c137e2e0e5abcc2486", "49188826aaccbc6e62c64d759918aec98d331360e624ecd81865d0e68b820ddc", "4980aaf54dbf727faa2382eefb1e04ead139d9401784f58ba57da36262244537", "4b89153e2127c5b64b96c559338abe5e8c33d98641af9187cbf74c832dae20b9", "4c423dd25d1ff472db2a1255545fcf3e82129b51d0b0520bd43e886c00b4a911", "5093ad9876b9af34c83df858e87ea6b3bb0d044fd2c4cd91617a09c8b6b2a479", "50a6a1bc9b8f4cc06444cd226b7cdd4750c9a072ea46d6255e83aa95646d8112", "52b5c8a4b7884287d401026cee5ed58a05e713f51199d2220922f5e98a8b8296", "52ddf19c5d5d3688b4a33064579a197f7f994398a166675c1129e3c89fa78259", "57d5d549f145b4f9043dcf4b8ae7ab5603216551a04beda34fd3b487ef8cd0c0", "58c19e43c1c3e795482996d8fc6fdc3be20b169bd0cb5a8defe71d5fdbfa2259", "58d5b3c1a4cedeaa9db13dddfc020aabf9b9a49beecebf4919304aedc773e636", "5cd3e65485a3d95d3e5d68d5daad1618825f7f98fa1399b6c0dc7861a5e7eeda", "5d3bf6835c765feeda309169e1ad1876d69d73de3724387ab4798ad2d10730d1", "5d4f655ad54f5c59b341c0df64450678f8e9c8f4b5a6b30d55ec43a87a0f6ba9", "655239f2d81d3e3cd3c97b530f886a1b905c5b64e646191200f5275d34c3055d", "66499d3f933e7db5ab97b924b164932f163a2c81201cbcfaf93fb95b47d6edb1", "69f429e1c37709af9af2c1addf6baaec8cd99827e7c659d2225cc98649e6226c", "6c5a54d3826ac925f7f28c09100f221a663c47bd8dde4494277e864289957219", "6d377c408c8cfc2d8d8a6075916af35a9ca4fd4bc600638e3efc02b1084c3af4", "71840daf39f85f047953e80d6b20a706e67d59042efbf695cfa93f8355efcf86", "7219772cdf6b70e40e4439ba2d815f29ec08b8211bf50c9fdb80f4ba3afd2f05", "741219e0c3582514d1c1bd4d66134beaf777057405653456fc11a8e836ec8477", "74648e6b5d93a8a1d2cfd4282600d995d73deae5ca44d50f89cc0cb8e9e5917e", "74ee59f45f1e0dbba14fe27abebc893b86b4e94808786fab58437f5c748a88db", "7f22a3e17a471b6d32fe5c97b45fb801babe206e0c61029bee49e1b120db3ac0", "804b0ab7d90099ef7535f9bcb2f1bcf4f0d9a19b124377b08fcee84cbf602d6a", "80dda64da67024001bdb50032b44c7714e14eefa0a0372a7a2377b29f9d06b88", "80eceb82a63780f079bf09f6516fd60b642984021d78a30162391ed9fbc2785b", "817dc8bb5f5e3f4df41bd8ee1d9be6b7b097e7ea87bbf70e9090cea9fd9b9ef9", "821e4ae4d83a641666125b383549e614a339198a9e2699bcdcca288192a923e8", "8381e92502db0f456101636cc47b01cc747951216c65ca72ea98454f2f57d188", "8476c8dac9bdd13c208d83c2872e2c490879a49d10ed0a11470ce0c91e23c635", "8b5eb2bc854d64592731c378e75285a13170a22ea04c6be3ae706c8e3bbb10a2", "8fee146a25022f539579bdb3e387b221ea4c0f8d7e5f54d8794990b541913d37", "90c3ac4e331437562e0b37b7b5942f59ca1478e836d6b963e8a68d2b53a35d39", "9456f79f44b95ddeeae314113680086b67bce5de34818b048d281b708c1d4019", "98e17e47621517b23cef70502a2849b02e463d88d65a0d85f106b6af3f7429b6", "9b1b4ab2829d0f44c6996dbdf58b5faca19a8ad7293feb5c8c9a03f3cc2b74a2", "9ba3548e8a495bcc2895eccc9598a2b967cb33f0490d2afad0334e512f71daed", "9d536f3d18f76eea9fbb9c33796773556f4d20a4b94ae7c005b29092e0892e25", "9dfa379a83ad7a996b18ef42b3c098d784bae0cc08967ac44b26ffba5bf9a518", "9f1a780479f06003db0000d69e09725615b6b5bd56ea90f7a8619196ad77ca29", "9f2d39ca026cac5b5b0d3e36e868a4ca6df49566356bef4f58ab1d6d6ae38a3d", "a17ab00185f296e8760ebef57be3e734fe13580b1fe0226a314ca2e8ad19e7cd", "a18b0ed20492d711bc42fb235ed2b4fe3612615743c45852aa617dc5cfbe769b", "a29a8e9d8ebbacc5e158de9b732ada7b73176d3371162acc77faa09fc1609734", "a34c47ce5c16b78f00507d85f049e27cf9b2ed62cb0e431ea6b9258a66e6bce7", "a4ab22bb4db4d9902cf41cad2b29f401ed609cc03dfb08074b8323cf65a3f061", "a6f990df38e1a6c24b91f4700df3fc9e311c94cba4a566c56d4fc08b55c6e7e2", "a7200ccf1059098cc0735bc1f1f2c1c7cad269afaf6f1ee9d98e6818e3295edc", "a8a5c8a3fe89f6f727b23c3bdaab84505bcf973b473e3515d9571a11c7a0977b", "a9ef961fefb0803eb3ccd064b84b33f792a79ed5af76e9a0222039273084c6f6", "aff58f95f7b75905b7a52a074883476a5468aa6f6ff1bfb80bcfd0b18bbce562", "b31c5b9b965651a0f301dcea5d9e53878d7aa1bb771e26ee35d40d89ba3f958b", "b3ae382d099d5faf000bb47ce99a55483b9a9d82c53381ece45db925de30cb59", "b5ff2e629949feb47d5dbfa0d0aaeda0afdf409d01ffc4a26fc2b617a46277e5", "b81ff34fd568bcbf0774c0a8d7b6bd28d3ebc82a8ff2bc71c6f70346a051d5a9", "b8e56cf2ba012c41bd9de5d5f1448d41556d9ea4c1a48361f39c6c91bcf58e15", "ba55cc0548cf03b49b7dac2fe73f5b1e77a6013d2f2655478e16716a70acfe99", "bb6f27463ffcac138debe647dc7e7f01815c27a1951074a1f8b753def4a0e355", "bd2ce73358ce8ec806971411a6a8dbd6fee053dbec6fb24989d3cae4c46ed7c7", "bd92fd5fa73f974136788b474ca4ef15fe62eb9620dd53f16b2c05df20219dc2", "bdfb5ba015b5b24d8af6ad7acbfc19321a35814b8621f1be18196169d8f13c05", "be3f531a8605607a37c9832b6b99659ff6e3280d1ebe21504bdb0f27a8c386c5", "bf19a88854da19c2d590278ddc949f054cc2b0e6cb3c592cc2c2f59563df1b8b", "c0a1730e906b4703cc746cf1a760f5e2aefdb4a4a52a3a47288242d7bf567d8c", "c2d94c162adf1628faad3f6e648b301f1ae9711ed70b8dca8bc190282a6b2486", "c34bc05380001f59c381f99e606f02e13220973d456c413ff2f968be573b2405", "c35af34cf11495aaad9bdfec4f754f2252aeb87265ac1f1cbed320c4cbef459e", "c3782c72eeeed67b726066340fb5398dc65dd5ab69fdd7d4461c77bcc349ddc1", "c3811acc44a774e15c6eb125621c7ead692cb4338fad351c4c68ffff0a69768e", "c68e9f3777414599ba0c03b54d20c1ef4cdec6feb8804c5443ed4a1770ec0991", "c72e81ec0ea7b06c87ba186491db0a03e75513f24416546f674b87d0c5862aab", "c74b98cb58ae5ee7ad81e9edbb49a7bf5009f6f69cfda767b975945e9d4597a4", "c7a67ef8208b13a6c0a4a432dde386824ac190ba5d62d3051e4fb5137f82e18e", "ca8fa2a7753b627ec5dbb75ee0a815fccb8df399cb9a789943d02c9032dd6a44", "cc58e817676709697134c1c004a096f90ec6355031f469de48aae216df9db785", "cd6f887ae3aaaf53fc9e974da230dc2420b9183445e3287d2c681d5773b4dd9a", "ce50d7ded897df3edbb4ffa8ebc0623588be1dddf5f3994592fac34cf2080172", "d119d43b2351eb15ccd40286089b88259284ba970896b7e10332642113e22f6c", "d735e8fcf01f72d297aea1bf48cfdc0263961ffba34c4ae251e354d70f4881eb", "d942212af1cc6f365378fda45e2cf037da18f14ed22f9a7bfa5d451ce0ee1027", "db0d56698c7a90d9087fe27015da6036d38c3f536ba28daf2821a9ad520d2ca0", "db4363892e0bc96200bc94ee8cf429710533072f4e873c9d07be50289f98d499", "dc74b5d957490bbb8bdc1efa11fd4b8bdfa8e29c0b815ec02f647e3d260105c7", "de1c5aed60c932d52c75748bf70056685730f8075df33095567b13b5fad8ba2b", "df3180d64705d8ee65af3b1574e36314d2dd35dc95d61a0627311adb09ca9f03", "e4d8f56516312be88d5247e4ded081ce34fec3f3216af602f6347ddb77f30f7a", "e6278e1f61452ce494965eb1018dc64247182019a0726a57c083b3e7428fc084", "e73e0eb6dbb508d900ad550a37856999577afe6a23e3cf9ff388e3b4204f5028", "e77cac019989238b94e95738d87a2b18b3834674328be3d641956e2ddd3850c2", "e7c4313af1d38d2f26c87cc7c5a677a77db96f6d8c743a38217800f36311eb86", "e8d7697b4df16574eb8dcffa6fa03a241f41d34c616f54d325ed02277805d87f", "e8f752d73b8cf9886a58b31cfd31d2408290b5ed48d4423ae5c2b6782bd22652", "e991f1e04a12b6e3e2b884dd022db18770cb69237dfaf99802bf1a4652e322da", "eda4a91d64bb8707ffd452f652424ac57f00d00972029982f84daddf4160747f", "edc318a264d9574f7f4efc0d98a3daddcb99ecd5ba372585ddba8b693e86c8b7", "f0721fdad47e5649158c1f875033ab9ec6ce097434458464c6b6db6172e10378", "f23a3de62f82727384c0e01f379fc8061a5d420da8aab048bccf1fa7d6903b67", "f32d9a109027b0dfaf694e48f452333476ae0a38946f857eb4f1b679b8a27ee8", "f5cf83bc6670579356e8cb61d2e9978a89bea0b3f92bc56cff1d49faf274b4c9", "f77c567d5cb99e0f6a55508ae270284542f5f09cd357f2cb1061f0a91afb603c", "f91abfdf3cd183da1b862723f54c05ffa19217d93e39c16a97887d60e6988fc5", "f98d2f619b4057cb0d1a8ef3541fead517cd8df903e12d740adecf5a4ba03883", "fbe0a2d05e680ba16612f95b7d2da7bb3116c43cd51d3025c5a43766b8b8afb1", "fc91e45550293da69e6a5cacf89137aa440e09c6d831f58c12c200036fb56e61", "fc968c8dc6533d4ec0d8ba99c3e7e0b959450651321c773b557e4479cd82c8b6", "fe4910f192290315c0784004c352e4be481f53c03976c5c0c1a7e62ba0372e6e", "ff61a803f8eeaf8c7b61fca8f93528972b315a02f741c798e4c98bc5fe718b17"], "iocs": {"domain": [{"host": "cerberhhyed5frqa[.]vmfu48[.]win"}], "file": [{"path": "%SystemDrive%\\Documents and Settings\\All Users\\# DECRYPT MY FILES #.html"}, {"path": "%SystemDrive%\\Documents and Settings\\All Users\\# DECRYPT MY FILES #.txt"}, {"path": "%SystemDrive%\\Documents and Settings\\All Users\\# DECRYPT MY FILES #.url"}, {"path": "%SystemDrive%\\Documents and Settings\\All Users\\# DECRYPT MY FILES #.vbs"}, {"path": "%AppData%\\Microsoft\\Internet Explorer\\apXmmhm1Ka.cerber (copy)"}, {"path": "%AllUsersProfile%\\Microsoft\\Dr Watson\\tMYvM36CEP.cerber (copy)"}], "ip": [], "mutex": [{"name": null}], "registry": [{"key": "<HKCU>\\CONTROL PANEL\\DESKTOP", "value_name": "SCRNSAVE.EXE"}]}}, "Win.Ransomware.Gandcrab-6900355-0": {"category": "Ransomware", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": true, "Threat Grid": true, "Umbrella": true, "WSA": true}, "description": "GandCrab is ransomware that encrypts documents, photos, databases and other important files using the file extension \".GDCB\", \".CRAB\" or \".KRAB\". GandCrab is spread through both traditional spam campaigns, as well as multiple exploit kits, including Rig and GrandSoft.", "hashes": ["19b5f589a31dd4b6fd6fcda9e529f04adee6628740cfb4354b7fde94ca4c8fe8", "2870e29273fac8161c571505e2081afe0aa8c9e198150923f9efcb15a0379e66", "31bbc9f6a7d5b5c248c6379afcf7c7026fb0f3b521016d918edba1fad085a9cc", "3e9ae9bb1061f2335cbca35ddfe71f7b93d8ff14a79c362b7a5e22a3c19f5af0", "3f18aeab0f40e3f957807fdb6142cafcfd4faeac39b0f31df9e869cca981cb70", "5a6f4af9f4c0230111b39ff7cf127db182738ed735fa72183f935f272491b53d", "635cd9d2065acf51745629ff92e41c8b331d25376868cfde5ec3dfab91cd0026", "961b6caacf88d67139309a5dbec806301a1e7fc8eec7db166d9d0d0120346cad", "a8d145d01780227cecb322d69d173248c122c5c5b5ffe74c28e1ef89958b4dd7", "c4e78e775a53a51eefc2b5dd4ce161bd1794119a02481e03b9917aba5279d9c0", "cfb324eb0b95048aa3248b4475902e575da996b63ff86cf78211424ec8c1c561", "e43d30708069f2ec0b0237144b23e2d337521174530caefd04728fcc0cbbfd6e", "fcefe7d20db180411dd0f1ae2749e622738d9b8e6cca09a01b870551823ccbd3"], "iocs": {"domain": [{"host": "carder[.]bit"}, {"host": "ransomware[.]bit"}, {"host": "ns2[.]wowservers[.]ru"}], "file": [{"path": "%AppData%\\Microsoft\\jfwwxp.exe"}], "ip": [{"ip": "66[.]171[.]248[.]178"}], "mutex": [], "registry": [{"key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUNONCE", "value_name": "xbnykvblxlz"}]}}, "Win.Trojan.NetWire-6893426-1": {"category": "Trojan", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": true, "Threat Grid": true, "Umbrella": false, "WSA": true}, "description": "NetWire is a remote access trojan (RAT) that allows attackers to execute commands on the infected host, log keystrokes, interact with a webcam, remote desktop, and read data from connected USB devices. NetWire is commonly delivered through Microsoft Office documents with macros, sent as attachments on malicious emails.", "hashes": ["1388ba005085c7a25e2680d0f7ee1d81c49924f3b555b4b6dbec68dddbf9b0e3", "189525aa17b231ea223cd3c09443662341f908afc3973d88753ef78570b408ba", "1cc74120569cff7c550b730223d0aed91a334c66f4dc2aa751e723e7c2ac2a14", "1d9c379630d8d65bed03e26b9564651f0c16ae675ddcbf56ba607a107de27221", "24f0f08e4774c2f4d1411ea8b57fcae3b37266830601f6ec30899126d93881f6", "26917f6538fa6e8796c3c18c5f018370f6491adc63f4f466365d0c0186e9dd41", "286a254ceeb034dc7417e5b9fab7141472a1db6500900f951775b07cd07f22c6", "44cf94db97f1af9478f75e1df1afe36931fd741e1717601cc2e3d1d228c8b6c7", "47571de1a9a22ae99d0cc5ac1d788a238dc1bdd416d32db63ffde7041bc98d1a", "4eea828a9f2ff26440954da153a19d9667592a2c47206b7b5e161751794e3307", "50b2adbbbba3fb086169174cd9c64a4f536c455231ae3dc93fb1ed6a71e48cad", "530a89d43c4bd1ce99fd7dea8fa148158508653bd56063288da3e1086f274fe9", "609676ce7da214d0340436956d1c4733a019811a6ffed5a74e5fa680ccfcdb0b", "624b38be3943d4580a7bfe3d22a82dc451e9d5b4e8367886dda182e477e926d3", "62b5df538e8e6a1737a0125202ca3a0d99610c08a839bb181cd6abaa9e768ceb", "633c5f260bd8794b962c85de11f8eed31bb1bd14b5a11b9de564d6a06796ee7e", "7220e58e3625c5d26b7be8450b1d8db9e10cdc4cca9173f372f2e7935fae18c3", "7e366ff68193007a80f04d0cf6b33841dfc1a46b815992f241a51120cabab9ba", "82a165f62e5c7727289e037c1dc4061aeb894403227a27b7366104ecd5cd08a9", "8602358388e40b49cecbbc9e04e9863e95c7b24be53c053098b65553e252d74a", "8f1ec1fa3db18ab4d7f716d55f67efb65e126742e7a0b3e276822d516bf53182", "9b4f90c1ec5a35213b196fb4e0444f86a5ab394d0111a696ab197fbb5006cdb9", "a0aeb2aa7b2b833ff153bb372a6e3feadf04cf45035e49168331f26d9c887ec1", "a2327077fa20fc6c10e72031cb249a874531b376ad335bf5367f6a13566db109", "a513a5d7c1fcabdd53896d054eac221dcba70f4636b8d3c2f306f121ada943bf", "a6ea6a48aec66316cc58704e84b41280162fb629bcf93c2c81793d68bf03433f", "a938a5c33ece896442b33163d98c86be465451278453ee85ca87f0788974f153", "ad689a9f18d93fbc8ce50c78741c495168540096bd689b86a839a4d728ff0081", "adebb257c1d3a8f4f6ff5c9bc5ef9f3d79cddd9867f44342549d4e3efeb2c186", "b4d97b46fa17dda3db0449e61a72f352468098fde5b7324c4f2477594389f10f", "bb259e83fdcfba7592428b0d9559332de2e2b6f17ac558ad545c3cddd289fdf0", "bcb08a88af8772decdb53f30683b5aea7cbbce14434a4a29a1f22dde0efcefb7", "be02260a464960ec51d8bb26133c85bee17e7ac3aa6a2bb55564bc0e88c7387b", "ce683163d9d4171dd4ae5e1f7b08357197e203b7e4bb4363ae9667e0a01b0c18", "cfaf3b9f315b5fc07f35b5cd0f95ebd883e58b4dca817e0834016eb7f043dbcf", "d26b1414235ba6bc0dbf8cfc20128569a7d3d2baca99bee7c628df4837ba047a", "d66dd0e93040edd4a52c974fcd11604e9304cb32c3311e53a18beae4b9cedf5a", "e34266bec666cc5f031f86f8a44762c6e28e2812539f16e480e77011434fb93d", "e4bf77a9dbb64ab73cd9efde809bec9cae016944fbfa5fd089b70fdf3ca62562", "edef16b7eac9898b76d40ee0fe18236f01777dbc5aea65e540b49e74748807ea", "f0985c2fef29e5d0ae80d30dfde84f508e42654d5f5aaf73cd280ff1973e0694"], "iocs": {"domain": [], "file": [{"path": "%AppData%\\Install\\Host.exe"}, {"path": "%UserProfile%\\nltest\\print.exe"}], "ip": [{"ip": "194[.]5[.]99[.]194"}], "mutex": [{"name": null}], "registry": [{"key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "internat.exe"}]}}, "Win.Trojan.Remcos-6898089-0": {"category": "Trojan", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": true, "Threat Grid": true, "Umbrella": false, "WSA": true}, "description": "Remcos is a remote access trojan (RAT) that allows attackers to execute commands on the infected host, log keystrokes, interact with a webcam, and capture screenshots. Remcos is commonly delivered through Microsoft Office Documents with macros, sent as attachments on malicious emails.", "hashes": ["0a1d151c7170baace5e771feb217ee3a685f8af2ddf5c51571d321b2253fa48a", "2b6ea3f861899440039f30018f2593a3202b27e3a7f7adec5d5a3703dce3ed59", "2c125850f874973b605b04f2ca76d4ae3476bd495890a55f1be3d74de4ca5015", "2ea12c4cf9c0c9a3926e0f77333a5e74faf1f4956ab4a599bfd1be6410a4a348", "34ce4dbec1155384abd4eab34fa0bc7ca1ead6ae2c4be9a54299e051100245fa", "55f209afba93e7a881ad14761b1349349548843a388af32e084a58fe51bc1d34", "616ece9b51f1fead02cbc893af7f76240a84a39a9096b4d6cdb066b6ad8a7f4d", "786fd0f58b0731ae1326c434ff77bb3f40405dc0fd9f2814d8b41265325920de", "b76d7be62eb4b198c540220e8b697e01fa80e42465ba314992002175b6593bae", "bdeea19cc4255537c110faa58fb74721e6503d8815cc62b0fe14a77eba0c4bef", "c4d675f3f5941b6488fc4c3ecf540c106ef21aa8b8be858cd9ed750888947032", "c5d8569dbe75f1725774befcd82f1f0cabd8baf07759d60f9b2691870954408f", "d414046e1fa2ab58f5cb5ea84db538bec4ccff435a7d7c2aab826ebfd584a518", "dcedf388c083bb55821749ed00e80c96e2aef01fe0e1a26bfdba8b9b8b3d1556", "e6d04db2794d86b03d8deb2d8c902f76dda946240dc8fbc82d7509c722fa571a", "e8649923e071a79f7810eddb32257d5782e39428da217cd5aa34af4c821cb0f6", "fa73eb7829ef969e79d43f647136bdcac25a9b3739961b0653e7bab640966f12"], "iocs": {"domain": [], "file": [{"path": "%LocalAppData%\\Temp\\install.vbs"}, {"path": "%TEMP%\\pyrogenetic.exe"}, {"path": "%TEMP%\\pyrogenetic.vbs"}, {"path": "%ProgramFiles%\\Wordpads\\Wordpads.exe"}], "ip": [{"ip": "194[.]5[.]98[.]147"}, {"ip": "103[.]200[.]5[.]128"}], "mutex": [{"name": null}, {"name": null}], "registry": [{"key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "internat.exe"}, {"key": "<HKCU>\\SOFTWARE\\IYFIZFIFK-HKLTVU", "value_name": "exepath"}, {"key": "<HKCU>\\SOFTWARE\\IYFIZFIFK-HKLTVU", "value_name": "licence"}, {"key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "Wordpads"}]}}, "info": {"origin": "Cisco Talos Intelligence Group", "publication_date": "2019-03-22T14:48:35+00:00", "version": "1.0", "warning": "As a reminder, the information provided for the following threatsin this post is non-exhaustive and current as of the date ofpublication. Additionally, please keep in mind that IOC searchingis only one part of threat hunting. Spotting a single IOC does notnecessarily indicate maliciousness. Detection and coverage for thefollowing threats is subject to updates, pending additional threator vulnerability analysis. For the most current information, pleaserefer to your Firepower Management Center, Snort.org, or ClamAV.net."}, "signatures": ["Win.Ransomware.Gandcrab-6900355-0", "Win.Trojan.Remcos-6898089-0", "Win.Malware.Autoit-6897734-0", "Win.Ransomware.Cerber-6896901-0", "Win.Malware.Zbot-6896522-0", "Win.Malware.Ursnif-6896385-0", "Win.Packed.Kovter-6895460-0", "Win.Malware.Upatre-6894504-0", "Doc.Downloader.Emotet-6894115-0", "Win.Trojan.NetWire-6893426-1"]}