Daily IoCs for 2022-01-14

################################################################
#                     IOCs (@RedBeardIOCs)                     #
################################################################
#                                                              #
#     Date:    2022-01-14                                      #
#     Total:    206 samples                                    #
#     Stats:                                                   #
#              - AgentTesla: 15                                #
#              - Amadey: 46                                    #
#              - AveMaria: 4                                   #
#              - DCRat: 2                                      #
#              - Emotet: 8                                     #
#              - FormBook: 6                                   #
#              - GhostRat: 2                                   #
#              - Hydra: 1                                      #
#              - Lokibot: 3                                    #
#              - Nanocore: 15                                  #
#              - Njrat: 2                                      #
#              - Quasar: 2                                     #
#              - Raccoon: 5                                    #
#              - RedLine: 78                                   #
#              - Targeted: 3                                   #
#              - Xmrig: 2                                      #
#              - XorDDoS: 11                                   #
#              - njRat: 1                                      #
#                                                              #
################################################################


AgentTesla
ba259c3bf51ae2b5ceaf843dd2e5cae3865acba2f5e81115fa6d3f4bb1d3f392
0668df84eedd97c9003610f70f2c9be76605c40a6452b6b8a739c1bc102330ef
c2628acd6b807facd37a0b0db1068f80fa2c87702d6a687445a9ec1dc3bc2421
f2da177aff59093abe1d3bc7c1a769be2701784036c398900a43725d83c9e9a9
c48f7949e36ea00828f752c9a5a2baa48fa6f867ba9013025b6d6cb858f31768
3cbf94c22af49ad9be152750428263c826c9b020036a0321f10f9fe2eed6ae52
4dfa1bc1558cd76b1c9cf89cf7a3ca77170452041c32ee28d9c239e4249c394f
9ca32954bc9ae96f11d246ca45443522a731631c154f768938c556869e01b555
c16082d1e821a819ea4d274e12d7d656e83b359b2ca7b33de143e60affc7b1b2
9d69632f6791492fadab28bea034f7f18d29bc67fd6e7db08bdba847487da47f
5f1da4ecb8c7d741c4b8263ade13d80369a9caad14a119063c809cdd3bd97e40
0a150f4647b60f84416e88dfd6dc5e22faa88b08551397e861b7b2ccaa9ed085
a15f8c268f7dfbd6b2c0aea83c52a7d5530c4cd8a10d2d1bf1f7bed97807e3c3
3a52ca55d7a163c15e187788137f8cb1b4a84779ec7de748463f1aa23314e901
d6f3d5fbdc9c7f68e29260badb6fd6e8f1b606798fd9fe544e0b28387f21eaf9

Amadey
972d533e4df0786799c0e7c914aa6c04870753c10757c5d58cd874b92a7f4739
f56b4c870e0b40ed1bf4f1019346f14443bbe8608d6f75acb92b176d138f74b7
b4298f77e454bd5f0bd58913f95ce2d2af8653f3253e22d944b20758bbc944b4
f04b77c60c896b33ed8fe286de3341fc3ffd0211a987435475dc7e9d0abcb0cc
a004e459f0b6f2103369f14e80e3bcd7b16098afac311a5c42b5c72e61492475
77910d7ddf21beb55ceabbaa66733a0ab89e7a6accd1474207f38ae7e793efce
b602afd3f94c5820291f8319b23f20e5254212ba6aab49be0238d7067caca7b8
6380b2ce70accb02de54067a3cdff27d87e2fad23f36870c8f90e825e0ae8f2b
adfea20237be615461c44fea423d6043fc74bf1c5303ee33fcecd8acd201291e
b968714f907a742e784710a566fc7178c278c074caa95c5405d40573f35dbebc
b8bed0211974f32db2c385350fb62954f0b0f335bc592b51144027956524d674
22cb98a4832824adc290e8a9541b50228f4f75fb1a8e621fd80d4d2be7ed73f9
8c0272f6d0136bb8adeb659d8de19a4be68a81fc018587275e045103fc01b49d
012ce05f8263d161d4387749446cb3df3240fd33cf71dfb3f48dc4f4c9354298
4162cc11cc30f7db7c8a151252a7e63e78dd4c03c995e2ab6e225dc811b8fd48
e997341ab2422f5471f4c9f1df84f7a52e16fa38d64e6e0f4f94859cc234e2f8
35da284a91a4217dddc3207fe0b20ae37a2126e33c1b57c5fa65e2e14b72e9ba
5edfc7353c1aa6b23547357f576453b48059bb994824fd67002f13906000cf9d
e3af866c7760f95afa5352ec3845697a17354305f5797a69538bb637f8bbf4fe
f85293eec1a9d86cdb45979a7a90265d9082148898d583b1baaf8c7ae3e1047a
5c037c7c1338cf54a9d1e81b74bb4ad003e1a254069a03499426ec1600a748d9
6cb775a7c9b0cf8ba308029dc623e1de6d17cb2ab6b7ebbbd9c16bfcaa55efe8
dd1f717452d1875bf3af9fde8d4ac06514ff9b05e58c579e6ad5f2b0a5f4d51f
1cf27ab77a771ff942b1e2947856844fbab4991cf87aca618968445b5c5d706d
1be428f924402d7cc4586ca37a9e843c869b394f85085db5e4e85d150aa87e04
44e305db99461f07b7cff6648b50531771361a4dfafa69991527d3963eb88dd2
50bee5c11d3905157aa3aa461b9da69cc05c90d748330e98324cc36815610bc0
d6f20ad67b08f29828c05878f4381065d8634085129d70d637effae9e6226a1a
966557b6f228eda641e155a858f574654e431743311d83e4841013d63044a994
c8fe81088b2caa9df35d92a588fb266a145c95b81b5c66d5bfe181fa73b17d82
aeed1bf32df36ad3ccc929987dbd30e2b1836c267223614d3648b3027e23e1fe
e7587776adecf859e137e7af3da4b9b6fd9428e6f89cc48d3a63886d490baaca
3bb8ef6eaec03c54c6c517000575ef943577ca0a71e61fd29257786991306133
e91644f9cffb58e260facf0cb5abd35f9b0da2e5129803a6d4e7b8802814d752
93fddb1a745fec7ae8bc3a7f8d66ce73b1841998e9b0589790e924ff6efb6a05
164149035d4a3d2edba76c0601f6f83e04d45d7c057d221130c57fc9b13fd5b5
2476273703617870ae392f166bc07d346596d23a159bf762fd5468844b70e33f
07f9220fe1879a72e9570c31869a19b40ba97a990a9300198af5d016806499c0
b93b9b8c9bbc90a761f62b17adc1b6662de922acd463d7fc6af09869afdc29d4
1d91b2f83ced053a62d4ae0289ac87fdf7557f684c8c67f56529126186bb5ef4
45fa3b802a5d7e2c3687dbb1957e5cda1715b5d741f40d80d672bbf73d5d8b3e
23abc535e7b9fe582b338c82884a2f0ea164a62d38132b9e205f87b1591fd243
f2c5e8d5a5f0c2b5fbb3ac5361b1de3fa179baee1c863d62ac47fd3b5277ce4d
3309dbe5abab38f952ca3a478531e9ff57a1ef4654f988c53dbc9e08da7ac9db
9b58105b315bbd6a5af96e63f88dc59cdedef401324916ae48de270a021ec29d
1cdc472f08bc86830018711d971f1efc634d01f8a8635996d274388bc27953e7

AveMaria
5d67a694351d9bdb571ef7b9217e7e05ef88b0f650bbd539217d3a686c077586
6247f4af4cef102c5fd74f4544ff0d9805a9f3e3c1ece327c5cc4d674f06c7b1
37d460cea9227867807e21051990ed580d9bafc35746dd1f6ea48e424438ec2d
9eb507b9bff383e0c96f4d535352978a801b02e4c00c8416882a3f4f7a625595

DCRat
037794920646056289550c46ed4db6ae39b19a1bce28030aa6e26bdd0cfcf6aa
08d8db67ddae643ce598dc41c4bf56156079461a79cdb2bdb5783eb6fd804b51

Emotet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FormBook
0d072a60b433f330d2ba97d75eae7af07e9d75bc6ed5b1065287661d05e82ab6
9679f0e8f63974d80f953b8212b2668c27ec9762cdcf6acbfd4fdf4b6d189f23
900e115c271f29c66454e91f168be012c2ae5d307c86b70e8d595e0bade388c6
bdaae5a1a9b92e3e85fa026ae9f6b375eda1eb75a31fa122b204418ff83fc36c
feb40c343aa65f5f5c0a32443535effa22652067c576416857e4d7280ce85e11
33bb2954b5efd072d71b4d7bf79eb609e4143a01023c15f8239f3a93561052e0

GhostRat
23562138f7bf1524b009520abadd3a2450c73955891ac92c67fd66dc59de66de
4aedfa5435009376cefe26b5c4d6f27664937a60acdbc2370495133ffea0ae37

Hydra
6cd4bb3f423ecb0e2f8c1608aff0d7285acdf57b21c44d49e2b766575b83f0ac

Lokibot
881d216bda06fbcd5809ba113ee4574fb5d464dbe464e8627b52973c08dba5a3
87d380f12b61ff49af7680e3dd4cb7c0415be71811a565fa4736c6430e629974
428181d7903c358f27f2607b8caf6468eaae1bff1a0b7747904db042cbc2cafd

Nanocore
3b4b7e29adf8ff8cf49cdb924de689cdb735a12ebd78dd29537e81a9454e9631
93d545c83fa462035ae0c2aa0036db008fc4bdf3d10ec89c6f0b6699b09c6fbf
30e1ba61a63a27b668eee09f960a83d944e878c33b46f85ea86bacdf1427f4dd
bdab7ee10f2ec71260ac278e04869d1f9df157cdc2bc6c6e76a01dcce9685c0f
6a1e2163fcec87fe3d826afc6f3791c90348d22c23332abb4a82e50c38398113
b51b5de30f56e9fc09858c1f9a43f7b897286ff1582ae81f714a5d0d57552ca8
fc067983418432829610764679c54ecd5053539cac42eb61aafea092bca9f3cf
db8510c86b8908acf4a931082adb39f850141e71ee90fd34e2607c5aca8749b9
78ea0d76d709074fb94bf5046b858eaa3382c161738bc13b06915b1bfdf52e98
52c280a9e1df79b39d176d673ebda000c46d89eab1477eae5b1a62f4ab8373bb
d9ba471f10c78e3dfa01274b8601fdff6f0d7971824d24d50df21f619a1ab502
9e760c9961936c729f09364fff9cfc9c1b4ec878a2b47ce7de4df934e77582af
608681e5ed9f0a359a01153fcf482554bf15f41d4d56260c754c64a49eea08e3
e2228ae0e77d09a5b1592d133120e6b39171186e81e6837ae0da254689127a00
66f72d5d27839727a74911e1b5a4e9c1d9dbd136468f1a5f4af88d21ec407718

Njrat
eddef9ac52813e159a61551bcc0f66e6b4df060df09c45f6979be1ab050253b2
0a9d287a3539c979a8c215ca003ca35293c324644e2f2c4dc3a38b4c7f9fa143

Quasar
df479f9c45104b68b6fe9925c44c961f614969111ab2642cfe645a2157e737c0
ea6cdda281fe19a19cc9eb7198eb7c369128488adcd61eb5e0101cddf57bba5a

Raccoon
901ad7435c05bf0fee8f05128d43b805a25dff60a442ba8482c0cac32ba380a8
361b905f41bb404839cb8b7d1ad9c3ac132d840981e134ed8d8c5891afc3054d
55762dab4794bf51e4cf8270e9d68603a523bbfe8f851d270b22d0afba526743
8dc59f6481c6fe183adac2b720ffa276cc9f52d83521200b1a85bb5ff8e4046a
07750c17a95131f145a3cd2418e0bbf031963537c7f2a1bcb4aeab1d63ec8510

RedLine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Targeted
861630eca9d09950272b35474496eddcc223377f3aaddb56b248fe799be45ec8
69aeba540ec433819b08a4640183e554d47f77cf29bd6565e9d4c27f009fc0b1
9e12bd3af9e5b062603c1e0d6f7af9193220b5105f69343e4aea37d18349a386

Xmrig
e8b2a8d0c3444c53f143d0b4ba87c23dd1b58b03fd0a6b1bcd6e8358e57807f1
d98ec5a120292e4e1526ec0670ba57f93f3a577d93ea244412e66bf5f1e9cde7

XorDDoS
f63c51000ce1a8a0ac0efbab4a4b362ecab7b502416068a5cad608961ddd7011
6130125dfa2be0ad9f9bc6801c67f908cacec3a2c54503f5f38b2154feda802d
dfabe5efb745d9e3a5959ded58949228fd1d9f47c36e867d8f2c1f38db0635f4
b922e5e61d97a950c7cd035b8f711a8184d3e302589e229cf1c573635b6d2530
7be8334c7cdfec60e156900984ba580716b0816f9b97a7073f140e8f9cf891a1
aa7ad3ba503f67de4f1135ea20986ec975ea5f1ea4a2b1b4d828859e01b83dfa
e43a4cba54b1a91d583ac04ca58466c3cfa71b7decb28956ae7ba28ba1727d46
c02820f85bd411d1bfce65c3ac2c660cd40d560335bf5f725fcdf5c8c877d102
d52c082b4556533a167fea327ca363ddbdd46fe29679bfbcd512d9a68ee7fba3
496175e282ed99be9c77bdc1dfd992181fe0dcb18b2bdbe68ace00d80faccd8c
d87dd79757bee3272f419b34b68e3cc73b9aa4532a085cd00f7bd198946faf0f

njRat
72ca3e2f8479a075c8e089f543f79c4f1cf868d66d3272b2e6b0f0fded1bdb60