Daily IoCs for 2021-11-05

################################################################
#                     IOCs (@RedBeardIOCs)                     #
################################################################
#                                                              #
#     Date:    2021-11-05                                      #
#     Total:    191 samples                                    #
#     Stats:                                                   #
#              - AgentTesla: 48                                #
#              - AsyncRAT: 4                                   #
#              - AveMaria: 8                                   #
#              - BLACKMatter: 1                                #
#              - Backstage: 4                                  #
#              - BitCoin: 9                                    #
#              - BitRAT: 3                                     #
#              - Clipboard: 15                                 #
#              - DCRat: 2                                      #
#              - Djvu: 1                                       #
#              - FormBook: 15                                  #
#              - HawkEye: 1                                    #
#              - Lokibot: 3                                    #
#              - Nanocore: 11                                  #
#              - Njrat: 1                                      #
#              - Raccoon: 19                                   #
#              - RedLine: 32                                   #
#              - Remcos: 4                                     #
#              - STRRAT: 5                                     #
#              - Snake: 5                                      #
#                                                              #
################################################################


AgentTesla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AsyncRAT
f912e57d145f1506c0366a58ba8783d3f1bf727ca834daee11a30d43b1a2579f
10d45d47c1cd6ed18b7fef7e435a17adc27be5f2d49cbdd7e781500dcc17634f
ef62e86a0ca65675a9e88f5084462937fa889744c41e3b0b751a98bc09938cc6
b990ecd3c88e71a51b96ab72dad7822b1c9de052573ffbae8ec5d094bd59dc2c

AveMaria
f47be8132162346c86d2cf0a020af87f33597fc1acfe027e014d94099167a779
871d6449c811fa202421a3af46f1718ab603b54f4cac6eabe3912a5d744ec42e
f8b0ada4f751da27406e898c7ac0b1d2a044004f4c220fbc1727cbe743a9d30c
4d0c967e6bab232c4c6da5ba36c4a15aa81bbdde410b6d9c4724c8f1ddb3176a
cabe885db9fc96527830aa6189f4debf8eef5f1dd2674c3989a73521bb3e9cae
c50efc2b72c61357a776291276ee537ea835bf48bf14bb2019fcf79fc24c6e2f
946be0f72d478e6707554c9f44fa5fd92d55c018fee3306ab2bef25dbe9b562a
9dbd3b91069481545eaf24a0063cea3a79b6efca2b7863b2ad12892989b5f9f5

BLACKMatter
9a59566d9ef3bab7faf9abc23f25aa19218d5afa2a910144acd011a78521377e

Backstage
075f2b8def622ab9d403b589d2ef821e89772e165a4b179b464eb13e98a69ee7
1e4689aea99a6ddcf887e310d985013eb748d6b5cd30a81ec1a26ef154cd0cbd
d2b05eb480172829409440309b1f64977040a47c0b11f36d56801fcec8b6dde6
d2befcd2c5e0bdcd9cb0dce189c84237cba15d14eeffef2e6d7398d226fdb594

BitCoin
8a929ca7875aee87e268c81817f356cbd2554479674b5b3b14609a13888f083f
9bf3e4275a272c2aba4b395e35d97ccc0235be5968612536a1d6806f2b610bd9
9d4caee5c9426c8e8a05489af1f7fee9dde4867d89c0cd2aa977f4d4b916c4da
47a02850458c1e2ea4ee52d90130a39450acf559d58eea96ed51bac24ef80f44
3c8f7ba9dd70d34b3c346c8c6411752b71242d80826c1d5481573affc7076a69
83cca8285b53bc061ee00f5eae51c72e4858d3a7b1b325408f132f072e6fb28a
8ff340bd6201a5fe37594d4c5257729d42a9030a22566999b123a7f2c783590b
8a477724dc8efb284126f1fef3f8a3f67d35e6aedce2622b7a41626e41e7676e
7fcef069324d66fc45a1f0e4715ed41b86f4e050122bd1bfdb860991d38a7574

BitRAT
86e85d060403d34e0eb22792bb27b9ef6d70250d1a69f0675b23f7f557e313ba
bc1162ab3641fde0dd4b2208c2d8470035aa4f742c1b69ea53ea9cd6f5051171
4a0129093fc5f3fb58bfebae5d9ea7fe99e2871ead13f12612606e9e2aed261d

Clipboard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DCRat
e68bc341c332cc07977dc22f2d1c118cc69a2de1e83c6ab92b386f0c1e915279
99f73547e7a91a490f190ecb9a53106475f9ae550f6b0eeaa07c9086d03cd14b

Djvu
2391b6656cd819c622f5d1d6cc7439005b650436b4749570e96c2462ed36f623

FormBook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HawkEye
1380b534164a7193f9daf1acd1614b2533bf67005d9dd7d4e1e08be825a0a78b

Lokibot
df4f083d0edc9dbd37e41090deca5fea723a67746ee01c2de5d524131b9b3ba3
430f7c63d598967bb1c841c2ae7ceada595f63d894bc8357ba114d23ea4939b4
125832788171ecbbcac6ec9922cbb2d503e9b88dd632ff12bfb4a147cddbb43c

Nanocore
56cdb2b48b6c92ed9b25a441bb8bd39d9a952bd3632e21675f2cdc42fc38e0ba
993ad73a605e9816e88c7301d9ea0277832baf16d1b28c25298cab3f450afb2b
ac38be2e6f789f19a4ed6044f67ee8ac1116226d66734a6afab8fbdc7ef2ec37
3d07f82c68af122fc4da0c0798c26e8ff04c3a7ff1feb4c145524996e9a9380d
a7d8988423efb7613b18d019ba4658ea4404517ea6b66a994c9afa8e7171dec4
8fb1c50936848a2dace1379b1e25916381be57c7c8cd9ad526a3704202c917f9
a4f2f9f53938c2a7159d6aa92046a82316ec0db19e2cfaead74283867f367aba
695b4a80efc17dc6cc3299fc16c9f8aaef57f7f7ffd40786c6a6f37ec6b2fedb
1270cdb439f65489b96bddfa5870d15bf3088d08ebfa65721a3c151c717e566f
fd88c40af9fbe791445466884e2490157f75ffa080031b2681baabfc57f74f94
cd24b42c63793dfce4fff72bc96a8466efa54df6dc56d32331842834782caf72

Njrat
566e2f01abcfcd6c7b757449819a52e6956f31d389a1b4c6f9dfbf443a97874c

Raccoon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RedLine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Remcos
545ec6641975c6c23640b5a770824d1b9eaeaeb17da675c3a946dab4592ce3d7
30b3a1a387cfabd484e83922b2b38d6802bd400eab83365c30b8eb3eeccb557f
e3344c82354520a10c7f3e9833f07d340855193cb8d71647ee5315434db969e8
089e14466560c0651e5e0a60bef8eb06afcf663359e3aa669710049ba441e677

STRRAT
2d52e9423d57f69e3bcd0fddae1adc54043988f613eadd469184a516c21c6c13
f75407720d8e0323476edf2f03fde5e461ecd95030667eff0758206ce6e74725
88e880dd1736214131f01c5718cca719c0f9b16ee28bf153a3095c867a70ee26
95720efa86a783e40f43d29f1ddedbbf29def00b87bcf6370ecc2e047938e0a0
d4be39cc9170eb9e9cafa7481c79d112f242d75787590b182f5a13ad38ddce21

Snake
2b021e70ce7692505c9d2f4847833a1b95c38a5aefd478bf5f44353da56658c5
ff9565927e813dcc6a5a6bfac4962b8ca0ef37fa1ff09b6ae0aef0d0d7a2cb8c
116b3f7af871879e64566d6afb4be5fd9efa71580b44aeee06949c1f020ea4fb
6dbd22d3e3e9292028da4e6ba1cee99f6d61d01385312f9f692b52b41924897e
8bb29e5ff486faf0a7fc1de10b18020ec148d67c8fdfab9990e7e3ad6eee1941