Daily IoCs for 2021-07-19

################################################################
#                     IOCs (@RedBeardIOCs)                     #
################################################################
#                                                              #
#     Date:    2021-07-19                                      #
#     Total:    140 samples                                    #
#     Stats:                                                   #
#              - ADWIND: 1                                     #
#              - AgentTesla: 47                                #
#              - AveMaria: 1                                   #
#              - BitRAT: 2                                     #
#              - DCRat: 5                                      #
#              - Darkcomet: 2                                  #
#              - Djvu: 26                                      #
#              - FinSpy: 12                                    #
#              - FormBook: 9                                   #
#              - IcedID: 1                                     #
#              - Lokibot: 7                                    #
#              - NanoCore: 2                                   #
#              - Nanocore: 7                                   #
#              - Oski: 1                                       #
#              - RedLine: 6                                    #
#              - Remcos: 1                                     #
#              - Snake: 4                                      #
#              - Xmrig: 6                                      #
#                                                              #
################################################################


ADWIND
6ad8d9ef73c39e7c875aaa443c3eccfc97f2bfb75237d6819757c6ba93e724b0

AgentTesla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AveMaria
f7e94bded6c18352dbfdf28c40cb7ad66d19cc00e1300a2b86ba2fcf18d26a6e

BitRAT
ba47f657a4745c96a62c444100d6c38bbff772b47ac03e83dc3ef5d94bc1d77c
cbb2338f6a580d85121c2ae6a46cc3b699cd874270315506954f0f8b4e1d363d

DCRat
abbda62ca0b6ef56e2329bd04891df63e4bd07c3d0087ff3fbb8b881e99b0254
e62e17f2dd223185ce399210016b484ebf226368c1017e3934e6c132930b787a
9ad5a47afa41ca08d138fe94574eeef19c88e0efde345c03592665d14a2d91dc
1bf07924cfe39aa003047cc03bcd94b3b7f8b7256688da75cc622b17e546f43e
96151faabe100e36e7b72f1db0608fe92e4fabf89fee6567739f10a0e4147933

Darkcomet
8eb3881ba7d320c0760042529414e8ee87b8bfc648c34d87dd36ed854b0c8b7b
381bc1886d534d20d33107d09b09fd7e4fffba102c0314b6d8359be5ebb6231f

Djvu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FinSpy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FormBook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IcedID
0b14383f52be57815dd216e13c3fabccfa05b3e5e382045fbaed210f8188549a

Lokibot
c0798ef9663c26c87562a09c9662f2ecc63924a9db01ed66fed3328b81fb2ca2
9e3cf38ee35cff1c3a8ff5839a36dd41de4c05f2f0a8703d93439f3b7ad66fd5
f06527ec4d525acb558c7712b0f043fd1ccfba76b13d3c993180db7a6926b3fc
2a55c8a2df47c88cb3484aab09c903d2964668eedaf804f0df1b0e2ba4675ae9
4935c829d9c97b1629a2c4abf560d513109fe025a8852e1849b954578804b16e
d2403e6a7d524f652e38af89405a91abe3312b03b49e8ded8e826975d622ff3e
22e2bd8589b50a804664e5a76f2541538f7f34d1ad326559bebeae7c82687adf

NanoCore
38c1dc9f8fac7a4dfa00c57da4cc63f1b373a1e4a351dcded7cf08ca95320e9c
d86c670dc553d9be6ff57e8038e6c5dc2617a798680de17bead99a2b57005f4c

Nanocore
8439c2205452704720a824e87ea3acd255c8f4d1feb9ef3aee11f38c21f522b0
d87a9aac7b247e123ccbac84c682284fd76dba26415f9c29daad68b8e919ab66
0e32968eb92febfef815cbd71409c52172bfd5c2c81c155cb9c27e7433ac6a13
b61490152ba1ab397039a88faf325cb569a02c80050b1c4194839a546719b435
c980f4d30a040bc8a1d95c564cddda1171bd3e6ca33cb1bfc30af09d550d142c
fa25c57f2af3cbdd177ab1abaa083834332f7975e284de978b082bab2281933a
3778a17c587eef9edf7a154947b72f0d937f61276acdb75a2ff3ff96a5350d19

Oski
07a92b9dfa68bccb4dab01bcd8da04fd04f1bcbc845e8cb358e50f70ff5aa21d

RedLine
72ee17ef4a17ff35719f1f380c4599aed0ae597f6304dd59231ac1e3f2e2094f
84d4dd8f056a7ba3bbc62c67465dbcc40940c0482f0fcdab1ce66ff9e7f3c4b2
66e702f81c4dd98b79f521eea0b260b9949f8629824490a442cb14db543092de
8610e4f5fe6961af48752bd4ad6c815e4bd604cc7b489b7b4c9e55d463993ed1
8f7cef2c0fa345df0232afa86eb779e189bca8b3ebaf7ff8b7000f1eeb49e448
0739ab90f698c1611cb646121808cda8c0a46e060a0bd8195d32812282c37fef

Remcos
0390f6b933069a5c8cf4f1b2d5c6b2201645ef09f66b498c867b1efa83fd9165

Snake
ef378128edae81f1a854dd4f70424ba62c835c37cf37128f720fbfb02041fb9f
27903e5303f11180e6677fc79ce1d6b04a5adfe3493fbcb847539c423ca2a444
2a91e3c56d2e6e834bdfdab27b2092386d549d5ef85536aaa76ce5829d1090e4
e55e55bd728bdc08e4c8dfda867e5baa96782fc41e2f9a3e61a7da92ea212a8e

Xmrig
370f698a696bd33c167348773c954d3b079ee719d91f7fa10c47e96bd647a235
33225a857521c55b3456fa11dad3568911c30bc74d408eba8b3f61a2b4118469
4805d0ba5ffb8546fa50acc17332b9582df9b5a067db9ac867723f4db0de4ae0
a5decfb1b6c768e361391a8434746026e811683c64ac2c399765999fab1c936c
5fa34ebbd49ec10923e38c8501683c2bfc024a4f03b66ce39a8deadf61a74e09
5ee9f4addc6c85c45a7a66f9b61c4d7977f21d8ce1aadf667508f4623b317572