Daily IoCs for 2021-04-15

################################################################
#                     IOCs (@RedBeardIOCs)                     #
################################################################
#                                                              #
#     Date:    2021-04-15                                      #
#     Total:    136 samples                                    #
#     Stats:                                                   #
#              - AgentTesla: 48                                #
#              - AsyncRAT: 7                                   #
#              - AveMaria: 2                                   #
#              - Cnmf: 4                                       #
#              - FormBook: 15                                  #
#              - Guloader: 2                                   #
#              - Lokibot: 2                                    #
#              - Nanocore: 19                                  #
#              - Phishing: 3                                   #
#              - Raccoon: 1                                    #
#              - Ransomware: 1                                 #
#              - Snake: 8                                      #
#              - Unknown Malware: 24                           #
#                                                              #
################################################################


AgentTesla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AsyncRAT
b271b3c00518f8194aa3e415e421f76d80a29102b4c6642bfd2fcd5af854c620
47f0314cc5f0b5783bbc8df2084fc725c81771c09077623d6bc5d1a08c28e174
fd2c48534e4067d84af2efd9d66007ae724a39b42ddf8e19a7f5ca3d32936d40
51bb1199047983afb2c3a5a9c74d5463bec0e8227eba1bdb27a47f12b201ee95
a341361ce6a9ccffa4ed4c9fbbd48a35f0f891f5cd4807910cb5f7e611753ca0
bba7bb730e0c8c7c8e2f9cd3d26723b3688f0b7cb1646b431f11cf34aa63a5b6
8ce55e331c8fbb6ee6885fd85b52bae195d80d305c251d1b7a24e208a4d4e66b

AveMaria
53264e3f2d74843961e002c3337a0c17d2f615ce788dc52cbea29c86da07e1a0
474bda95a44737096755e27e6952e78c103b73a078446085870c2b1cf984691a

Cnmf
0d770e0d6ee77ed9d53500688831040b83b53b9de82afa586f20bb1894ee7116
f2a8bdf135caca0d7359a7163a4343701a5bdfbc8007e71424649e45901ab7e2
4e8f24fb50a08c12636f3d50c94772f355d5229e58110cccb3b4835cb2371aec
6b01eeef147d9e0cd6445f90e55e467b930df2de5d74e3d2f7610e80f2c5a2cd

FormBook
ced71a7ebe79a146d3a15b2b3c53550d6f3004d2aa0c030d2a945761758caa6d
fb17b85aa2aeaa59cb6db3e1c6eb68f83a570b5de3f10d3b09dd47a4aebdedea
8ce1ced58004b91fdfe144fd256baf0cfb8b0f83f6ec3018580b57df3bba4aa3
a163fb0fc84e6bcfec686b9b39c1ca29a95849371c0e4e057b4862464033d4e7
41284ca214a3e71117be6cc7023d7b3fe45f46651b4025b2c11c8125eab216c4
0c46fa7ceeccf95135124fcdc560ff3874a97f17f032bfa23201abeeb7084e40
1621fca6a68cd980333bd159e508595b0d5a6397f6eae002f7f4183927133f76
0e4387b063b758f6918ed46cf1fd4f571c0a77f26a60e3806f2f4d4a625f0f2a
be7a4fb3ed179c2483130cd6bb808039ae004eb6b68c7082b3a8291f802facc7
5ab7a75740cc2ca45d2277e4d6348319077615b95e2fb28968d64bc4644adac9
c9afe6904407e9b60e73edf93efbd932b6725f0f4f33306117ffc9854c21cae2
26f671465cfa5650a49cbbe4da70dfec6e03993ca7114b5e4151a9bc0cd3e5ad
47754a503507a45c3a21c14985260eaee119c82ee09283d2d8043400ec87be5a
12521239ad94fb0cc1af14e9e3a87e7d56bd46e687edfd53b9aa2533eaedc3d2
02b07b8086d052cca5b1f10089f93da604dfdf71d09f0370750f371e50bb0221

Guloader
c63a3f86be406a11e8f7760403e407a97441753205f8cef432fd634856ca2992
e692e45bd1482fa4c1932955b196be0aa212eb792afb65cdb85ea457ee5258b5

Lokibot
08061a098519d1386c981a9738e6edf651be658cfa282bc2fe14065fbe539e84
5bc6d5322586c6db603d865677401fe5a68ab8d28eb6a5982261d2b899c49dc5

Nanocore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Phishing
a002d8c28f89a404430404e926b48ae840949400361a17740ca0becb97fc081e
64ebb63e8af5345b034a4675223d4731e438ef7f4e46f9ee733410f10ed2192a
6dd2d7488742186dfc3c6bb52226a0a44cdddf806aa85077258df8ab7a10253c

Raccoon
5073e1fa4493b7eda098621c9cc31bdcd36420e277aa9cdda5117def65c88ee9

Ransomware
451cf5cb07b316b28a5b5ba868f7a4a6a4108362ca12616e0124506d7eb51704

Snake
f0236b5baa8443142bef19d05e68db7c6bbcea03b0aabcf02669a1dfa208ab51
054d7b168961e3076ca2734d13f096b1d165516546b57516bf750f4655f25a4a
5402fe9ca76e1ab551c4148e6e1dfdec0d1497db43ee03115a7528f8f577bd3b
d60af029275c9c862b0bec7f586009ab2c0b4b961cd533bac57f2576cf464952
4e1161604cab3f459fadd5568f1a1dbed99f4acec89379844ded9c3d506620be
bcdf8ebe8cc04d1e9f06645c762ab7e07ea373ba1b9a50c3c2f2886ab6681c2d
7e1984261f01fdffcafc839d5fcfc819173f533e424d1d84835c39ce68dfcf1e
36771fbd1486fa117ee9a5316a2b8f51e61d64010edf82cd9f499cea5f9012c2

Unknown Malware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