Daily IoCs for 2021-07-21

################################################################
#                     IOCs (@RedBeardIOCs)                     #
################################################################
#                                                              #
#     Date:    2021-07-21                                      #
#     Total:    143 samples                                    #
#     Stats:                                                   #
#              - AgentTesla: 29                                #
#              - AsyncRAT: 2                                   #
#              - AveMaria: 1                                   #
#              - Backstage: 17                                 #
#              - BitRAT: 4                                     #
#              - Clipboard: 4                                  #
#              - DCRat: 2                                      #
#              - Djvu: 5                                       #
#              - Dridex: 15                                    #
#              - FormBook: 9                                   #
#              - GuLoader: 1                                   #
#              - Guloader: 2                                   #
#              - Nanocore: 16                                  #
#              - NetWire: 4                                    #
#              - Pony: 3                                       #
#              - Raccoon: 1                                    #
#              - RedLine: 6                                    #
#              - Remcos: 2                                     #
#              - SERVHELPER: 9                                 #
#              - Snake: 11                                     #
#                                                              #
################################################################


AgentTesla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AsyncRAT
8fd467bac0693f7853e7e79538e848662091449581b2514d45e200828b72d67c
b39e715fcfeac819e6d5d0707d02f10250b5029a78935ea1c34dd416f989e506

AveMaria
ea609cf51571388693642dbaaf8e6ef297792328ad16a24af7287ed7d2ee342a

Backstage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BitRAT
5a697bb1679a0a30c86881b654f084854689c255fa800cf74840d6b448041edf
c83c34ba08b996f177e4a8385b11d6c6d79ff36aef630abbed0b866c87f49c04
c10af55c35ed455ba7e86463744acda9b5639340b6433fc65c918ca734881bb0
095da56e928e80bc94c258d2ec3d18c07dfc29593722b45c84d66c0170da75fd

Clipboard
95b414d81db30767bfd6b5c313c666b87442c4a5aa08fb34d83ea1ce0b6ed780
6f83140f7c4c0f30a31ec9a770ab866b781858d6d9415de212e1b40607cca577
1b3df23678c984f28144fbc74955f9c95376b202935c8f074bb45a680f3f0f48
0639a87521d8bcbe91fc9621c7c766165bdac4a67da73de1e13be2b6a71a82d4

DCRat
2280e843634b769d07b7899571fccf1384d67ea25789643b4829ae8f2598245e
fd6449e0064b3de43d05379580be61910db039fa9a636c39257045ccacb66815

Djvu
2fa12bf098267292719d1eb7e6d59675f3b57e01891870b8c2b04ec89aae7217
93778624b7006cd4697db31c259a21d3b14231bf979244c41d8468845eeaaf43
86c2d7950e4ce720c951d830c818f8327cf964114faca8b0b25c22b38ff1e5c7
255fcc0effebec026f6640314d2e08fbda5faa80c5cdf34ff745eaa20180ce08
220156367720cfb0a3adfdf3c9c315c8dd6e21504ac257985f271f6d83ce8784

Dridex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FormBook
69bdbbb49cd7ecbc2718633ef4ead2bd715d7c446f03651112070b5e2731b7db
af348c0c8b491a8c7c11c7d46eae0c8a32949888950c2a2b44bc1ca0482498d8
35cace59334f4d4cd0714de7c3ffbe2d6817bcb19f1bfc642c5d4d47d5bd309d
9d5e9db458f58958e0ff6f0bf61fe10476cb320ed5605ae45f343989e877505e
bfcda678eede144bcbb62d4c257ed2e05a26a5087893f3dfb62273bace6fe872
9039fe6251468a9004217ad748d55d840d6eaa102a0933ca73d8adeab01e8479
443b7c4a47da2fccb7764deccda2bb60d217f1c25eb016870c7ec0f11d1c2b80
13bce5abe3e50d2d91387b5de52da3b3339e0139d01072cca59114de61c58c44
3be492c34e92a83547b0d1656e21f2d8aed8f7448fcb9f720b401c9daa26fc61

GuLoader
3709110cc04e0eaffe10bec5e8a5c82b858bee4195975e7bcd30c50b246f56c3

Guloader
f50a3f8b18103a23e41acc2c35b826c09ef3501d92aae3aff771dd73ad8d737e
e715b8999667ede59ec874c6f190278b068ce7d8c81a6f5a0137e4767976b801

Nanocore
26f4b80815be68cda7c47f99c89e52d509533d0648d1e95c4823be841af2e8e4
923f6e34a9d3ee3b3844b8d40a589e4a9cdee904aceb887407f91eaf6aaa2728
faa8dd132b5dc23c12bb77efcba9373f9881096ea131b02671f1c59b8b065723
a5a3b625c48719d4e593435c16795b64d61d25bfeaf20fead77c6cac57241ba4
57df8b050ee800c4397f729c6de44247c983f28cb326844c1f370377fd94e25d
c24c9ce4dafde4a4b010190ba769588700f02f5b795661a330f302d3d824e429
04c2d74aaaf3e89e878078f9b94e1cede00c5e12b30bf02a86c2a1172d694868
1e3539b9de51134004ff4bff43ab144e748a329265decf8421442cef3109210d
8a7a84f8aa98258fde30287a469e05946729dc733298243f8e30aa35767a3467
e93547d3cf9baa27e30936696631627b1bf44f07e2ac6793a0a66ae7e264081e
9a2247160056d9a5de43a34672b7e1650402a8ec6f435f1ef0d07a5347907404
406646f65342bc1d184fb76057fdfc62ed701e62e2696709f5c249b720bed595
cc536d630284e622821d1034fadec488cb35dc72bdfb75edbd184a638d052f98
c3527d0edd6f06cb1eabfd50ba93a43ee03d1273e4cffd0a7476fc1ef59c239b
03707d7ad90db602966ae1e86703672c77d0ec94bd125cd026846f188f893be1
de3317a2ee872b9384c3ce9807fc57532d2b9b15098c8f0457b8d3bdf4a97a46

NetWire
fb292cb730b19011f2ff249f7a6f74e75850f9a6c18ff80589ccedb6dd7351c6
f1079cf4bfcc93d98a75ee56bac5fc02f9e8bbb2bf255f7c3d0b25504c539e40
412ddee19aea2ce1e965b747857ffee10638af466fd2854ef6d9c6489cc6df26
9add495b9373ca17ea4f158da84a200f3d5a52ce81bc535a575a5eac31bd76bb

Pony
8ee11509431752f393236d817f953d880222ab48f8961047bf6195149b73b844
56b51717c1dc9109cc97a458074cd2f3382a3b688b193a394fd75ca78c410fa2
d3e8a314209b568a8161c36aba3c799860ec55c867a4d9ded2183657d0e37eed

Raccoon
f3b64a991846bf83faa74955769fc1ecab94d30b76555c4d136ba9c3faad04b4

RedLine
02c12f4c1310cf694546ebb6dc65ac10a32b591abdec29c15a85b8723768345d
f350b8eb278ff5d7033c5884f70c910037ac54ed028d7e0586784bcf19827549
b02d3017e3327fe5aa170c1de42bebb9a6a5f1d5d07ba08913a1748de8ac5b18
2eff8b37b39a5384bf9a3732bd7395af3430bd36eafdad4ba5cec6f707cdd680
7def442e8216e47cb8fd87b26f1e4fea0b8646f88dc0d08acc94dd9f1e11cdec
f9d67121048756158858a6c926af3db190e88df9eb052e99d8d6d93d7fcf1fd7

Remcos
21026892bc50232183d838422a3c8741aad6ce1f213e30f6fa5906198f52de95
c06af48d06bfe4dba17b018c8e51bbcb1dc99171f702ece34942e23c0afdc96b

SERVHELPER
43881549228975c7506b050bce4d9b671412d3cdc08c7516c9dbbb7f50c25146
a45ce871e292ee5d5effccb273909abb62773ad8cb308f90726e8820ecca76d6
6c4aab4c3bd1ba8f77a781d70ecbc1b4c7dfd9d3c7ad60158fb8d35d1d4246e2
f519d4517271e01ea6807890fcbc1573e64844b6a8105aa7c3462ea65bb3c7fe
177d6aab26c15ecf87f29f92ad0eaff355d195de1c0ef17d9cb9b7483c288934
f25560518e8bebbc0abdde4c0241833e432ad4c56f934bb18067c1abf7305959
555f654fb51e632ba2cf49b865b6de5f5772ffba0229d73021a1c6a6f65dab08
42d3aa6d8f6d7c2f4ed5c4a0d0b3b160bbcf1964d82c0f095026f7c75e110c14
e5f0bc80d04cac1456c2b4c572d352efd5b6717a262141508fe6919c8e3bb5a3

Snake
eebd55afe2ce523fc07a4796425afa659e9f27fd7c91663ccce9aea7e162538d
b6d1c9c00367ad125a2a658201e70bbe8fb02890e29d1d595e6d1a5755220e99
0658387f5720152fea2b6186f10167a8c3b1b4f791ff1414bcc7f67b79e0c6fb
f96f36b5ba81ef22f295ffe68566217ef767f237210a8acab0fd57744878e436
3229017af9f577ad5f2eb68fa0049fe9eca34f0650fa59974bd6f13341f31600
c305b7d9f3cf302bf11fc470c71d71aeebc35f82a517205dbd40c2245c0ead37
edf4be11c04f2228e6448b9e771f3f8969e8bfcbf914252064c8ee07629c5f4a
e098ef2341d06bf7655ea52aece7ce8baf8b195935dcaf68fbdf3eae0d24f1d3
e9992a371caad09b90678673a576bf2bf81c712a431d77b371900ce25bd71d05
41b8479da4be912d4167dc2778d642f3a2131719838fb16cc9a4f1b3ae001c99
d1ebb1368f129b5ee1f5ca2e8460b6a748a01e57f7cd6eddd80a5340368cccaf