Daily IoCs for 2021-06-22

################################################################
#                     IOCs (@RedBeardIOCs)                     #
################################################################
#                                                              #
#     Date:    2021-06-22                                      #
#     Total:    155 samples                                    #
#     Stats:                                                   #
#              - AgentTesla: 45                                #
#              - AsyncRAT: 11                                  #
#              - BitRAT: 5                                     #
#              - Clipboard: 2                                  #
#              - DCRat: 1                                      #
#              - Djvu: 1                                       #
#              - FormBook: 14                                  #
#              - Lokibot: 9                                    #
#              - NanoCore: 5                                   #
#              - Nanocore: 11                                  #
#              - Njrat: 10                                     #
#              - Ransomware: 2                                 #
#              - RedLine: 1                                    #
#              - Remcos: 8                                     #
#              - RevengeRAT: 9                                 #
#              - Snake: 4                                      #
#              - Tohnichi: 8                                   #
#              - Trickbot: 1                                   #
#              - Unknown Malware: 6                            #
#              - Vidar: 1                                      #
#              - njRat: 1                                      #
#                                                              #
################################################################


AgentTesla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AsyncRAT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BitRAT
cbcadf05dbd77ff66668dd965e7f3cfc96ded00d9dce31aaa91fa47602138c1c
6f96aa14e2926f70ada4ef3e6faed29108ddbfdb288126eb919b2a8b20104dd2
4cf44d352a41e3125ec55db9e83843e57a8a4345781fb7a4a8535935b0b87906
9eaf84474a458ff7b9847687ed30ab6533a54c5ae028a2ec14885884440975f7
7acd63274b81b72ef23396d8e8ec007adc22b4a74a2242a07a75466c3805df42

Clipboard
b00ab53a237fe876d3ef946398b71db512b513a2e95242ac80789a1336003f4f
1c23dff947619191800f264476452fa22166f2e7b0b33a33608b0c7e92780d23

DCRat
f871c7238a02fb54ed056c1ff6e930ae4a613f8a1555ae78e4e9434ab498a7b2

Djvu
cc6bd8bdd3b4707d3633777f15c97a4034f7fb476f3e86a0b45a68a8eae6015f

FormBook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Lokibot
c7a01800fb5c51557a0b8a01eb489c0d969e066bd84f9511bf6504956b638954
3775ee712431d34e92249055397cb05fd96ad36e2149112d34847c738e22c130
09c4fc964420a38dd1cb638f3ec88a0f83063abc8f3e4e548c03ce7a6d1f3633
fb764fac2c62044ed201e42d63a4e2e524fc44be06caf907427a2cfbbc55fa82
8e79e3ed462ebedbdabbc9462e5448e24a43c70256b3ba5f3575aea25cfac787
e7399687445f7779b326058f87832df31766fc2a57dfe0d61e0e32d39794c226
59b5f3159bec677dea4946c4e3c0c2e93c18c1d39d2063710b54e8aa714bb11f
d94c9ec0221c2e8a9d5f0846a4abb9210ac96f58ae11355d5094caafaac76b4a
de0d52e559ce999b4437f477d90e5fe805f4d629ec4af98832d7a5fea4949ef5

NanoCore
b468e2e5f9ee2a8796a10237b006eddac7470547e59259febbba39d2019d599d
7ed7d7962054f69e4de2ad91acdbcac30e83656207addbff957d5baf7143a6a4
b07ef4c584528991957dfbc17e62984fe06a6ae8ab441062b3d6910bbedf36b5
2ef1e3739d79427677490a882a9866abd8ef1378bc5e7ac975b6a648988ef650
878980bdd00446775c208c8f37f1e9daa1845a1be70f9f816ee0e35800eca0ce

Nanocore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Njrat
1c84bce4090447991d4190b6b90c8c5bc862fc8354e9f9000c77d0e05c087165
87783cf080457ae204cc7cfe5bc94210567360100df23abd1eca5c694eb049a0
acd1a87efc13e04a5426583b47ef2eede10ad0898280e38f098dd1884c22ca5a
2dfc71eea45bd3179cb4f9ac13fa011600fa152c0286e5e9ad1c691ac03c2cac
cb9babad242ed3b4947488b56bc5315c0bea80a1bb0748811b72c5da3f5b5264
4ae8e9234ed9ad9bd18825e4ec51a08af7a2d46028cc33ab922d1b509636f512
00e917e7493ff25b40a046489db0b4303c7b8eba4d4abc982f5ff50a9098220a
bcdd81a6d0deebe09f613e09664008c1b16785091595590ad803d8822f5207f2
21dabc821fefe8ebadb39cab23457bab150e13ca20b62281b3ac6c6bcb78438f
d2cc048a53f34b13dd5604deb3648483bedfec26c883406efdc45e9e0b85ade6

Ransomware
eee4b1918e404f16bfad64412b3c2e43081fa36fddb4acb5721f7441c53704f9
8474b7fd46e898991cbd0338ebd345bd3fd63a118168bbc662b52dff25e033cf

RedLine
942552dc4bac2878e4781366f53e8bd4e1b74ef995ddb4562240b47d8e553060

Remcos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RevengeRAT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Snake
c0b7a754bf7600932d6bd093a914f726b8153d8509b4013262d7b080dd0c6790
86588eae3bae93b8c0cad5c11658411ec1f298dbb98875edcebe8e079fd9aa85
42e71a6e0d1db101fe1fb3f5d8f067aea2fda52b24050dbadea6d8ebdddc4a81
c10c1ef8104856c6e9dea97492c359ea5ea91cf4d92bbee9b8c6edc762f8db84

Tohnichi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Trickbot
38a01d1adc7e746287feeb38522ee9f8899dd487cc5393203148589d1a820e26

Unknown Malware
e3df44e7841e30a3182ce6f938b66c688122114cd0486375fc587d7115f6d3b9
9eb235579cedafa21ced3c3fd2c1f2e43adac5e85b6a5553499742b23af32656
2a290e8bb7e82b93ff9c0aaa3e19f29fd8f40a5375928c8f6f96f6361ea0f0b5
60fb332546275fb0e20e86e2efb7bd073d76fb7c424509b59a44d8a5de62f0e3
36bff54d01218965e11d5855efd6ee5e8cb59b2d80b782374d2a80ab54c50b9e
a1cbb09a2f68d01af0c7f05768c1826be16f0ddf1be8321aa4254c7e36deaabd

Vidar
1caf2367b85edbe5a5330d1edee51ac80aaacb99529d98a22cf847381db56edf

njRat
83b76d44db5699f08f501b1672deba2c546466018a9a76133ee9d9263e54bc0a