Daily IoCs for 2021-05-20

################################################################
#                     IOCs (@RedBeardIOCs)                     #
################################################################
#                                                              #
#     Date:    2021-05-20                                      #
#     Total:    112 samples                                    #
#     Stats:                                                   #
#              - AgentTesla: 41                                #
#              - AsyncRAT: 1                                   #
#              - Avaddon: 1                                    #
#              - Betabot: 1                                    #
#              - Cookie: 8                                     #
#              - Cryptbot: 1                                   #
#              - Djvu: 14                                      #
#              - Dridex: 1                                     #
#              - Flubot: 1                                     #
#              - FormBook: 1                                   #
#              - Guloader: 1                                   #
#              - Lokibot: 7                                    #
#              - Makop: 2                                      #
#              - MedusaLocker: 2                               #
#              - NanoCore: 2                                   #
#              - Nanocore: 8                                   #
#              - Phishing: 3                                   #
#              - Snake: 7                                      #
#              - Sodinokibi: 2                                 #
#              - Unknown Malware: 8                            #
#                                                              #
################################################################


AgentTesla
f0cd05cf1325a62e422ee2abf8aa766fdb26e3f42af97274441f31f5ca86db50
46ce9bbd88955426cb51db89e2767e46b5a1718b1d90407c5845b648ee8dc7c8
a052dea0ee180521ff8da361bb614e1f6ac71f35512f7553d69f713cb87d7c4a
f0994780e5904e0dc9c517ea2f6201124acdcb6c8505e90b886b9fc0596d8fbd
178239e39ce59c4a07b14dfc9cfc8bcd2fd446fc84c6655a0045231105db8216
8dff645ff3dcfc6f5bc24af5fb38c3e15e94247a22d68108b5b31bf314bbf18e
82e86d82b4d3492465f83d7c46a834488b45ee7de90200c141f54bca128c508d
0ea17aeea8f95936ed5a3cd1e0ed2f4f3ed26c8976a129774886b090db867310
27c11ae9a6412536ab7d4ff5cef35de451dc3e9facea2385732f6eac29a8eda7
5539e9f8cbecbebfef9023cadcc6951658272b5e51e973a0ad00499211e718dc
19aa079c6de34eb550070aa69f98c741aefd04d8b83b1c7e23bf89576ba1b69b
906bddd79eee393f5501788642ea70e3550a2e4d0f99eb1735096b2dafe09217
2849f8e54789388e2464504860329fc6d42ca47879cc61b8960e7297477cc948
dcfdc0825f9965ecd51cdcae8eabcdca7aa1aea7625d3918d8bdc529b87114b1
1cafbce81c91c16b20db2ae94fc9d0aeef360f10d2e6f1c0a136f00b95999c1f
5b2c9f25ec69fc887f9d68e2bf16a2451d814c28336eaec4e52d976723e068c5
605a895ba504c507ff1d7dc4834923bccd7b4191418f9043a9ff093bb31737a6
515212213cc20758110038963c28d94d9f713bd4ee2d88e2f5eb4a917af0979d
f176adb4db0c534d55a4e680804274dbeb5932ad5602a4d35252303effd12e78
a349f8f658039422a14f4fb492c7e02a6276e7e6e6ff391dfc1b3cfed23c04fe
76c71051f1154531557576281910571901d3ab5217c94e51080655c0fafacc3f
5c552c070f43c3ee4c3d278163d4082aebd1697261a8209396efe32673ed0f64
d3d72cd3695b6b0fbaf251a90b38507aac9cca1b5b60adab568622116f3d350f
9a6bdafd5f4266ae03bd539ff0d372e601757917c69380e6996e75f1701c0a33
afa44ea381d3482b299c86be51caaa7317e356bd8935884eb7f5700cb4774c5e
40d5b019f1dcadbe1c0fd342bb10248eb1e767932aba7450b53b799ce32c6b16
8c452bb85d7c88b9b0dd44023ec6f4d63abd7e2ad66205b598b32a6d31f36888
efb0f07a65f8e9aaaade0ccd9676273eaf19a06c00f0bc14b74146016fca89f0
36a73f74c68119b5648f061c03044204250525b5fd37907ed8d991470aac7a37
60d544907f9ee0eb5823a488307b3465ac3a7a492309e58867952d6ce346761f
36e3de8af61731609b6256d6d8d112dfb5f63fda5952fa33d78624da46b8320b
17c478cda6f2c772b7c6c7df9193f5a070b8d5be190d028c8550bb018f2fb5c9
b6621e6fa87f923bb57c6d71912366ce6043ae4e43bab3c7644499e8ae883544
d7b2ea39be33d9d4aa204369934ba91205b8c923e28e6ee41371d49896196678
db1b3acec6279d626921da954b88bbc6547d61fd55ed9b129577c82daa33d05b
b27598f1dddc17811860bf0e84fd670f2bdf578fc736bdda954eabffba02058e
34ef1ecf45a8caed8674f70986d656cc28dd4e034ba9bb926e0b3fd8df1e5ad6
4397a3ec9407ed8771df40a9688f8931e6919b88e27fdd574f0474560e068de0
090427542686c33699aff13320f89c6d59465688cef184a42acd1dae8b9e39a1
ee1a544884cb255c57c4a8f62e2d77d8b5c25113905fb2d7d50cb5c3812b331d
c42d2ae47a2d22b0898788f31423f05feeb2d546f762697da59c1daceb90f31a

AsyncRAT
0e552e971b7f5b4bc9fbeb8f999286d543419c36ead5383cace48c939a23b808

Avaddon
f786b673a270bf0dffd0dcc4845c93f159f60a5feb68631b7eb1a7ac60eecd06

Betabot
55c12cb22033e12af48c4bb80b660e4ace8ed2364e7147979e30355bab7d5469

Cookie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Cryptbot
1bf9a15445a908fdcd7d4a5a0584678a1efb086d1eccbf0ae60393f6be208919

Djvu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Dridex
71f9510a1833140042e95fa401ac48fab251d38ae7b6683f06f3d11eb23b3355

Flubot
40d2110482a20cc869077c245b54d8460f724bcd1b4c9d58a94611a234087106

FormBook
f8a54661c5cd0e682c3943e098640ff1e847e753c6c62316e0ac4b0da5f410e6

Guloader
2b63f1488d9a8396513a3dd2ca07b44adee4b1187dc5e6d94934ed6271e76f5d

Lokibot
6c2561a2eeec3fb1cb5c825d62d6ad990039a92d388935dad17420f369f166a6
a6267d7002518688ff63b2976adee380c4cb88fc78d8c4af98c0cc340e2f1de3
e99b45275e84e3b74be807c15df567f9f5eb315a18bf6c5d621a75fa73f7f9e2
c35e466311c3db83a9623d0a0bf797d760a46eeec19b3052fe89a39fb9d5f7ab
50c92f93119010ee2f28e19f04eacc32a946c10bb0118e72ce2e31ec8d1acba5
ba3332f0e94e8f71609efb3b10416f034264c79b146c3c288c7662c2910d469d
d13b05617792f093c8a081b139595f57772ca00a3e216bbae10a7222f326fb74

Makop
560d7fbb78858d4337f9a97226e137a27db581721641bab2e11d34ce55f5ddba
6db8fa2e9a0bc6e34258cff8467d3403c7d0951d80eeeac783209aee9acf7495

MedusaLocker
fc29c372042941ac432de2e4cbb2dcdc22c8ffdb8b5281db982d345e73b9c7d6
7369a14999562eeb5bf8fd0ca0f04dad4e0fcdc37babc427392e78bed9712bc7

NanoCore
e4b9eaac783520d0c17f1182717cb9c4bfc06df59878d7a5e30c75f0fab47a92
9ecc863dc1c52a2b0cd401eec0395a8eeaaa053e4d2cc278a0bc97f80dc8a96a

Nanocore
3bb1d25fbbaf7cf51640e0e48146a21654584593cfae3b108211acaf93ec2e8e
a5131e001e6299e47781c8249eb1e64b461d52520d416b870f4239890be78305
b0a8ad4663cb719ab9b915c0e030b4534ee9aa46126ae932e05d761629883038
332ec3c540f5cf7840fe7fb9856266a084d7cfc1aeb3953454b6fa535501c0ac
20b4563de914832e7b4cd6c10922645f3dc67a4daf17aadb5ae9ffeefdecd03d
b920f9366914d7250f3066d415ec4cf0f96bb7d4f40ce5f56518341895a1257a
552467ee00c32c46b4fb7819867e39408318749127c6c559264d1fcb3900e13d
9d3ab8d52c79c14a132e08fd1c15d7b0078fef6bbf2bfa2cf5a2dca07a34286e

Phishing
4b40dd5dc2f4a6e10dd55e73c610b8808d49cf3b909944a120567850ec6e0f51
1d0ab98371fa8e74a1e2e03d523e423de3bcbed8be4e5894dbaa77ef1a4116d7
fd55f2bf355243633d54c56c2e2b95620e8dd10f4b1131c2b980d204a3dac72e

Snake
6a939c6a78ca6c4e0be1e492c3c4b7e5394ad23d38ac48932dc5c688479d10b1
55fda6a947e5ddc868fbf6bf7895736d64a8bcc0f61a91386129c4e69fe8b1aa
1fb7e7adfde8513cad887fb8d169a72d304ed2a24bd3cf1d72db5c4e443d50c6
f75b66bf3a9f53752f855124cea82f8c21dd0da6adf40be3bd080bcd158d4fa1
a70c61eddfae506d2e24ab77c133ca0f60ed4d4b03077b3d4218b978faca6547
5a2c7c990efa350fdf5e97a88048e1f19a4785b25b20f30ee5247ea2313ce95a
9921c6e293b224a6e9934694f7b16af2656ff0de0dcbec9c0e10a37601bf0296

Sodinokibi
869cbe17e6971d262a3c0d1d7f18da49fdc36b60461a0f9f35262a5c7f30177a
e911470047e8da7c95b8663cb8776102c8499ad87d77c34d6abe18247c44d956

Unknown Malware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