Daily IoCs for 2021-07-07

################################################################
#                     IOCs (@RedBeardIOCs)                     #
################################################################
#                                                              #
#     Date:    2021-07-07                                      #
#     Total:    168 samples                                    #
#     Stats:                                                   #
#              - AgentTesla: 50                                #
#              - Backstage: 9                                  #
#              - DCRat: 5                                      #
#              - DarkVNC: 2                                    #
#              - Djvu: 11                                      #
#              - Ficker: 2                                     #
#              - Flubot: 1                                     #
#              - FormBook: 9                                   #
#              - Lokibot: 8                                    #
#              - NanoCore: 8                                   #
#              - Nanocore: 19                                  #
#              - Ransomware: 6                                 #
#              - RedLine: 5                                    #
#              - Remcos: 4                                     #
#              - SDBbot: 1                                     #
#              - Scam: 3                                       #
#              - Snake: 14                                     #
#              - Sodinokibi: 2                                 #
#              - Unknown Malware: 8                            #
#              - VoidCrypt: 1                                  #
#                                                              #
################################################################


AgentTesla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Backstage
76293abb39e024c174a81e12a4251de1dfcc96a0a83b3be6d10e669607542e60
0d4d1bcdb7784045084bfc73159ae78d2e0b2ac030a075fd911583f091978192
2513063162e69e59ce679b97d76ed263a0cb9eb503033e59b921f2a2c01106ed
46b808244406eaac6aaaec7440ee63fba5e0c7b51bc40a49e0db3f17586d0c34
b782f93cacc4c9b56d438f9b0a69b64441954a61399e71ab7a71979c9e52a877
d65fc6624cb9520c44c4bdf23fe44167a3c621966557ffd4af57e76d66096b97
476ca53c1374b61bf4c3865c88b8ee45af56042e2715ac22752d62c73ebdb77a
9d063b0121a02bdb8909dffd4684062b5771ad31842ad550f6c06002408144fd
2459694049abfe227ddcf5b4d813fe3ae8e1e9066de5228acf20c958d425c2e1

DCRat
31b8bc7f575b3a5b643e64127ab71e9324d6f2299004ef6f95c1d0e57d07cd24
3a60843c38a6d2b09f1dcc3dfe3070b3ddb30542ad7b38e03dd25eb7cc061e30
177d83ac5ae7e9b5c5acaaa5f525df41284320796c81ccff38dd493538de9f4b
7dfee8e4851e32eb2d43308fc5817cf5d9db90beed0c5bd9e9f4b8934c915ee1
4c2d0c1ffd5db4f4f6027f801dee59a0c38cc9cfb55ae60280a7e4aad2b5e370

DarkVNC
fca899c8596ee535d812184571df964a85f3133399095c25e2f25cf0545bd785
2da733bc4822850e3591fa0aa865f7e18b8ed0147f6ae0fafe5c2bf3718bca47

Djvu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Ficker
14475edcf9d7b97a8b02d569f2b083a39530e553bac1d0ea297258942bc2c7a3
13c24b2f4438d531e2456f65de1652b2c49a7e84da9ae378bb737761581ca3f7

Flubot
5c394f01d1967b8c23472fca99e2407c76f373bac58126c44028a528c11db41b

FormBook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Lokibot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NanoCore
ecef423e7c1bcd20a40a9c43188fad7009c35d3b20de7a72be5f0ded0ef07eb5
8eac8af4ac020fb83415f751bb314bbcd3ee8512778b4a477852c0a328fee5e5
ce6cf10acd739e5623e74d8851d89bae3778fca193b67244d1874719bb96270f
e03b37fccaa784a8c68e456866f40b4a46ed1e7c76a6fe8e2324e944474c869c
6ee0e7e372b3c9accbe4c85303516eae3abcf0d4e41857b7972c0324a4a7d8a3
f1e9fd8dc15cf4c038828e3e9e39c7b70c79c676ca8ca025fc93fca7da1602a2
4276a226135247bbb16cdab51fc8ab50abb091ad29143f886b331de842387cfd
d3f1424b379e60f0ac7ee699d827b834bd48c15780158f3d5d790dc7880fa3df

Nanocore
f06c1b7b27a12be5356ba89ecfce7ec4046a0bbf83437913a0fb58803c372924
2f4c3149184355deccf95bec24af24efa10c40a15a466cea51b1e1a7f710ce72
1d8f519294059c0ef09a05ff98d3dfb0c3f895d2bc78f44f400e2c61926397e4
86273044f8b3979076ad359b8cc29cec4a70a2273ff8e4dfea63f0ebb41cc705
c6e3d7676ce7ee6ac8e0ff740e53eee745ed42dbbc131fee31f729b95c702aa9
1f7214c8f1ba965876078a30a46a25d0a2b315a1465dd0b227554f7264ed0690
f7e9725767f9100a6148e82022b6be2602937e013a9648ee98ba2a37091098e2
94d377047b9c950029c5507adfb5d339842e6523b9845734fa0fbfef936df72a
098933486e97fa38e7f09db28d9c9e107d3fd5a772839358e735adc408c8d7a2
cc82fd89578a57c6cde015e8b10394d75c77bc11481e38ba58dc959c41491fd5
09b3957f8645eee1cac9010fd1b0b920f6ba426de57146ac55f3252b09e1b1a2
fc8b6ec35a39b587e86d8394a90a9ec69b1b8cf81a77b3865a4a1cf04393923c
7d16f89b27bcdebaf0cbc68a35a5c407aaedcf2af940f0167a8aabc4cc130af0
5537ba70665d3f29ffff18ff045c5f4ece384b05525a740f32082503ebaf6d34
736a674fa02f8e3035c2ea7c3698b36db0feb980b83522578e0c6e2aab05d0e3
a0b9995d10f1dfd1482b22da27a3ce541990a195d4a6f5685a9a4e8014e2e04c
82dcd8efadef7ecf919caf279dc917cfb0fecbfd39562afe34735ed96c61bb1a
1e7c33164f07dc380f9866ac4941b7fcb01b7099342e47254af509710049f5d2
9ec6eeb94acbfb972efa21e8a12160f993b8700b08141b1c8d75b8d574917879

Ransomware
8f097a5f7e9fde8ecd041be76a6f68a727f77673a0131d1984194c7c8d5155a7
50d29e89523d9e7e1a74721c3f603df3a562564ef2fde2c3d1fb841210925973
f291dec69640589d6eb5900996dd28834f3fbf803444c75136ea28b4a364a13f
6f38e937551590eb8fad3bcf6b3aec066768b7749ea6962ffed388ec312ccd2a
55ca818548d35fe757e378edb1e5cb857bb39283bfce0952890bf0a25f56759e
8a9c2ccc82aff17c151209bab44d283709473d10e75b10e0ea511ede73962adf

RedLine
de712d2797a18f9953bfcf772407c71a74daa4fb5ff09125ae7076476073ba39
ca15b3f2b0c8db9fc4e8478981f914525583cdf74766eb1f07f62daf320e175e
712250d7f087f5ccd69177504f93ab218ec84296cdb1f6a0268be45c806b52e0
0d4bc3de0df5e15ac2345776f78c2be22eaf3ac19706db4391cbaf0c633ec700
a8ed4775c1853a06d15775c8c05c9f61d0d2f880ddad6d0560fd4f1c44fd517e

Remcos
e8c9bce0a7f10b26645392cdb389eabbecdf4d65de0a5daf4e7bd51916239f71
653162513b0b91ca4232620e9233402d8da6b89a362c78475d2c20da78f9e72d
79861a10fcfaf967d54382b93d84ed03e5d5202cd3dfdcb599a535520360017e
08e56118dee0690481fb9a1f08cf6e7b94abb5178b7ead8963ca377832720926

SDBbot
dab24635b50b14aaf03a17f38107c8cb928f76da3e52881c832258b8f16bc3d0

Scam
b0a79f2bd09a605d906f23c84884ecaf4cf9fee5f0286040e9a0f889d6790ca0
56ae0d69797ef0b6fab18a66ca776a8476c13e74c0a51ad908db0b92aa8e81e2
55e810bb160167fa94cfe9988d7ce1e0de3ad5df035b868c161bf8b7bf66ec55

Snake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Sodinokibi
e26a56d8e264d9d048ca222b0cd6df607b4042987defb45011695192bd74e626
bc9d572c5914886152860cc6f63c9f0154bad355d3ff86b838cd2397f54bfa2f

Unknown Malware
8aa93254874c5df3616c15ecbdf4c8f066e8c99b49875056c3249c04fc870a6a
f209b127e6b5a4e6183b58a58f68a7fc22d2090dee17bf9da72feb1d2607e7dd
87fff742991a550230a402d83d6a350bd302f16fca89b8f62a0926622b7c1689
660f4af5e5ea3510deddf2a5bb08815655a0467ce6b43573672d10897c9f5cb5
aacce29910bcf7bfb4e079e03a3d8ce6c93632d267a47f2aab3acb5ff8158bdb
f7559802b10e51826494798fbff80260f7421b3970f0bf0e3e11f6fe01beccf0
8ec8daa7384e337c3ebe8f9b313599f5a399cb7ef70baaaa1a978ca6af69adac
67bb3917ed5f5b4fce01a6c9f9458d8bee3799686eb88e8862d7306d08c22a25

VoidCrypt
a60bd07cdfe79eeaeb32f2c269ecb2cdadeb7edb937dac2b25d1add82d1c1b66