Daily IoCs for 2021-07-14

################################################################
#                     IOCs (@RedBeardIOCs)                     #
################################################################
#                                                              #
#     Date:    2021-07-14                                      #
#     Total:    227 samples                                    #
#     Stats:                                                   #
#              - AgentTesla: 72                                #
#              - AsyncRAT: 13                                  #
#              - Azorult: 1                                    #
#              - Backstage: 15                                 #
#              - Clipboard: 5                                  #
#              - CobaltStrike: 3                               #
#              - Cookie: 3                                     #
#              - Dridex: 15                                    #
#              - FormBook: 10                                  #
#              - Lokibot: 12                                   #
#              - Nanocore: 29                                  #
#              - Oski: 1                                       #
#              - Quasar: 1                                     #
#              - Raccoon: 15                                   #
#              - RedLine: 9                                    #
#              - Remcos: 4                                     #
#              - Snake: 12                                     #
#              - Tofsee: 2                                     #
#              - Vidar: 2                                      #
#              - WebMonitor: 2                                 #
#              - Xmrig: 1                                      #
#                                                              #
################################################################


AgentTesla
41206b3f06f1c5fde52316ce00cb494c24b5d348cd1708d78cbdb3a652d5c115
002d56a69567db513519d5b528da88133425214a569e6f758dd20ac7492374fb
f6a7a0bf925b8afa5152db2c60403056b5d8e53d1daa948be46b123f35e3af90
1d89d57a4fa2016b67ce2c8462e28a22910f94582881a577da08abde297850af
88bc574301d48727f2b68ce288db5158933800e895b16c1f1afd2d33c80b7077
3c3bd48cbae71b16b7654674868a6591566d09569ec2fcdcbffbebe8a8820181
6f84a08c1356bcff40995a1573dfe5334a69013845d697a3b4bd3e97e7093364
72f13cae1a8a9c1fad1ffba22570b3668dc19164c44f284cf20eec75d616bb49
fe1fc2f05133e32b74a5b52cee188b7f1f2ffe98df488835c558b73629d2ab04
ff97bd0b382bcd07b0e71fd6249426a1d1246c52b07edd238eaa64136db737df
bb2d8a5080ffb21df4c00ad759031768481a5ab675fe9657cce78e5a9e8791fb
13405733452400f608c46a12b2fd877d1e56e81dc63ed52ac384efd0da6320ef
d366568f1a389d3d680041ee93b7e881bcf1e97ef7a3f7f928e7f2a4d5234eef
4278427d1a7819ed67c8f15db7767e5c81402615449b99132831a2fb4abe2b95
b9d4c7ec91310156037ee7b3431cfda9784bb8c077337fc18717d4225762f3cb
2ab9549c33a603c9c5fb061308f00aed45381483b8ffd4d897d73b2d6e002074
44016ac2dd027ac643a37717621479fabacfa4818ace10ff482295062bd2439f
34eac697323d1d2407c9d730ee4e4739f03b6fb48b7d1eaeb27e989316e28846
6dcba561e230d62e936b4c9cdfe98f7eff740704e0891276d0bcd5c5920d713f
c9c015ddaa67fc81b96feb311757e4fc7705f3c9dfa6e624df78e8893986cd4e
fd54bf3f0394277357a25fe6424a37eece84c496ac6193af26ad27c951c47126
8ff56a14889028af73b94e9ae9dbf0d26b26390172d22ded0d6aab9e832ac628
f0c38c77f33dcc2045f604a2a162025924aefcf9a0c00f5190ecc3ac13817cd2
f47f9d673a5a84c416306dcf513c59f56b686b4a17e1b12028c22672dc71fca9
5622648c0dc5f2cd672188bdd809320639478c3792f34243f54f7e55d0941a62
21c6a0da7c808437b150c1e8328f765efa4918a97a71f3319dddb419e66360af
1b5ddafb8e6ac957516c8a45e723b4cdce27412370b1f19a94cae2680541b2d7
9c9a46794e95fd68fca94f44894192571216f1fceabc5f1a6a33ea4ccddcef59
990808bb3d292b3d571aca85e77a275e8411c4fea252a1af7bf67ea760958a6e
130cb8949333eef33f9f0afd98790f178a15b9496f1304f0bdd39835a1537d83
4ecc91d01c7a1c9846a5ae3d051771f98273f4250a621feec1094deae2b9920a
3cd8fbdcf0d1751e895dcb368d1134af77036737275235660040e931ffb94d41
2b6bd84ef1c3da25a52527dcec6a1d7207992518db630a8b63e2a12c0aff821e
d47d28326953ea628f813610312145619cb7cb86e24470fd39050eeddef8dac8
eb67c00b0e04a9d864b82ff5cf952f29865ebce5467bb45ca9062ee470b07a13
a13aa55c0d5b2430e323779a04803693508cc6a5b028b4a1a79ece20d2a2e618
8d823b7be11f0659a10b42377e817f6d84a4928ac1a6c144e2140f215fb45a7f
e0b3fcb3222d5ecf19ff109d58976e4339de347456c4dd111d6e4cc4d803914d
b4cdd1ceb2775e167c6d7a0be1f0a3024b2e396e70206a352b9baa771baedd7a
eaaf0dbd2ab3f74585203a1fd6da7f3d62198d532777d1b86e5cc247d881c159
ce93c37fce3042c74f42b9a7b5baab71413710a7841c4ed062d580194b910646
d75eb4b0aa7e4081d40dece5bbb1a6b988120b311b88418edd399d455525a4da
c0a583081105e40c6130f5a42522436f62564e20ada7a8af8ba2583db6cc54a8
70b5c48255e4eaadbf6cc289dbc9b21c46a5fdbf8d2997e232e1960594b74498
96c5e6267c7f1ab57630f71a3297932d5de6ab9c37a15b785f8760afdaf42171
2e8f1d1e22c5a36b95634aafb27418f9d1fd9000ec81e859f327588a70d402b1
1ec7681d972c880d248021751134ead55e6d71efe58d88e074817048cb053fab
9b99e2125412baa8aaf718d761f20fad628d2b19a60bc456c0a19d84d913f656
d3ee5744817862d7e419d46ec2f89238c64d8fb18b3acf15863396143039bd63
c4993e64eb4bf40b92e9ffa54c130947e22c6059b6374eb139cd99fa9fd655fd
d73ac5b5ebc31853340c31b240cf4b197e86a0fe7a63e41785dc547927a4951e
2665f334085e895c65f1a7b9be8609f3eb244031add46a20bc8be97353f3af47
2f985146bd48c99dda0c7152c41faf644c1bae7c62d57b0c28d918879d38a943
4676a7fe6f92c2e0218420f302ebb6011ab4b6210ac2da70874d9eda441b6587
a8f660af5a534e485b3921fbf08308b423e21e24006c0d479673afa93f0e0a67
5feb4e51bb2376c891b433648fd344c8c6386ed7955ee01176654128d7bd6e7a
b7414d73458a789c8e8aa260b0a6b423d181cf5d9189f13a2c0f4f00f7c3b6cd
23dd123c4d9d1f03de9e4be882da193333de801c1b86f7be357e34a516d43f85
c5c62ce8c719f86666dc72b94eac1ff965812bac6d9f0f53f1e347711a62ed12
abd99e485e5c7b462f2dbaa2c8e3eae71faa79b15921fc94ec3827920f3b4a6a
d0638a8dd7cdd32f69d17312f76a526f025c29511dd2fd9ba7bddc51867bc912
7ebdb6a9ee41e6e50a237601fa19e37662d18f25496ee5f5b661425f60ed7b6f
acd7329f6a182c9bfa1b899cf41933c93a6d0403abc3c99741b79c6bd81d6816
32af60cb7371dad9cc072a4bfa56d047fe993b7779b24aec2ec159e9451187a6
cf3f60295611af5ef3e9c80a9ab1a09928431a8c4a1561f7139267db480e05cc
4c9358cd77434e261fd153b3d35fdcb41c15951185454467171e40f03c9ecd5f
e95736df9c2a8c47b059e6a26f66263043b05b1f9494420fa24e5247e3495bb8
ddcd5adfc807970388c796e68f666d4cc94052744cb97ec5d9ddfe4d3673a7c3
7320273731dbce41f47cc62a196383cbe81764c7285277c153498818d1135b8f
55faab724133c2455e0f6d53a97693cc9b5058d3e0a05b34e0f4e7271e0f5412
dfa38907a8142ec00c1fc79c68e547e64b3e309f9dcab2df87678e738882a5c2
6256cb8aff5a06b858693a93e28fe4a05424c16c07ef2ef5cec2f4c1465bc069

AsyncRAT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Azorult
8fa025cfc6d8fad85c147327cb969aa672396d163c8b6950ff83e4589195dfa1

Backstage
572c5f9de69910c596b11fc5b01ca49f2759e681ef7febd6e98ef81316f1bbd6
31a29b7d6a246f825c3689d468696a592e75ead837374e4ccf2ffa46967d9322
493d05547d18711cdf569484d5e8ace62e2a2c5178e45176aec90e8d88381699
9af90c421488277ba99b5235ff5f072defd8ddec4057ab7cf2e4e2e7acea64da
abe64f9e17fbec4bad53123daea78baddcecc55282ce8311b58c5caf1b1fda6a
926d7ec0b89588104045819ed00a8a950999d3b981c2260c69577b4877bb2594
e727e108f2b91d1964ba128f7eed0195a901878419ded2c04d0ae54d3dba9d90
dbe10036d4c3b406a2396da6c87062803b44ff5fa3b29bc08222d818e5b99108
94e450e112c9ce71d4680efba06104c70bc7646efe019019e08318f291ff657a
fb58621fe07c9c86655bd41a9e643fd98f1d3f0aad7fcc3a39f6c83421ebacac
8e3b78de49837ac2a4ec7a0737f08389e66bc4c03a4abd314a8787d569a581dc
89064913fd45e3e669524d0f0ec65d83e2f238f25d942ba7491dda853b279826
39ac2f77c2932083818f54d4bb72ef246f1a9380f1c16875c54c365d99751760
416a5680b7a1bb7ade8ed80b8002ee97e801a98aef49f3dc214d5acbdda14819
8275ce4431c44f5d5a463702f986fd006678ac771de8e8b97d8fe8270a1231aa

Clipboard
936af73c20296cefdf75829ab7f97951d39e2f8883f3839b70637c78437cc7ad
266b5e041df4957847292fdefb86f8d5763cf085ae2dc6dc2d8f44a9cf94101b
32f456284ac06bf52375246a54c107b4954a247b656368a33038a8b4ed1abf15
028537677c7a9e309c339e8ed93bf3cd232f58c1963765e6c11e839ac327d7ae
b8a615d19748ae149d6d815c1c9ac135693fca508f5280c88abcd2e668e0114e

CobaltStrike
7c4ec96ba82e79cb37c6829a595dc09b76568a5dadd82c743c3f9a69c985ad83
713be9750779e00fc4e4e53789dd9595363235299874c92a710e8fb513d5f536
07228a017ebb23fcabec064e13f6118a9f10bb2ec3ec488d8f0aa2be01e6655c

Cookie
8173f4c89e3e5bbd179326d196499ecdde3beba7d138424c2e746dffe83621b1
1c0667901a1814a155d900e7eb0dbd427e2c9a469b0963fddf3b9531a6b1232f
2c9dcad805dc09fc5e23b94e970cc934ca53189c8db74322ecf6b151b8ab5ba2

Dridex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FormBook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Lokibot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Nanocore
f6c867888f3fa738dcf2dc9639efeab55cbb0392c284d3fb25487d062d1e783c
c4045294f0336224127214411de66cb837568aaf6e8a22ed01d32eae6b2fabf8
30bea8823bd34411ea4208f56f39a37822e5bcdbb061fb280f2fd377aa4c5b71
8d1d56d87c6bc5b59d02b1b0e2b210b4f919a4df439209c29a8d90e407cd58ac
b8e3a444be88c2473c942a2680d73f7b7675bba808f619ae71da30d1cffdd1ee
53553e41e2f4288e89ce277f368878a5faae2ff75a6ca62323611e88cdbdf2ee
dae58a6916ff46ef70831398f628a0d0dc7770707f655d8f00c991b448477228
4cb60dc401f024ba63d6a4b026fae7926c6c2e26ca913cbac4ee982a898eab91
529da2cab18b432ccaa3a0916320c03c5d18926b3613f1fc60166c4820264725
1a281bb2454d0be70d86c780ae64696d2f8249d3148584ee48809579778eea1f
9be859e3cabd6c8e0772cec1b89f95269649a0939cc44358939ab2a669bcef11
18cb142fb861e36e8325c91e893282982a6e499219d13a8508db7bf664618ea8
79f7c26a0fd732a2a8fc3c3347fdf87df51738b13b76dcf419c23bda63f41faf
55ac389b15756de1c06ee870cf36f9a6a269c11651a4b0c98838d618c90de773
90039327867ad61c51efa3f1b77eb6d116ad896d250fcb4d75e4032b7c495996
101bcef0e28add36e01ac43e80218faa647b27d5e7cc3211d6566b3c673bf67f
84909d64b6fb0ac4882fdd5b2129a73658957ad66acfcbba216518eed09f1f44
58e7c1702583c96deff86dea74d58b0abbd68125448cb9aaf25143e82daef3d1
6578ee0ee1afd093b9775d1af9ce873dfba0d64b6cdbc3bde817e3cabcb2fc20
0d8b68c864ec71b04e262f5a14fb5877b4e7c1bcce2d5eb7facdbef11e67f9aa
d263528a63159e9f094eb1e9f31e7e69903173d61412738940c9cd3e3a5dadfa
3fe6561b468b5392d9a8da8c3d9ad0d9fefb668cc6bce302d9d05e7f8ad73f30
8c651ea8989785221ea7a3463dceb018aa0181b97ca479eaa7972cbe9e80fdfd
468a5e8a605147e7bd8489d89a71d510a9160bbffe935beae190c38d016de760
e511f1b91f265ce9b588ef34de7b89b659f3db66fefa2bf2e6ce21e02bda1a87
e9088459d2522303072193f6268546db21ac42dec710615399bf17fa44abce6b
6be01e50e16e3b04ecc12d5c95265fedd7ed3e2c8b5125aa1eaef1d2ded5aef9
b59870afd230c053457bef6c039ee02fe39ab5b6049a6fb3d0118014b9c5858e
16892539cb6d5b1be435d3cf8495a57f3488aa8b69b067cd5f26878b0356e466

Oski
bf883f5fb56dd9665d5f88bf32b2bb143d3facf40209375ae54c577a26adfd27

Quasar
0e9337afa6d108d1f0b317f03d48195c5b163319bd9858a96081dfdfb1fd5269

Raccoon
ea7281d815c982d2ed8e5c5abb56007c3a268bc7b1d76a2b1ac5527ed45a7e02
4d72478821e4532bd77a868aca6aeb651aeb1be28eb2d92e8acb38902d4a7e92
853100b908d2e2afc4ec0225181d09b68f4d2ae17c1c5228997f89db431fb169
032f4e8df4f805ef0b0e0d227fad5f1bd79eeaceb74466ace18140493e85f894
f2c8546e61ac6f18f9d739a31134c3d47612059d16201d871d260449fe37e20c
2c862c7ed91694f6f161906dc366d8bd44263c66d6c25cf1ad823a6b8683f984
fd6321b3376d531394fb88138597a75cd18ab0235c542d8249aa8c4c05559b4a
47f50a402020cd7242fd9c94219d9278a43fe4fe25571db146523caa4a1173a7
16fc385a9f46056ae118cf609ee7ad42f5f3e92d51532ad9dda73d96b85c9904
f35ceca80969fd2b7e78808fbe17aade7468a724562bfab1a2cdd022eba84302
75b2970c85fa320cda85248545844b04a795be36fe4bfb1163481b0b147b2215
c60fb11bf7e8e6be4c2574c6f129150260a5ea16af32faed72241acd5e03acc4
b3d055eb0d40e5f74c4caf35086a9a022f171a81c7cc6d4fbdcafdedd22a6dba
1ff9d2cc6196506a4ed11053b8d522c200e85c264148e41dec72793994634b7b
ad71034e4c83a8dec2026af7fc7c50d3bf4305fda61ae32af77651314dbcf5a1

RedLine
009d0e416fa47b7050f7384e864f2f6f26b901fe65c2673c2a345f36d966cf05
30bd53cac35879540badfce72221e82845d47d0e4243f560353a91c925e09ad1
6445789f365629e8299083ef609dec06b2464fa0624e63f09298b1605fd9d3a0
2b73e87d34d3c5e05b12e81f8ad527dd2133a7669a9a45fe789323a0ab9544b3
d00b04fc4723229ae44fa52aba3e72b773bfb25969427a7aae5b0a85e59a117d
829da372dec806ba6bc5a31fee111c490ecf0caa5168d247b1628725764f8386
f8a67d15c1f02cc9b58f6886634ca3ac7b0c2c894036976e459522877d2f42ab
24d6fa696646fdc1c90def2fad3396aa7eae4929f1b7e52e5db07f959bcf885e
a4ff4c9fd29f03ff5d2d455863948fb841656eff5595e765e44cf5b2f79d27b8

Remcos
fd82d7c9b3de4e0f540ab7e4b581b32e573720549af9002eedb3abfbd6447e07
539011c1bb3cea6727c7b8413527af21ab3f3853754a2ee6f521199502dddae6
10b545269b6812f82c5b633bf97292a76069619e72bb6b4eaae315b874d4d6e6
5dd2f8347b2c2a334231ec2167d38514868ebbeede5311ace774c9a4b5375fff

Snake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Tofsee
5ca3a5c858ae135115c7ece67f5afc4b6a0e0198cfb80271bf29ef0d8b9fb824
250da0d3b30098ff86433de1edc0b6c9d3eabe8ebe4176313c21cbfd89ce46d1

Vidar
1de354b5151a252f1ceda1d06c8399e71c9e2257758585a13a6e4f691916814d
bc10ee2dd2944768700a644ae426327197da85a7b31b161ad15bc4877e28812c

WebMonitor
9c38f1b43ece9f98ee60e7deef9a171b3fefb6ea3a7ecaa17719f5935c2128ea
84d9088f856e12f998ce324510f185b9e6939c8d1cb2cdb46eb9b38baf879619

Xmrig
759d3e20098353e73c0c417ecf755a3ab24cdf7ead10df8c5a4aab549d7423f2