Daily IoCs for 2021-04-24

################################################################
#                     IOCs (@RedBeardIOCs)                     #
################################################################
#                                                              #
#     Date:    2021-04-24                                      #
#     Total:    79 samples                                     #
#     Stats:                                                   #
#              - AgentTesla: 13                                #
#              - Cryptbot: 1                                   #
#              - FormBook: 7                                   #
#              - Nanocore: 11                                  #
#              - Njrat: 1                                      #
#              - Phishing: 1                                   #
#              - RedLine: 2                                    #
#              - Remcos: 2                                     #
#              - Snake: 1                                      #
#              - Trojan: 4                                     #
#              - Unknown Malware: 23                           #
#              - Vidar: 9                                      #
#              - Xmrig: 1                                      #
#              - XpertRAT: 3                                   #
#                                                              #
################################################################


AgentTesla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Cryptbot
8bf06fd5fae8199d261eb879e771146ae49600dbded7fdc4eac83a8c6a7a5d85

FormBook
5f67665a37e92a5c9cd7ab2918d43873a8957723e3c99a73a8d22f568af144cd
55c6b2315fb17b64cd21a37daab0e6b5055e6486813908b6b0514b5109bd5972
b9758df053f1eabb228466ff331ca43177515660e70e5ae976a287ebd99d299f
625140ec60caaae03895c18ad400c65f5d5b15f55c7a01eb419a4215d295a6ee
fb5aaa39bc4cb68eda0571d9c076d23bdd5917d278c6930e71d2cccb6f980b8d
19fca0a06de48b9c08edc508098704c74b8f1b69f8d3374cc776ab97d780d8e1
03805a08ddc03ad125ae1566868e0ccde7965350d760dc212a224ab10520a2d8

Nanocore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Njrat
6c735217e0596ba21dd45eebf1d598c8433912d49095ca9b7fc646250535503d

Phishing
1669e0a5818073f4d1ea838175fccec1b1822338962641067af9305a7b55e995

RedLine
ff6edb78bd6d87e6a07ad7ed61e5b94a98e8babe8d7f46b01bd7e1346d4a2240
630a85d082105029c1f4962acea125d2dd7da277c060ee51544f748a58d0daaf

Remcos
af0249150bee4fec74c124f89019cd260c9aacd7b7a7715192b5097f1948eb82
30552657a06df54de322d5d689ca77d2cacbf8e85136ca915843c9a99e4f26c0

Snake
4ef54a1f8bdb0ba5d44a0d4684feb90e07fba3f8ca562e6f835bb788fbc80583

Trojan
4851dd7978ddeed8cf838ebbedd19e90e97152aa4b47283557e6ed565c158a72
ac7cd46564515b15e9cc989d71e4833e453cf2dcfa9d4fa6c48a4d86e85a27c7
8cf26ceda69a631276e3c9c0a33261da5a6c221bb5733fa1c6a621a838e2235a
58b15aa8d3b96e1a3fa318f7a862a61c4b5ad5c7887e46d65d60279ed9ecdce4

Unknown Malware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Vidar
1a1a87944e80c97bb5b039b0b8461e65bf6f2a8601ea3aa0d9140d3c4fa9ef02
7875982fceacd734eaff1355a0260bcfae314cde404855f5f1a0b99e4451f841
9d0b1490062faed7e6c3f2e9ca3261e6507802c1fa53d1957df2e0f7843fca30
120f60e0d6f35a831ca60f1c9545a7921e906f2bfb6a9766605e56ebb193caef
99e28e3d6416580b488497eda19cf397634b48bb52be034e6949c6d871282a93
c921086a10126a38e768017c60d2b6ca4ac0a1bcbdb1d9a84ef1ba062de7bd3f
0de4a75eee13728a519e82c529c87f62362516dfb4e0838db6e56345e1c76e60
5a867816c4fb2a46d08a7050cabca709936aab4cb276613c9e852bdaeb688899
0d9f8ca1124f0ed08caa920bd1f89541da221a6e6c68f6ec341e52fcc29be348

Xmrig
f45992d5769523b5380d45fe1a40f2c921eabf98b695d2c2b272bcde12cab75e

XpertRAT
817106790a30186443801c96e557dae291278202738e1beb07f39d405585e889
96de633645af7fe02bf23301227f918ab8c2802cb6fa5c95ca8226a90f7d73e3
5c32fd3de4bce60a2529cebc5f47b8a1562ea9bd22549f829b22b0533b32f79b