Daily IoCs for 2021-04-27

################################################################
#                     IOCs (@RedBeardIOCs)                     #
################################################################
#                                                              #
#     Date:    2021-04-27                                      #
#     Total:    128 samples                                    #
#     Stats:                                                   #
#              - AgentTesla: 31                                #
#              - Amadey: 4                                     #
#              - Babuk: 10                                     #
#              - BitRAT: 1                                     #
#              - FormBook: 6                                   #
#              - Lokibot: 15                                   #
#              - NanoCore: 5                                   #
#              - Nanocore: 31                                  #
#              - Raccoon: 1                                    #
#              - RedLine: 4                                    #
#              - Remcos: 6                                     #
#              - STRRAT: 3                                     #
#              - Unknown Malware: 7                            #
#              - Vidar: 1                                      #
#              - Xmrig: 1                                      #
#              - Zeppelin: 2                                   #
#                                                              #
################################################################


AgentTesla
f48085b0f24cf50cdee053839decd8031a1844b37f009cbae3a2fb07104d2b5b
4f855be83abc988837527da6ec58df5be3e4b1415f3337f42e9686e56a32286b
671ce35ec665dcf1b8994fa7cebf354ee63206ae373f680042494110a00564de
3f7977031544cea82c008f81bae4b293eb8b57a05c68265e2c6222e877dea84a
433aaa67d69d0af2d82066d7499ce4082f432bab03a00a2d2cdf4da8ee66f267
44bae203dedf4da34c0a883f5f393cdf28853c34f84cabd3287758a23a9ef88d
7a388ead62a8f818b36c9c9a1938c2172c4fa05edfc71307980131c53c69d054
9490e210852a6e7f07b822a4dcd5bd8b2b4bbddb8933226e7730778757a0bcd2
ceb625f803404349822bcdb6d8ed7d75ca2c70bd157cb86a183dda4c0f00042f
0e3301796158fcce6e7a4794912c47ddd4ce672441a0f784ca3e9dfaf2649161
c7f4ad3987c2026cd2051b487f34e9f2a56249dc319ab066497be27e01a2ea6e
d6cd477ce9dcb7bc508b683efbd74b2c588a716669bb32ee59d170a6f31fa45f
a5382b03c7f5ec7480f275dc6a76a788297effe7b593de09d1f28fbb56a0d9f1
3fc4ff06cc1b0592f61858e379655b271eb7c4ae1f94953b93d314d673b83e87
fe3d744dde75b9df4b255e704f4fb514349d4486bbc4ceaad4bc278207581ab4
bedcee618154756a15cfa9ceee289b249c59c837462cde300f0488d6822aa938
f49066d3c5e38a2599936fdbaaa639c4f5db0a8747acb1e1756624944f88a30d
a40a22599feed7a3641983c1ea0d3e44335f5890a389d0a31eff50cd98a2e0ce
b37f56763f46046f81726926a9a0362540068e92e80d7f8257441e014947531e
27aa1d2ae534460a8f1af78d384361867addeffb0d4746d117ac0e4b5d8bd358
a2c7cf551de24e1f2102ed2c31221c8e0f4c6e09ce78a2bf41ba52284bbc3eb1
49e62b919699f8ca632ecb9a190404b1f868dffbe0c372a9a86758e6b778f8a0
7fcf0af02f69899fc720d867922d252bd4ff27141ca1857ea85b230b8706a7e9
d656cdace3e3ab39830e7243fb70fd1c6d3fa892de50fc444f94722e11d50f9b
493166fdae9342b1cb8e326edb49bd3521b2ba5bc32ea77f457ab3cd19752b33
36d230bbae094b84528282851502811e69be947a7378460a780b633276ebf9c7
3f2f7e69a97b02fd0bbb40580b8f419f24da6276db9993dd33ec2653a633f5ca
fa84a0c29e5aa8ba804e8cdfaec78f1f642b7de25d89c02ff03a7a75588b4663
adca45192b3c94dddd028e4850adb36055707f911be8530c8558555949c93f18
c6bf09b982f8ad62ff3bee29f4ab0b47056ecd4f56ab90168cf611a90fe320af
25c04a1abbfe18f53d9d19205e59446edadf4f921b7817cda5ee4745a50ed9cc

Amadey
d60c34a516621348b92917e01675161a7d6c0b81ab30df97af8e9d659b119468
2b0cfb46b5c4981f267b7208192bf443a082920f2625ba09a7e929e743aa655a
a4c29bcbd40e822f69121a1c57b72181442b58f46d264e648db60ebe5cff5155
7788316d7c265de3857cd869311e3227bad84465e2ae93f95fa5eeada4bdddd0

Babuk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BitRAT
baf9dbb13e917326fd36c977b6a360df51efec79531856533040b0cf894af222

FormBook
8aabfb2b5aeee025f4a6d963c8761011efb74797e37ee89fd37ae5c23f7f2945
725afbc2222db24d11b6c4cee6b5222eb753d30f0a1ea5d1c52e408891106b1e
68a509a01131db8f97ffc6d199261402b36b3733f3c7f280cf5bf2787302e7b1
b7be1e431fc547efa86830c120f4d0d7927340cac3646332d1a8ed1581a193df
bdbb646d046af6858b33edba94be642db7765902372f07f50b649dd72f4d0774
91fa1797421a3393289ae3892d128158ca3a16efd453be49e0c38d5891deefba

Lokibot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NanoCore
fa783d6fd284ea0424aa5013aab59af9c1e4d67fac223a487423657d07a32c9a
5a4a6998f38ab3b25111dfbaa32eab9e4b2a69aade4c576a1ba27905e5a12f49
5994f4b5a1526faf78f1bd2b2524b602fe3c3fcf171efc84fa5cdb9cdc210fe9
2c00c655755853ef5db9e057203ba506891b1a032a9d58c8fa5c55d2336cfe59
dadf9503f7ab1f7c789e7c8cc109a06eef7afe8769bb669c2679e4556bd85620

Nanocore
e049051b31f9ae8e5542defc0b60da656613d5d784750d03f45d7bfc51ca1981
e7910272256f27baa070f15ac955454a01247f902b3157cee25ac906cb742683
c5d00574e78e26e51ca29b329ddeee17ecacb9c4c03be6eb3ec4456b6b84691d
4b5c555b4d5766f7ecccafbbccd85f0d500b155cbc59b15ed3fdad6dd8c5f8b1
39a0a4ff0d30c85619add304dda285c65e1f6de170c2cc7d84521ec1bb6b6fa8
d09c4c2e8827461c13cdfcec9c8d4f335953b0b2db14274b372ff677721e7469
dd73e37cd36b20eafbb822419f30b9a506cd04226c327c741cd6b2fc7cc5e82e
58f13f217a80e219b7edaa73b0f5eed032797a096febcd71f93cc3e9b72c9c6c
bb779e0738ed83909f6d0376b2d744122bfd75fec5fd6b601c98a9b2e607a1c1
f8dd8ce69d4485533f427d11ba51f231d58f4c5337ccc7ab4cc544e81fc270b9
321c7b381845ec1d292bf9f29c12c3a8c849ef00546e1f7678c0450b70aec701
ef35e9ee19b48afad15e3a49ba0df682604fe2412830b6f4ac06f2119d57b953
0e31415336ad940febe566ac12364dbd041a8ff45405bd3aab5492a1c3800bff
ab164f4371bdd93796fcd6b418fdbe8dde229b0cf1e2f5d392eba231084bd075
96d3813f4509eedac89ff4c83a233ea20b804c9b416a23cdd0c27d53d96bf1ee
6e341ff355c8c140c3eeb79fb1e6713d7c416890912b9023105951be65b438b4
ff3127dedf549b49a97920fb6b82d7ae3407ac61668b8935657bbef1364d8982
2606b3b8ed311c061e2e217cf33db025c1bdccce77532f37f595545978c9232a
d0deaec444fdf1a8844d8ce2e56a9904d7a40d031a3dce56dea25d522b5043fd
c5b4be496e1d0d1ebf0e1d2b49796622ce4b9e6a1b1e6ec33838e4ea31394f11
8bba4d0bdabb739a078a77c9e34578c3f436501ff47e6718238149a1572533b6
08cd4d5e3cede24a1ce977e05987b7eed5f1926a83f238c5b72700cf3c6c3ccf
093efeabe10feb449eec6f67fdfaa2a67b5df2f7a26e0094aad766bf67959505
ec2159b956cdcabf50aef2846cfddb1eca53cf21bd42a690641f1e3c700aa2f6
abeed8c3cb18f7ed714c41fdda15a311ca65fb0428fd98f81e61832129d97bfa
6a7e5f90e301ddfa5080402e687ca6ad284097ad07b271b633b71f67fc281b22
79f3be2d4b4b9f43a3b4b0d348b09c94e1da7f6bcde466717d3677efe8365895
350ca76bab6ff9e33b91555a2c94f7ceb5d59bb0d412200fc3a94b04ac6a789e
be6c3816d326f610bec052dea5d9a4255f742b5a8b26c70a3b1d3c656bd56f8d
0c04cf03b672a4045b985811c9d8e481ee74fa590a3c3bb5b88c1c9807def8d6
d5145de6240e0c7ef1449c3a4bd759aac2f17aebec20bd52627dc9e2c75ac1c4

Raccoon
e12c0b1bf9e3cbfb7f5966e1d70e95095d4f930f348bc1ec16312c1af4397d28

RedLine
03c8a390f7030ea876188436d6cbe99592b739d40a53e60ad0869c4c6194d828
271392dcb26159283ddc50a6606a6595b58088cf82fc04b35d27cbe147116688
32a3db2c4f895851cc75ef5045311c94a765f32661e4525f6b6a720db7410614
5c0ba71c35cafb2201ef422219b88243fc6f47f7528cd1cfd53da1a7acbd8ee0

Remcos
8c3a6d5b05325958afeb7885e7d4bbe59f7f5a849b5acdf0a8f7cbb8febc4a81
a0310cfdd6acb6da978b333596d16fe29e39405d7cde198191270ae38a4ce167
ec3eba23c9f999d0b453d6c808905baaf0fb28e12fbd6197382649f5783b6d44
e446a1fcc24b36618ae44a14d5e84565e691d5024cde9fae7620c63688be8fa9
6759fc764cdeb66c2939d679c2dbfacf5ebfeda8d19617780659fb3ea9e0244e
700fa0f5adb7d9a7fd923a9e34dbb78eb57e5513270f2e244fb72a954829369f

STRRAT
9201cca16b1d0683f8399d6350493797acf249a97e8062ed52273784b2d341dd
c0da141b9b9244543b9279392353b85cf091e73c6832d162c668a186673b0ce8
73c4e748762c87799dea64cd4cd4e31b5395de183d1b3c662446748e45aab76c

Unknown Malware
9f02c3a8948e58824a80f5772c00c5faca49fc5c324cd207a8ae99ae246e83da
1b90aeb29cf4680a4bd3eccca4d5c4bd310b98dcdde256dca2a560ad24abbdb1
d944ffb5e041d9b18a6a1e1d7746fc2d4f210349dc27c33f97220c8aca96a3fa
5c63f9764c59dad002a1447d6b720c26bbb8c62056f9892a8138a73552fb895e
e0f547e80e2ca66e8e4eb9fa55ccd9b4b6f080bbf9146160b3990315c126dae0
c188a4c655cd6c496514c956719ee0deba2d6bdd6c0f9ab6450893cdc3e054b1
7bdfc8f4a811f081a1d468238ed9e92de0aa12edff1f4c640116f3b594f73567

Vidar
1e9fe4ead1434548d7c9c9b43fed8c63134a17159e0d99980ab7c6233149befe

Xmrig
04c1fe3bf04ebf65d38987f3d1a728684970e88503fa075e2d0b8bbbe98a14cb

Zeppelin
fa789f56ef3f5075fc02c53cd937fe1580ae46217cf0a82bd4871043276fb086
8ab4218a7ee9239d218f2729d6c00fb0246eeea1e97f85833dacfc73457c8b06