Daily IoCs for 2021-05-14

################################################################
#                     IOCs (@RedBeardIOCs)                     #
################################################################
#                                                              #
#     Date:    2021-05-14                                      #
#     Total:    218 samples                                    #
#     Stats:                                                   #
#              - AgentTesla: 49                                #
#              - AsyncRAT: 14                                  #
#              - Conti: 28                                     #
#              - Cryptbot: 8                                   #
#              - Djvu: 14                                      #
#              - Ficker: 4                                     #
#              - FormBook: 5                                   #
#              - Lokibot: 1                                    #
#              - Makop: 16                                     #
#              - Nanocore: 17                                  #
#              - Njrat: 9                                      #
#              - ObliqueRat: 4                                 #
#              - Orion: 2                                      #
#              - Oski: 1                                       #
#              - Parallax: 1                                   #
#              - Phobos: 1                                     #
#              - Ransomware: 3                                 #
#              - RedLine: 15                                   #
#              - Remcos: 2                                     #
#              - StormKitty: 1                                 #
#              - Unknown Malware: 8                            #
#              - Ursnif: 15                                    #
#                                                              #
################################################################


AgentTesla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AsyncRAT
fdf9f5e6ec30c50dbedd304acf04ab78890f294e0181c3e1bfc270116333c217
91c058af2b255ff2d638df7fa889645449aff1f5d9ff28d603f7a6eced7dc19e
ee783f2c2fbc8094ee30d83f215fad3caddf31d3b4e8e2e8abedf073946f4411
afe26c4fb729428b66f674c23720539c7ac02144e279c8be03979b70acc0bce5
8436b452509df953b5a4d32728c8191a9f1aebe2d7d1a6864f52abe2eb9c16ca
8f353904e32afe0dc5e10d3f0a65bb8e9fe6cfb560fbe2000607a98917682bc6
dd4d1f4864a78a203be8773d029089a5197ae86dd7cc7855149dabed4f55735a
0314a2435f5e495295427a0bde180db03b71e130c22199ff2008d95d7daee880
265027c9c71d2a5cf9dcbb841f5d5b7fb432c5d71e0743d7dd0d81e3d836df24
b88bc0e541be59caee650bcadc1be506a62e6b19ec9c1978d7175a67bbfbb01b
9b8adf65c0f9ddad6580e909ad40ed1ff98f42b0c39447a8fdde9ccb056c782b
c54a66686e0000ddcd8f87db2364c1b91699b7b59032fb5fcec65f9e7aab8c77
84f15ea633e53bfdb9b7191182213b100e2d5ec2ba78b729d582f065a0878256
23456454e2cf509b441147fe0731d75388a95b9a3966d3d92a6c34d0a6651731

Conti
d21c71a090cd6759efc1f258b4d087e82c281ce65a9d76f20a24857901e694fc
c5543d9ed561efd53666d18ce7e6fcc8bc500c8e90ee873aae1ea8615ca0405b
5fab38b629135e1a65b8ae7419a2ffb96969203f9c52df4cddeacd3da25ab2fe
fce289385a426b1bbec6f2d7078bb45efbd457e033b7e64fd8990277005d4793
6c211e187d8e3acb4b30e16dd7d222c8141b7ea33449e141b2597746bca53a30
4c386e55e8843e694bbccffa758ba51363ca92c179600ca29d6d4bdb7b3d7df1
d4fc59934b6822a2d256a682bb8ae93a469e9697db052718f3e9a8ed1a186d8e
1101330f6d2e33029fa9de3d5fa2bd9b653c7165ba2c494f543ac8162bbc3032
06a33cbdd0d1100c5833138db1a8c9100be4614730bf44b24b7d3a1bb044c45f
7bee0eef2281052b17d2d93905260e63ced21d254759d2bb3f8fe802b0ae62ee
4fb000c813551fff019e3907760a5bb6ee6239b64cd7910bf0a971bb3368945a
71e82882682407f12f683d77bbf31fda3ca7e7b01356e2f89ddbe618c2c4beeb
44b701c3bb7e52a83cf6e281461b6202b429804f82787ccb547955b0d29e2239
3235d0f5057a5d9c1143186f2022fa639953fb45f7cce9689115a4e2a9ff7a67
374edd39a079819fb5d781ec7970a6f05bb851ba84de1798c7049625c7077985
55ca2596c30183a3d234111dcbc093dc1a63e3d15781bc07c545b745d4774295
2a6db1b2effbb05d8cfab77016fc31cc65f444b3b86bd416016898cb18d3f4bd
6f3e3a1f7c25eff9e1753c27fd12bb241c697735e9133c42021f7a02092f4399
f3b17cac8fe2a97c4e29db40aed006362bb19d90a00bbfc5110cb7fde209ff79
e7d8c0fde950c5da754a79f1a90a3846e006d04cded37e234de5f60b4ee64607
57d71c08aa7d95f254d8d42230fc68d4bac200a53ddca9879c28b1bbffb7b467
b11ac7c4d2c23b9d5824eba4dae7ed2e84efb52897317d5a16ca8a82665a2aa3
ca35a27fbbe5096d7716b610c54853afd799a6c8a85c94941701fbf493c95ea8
61b7461964805325134b1571b795b7a30c72559abed63c5018a8e3203de0e347
64868c78b7cf8d4a0bfe8012bb479a7ed1fd61628508f3a9efcc6d94bcfca209
0974b1afba38906e18b94beebed74a6c502a267446476fd657bffd3e0eb6c777
1a183f2451974bfe6de94a8fa2769f0482be9ec01b11906c77e20403fbc916f1
8181d8df4c6ab64eb3d856e9db2343bcdd9f87bacc5886e6ed9f424d418e4f5a

Cryptbot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Djvu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Ficker
5d45d713733be27c97bcec88c650754c8bf5632caadeb2f75e5543d6fda0e6f3
86a966eef3b0709036861dcb7e46eeaf73690856c0e56ee43f7f9dae351eee4a
207633ae06d66e10fafea8daea7a683e555b56ccf2ac6c9062fa5ede6e3ee32b
e7494fda6b26c3dc832ea9e23941336a4fcdc5b5a9cb6d908b1648530a9e73cd

FormBook
87ad57ffa31e9b3481663bd81249ec1e563dc2931bb4bb2045b06ea7917f1593
5707625c5aa9a398162f664fc465e22a5a827d49dd00e52ed31287406575120b
d8a1fdaf89824ab229cde26570cd98f4015fe003876e68ebc814a71f8a2352f9
91c07552512331e1eb3d65f4b6fe25f6498470893f256b57ab2fd11442815334
6754ca25c14dd8c9f8929fb701603578fe2bb08284f335b7c1718569f9d1bc7c

Lokibot
11f8150c99b4e9aa7d41f366727a3fcba0607319482fd9921e43da4e6724b56f

Makop
994aaeff999041819c380948d93a44265440d63d5b6e7a9cc9ef82d646fcd1ef
adc58d9b0b0001b2115cf5f5c2a11203978863df6afcb836f9a98438852d785c
b38b7f884c9f9545477484ad0e6398b5be84da84e91d626bd1821d740157448a
20a3d3ccffc79e9ad3d4a313dd130aee86662a1ca5161fb2418f99edb2900560
7079856d3023fce6b06079aa9614d1de779c2fa946b3c2bf975c666cd865f188
0629654f0e9717ce3312ac0611e9998b8e0b9fb829f86f1a9680ddf16c8755d3
5f236eefd011b1d4a7df793ccca1581be5e77859a171fc57ee6aa1b57c87acc2
d158c7642dccb45e8ef57e27437de8f736be6f7ceab9d721276d56d8b367d5cf
6bb5574e47e2744a6fa383ef13fa9ac8eb7bd4437adb67c6d973764b36d0c11d
5f62f11223f250e63ea8204a0b1ec2cff664d80f210eff91c802b5fe935da659
ab34d9fba3ca913bc2be746cb302cc9ed5c0e5683c51bba4341ec3c6ebc3fd05
44c568b5321c969e868b086d6890487799c817d452faa851eac394f979096907
69173e86a9b4a3d2bf7f1d27886d516310eb6512f888ed1f1a10aeec3dfd3fc8
816ecf4659b6529800ea756b754dfbe4419e5cd6a4f08b94d1bdd4a5c87a11c1
c9c9c67794d430c3a5298abdf0d8127c09d4678a399e9f9b5a09ce956f1ba577
48f63417381863c2dc7ae4d303af842c02cb09908f1ec98cbc876648bb97a351

Nanocore
5513b4d028a859adf8b0987f46becf90c7739e86ccd3225e3dd88fd9e7c85b60
fa94cc9445258391f03b283aca782b8c4bdbdd209a3d8df5394de3c365556190
6d33daea0220b4ee92ab89d345300f278f8554cf3029ddc4e96f711b68298b57
e34f2a3c0b4630182b87e69acf811f53602257e78ba556ba8c2123190323eca3
0750b24e915908d9783bbce5011e9d94d5ca90c485a4bc808f874ab725edebb7
7df7440213022b472e963c7a1c9527a3d4ee8e6b85697b98abe29aaa331537fe
1b0b956c19f2022feba28602adac41c6f508632c4dea6dbe48b8375d05c28f45
5afad60b5cd65c577738eafeac4574ccf449e05295cba4e1e8b7daaed51e9a1d
cbb05e5c88d4f88ba13547678f2fb795d5645bd0ba2cb729d1394ef7151fcce5
b636d113a9695d9c26b0f19dca8f09a98a3e4cc8032992c80d8bd6037ddb2273
a7a2aa90ae45fd596dc8309d1b302b344abbb2fe0f0f03edd9ae64c4d07730b0
01314e2afb71851df51cb76a576c57fa2d6afc040d6a813367d9d7abc7be78df
a9553c34cf240e23697e93237d4e0f31c1e56035a26567f223a9e185693847c2
8d2cf43ee57564fbd0e3468a9211f914a4c2e9feed34ccb003935fe5d2e0467b
9de1785282d85c9a1fea359c094b984a0ace1499d9b485c9e65907e2aa70e797
b8060d00b4ffb6289caae2c4bfc572f2f5ccdcd99be721c2bbd4e1c395a67669
c5dee818b5db4b6df0243744e5cc064c227acbb851fc09d3b56b9ba400345bbc

Njrat
334c5522b41fa28c3fae286cf9de7b32e97f2e743f6ce3dcd92ce4e2664b3a8e
0ad5771ab84889b68b251e5c841897b898e0486e8f13bb0c923c2db653a0c9c3
ce7fd708424441c0d7d5be9ec32882d9c1bdb5c751650b1150fffcc420da9cf9
2df0461af05a6c639b7583c3be9ad1ae2b236d5aeec4f95899bce8dcbe5b698e
d56156565622f38f5e25aa0d23e5c3d9ef7662c1a8fe17a423a233b5056a4257
b65a1b5b78d8931e41bd5028788258daa8602778f119ca6b447094276c751277
4199d64c13bc18d3319b0270a167bb0db436b29482443eeed87c9e86d52a4dfb
e6c2b7f24b34ffde96d0b5822d474019a29b4910aed2e6d225eb0e2a4a9e4bfe
9e6c8036686e30760b30d98f548d9a5beecbadea47b1f4a580509c2a279c1ba2

ObliqueRat
d0db839579dead9fea0feb383ccd57e7b394b3670c3f7240ddec8a4fbf7afe14
9da1a55b88bda3810ccd482051dc7e0088e8539ef8da5ddd29c583f593244e1c
b218fb4573b6c8fff51870de463a793238a4f317ce9abdcf8352954f92328eac
3a04dd93ec9da19781ba97412b466452a9682a390f2cf4426f722e424465fb19

Orion
61ffab715d68b546dded940f74c1798c2db5841893cee84471b85245d1e903c6
222e7b2825a05dcbd6ad4eca9265e38d211f850a02aff55f5b3034eb6be0e27b

Oski
126a9e14cf4f6768c6c51eaf4a302d78c40b249adbe57e4b73a4964d72138c69

Parallax
0444d0bab0ffad641edae84a28cdf4070dfeada30c51d8b204dec98c40154b5b

Phobos
d7d50f809a7808ca53c4430d484bb100aaf9c74c6c12080ff888b8c04212f405

Ransomware
ba1e962d5293a87b004d8d9aff5fed6389291b0309b8af3bb5a991f1a96d941e
72607ac142f470961d9cb22be5e9e24aa71fe55de2b635297cc38a95562f8991
28cee70345156d6d248b70a0cbc7b4f32c64e879442e63b7c1d086aa1b3e59bf

RedLine
16dd132413c802d5da72ed527625c25a7b4af69d9cd3b071512edef506544e62
6149eafeccc9e1292a23c689046bf45d2af3f2e3232309e25f1bfa208c73ff60
abc2ddafd163a63ea64d791b25953618ed71e10884f2fe2a8a1030311ddad3ba
eb3959f9276b766c7503738f53f00342725d6e0d7414a297771750979f1c5c0b
960e5753318a7343eff7a51547b311f9d956829bdba59bd7d21df114e476a4a6
b0923d73c1adc9cd9c07726caeae3e6a001c21100aed04e731727f2deb14b7d7
abc8494ee7286239506f339b74ad4bb52e996fe68b1d35218edec6b65c771a7c
38d091d859a88b122eb98af1452e040c137e865ba39b3bc7cd455bd48db080ee
3adfc4b3e456dcb0f1800bb4034253a583e4893beb8099c2c4e2b06525edaa96
fd9a2cf9348f96916263f393e6362c92b304636b0caf081522395340b1585a8c
3739e53227241433da59c7c2f4a41381dd2fc2df821457e38f9224b4647cf300
04a81aa77be536295891eb563a43fb90ded5af85310dac9ae78e0a8723534f25
aecae5fa00f0aff49729f572a10fb3c30e76120df2344882630eb25ab0d02eed
84799b01ecb43022d7245c10a477448808f1260d69238b2cc77e510a89b7200e
e7478e2853817032f9d7d23bc1ed611ff0e58eee628184f9785e486f9ead4b15

Remcos
84631c19d18475754bdfe649b0ff41d3adbaf473fa9c732833cf4f8942df291a
1ed6cbc9b8af4e05e97a00b4c26fdd26194f9a554c4ef479b3ef029ec0fdaad8

StormKitty
f687858472e8930c4fd8e8d12ad23b9183754ed4d69fdeb81e7397311cd68349

Unknown Malware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Ursnif
689fb410bd14b79f1932953f7bd35e3569c75f99e6c507f8a37eaeb9760e9b5a
70d1bfb908eab66681a858d85bb910b822cc76377010abd6a77fd5a78904ea15
9e9cb0500eaebadcb4a0503cb96d744fd2e9191267c879f46296667f0f8ecd9f
f4aead3e926dc1054f4e101bc7d213d8fd158981cc1e36cbbac5debdfcf834ff
cf6ed4efcb1b7394e2e4458bad29b9cc43102295411411a8a4306558aed128ea
305df52e17cf7e129ece5188cd9bf51102fda9ac812d597c3e29314b06e8b3b8
7f724f72bd40d3d1c746f5ae218b9330698ef56a7e684918236c8dd722442442
6fbac60dc4e086bc9185041507bf0f9b4d9181ed86354c6898157bb18ad6356a
c6dafc60a70f10ba6bf77f4d051bece351c996a48180f498af60973cc40c8ad1
a48aec8d20322141af7e9e08d0685fff0938470b1398d86bdf8fbf5cf4e56495
49cabb173cbde60e745de1f24adc9e65e87346ad5c79a2ec43bb399db0a57d9a
9384e5b4c267ae0da5c939cbbf0ce51ce1096ab1d8bfb9c153c97240def847d8
416d69aabdfcc70a451622763d3e570e1417e5643140f01c4c7b7c9f0b324bef
413a01629efe193a0c8d3a195dd491e6cde77f9e155a13cd3cf55a4118606d0e
ac3452aad18b77fd10f2e96e3d211fbcde4b2a4d7f420f2b9d201a78abef052c