Daily IoCs for 2021-06-30

################################################################
#                     IOCs (@RedBeardIOCs)                     #
################################################################
#                                                              #
#     Date:    2021-06-30                                      #
#     Total:    191 samples                                    #
#     Stats:                                                   #
#              - AgentTesla: 42                                #
#              - AsyncRAT: 8                                   #
#              - Backstage: 4                                  #
#              - BitRAT: 3                                     #
#              - CryptOne: 4                                   #
#              - DCRat: 5                                      #
#              - Djvu: 6                                       #
#              - Ficker: 1                                     #
#              - FormBook: 14                                  #
#              - LockBit: 14                                   #
#              - Lokibot: 6                                    #
#              - Makop: 2                                      #
#              - Nanocore: 32                                  #
#              - NetWire: 1                                    #
#              - Njrat: 1                                      #
#              - Notflubot: 1                                  #
#              - Oski: 3                                       #
#              - Ransomware: 7                                 #
#              - RedLine: 23                                   #
#              - STRRAT: 1                                     #
#              - Unknown Malware: 8                            #
#              - VoidCrypt: 1                                  #
#              - XpertRAT: 3                                   #
#              - njRat: 1                                      #
#                                                              #
################################################################


AgentTesla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AsyncRAT
b71809616714cb2e082d14b3c901d2366be425ede722d0e7d82c0e5769d8bbca
cf2519d7f487f8a64920eedf7446c626e41d6c0b8e7e8954f09214e12bbc7385
0b87d6a307d289a45bb513e5a0c95e4338fc07b9169d504d846870b8dd714b5d
6b33e6bcb4f34a532a4908bde45ba19904c095f97a0935f0d7d55dea06528078
7016026303e84483d6c6fd21e250e3d4d9b5bf268414918054485d5ecf0e8d5c
74793bc735c85a0aa392628532d0f27d6bf3d93c399d8b364e50f7353b0a1427
f0384e2d435f1956072c37acd61add6ad74eb9249e282e8a5fccce4bcdb13d90
d0131ec682297bec00d22959c3059edb94469b1515a5febbce4a30e8877d6c2a

Backstage
ac6368c5c8b94f8ffcc063c0a73036ee6c204a25a16adba0cc37ed52532f04dc
b7f4f03a2bc3785a10f958b20228291164c9c014b203ced1c39cf5348c04f356
c7b160a09b5c65d67c34c98404652fb7909dc990fbd40c06a89629a9ce65397e
93a42550682d97f96c6be7bd029edf6550cf1c17abd9db4606d7f9fd0cd41b6f

BitRAT
c4c0b1353e68ab95c0d97ac915f4308963883e39b0d881603f5255f9aac9abac
948bbfb4f73d4d30cefa11e808a3bca87e7e438c774b2ca8e319c5c30b3560a6
33e352297a8460a0e2356a6a9f0ae09dbd544518156ee69fc5296f56cced51b8

CryptOne
cceb4f31dd5c73b9672c630e01c854d58a87e8b7164885ddb23ff4d97a55beef
510f37d097a03d77a01c00616c0b59675b7922bcc4d01093050fd371241154fb
72404ece69c4a5fb68eee06d8385ecda5a8a819a00f686a56a824009d6de392d
7d4e685561609be676b289f066b6e9e40696dec3d59fce52b0fe67be3b7d642f

DCRat
c31b00f44cbf142f671d6fbc88d8c7790c660ec4016ef62cba1642a09827f0dc
11a153c8afaa36b8af99ceb85f50b7b923ddacb921dfa9888e0c49d795933075
c722361ccce7a6459e3dd85339a279d53b767d4a23714dda98223adf5cae7b9c
748f35be261019103aae31d43b1fa88fda9cbc99043122e76b5c0a0d94cb808f
dfeba5d11b9090be9f4a4ddcf70de0c7cbcc71fe1bfb4133c7ceded32bede5ed

Djvu
d723a549a0a599a4ba093393e2cd0ddb46c5cce1440b7aa2a1226153e0c7f569
2b09e55c9231ad5b310fd6b804a27043a011e8b16668a5f90d015ee3bb8bfb5b
34493be6b975d93e045db6b5272f3a3ea678111228813203d4cff98bd7d9ae9f
23809e57d376fbf1922e358be147d8c281cd574bde07848c4675e67f50112a3b
be00272db0563a2794302d5ee603b040c6f17573eaf6db0976cf1672aee4bee6
1ff7cc39c58315425a575f96b21a64157d582100b9e4a1b59c63f50780a46075

Ficker
b4ef210db4c5203afdcf2f167f8c8fa7ad095a521c45a472e61deb28229f5421

FormBook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LockBit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Lokibot
042745a4bcafbac658e73da50c2e281a3aaa9ecf81344e67b00d0c40e807621d
68e3d19babccf36a1c44921bc8cb5c0009cac9f6f0e324f6b9a3876c3bed8d55
b0ea4256ed6da35b96a40d763e8281f46ff79c78a0c92aca14c69eaf13a3d244
212791a3925114eb9d9aa02d0d9bfd9376ec4b3728197d813acc461f8f42fac3
82f8eb5074ee2bca4e17c909c48935143aca8093e08f1ce7ea0c508676b18737
a77c2b72a82237d5019b2ba51d96d4a0efee3d6a45fea184b6a5451804f916eb

Makop
30b8503f85fd1b911c9eec7bf25b05300df4c58dfb8360320d67bfb5f50a4764
a6566bc4c76a36a0e880d2151e0a86a59c3af57082b7c83a669dba3f28afb959

Nanocore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NetWire
6e75af8d5d325800f4cfcaab0ec5a96976011f10544863ec3f75ee2a21eaded3

Njrat
670bf2bad23645b731a67e3299f4f1692da3bdaa711c588b17024ed916e55438

Notflubot
308854628ee791468c30ec49a0f48bf46a1ee9d615c3efa444506b43a0615e4d

Oski
89eb1caa50dfc398890c3490fef1d34527dd8505de3d770bb6ae7032ae22fd1f
6ab28a843d5ad26feee60448dfbbb5ddba73da6d5dc5a6a6fb9c0129bc7e3bf6
f1739d3ae32fccacfa8fb7dbdca07b7043dedcf6acb7ba9ce251739f059bfa6a

Ransomware
028facff67136de55fe200177a190da625c8e1713b4e7d95bf5fc5412a5afffc
d17c45b69bc45e17de1152841ebddb3a6abfe85202569fd5dea6b8d52a44c053
975df1ad51ebeab889fe59e9ec92be516030359a9cfa16d1b749da727cc8f7c7
7cca9ea23ca57d8ed6ac3f9a13b193703c04475c274920861edbfea78b4e44aa
e25eaaac03aa958688cbe950275156169eb4955e145bc9627fcbfb36cd832a84
cf25a92a1f137bda5fb517d656dd9759d32231ea65b5a4f36e24db28b6980af1
e001f6a5b2d4d2659b010fb5825eb4383e8f415861a244329bc70cfcd18da507

RedLine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STRRAT
1e27c9a92d5613081886fb0a2cfcc6f346aa743e966fd489d00fc9cbbd914483

Unknown Malware
e7f43a5622684fe3800d5bf0b9b414977cb54eb2570cfd0a7b41bfe7e9bec7ef
420eae44ed26f50525b0431beb1ca1f3a7fc53ffc134a31a7538ea352d67241c
8c96481d95e77985f86ddd75a3867e9018f5848302ac560b268b82fc80c5a0c9
4ac0f32c2dfe2ba801e4f839b024d2d95214d3ea163a14717672fc92c945906a
f7e0566ec18257af6e6696c15e44299144f9239c5ec659127020a9a58b2d4146
fdee4b5216a3ccb9e75adbb18fc2d34c6c613d3393f396927af0e89c1fb434de
948e436a34c05e4c1be900b7eb5adf3ed894068e641a0d89adba92bf26b4ba87
b7ed4b39de012e88ec9ad7f21b0ac68a4e863fe078b5c54857a16d37d480cc21

VoidCrypt
0a2236c37de3bcce0abbdd6ec7b58654731ca26a5a96ac17884590d3e53186cb

XpertRAT
ad7f31229be777b24f3d572389c99018cbcd0b23ba69bd3df11683bf1f2167cb
79aa4d81cf5455a126a2b7474067f392acc392370fa6ae0a62f7e1e0271775c2
c37d3d754e689f94a61284a1baecc62569eee91d89e81e4a64c5f2f6818f7467

njRat
43fab8a6a264beed9384dd6580709d39b909f79a3594fd9c7f6325bb9cf63f0c