Daily IoCs for 2021-05-21

################################################################
#                     IOCs (@RedBeardIOCs)                     #
################################################################
#                                                              #
#     Date:    2021-05-21                                      #
#     Total:    101 samples                                    #
#     Stats:                                                   #
#              - AgentTesla: 33                                #
#              - AveMaria: 2                                   #
#              - Djvu: 8                                       #
#              - FormBook: 8                                   #
#              - Loki: 1                                       #
#              - Nanocore: 5                                   #
#              - Phishing: 3                                   #
#              - Ransomware: 1                                 #
#              - RedLine: 5                                    #
#              - Remcos: 2                                     #
#              - Snake: 6                                      #
#              - Spam: 11                                      #
#              - Unknown Malware: 15                           #
#              - Xmrig: 1                                      #
#                                                              #
################################################################


AgentTesla
65ba3114fd8f21dd1e6975edd6fc022fa5f618cbffee255fc181220a0efc3604
6fa6547ef5a7c0392647c4dc9538818fe0c18b2e209cf297a26059249aa3c7d9
607882b734de4fd7cd2f20c1289958b4eeb07853b09e374f0416a9b319593f56
e073270ed6208ec7a9273ad24ce7f87afc69eafbafdca0eb2e58774b49640ea0
7c2cf4046575483c6e5b71745fb4d6ec4f19f95879fc54cf0b2caad2df5b695d
dc290012880a4614c05b23e2d11f3b39a173a86314f907a580ec21a599c8033e
7fbf66043872f929049034511e6ced44050e267a9a2bf840317ed4d6ecdb3976
809d853a08515e9f1a5005557ea01285b0d3a6dadfc1a0691eb818cea9427a22
eff794b42e69636b32c1e6b69170fd28f7bf0cf33ed5ff2f5579d17d2f46e95e
691c2e8db1ea640c47e4c04df218fa45e0e1d26a7b4d41cb23c09e2da9be5805
78fb258de3506eb1a38ee1df88caf29dfa667fe6c2c5870713d95a15ef0bc3ca
4b7db199fd02ba3368f5453fa6502a3bacb079871f639987ee7d614567651ce8
5106303c4540828743ca980a8c2d41504313e8e37125129b8dce0dadffbbb1c4
d916d65a25a7477af3f904e29b85a174db035069b25ac8e263eed65da82c5f7c
f8ac5606a67ee0148a7aec833cec28d6684eb8c5613db293abf10b82a67b6bd2
dbc2461e9a3cb1e8b9731d3b235f627e1002479c64a78c3318690258978e7d76
7153efb7748ad93037db215f0157d5c0b995f54de176a604fa8b4ff2ccfec7c8
f5ee5e21142c0e61b2719d5faa33675fb5398eb25cc704d8292615349a06c636
e0ca332f66c92e01c0cb3ca2135184949a7317bce5cbb5e1a77cfc935154d0cc
25e023b62ee80e6d9de88b4e98da96e085f690d11a3b0c4d7a5aa1c1ac7bf4fb
aa566b0e9c6182c500c61c42d71ff879c43913abc2130201ebcd5ac101eeb3f8
c271c2e52c90af495efbc03728c57e6d9b1fe846a78b80f583f672fedb8d88bc
a6ce9cb9123d4f7a30a15b81cfdb515feef3c0d74b0bcd8b0c3e99c0537cbced
f64fb27a902efa6cc0171af9066458f48e8ab853f9aa8bc00e00134d54dfcd57
d91d3978aaf95c82ca8874e6d1778e2af2355aee81639f9c43d672a1e079ed20
2642598629424663f9eafb9efe45985a7665d0e839c131d19307267b43b9b806
044c830f659aef721a33cfc7f6d2b6cbcea41a6c0e0c00087ec7b44f42b3c976
b807dd683a44fe7bd38ab25b491b539a5e1234c08f5e26f86f67c782c1bc9d6c
ae76fbfbaf592907d802faa1645f0be1cb7b4b4601432c552ec6bfcec39358f7
d348e688cf66e47aea27d0be8b96a9bbe671d3c40eb69161ce8517c55230f898
d14bdab8cd3a76e50efc59bd5a5a2ea3d0d9384800d7b93e53ce6805e82b4a6e
5cd55e85530f65e551676bbc0408e8450b9532b467715d7084121b4517904bf8
83c9dc3f9d721256e62a1c45060ea90b357c8718c8a16dea31627bdd261af962

AveMaria
a397a5e66eb1ff0937859d45bd19e9083e108341bb524d8a84fdf6c36641284e
c5d7cbbe95c1ee46f8e76cd859295e56376a2b8985c2f50355e50fd966f05cd4

Djvu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FormBook
c6e3758af9817c19a3c8a5e0c0b19bcd59971d1b2b4c813862bbeb716d87931c
fd805b222cd4089974af4a5cc69602dcb1201049a3d69ad4fcb99b2b6dff96df
993062780284d866c72f85069edee0bd933fbe3e18eae1f39f6cbf3898278ab5
02d0cedd40573bcfa7e60ede0f6c0b8c462b7e43380e197c78ea032483754311
8a11ccfba0869519eb222de54db2f768c6de3d57045490c7d49b87679f80b4c1
9435bf4ae05e98f0e1b3fc55188dba5d50ac937cef36d69112776e39b8584ce4
eff91f1db4889982bc00b5a4ebb7322c72872d75de44466b9a817549a53ccf25
2a526051ff0dface495696af4bb9a540ced5d608e777625da8d456fda8888ac2

Loki
44b4fe7581292da3717937c548ccd46395bab60829ec72c4a27c79e46cc179c7

Nanocore
f2dcc47e9e2ce6adea5980a23f58df8645eaa092327275aa51418d4dce9045bb
9ee08282d40e3bd34c507e16f7c89ecd824e7605c59a8458cb3299c5c8928a42
b4ebb1dc650e0023ec902ebd4515708979520fd731aa88d5af11de980bb80b53
add129f562654fafacd7af24b6e2102fbc49c1418a774c63d5ac2c8a5314360d
0b81d859eb77ebbd238baa9c3bf027797c66a18ccc0a9e35e60c108295f6eae0

Phishing
c88e256a32960ad3395f4cd00019f1545a071cb61426fc1d8c0e7101629b2412
f2a870f1734cb9a5c9501f242f4c8959e1e6b791acc6a2f24361a37e5cee6271
da7fdf243eb86c1509ccf0cc02a2ab17eac72e8779cc98d01c319af7e2e586b3

Ransomware
f6c4ba7e81f05fb9d660adc4a73562ce9d78a5850622bc90132f0afde601f804

RedLine
4964a63c7108b22433ce3d503f005889119e95408f84f3dda0330fc06747b35d
c62b41e0427684acbc194ebe00fe4d956431a2780c72fa423140f6eb0501dbca
0025fa30467c7cd0598f0d25c05530d6cfbfd2274685ab722fed50bb005b0c4f
7345e6421d99fcdc48554260a8670bdb2da227194d64357275b797fd9c4645f3
37064910d05f95e154851a0ec2c22c35b7d2463a592942b6032030a5a95eab7c

Remcos
1fc8b21214b10720988c33582ca6415bf3d052a829ba4db3dcbd77655de4f95d
425717a042b7be33fff7b2015e9b72916ac00f71cf8d2968cbf289188b51d416

Snake
c9acad2203bc32d8d80b23df6c05b1406c3fb5479796818398aa55e32b822c1d
4e5163135decc7b0770c92d14029d198082062110fdf63b69e4905a2158d6357
d3369b50e963787693bdc2a967f3f156c91c09a83227e8c2d7851841150e4993
57567d4ab3e254208e9cc9475b7e3d3314ec16c7f20f7d0278baee398e6ce007
ef4edff66097246522e9fd081a8b0b163f6eaac3b55ca7be5e5466830e372515
e7648bd668c8f6598421ba76c07f1ecc85b3d4c14044d8f32107f5e145830405

Spam
02d7baedb8516cee2b4df0f3c74b2f7075b20830b8a9d73e9513403e999dc87d
0a80b670ab0f7774a6ad4a2a1887be0070ad7e2a1770f9a11b1876720860f451
2bb4e86a318fe4f4f1377a35c293ee17be5ddb9e314b7090da89542c1b56080f
25b70965a0e273676c8b048848999b75382d77eeb6605f7b08335424ce2a139c
0ce2ac452ec64c01107e31020e363bb4e7be92fdc4cd48e165adaf8e16b98f53
1a468bcf4938fe1a091018ea96cbe857b7d8441324138e6bb0f3ff08d98b1239
59dfbfb3eb266d976bb40397449c1d1637d61c15304046b0bacd9e9875e70f11
715d53c42d2b020c2293b90d872a4134befaa0f4a3694dc8f531b1385ebf08e2
d11a61461542e75bdfcc0a35de51119136a2723162f84eac8a5fad195736434f
283dcc390f2b79fe06d6aa21f29e7458d1a3d61078b7e0d4739ba179762717e3
728ed3d4cacd8e21b316731b98a1be288fc3b422cb90def3dbc30a80c24cb7b6

Unknown Malware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Xmrig
f1a65d46d9c1ee1b14078e4b5d938614274ddb4c659bec131c996cc9055fa142