Daily IoCs for 2021-07-15

################################################################
#                     IOCs (@RedBeardIOCs)                     #
################################################################
#                                                              #
#     Date:    2021-07-15                                      #
#     Total:    157 samples                                    #
#     Stats:                                                   #
#              - AgentTesla: 35                                #
#              - AsyncRAT: 7                                   #
#              - AveMaria: 5                                   #
#              - Backstage: 6                                  #
#              - BitRAT: 3                                     #
#              - Clipboard: 12                                 #
#              - CobaltStrike: 1                               #
#              - DCRat: 6                                      #
#              - Djvu: 20                                      #
#              - Dridex: 9                                     #
#              - Ficker: 1                                     #
#              - FormBook: 10                                  #
#              - Hancitor: 1                                   #
#              - LimeRAT: 4                                    #
#              - Lokibot: 3                                    #
#              - Nanocore: 15                                  #
#              - RedLine: 8                                    #
#              - Remcos: 2                                     #
#              - Snake: 7                                      #
#              - Xmrig: 2                                      #
#                                                              #
################################################################


AgentTesla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AsyncRAT
bf60761b6dde56e007538e10e5b6946f63356c9f6c3c8cb5b2f2e16e055383aa
f1937c2947475c6d73264a59c3f6d8c39b12b88b83ffa67d518d72835f74df93
88d647263ce3f2f8e441336cd5e9798e2bdc4781fbb7f1e2b3098ea6d50334fc
926699d53b6d794bf4d4943bb76cba41cf8b54168213f485a059f202f971af87
03bc09f2cb932ea361ac713b77ad0740bb9f1cd382c2a7a367c2e225cbda763a
58d8ba2d17bac9f90887233c5e14c1efa1f5eedd47b4b59406f3c821e7dcd00d
31c031a7f6fb39ba50153376ee653388d606a8bc1268954460de5d37f91e4621

AveMaria
691c75376ade3956492197d79853cab8eb38dca6dc2a7c2be3d4f28f445a3d2b
043544fc666b260b348dbd6c004ac8a76c62418e34b3330e6d0a1fac1dfc3f9f
6e8ba9ccbcfe6fb5e8ff5ba198398b3e7994f8afc6d51140496a3b4c1d67e20f
20b8d427a1603e1262b0c7d9a5119d0ea775cb69c690098ecd12a1037a443892
d358d57ff33c342080f7303d9ecd3bb2c6fe2fa7e1d98fe087aba7a4ca2f4bed

Backstage
25beb76f021cded2dc7f9d3a4cfbbb7aaa3dc0cc0b275ff18c01e4cfbdbcd69d
8bcf3984e139a272179407ef7f22e912d9e686d59db6dd92b36d1a546e73a34d
3f09b84406e61d7a00846e5e5bb4c2e2a2eb3529ad0131c33c02510de0ce3784
1384dbb3fb10047c69fbe5e4d5b94804dc20e093c5a08b5c3a31b074b60c6a06
31ab0101279633368c5043e6d107bdf85b647ea3da08f27188fb075403be5a23
9edca6492b2930f65f4bc4d74f23ccb3cf11f849ee8aca8ccc4f1b91cec34205

BitRAT
8decc49e8f074c15e0e73771424f335f7ef628beb4af53f6b2b13dbc4bb76989
dff85817c9f5b1bc9153495323fa7b36fc8f8b6a8100155081d885e840da9c89
5f6dde542af94c66d41c7d9844055c542b126263af68a4057932fba0ee49313a

Clipboard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CobaltStrike
956e66f820c127b655c4e59af455c4cc827d43b111f4cf260b6da1d30ac443b2

DCRat
28bff70fc22cf64ec5c9bfc3abe086a06053a40f77ad7445db2da67f589b0dc2
3d8e8ce36a6a29298846a4216ea303db369b7bfc750fcfd1028b8432abc29483
4faf71df7f656a81c48f80506ad10747425dd037b669343d2d4d346e541ac706
068dee55e799786f658fe565c4c4fddeb6e4bf8a9c11d469bf28f991e24d2b2d
77beeebe6518f64c7a1137af422833897c8a0c16e8481345ce8269a2258d3a2c
bc8ad88da64eec7fbea2a934e7c945c61c562ab27f7092895557e1558534d895

Djvu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Dridex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Ficker
75e64bb2b6594ff614699c01793ad2b0e683985c591de2a1e7ea68fb4949eeb5

FormBook
78b2aa661467df2abf283584660652d7c95334df16d5f7e56e87dbb023f8cadc
f1fbca0845f5935f5f51a8ef084345955d10d77b151fe52920c4746beba2c92e
c24bd4a30df425c06d79c2399fe3b66a2ad79de5702b5fde7190c12e4765974b
c3005496c888af4b9fc31dbd00bf40159d9c0dbb5a7bd4fa6014afd6b33cdf3f
79082ad5eca39a415a39d4f0f6fb6b4af9afce77a8f8c84f72554600fed9ae73
7e30d5eb6d8414ba56f58a9adac0264bb16f4113061edab1c99f49bd34b6c163
70f1c43459f7857eab892cdd7991682051cee1ad217ef082155b1f7ea40b68c6
d6e33fc86972fc011830d208871a2d7c98dfee942dfd784138af49fb17317906
6c748e659c5519503c2bef624b31e8d333013bcd298b42547404502402051ffd
8fd4cf94ee8683475a5fa775b37afeaeef36e4791fd1e3ecfde74cfaaf498106

Hancitor
b804432796301fc934492a7813000343f3a8b6607f303529c11ab2e48d74f936

LimeRAT
76d7d7044e6beb5929cadd2ebfa7a31c332db80f19f2a8e8126a4ef8fc15b64d
e6248f441951fcd68a46d0edc0b2fca7cd5d23b4e03d7535ce74958866766abf
17a3f7b567df058c660073aff555dca612df03a8932121086983ffbcca1cf97a
8b8c9a8a0736b5f2b8d3efb9aeff46f33048ea3fbf91725b852923c9d1206933

Lokibot
da6ca6201a3df94d92d1867d666a49df037c0e18c63b2edf64c4705a9fd4c4df
2a750e8f24e307de2abab86682bcbd37659deb6304331981866596d4be9b3e3c
3aac9c9eaf87a70bd346c3aa5152fe33a87630fce17322b03f92485bb875ce27

Nanocore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RedLine
63d38ae546f811d04a1c9bf42a30c555d17cf0a58710fa10d952b7aca0c916f4
044b03caef2acf7273c10472a8d7c6e43df2d4c0f5d371497885b1eb881f803d
607c792b9ec7e2a78d461cd6995b54c35cf37d768e34622027244d46085541e5
86b763c43c9a66160355f323af4f733d6e1c183f664ef946768327fdab553f0c
ed65e4b51d1cc1fa669019a8373e1cac25d5c52fef939118b7e8c4749b3b7ed8
ab85a3350358b5189aaf40d4745f0c6ff419a28fce8fac9c294d535106d65712
b43e93abf8325ce83fb8b02fc793d514d8c38de7380040602c6e98e01166593f
0b771aa8ec647f5ed334a7763d7052050fc4f6dc5b2f3794c7560d4cc5b31d8c

Remcos
0789e8d80d058cc3283d3041953b057ccf252b882630982b85786081a5cd5df0
544c6235c679f293594c39bf63f281b1981ab56b26b86b8fae79a768a7662bde

Snake
9951d9f054be7e8c7b662ce9c2fc30b5aaf61bdc8482d7fd6e4464e4923540af
f06661d07436f3e528b9225ba14356d37779cbd428927f96ac9e8dd969e025b8
aa17c61face2d2ba12be671adb6a2f4681e194f14e78b64c2b9a128f04b5024a
3530175c4a36b85e8489c9816edb34aa404e75d9df3c9a68a8558231936b093e
ac2f312a284229f45942eeaf7f06fe9c737b005cc263e93535d01a660265cf4f
863f0b7338422326e52a1abe259f647047825e59bca20a670d15c36305ce5f42
9fb57f10806d3f0f9d89e0b74ee8ffe7fbdb93f642619d30aac24603a27d1479

Xmrig
a411b4575ae6fb722ab53c116570d7e7b56aba1bb292c208b12db3485fab08d6
7c88f9d38fcb9dd17d733e65a8ebee46d6b74700a02ba5a4614b7b6002d5ef0c