Daily IoCs for 2021-07-04

################################################################
#                     IOCs (@RedBeardIOCs)                     #
################################################################
#                                                              #
#     Date:    2021-07-04                                      #
#     Total:    145 samples                                    #
#     Stats:                                                   #
#              - AgentTesla: 4                                 #
#              - AsyncRAT: 3                                   #
#              - Backstage: 5                                  #
#              - Clipboard: 7                                  #
#              - Conti: 30                                     #
#              - DCRat: 5                                      #
#              - Djvu: 20                                      #
#              - Glupteba: 3                                   #
#              - Lokibot: 2                                    #
#              - Nanocore: 5                                   #
#              - Phishing: 1                                   #
#              - Quasar: 2                                     #
#              - RedLine: 8                                    #
#              - Revil: 6                                      #
#              - Snake: 2                                      #
#              - Sodinokibi: 20                                #
#              - Stop: 1                                       #
#              - Trojan: 3                                     #
#              - Unknown Malware: 10                           #
#              - Vidar: 8                                      #
#                                                              #
################################################################


AgentTesla
09659094a59159742df1ecf5160ccd9464f0275703c314740d6b4c64b1199ed1
fe24a2b0b07d806e55c075d1c0de7f817b03f9faa23eeba5370ba6acd8272ecd
f337330fc11dbe1eff8d21f85ad3539c613ee27b88a8ad3c98d3eed7c122e946
ec5ac9558ad6570a68a3bb287f87227a10f2ef1ba7394ef77c27b645434752ac

AsyncRAT
6c277958d2ab6dc513cf1fc67de20b148ce675ce3a6353440e5b8dcbd11beec0
4389fd79220ead5fafe9ee3c3b2307aebf4492151fec9a63d4c0cfc7c93cd678
e4d50019594fff0ea251b0cffdd261f504e0b0ba92d3bdb4597d3c2adf132d07

Backstage
cb8ce5ba0d08252e32d760297bf0924a2bc6dda436374a8df5a402d91799bc2e
a6c0ff5013727655e709ee9c5c0a82708153564a3061263f4d06706083ddec87
462837681987865ce5fc1a17b0c51f5925ff05477859c4b89f9daa37cadc8784
1fe2b7964cb530ec01d3fac46ab046339e9aa1e61ff8325685ddb5d473ba8bc7
9bd90565ef6ed4201a4bf625f9ad663713190cfbd0a0c0bcaa328823a8b515f7

Clipboard
e039a042de11f35e9aef5a138e418c2eec4c3205703e448706d908d9ed272b2d
b5865c202f53e38c21e5f0e56126edac09e86114c7df32bf516d7d78dc4c5566
3e2c3dfc1098b9b1b5f34bbef000f97f7cd95445088669542c49b5084a0aa917
a2f74a5dc27cc38d7e00514338cd5d71feec433114cf430ee9c510512375f1ea
a30f279f846744f6f6304aa850f429beb6be7445d2f3c6901a927ba15d9180a4
4afc148a59a81c3a3cf47e2e188626d9b2d4451999310462862f6653b6011349
f89b55518a960cfe7fcdf822f62388ce6ac20980ca3c355c4f153a15e9eb194a

Conti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DCRat
1a9393853e35bd20992711d8ae555b6505e19839d4f92926f34f21a9f4e8f6a3
a50081033623ee626605cf89a5ea80aa94c3d4ecb1773353af3204bf10d67062
2fee3e890d79da7af6e375a6a02cce256c0f6360e09496277d49f516d56493ed
4e9a409d76f352abe72a039f715c02444d6fdaec7c503eee195094c8be52978a
d99c2d6662e6db724442451c5e83de94a2fb0cd624bb26654e9ef8e3e9df38f6

Djvu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Glupteba
8dddcbfdfdf7f0eed60552b3ec7e6fe789fe339a514aa37936e8f99bbfa8cc28
415f9d7bdc9ea00d2c8e58d906cdd7af876e28494e24e027401b6be60144ddcc
7471e982051110160ecb8d1a95aa8ba5d8f3d61d341706232caf57c1b8b3ac88

Lokibot
f89e968b8a1409f2a5b3b0bfcab5c46144331b5b51ce190c88bcb13891c2b151
a90034243d45a8373ff38e9a6e1c6fd9228ec4e6ffb9fcffe41e62e1876c9a13

Nanocore
70ca9789dedb1407277252272aa9dc9711cc65fde19542ec693d8d1b6c8718ec
8d7e99ff0cc7598753480a593a1040c341c29daf870055b85bc1b243214ed37a
cde2bc905f14773cf3fa9ff286d0faf21e66afb73ca756b2e80fdf234f5a0cf9
4f44260dc5dc0ba49ab7fd278f4217621562c51326717f80591e350dc0fa3628
ac7f1f2e387b987d7fa48fab48cf538799858b57c541bde4de81925638a0e559

Phishing
5704d875a97d9153d67702f096c6bcf36489d360ecc8a4b0cbbe26a021e1a243

Quasar
bb16129f4d4f3f9f8d2362b794d99ce23b39910d32128a9d5d9cbd6612416c1c
22ecdb1f4ea57744c9b893f9cd73a726bfd23caa0ad4047adf5f9f1130e7fa41

RedLine
c3c041af5cbe0e1f4b2b9e47eb00e94ec69f0a8a1954d13b02366d8bd030e2e3
7723d96ced10fa61b9da69f961cd65b42e9f06b04fd3ad6a3e6af46b5d0394b3
21727fe26755e3369df8419f0393aa07c1711c8d983652652987d638a33f1bb4
15d999e5c21186075f586efb42d16cc4e8c67165851c53076fc8e363d078aae9
1aaab876253e77396803f0bf1d4243fe57a8f786a8514219c6efc6b719039ab3
3fb0b631653187941684dca095bbef51a937db13c9a37f41827bf09550c6bb33
63ba1b32aabb60c03702755dc949acaba31f34b76876ca54c0460261e3578000
694ef2ed6a47ca9728c7f26f2642421415dae2578c9083580c7ff96bd4bf06fe

Revil
e2a24ab94f865caeacdf2c3ad015f31f23008ac6db8312c2cbfb32e4a5466ea2
d55f983c994caa160ec63a59f6b4250fe67fb3e8c43a388aec60a4a6978e9f1e
66060484cccedb839fb646d4e6020e079319374b2847c52dcec55c5ad60b1beb
3f0ed0d27575261f34e2d246c6178b54157890ebd36a6f8067d781021bdba49a
6d8ca3f875df3508b811fc249f38b7c1a9bd2b7d6f2ef5f795a4278b5a871f5a
2093c195b6c1fd6ab9e1110c13096c5fe130b75a84a27748007ae52d9e951643

Snake
c696cbfa7e6c5d8178937f1f968109ae582240d2f99af4a3cb7fa058a6db3d66
16e562ec03dee9854a4e97f62ec99d62be3231e0683391ad0fa1cb2b3d11d28b

Sodinokibi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Stop
d90c409c1f1ff39e669d49f1b73d6b4cf902dce2aea34b040ebead2ae5089e3b

Trojan
5c9a9746ee48dc331a35433ea78128271d9cd3d213eb6f40dba74e562727046a
17ed7923fd51a37a4511508b3f54b79ac2d62196e148dd13230d3f9be95b362f
626a8c76bbe62602254e53d23816c3c8b6a6eb1ff6b1102e35ba8a6f616026b3

Unknown Malware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Vidar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