Daily IoCs for 2021-12-18

################################################################
#                     IOCs (@RedBeardIOCs)                     #
################################################################
#                                                              #
#     Date:    2021-12-18                                      #
#     Total:    154 samples                                    #
#     Stats:                                                   #
#              - AgentTesla: 2                                 #
#              - Amadey: 10                                    #
#              - AsyncRAT: 2                                   #
#              - AveMaria: 1                                   #
#              - BazaLoader: 10                                #
#              - Cookie: 6                                     #
#              - Cuba: 8                                       #
#              - Djvu: 8                                       #
#              - GhostRat: 2                                   #
#              - GuLoader: 7                                   #
#              - MicroClip: 3                                  #
#              - Nanocore: 2                                   #
#              - Raccoon: 11                                   #
#              - RedLine: 74                                   #
#              - SmokeLoader: 8                                #
#                                                              #
################################################################


AgentTesla
b6f2a8b0de99f363819862c0cf50b6e10153e9c9d550e94d791130f69d101463
8a327800ffb60ec64017091fe873d8416fc8aa6c0a33c866b36394465e6ae25e

Amadey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AsyncRAT
f897ec0228912d0a22174bb2395d39340c092dddbe4a9f422ac89b4673ed8a70
adbeb59939b56b701446d79c10c6af29c287a621b4522f53c481582eb926924d

AveMaria
b85694f437421dc352691a808ea809d853112af168854a8f5fa7add791f1656e

BazaLoader
ad30423f97f16e9b3a4fa589c069a33beb37e1dddc25d45f189f74f2ed6070ec
214687a5d174c156e9eb9c70f9c3996078a588f628b9d1d03da930a0617d2c48
63e937774424d76298755427b96f2c4056f236407ea412764844f3e9cdfc8eac
a8f23aa1f7842d8229fe27e9c8be82ef59aaf4829dec489e963034bf744934be
87d84be094444c1391a02061ab75beb5227c1f6e22c8a92502b124b9f50a2df2
98ee1f2258c8cd317faa79ecf82078857f66bbbadef2b6a664cd6bca7c68195a
c78ff48c90b51d1ac5af5d735049ff2977f8e1bc852e4a1ff5f17ea7a11ac0c4
97846ca62ffbac16afd4ab5cd5abfbce405ccebe5e6a86ee2d6aed87660410ba
e35c69fa5d52a1295092a91cb40fb471065619521830af3e5410107536aab19d
bc37950b02e745f4abd3fcc10a98154cf9b87dfebb2f6f98f351a2212b65a6b1

Cookie
234b1a0fa7f4d5d7765bd169f8290ec04130d7e7393247e18f84ff2dee42a6b5
ca026910d67eea244a353591b39123283a18af94b3df2a04e29a1da241ed4b88
304deb339e3fd93e2e926de78acb35f0a0b10766d21496ab647ba4ce8c1b31c5
c602ccaa6d7d635a3c42d11419880e83f2f1c5b8349f50c2ebc1189a23f0a580
53440ef85e918dddd7cea5c1235b115cbebd4dc8e82c8a583263a4e78e990763
b70b5e18cddf18324efa348e01a1659248eb3a48cf8dc4b1738a571f878b77f4

Cuba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Djvu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GhostRat
5049b3510b6274178bd66ac9ea9a6b053130302642e38e8ddc971bf27c7b6fda
3e52e91c25a13ea308e562cb7cb36547321dd9b9ca7693aac58ade96545b9044

GuLoader
39cd27e2d57db8bfedfc31413679e5c4cb27274a45c0acb98c0ad81905729ca5
b28e2ccdec5649a87f3d40926c47ea9fa7ec0c2e2dbaac756f4c3c5c120e41bd
63182b1a23476536ec86e724c407f4680f349dd22442ad510c0024c23a9a5727
2637f180814b50cf917008a1673d8139bb5156d3c535d86d52122dc6b07f6a99
a5acef0be0bd9993e756bb20a6b4e9fc2b1e819a02992255e4839d217ecf7258
aa246b46290d21dce8a0bce429bcd7ab74bba0414d0c5f7c084a6da0ec880400
bc23463a2be659f023c2752e8fc2749ddb0a79cdd90690e6aadfbaf7878fd1e3

MicroClip
549e644ab8371256646032b30270aeab03e4812f25d7b89cfea791744faf501e
a4572498e6f587d25e573d3e02d40fdc6c20af8e7550ddc8d69e167de975e607
58ac06b8230a3fbe6f2700f79841d1f0a249cf4f0c850f6c3e9a2f2570521474

Nanocore
bd5006ba4e4cfcf8a8b0b6da5bb30f4dd8a78beb351b814431ae8599dcf23f1b
177f91577f6aa8be04b2324891bccdbf99f6be08d233e16c67647c9111205d3c

Raccoon
04dd197044b9d4c84a86fb2e50fc3c0c3ac5b021aa1314b821d693fa60124465
eee46155a7fcc3b10e8d68e5d263dca98ff7bd2c48f119dd7d2eaa7a7986f0d1
7d6762a9187e44646e80e0b866d6389128e2caceb9cadb3e535cf36e615ad690
27ed8bb109d54613c4b139f3c7034ee27760ca27b2ca30d6ac91ea68e1c0d265
d378f2f16810c2f7e8b6bb990b52a652d750a417ccae777aab9263645cc4359c
91af9931eda2a03996c6641fcbc72ec0507565df10d6738eceaf3da08ef608e4
57e2b3df2fb5f7dc6d2f53bca8c797fcaeed030fe6062c79452f7b5fe38909fd
ed60e80296c068b60add80fd3d5997c5f0b8e549def61a7460a70cbd3ce6f4cb
c2775e2de2efe890dcde3454f0e2e0fd42e3977a0e2273662c1df1e0386f5b2f
8d2e1e1fb84e28d67a81a138bbd254bb7bb864daff6d8dc3c11edfcf01ca72ec
64578ffca840ebc3f791f1faa21252941d9fd384622d54a28226659ad05650a3

RedLine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SmokeLoader
7e82caa365c569162ced509846f7a3138e623779a968dab963d64ab360f06900
020a7d97f35b1f1cc74e83c79a3c2137bdee9d17fc78ad2606e87b242256e728
8f900e6639e6474165001935da7735daf7505e01b197533f64784ae55fff5988
ee835ec4503c90c257afadcb786eb50c59c8037e67a5204f6963fedb6d17874f
8e0912f312bfbef6904a7a19d9995cb1a09d32429bf1243634c8674ffe5a77a0
a6ef0b6287c51dec139c374243a499b4612c18c704ee821fa67e306dab3b52dc
4550ae22d5a070e5c7ddbddbecc005793fd937900624a611a696e1ff5dc98bb6
7cc3cce2c0769a5848eac353d5cec1c6381234347cab7b0d59ad8de240306da5