Daily IoCs for 2021-04-28

################################################################
#                     IOCs (@RedBeardIOCs)                     #
################################################################
#                                                              #
#     Date:    2021-04-28                                      #
#     Total:    153 samples                                    #
#     Stats:                                                   #
#              - AgentTesla: 24                                #
#              - Amadey: 4                                     #
#              - Azorult: 1                                    #
#              - Babuk: 2                                      #
#              - BitRAT: 3                                     #
#              - FormBook: 5                                   #
#              - HawkEye: 4                                    #
#              - Lokibot: 8                                    #
#              - Matrix: 1                                     #
#              - Nanocore: 33                                  #
#              - Phobos: 1                                     #
#              - RanzyLocker: 44                               #
#              - Remcos: 2                                     #
#              - Snake: 2                                      #
#              - Sodinokibi: 1                                 #
#              - Unknown Malware: 13                           #
#              - Vidar: 5                                      #
#                                                              #
################################################################


AgentTesla
4e6589174f6d579262f55bb452098ad74053e07b35f6ad0d07929439cbd8b598
4a739eed07b934ea642f871117b0026285b3503422a52c57ec7e9b126cb9288f
22fc0112db51e459e08ad6bcb76deada1bf35fde2f439efbe3c4348080a6470c
b032521341d2f76b1fe69ead761ce67c48fd4ebc7c4ecdb4e7d81dc8b9935e1e
64fbf813b5933ad97ba1e42318cffc46bfcf45c2e124c766eac53e9fb8558b5c
8f7184c91b9a6e0b6b250cb2b80df6bb7040cae581b22c5970dafb67792aec97
9537dcb4b4a82c4d67b79ad68ea81c8371681f7625c797b1dac6fc950171ba5c
d7b90e9350a4f773e9c222d0fa4be16b8df2b24313fa1da2b2f40cc1156f7580
b7849f890bd7ed02b1856000e6c515cec5606ff64e6f040fb6bec044e51a15e7
4970e7597c225e0f2c76356eff39ce21a2acd8fcaf83904d66bb1408c9034c5f
a6076e0557a744abc7f90659042e9983005b2bee26db2f3024024e43f1d5fc1d
57df3f24f5be546f8c27db5ee9d8e2524e3324f41780cd4e9a3a49f0a2783898
c224c065cbbf97af6c499d534d1be5264227e974476af5af750ce4479bad66ff
c445780cd57b126311437ef6d7695d4038b447c0efb6701609c0cb5fd116c570
a72e3eba5f2be2223c9c60ba37001c6b1c21bb0396246dd212c23793f8b96c48
32c764c673a25bc9b90afc4388f1bb4c38cd1663791b523d2fced032f35dd350
97a76a7131737f9594692bb404f564a2edfbba6c5a2653b590875c143bd7eb72
49a845fad0e449da1c85ae57a4ba6613cddbe74bebd9285d64f56159b15c9a7a
89cc401c3f923a6527ccb32c60901672c0113b39b2fc139e7e1a3efe034c0e9f
0f86a74b9169cca3624334d0670d3958e5d1101111cc15d77a195570d0a3d55d
991256fb3f8ea83d98294ed918a381db2ffa29869e742eabbc1bcf6d519453ed
873361a4ca66642d8749033b0cb0454a88919c4dbb1555447de234097f8738a3
29cae2391301c9cd562d2979f814f37254923daeda6968894dd27a58f1bf98b1
0b10841226c0d6fb59f308c09309e79d214ca6799ac162c1addd5455d7ef3fd7

Amadey
78322121578342e588375350f56edb5e0a6d4b889c6425814590afd1a967e650
76f6c712403a2f6213390ab2a72a82c98c9c48e1b1bde182aa5932bd02a06d43
b5a399c0ea40983abc68b828ccb14efde2db90c047bbfba9ae418317ce7f036d
43bdcdd2c6dda95363575bd475b28c3a2f80d16900177404ce8dc5981848890e

Azorult
a54ce34309c6f8184d8a051367a276ff3c10de7a0bbbea666956d96891ad6654

Babuk
2d2a11ed371fa9b7078927bd81b36aaa3fae97a98a813408c4436e050bc7e97b
3f915c6387f5f88254efdc97d6614831e54ca2248765c412d9e46d4d0a39807e

BitRAT
e0fe9f8bd65d5a1ffcca6994e9883143c4cb4f51ec33fab4105c30bec01cea69
46353fbe464cf46ca7eccd5fc55df4adcaeeb835739afa5d2e4a4d9d0c68268d
68e1c3cd1953f50cf97c15396e47257cedb6d67d5833ea589f1260b61638823f

FormBook
9221c6b15c5b6bf7cbf601696a7b8a4efc2057b4f1478d0bfdc31ee7e55f9178
92bec04ef1adc9dae4084b2c26a5dcd07618af6d6efbf6241050ed7da5cdc37f
46359d208e338599a211c0d505c3d3537887c0fe112dde239399dc74f1e78ed8
99d92829843f6fcf0237bfd4b7ade6c259187ee8d0435dc3be346d92ba3368ce
ac4ecd3653dbaa7da06c6c6f6aa0b228ad6ac938db5e6dca6007b916f68e2fe4

HawkEye
2e5075a95c5663256555e292409149b4522f76fbe63bb48665213006c2d5ca2a
bfd5d84c4fed8f9d23f94fe32bb7ee415dbe632c2ebaac642dbfdb73f89d0833
01a31c21f7c70363b4a5ca56becd789d96646a1f0fd5f755e77eb8e26ae95d6a
249026be43affbdc61be8dd1aae8602668ba6bee72e43d4760b2acc7ab1526d4

Lokibot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Matrix
1777a5691456c8bc2408ee8aeffbf6f0b6b711e2bafae4a36d764098a2855618

Nanocore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Phobos
53403033365723977c84fa538ff06a6a13a2587784af9e0bc87f6b98d469b0a8

RanzyLocker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Remcos
dd4db3ff6a7002340415025e90013cff18e61e3d95e3080b73542317b16d50fb
d65a05ac95914160ce98904bf3f203f99d8261dbda038d2309419d345f78e2d8

Snake
a27215f712b2bb0fa0b67a8f11c1a5bcc9cb3a77743eb87e873afea16a3153db
80654e2f9ca0173b0a3427e5d3be2a2c41ecdfdddf67a5e395b793d63fc504d9

Sodinokibi
322553a3a5a708ada95c46dfc66a277ad47ffde24e9a12779429f9e2d9757685

Unknown Malware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Vidar
a5c9be9bcb214e69a39285a634f95e43fdf1ad10536bcc9bce84be7edb48cb31
2976262aeed56001f874b183072c03360a1dbcdde67bfdcc982078d3bc246857
bc87eabff428c355479c48bea29da6620274b680849bc5a09155b08c8b225f76
c87705574f7a6f5e0b66db5c873abdaf4954bc0a65d71900b615ac04be8b257d
9db40f7f060e08b2891dc881c6f6d1ea165b56747b4302fd96e53d8bd194d8d5