Daily IoCs for 2021-11-07

################################################################
#                     IOCs (@RedBeardIOCs)                     #
################################################################
#                                                              #
#     Date:    2021-11-07                                      #
#     Total:    134 samples                                    #
#     Stats:                                                   #
#              - AgentTesla: 4                                 #
#              - AsyncRAT: 8                                   #
#              - Backstage: 21                                 #
#              - BitCoin: 15                                   #
#              - Clipboard: 23                                 #
#              - Djvu: 19                                      #
#              - FormBook: 10                                  #
#              - MercurialGrabber: 1                           #
#              - Nanocore: 5                                   #
#              - RedLine: 19                                   #
#              - Snake: 1                                      #
#              - Vidar: 2                                      #
#              - Xmrig: 1                                      #
#              - njRat: 5                                      #
#                                                              #
################################################################


AgentTesla
d33da51a6256667c5840d7e4a7de8efb939ea4475349d59c486a990f99c54128
43411fed584d49604f101c26c20a1531b5540a416f03fc25360bc75b54285e13
c93bd5929612f24b8c629fb03406e26a9ac372e7329ff2f821bae4efbedcf838
75d9384f288951eb9dc30f22e89ab4a91a3b6737d1026c37c429ad70acdf07d1

AsyncRAT
685602842457ebd577def87d5c29fd6c1175ed5421953ab7e2bea2dd867c3dc8
b344dd7dd9aab3ef040f0b9fe12b379d71e7290e37a2a87f822de00b1090d877
a434e60d218296dbd612229dc073f34b62356a56cb7950858aa698fa4e7068d6
ed862c0fde639ce1aaba2013024325900911da14775099be1a00a05c55f26274
e10f52a8b13ee2869ab9e72c69b90b157f597763e86ae8ce307025e1b667206d
e1cdd7becba5d9fa78a8585bceacfae90c175e77bdee5167a01ce1d1e317feb3
2ded39195dce410f337a96a8c0b6f0bf2225f8f1029346076b58e4deadcdde20
ad542131f8b3076b58295d1cbe1e0d13a51a89551831705b9597aaeb64a8f28c

Backstage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BitCoin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Clipboard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Djvu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FormBook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MercurialGrabber
cd8bbac5c833b81634148a7556d07d5aaa3d9a5c11dea5011b5044c8f4e37aee

Nanocore
1b6e03ec50a9cbbd02dd8beaaaf368151dacfa3ffc47cdaae5787725e133f2e8
8db9ca3a151fabcc7708467f45ed81c3d99ed1e623c5307231e95b8daf1da817
6b3cc5d81e73c1c2954131cc5dbbc5bc4a900618d35bc650094e05107b8d78de
6ad407d5c7e4574c7452a1a27da532ee9a55bb4074e43aa677703923909169e4
8bb64d6463314cae1b42c4423e57f97261f163a1736e41bc9f16faf8235d6c6c

RedLine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Snake
4cc6cf47066b48ea7a6cd0bf6db6b406b565be0c78a49eb493d39a19eda9afef

Vidar
14b260934d581111d4f9df0476bb31bf76ef170578e5660972654bcc1772dd16
35f6860cb797c0390825e5f1c7098cb02b5f5d9257cba04485bde26f58bdcdbe

Xmrig
bfe31d758595b060d61d0404c6e9ade15bf34817a6e3ee75ff3371146f007684

njRat
71078d7cf6428403d8e6298613b1d2932d16129a0e033f0c008abd7fb194ba80
9e9ce667ebfdb6605bbcc4233309cae2c98abc46e2653be5b20c0f703dad7224
454349e422f05297191ead13e21d3db520e5abef52055e4964b82fb213f593a1
ab9818436dc89b24355524393bfdbe3878b6496d5660b91228cc6d1d9df181c0
bc735af90ec655fb686eeb2e23ea089c744e441c40543a518875eeb9d58d9361