Daily IoCs for 2021-04-30

################################################################
#                     IOCs (@RedBeardIOCs)                     #
################################################################
#                                                              #
#     Date:    2021-04-30                                      #
#     Total:    147 samples                                    #
#     Stats:                                                   #
#              - AgentTesla: 57                                #
#              - AsyncRAT: 1                                   #
#              - Babuk: 5                                      #
#              - CrySIS: 1                                     #
#              - DarkSide: 5                                   #
#              - Djvu: 1                                       #
#              - FormBook: 13                                  #
#              - Lokibot: 8                                    #
#              - Nanocore: 25                                  #
#              - Phishing: 1                                   #
#              - Ransomware: 1                                 #
#              - RedLine: 1                                    #
#              - Remcos: 8                                     #
#              - Snake: 2                                      #
#              - Stop: 1                                       #
#              - StormKitty: 2                                 #
#              - TrickBot: 1                                   #
#              - Unknown Malware: 11                           #
#              - Ursnif: 1                                     #
#              - Vidar: 2                                      #
#                                                              #
################################################################


AgentTesla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AsyncRAT
d9e6b3c454251306be70078d72ed1caead402b00c37101640f30986cde6038ad

Babuk
f672568f7e32f18b7bbee122072e3b60e84267f2197400cd3f39ba651609e933
79b45e6725c0c789ba53d186bb7184ca9e15298b6b3f97616366506aee5d8801
efae2740eadeb6f7f025ca5f2cfbdad38a2200e11da031f403dd969f753bc491
bd600d24a85566835d0cf88275fa3dec0a02b8cdc802f8da2824567ea5eca910
900fcb2247f139ed76e270d32da4e87c1ec1cd7626c74d8cb5e19a4156ea5680

CrySIS
eab4138ca33d31c9d5cd98ae77ca349c1b5b756944b90e82627577944d9e31db

DarkSide
e51e4c372edf2bbe476a4b7630225c1875c5ccea2ed55b418bd793c54ce9a84d
bac7f1cb70a0fe909590f7b270248705d216b4abaf4e5dd4969fa4f1949badec
521c503bc3f5d8b2aa8819e8e30e2019e74ea9649a57529fb32c3dfc66a1e7ef
273c68d24bf1b305163237649cd0aff54679114a9fe43fad0c771a58e33e35db
b6855793aebdd821a7f368585335cb132a043d30cb1f8dccceb5d2127ed4b9a4

Djvu
7c75df63bc40beca5ccf65db76c33539ee9f3468a4149e1a0c0bfd30949f4b4d

FormBook
28e0affe70d48a6c6fe89b76dc56c59f93521a4b606dbb6fff60a84d382e9ceb
fd88cde6d3171f1f9ce43388c9a7994475785fbb4897e4e1c7a64025217f0530
dabe67448d753a3b08dc3402e5f7824ec37bbb0cfdc0bfbc8ff563e63aad85e4
ea82ec84d3fd7d52e55de18b097591ec2f8c7a995e89a27069fef571e90bc189
16852c4c1612eeb7d280a75ec2951d89c3aaed4555c1c1144a91d131066fdea2
fd7d59d19a68768e98c0f1b849c0f2a9f3dda204fb711ff2905641583bdc8938
ea55c997bae5ff028521b962c3077a56c962cf44b82686e549641ef7057d5852
7e4a209db66b5f10b6a9df6915c9dd693f3f091a4ac8af94c6d16df0f3d9f095
d89644bac9a208dd08f8a48a91e0e62be92c654135ff2efe4ff419efb1bef572
7d9ade4c88f228a4bbedf573db66dcb0c64878c0c5179d5dcf014480c0dc38d1
c1213a12b0b441fb0eb8b74740b243a3ac24b3685c02a62897761e78381f6141
00b12204f9f4d1f3079dfdcb17ea31aa4c975ee452a6688e168ba37a623114f4
572e6066888624b7fa82b7bc17bbe0dc05440b4031cc71fc38f4d67a0571799e

Lokibot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Nanocore
c28d812d61b0fd0a86fce89b6ad22f29c8ad6c6b37bc88a944a968e35649d766
b4588be9612228f33252d4169c691684467398012fe46d01b648396022859ece
08b48d9d3c0b6722dceee76959cd30c9a6b17788c26a536f4c7e819d8e622e45
36acd0712a8fef2155b0c64fe26caf11a01b6854c66d7b3619fdba1a3f6896d4
558d675d9245ad3b0f9eb466ce97e5ba0b7a86b17b4ccc8b6acf69d2d5aa4ff2
c970e1821cb2944aabb85593eda2b07d774eb098e06e1176ee3a6bb824d5a4cd
86924b1403f616d490e9380d399c2d3632eecfaeec7c804e43199725ccb58b91
08f0f24c0f6874b758656493130388a0ca16d54d55d60ad00066a3b0ed2849e3
c2211332a0e3b1104f4fdf31621c230407ad29c068eab013e2f9ec0caac158aa
8068f3a7df75a24dc2e6725ffbfba055f8e85e39ff3123382b7a7010dd816886
40c69614ed1d37658eb2a7d94a5eef938238d07dc89c86a0c4be1bd7227437bf
0a024f35a3171e0f4738ef69ac4b7dad0155d165690776e6d2d760bbfd0a7114
cf1b26a10ab8a8218baac2fa682aa5e4298034d22fb654ee42f2c2336e7692ce
0057cb99b37d5b4df309e464d4e66f5650365ff4f60451f43276b482b5e5fac7
b3a491c774d4badbd32b96bdfb659a401cdc023ce48b54f2c019ad835f63d6df
fdd1889778fc80a4c3d7bbda9851db0876ca8a22da9a57c5dbeeab6ccc2b5c80
14bbb2fed069b692381171b0c77aaac81209517cea7eec4090d6f8b53eddb7c6
081904983211f96627407526517a94e9625c5793e183f56117c7e111e25566f3
7183a979a75911cac00e3da10da2a35276b40c7475e6a23229d5664e2200ea0f
57808831a3f40880fbd00583cfe329e5dfc5ae950e746c80f3f3b8f2091842c8
b2209ab79a5e5fb1e19f72d4c7df685056b18eab00d2a4be8dfa8f8dce6aad2f
e1c38db7821c76f5edab61ec239bfdf7fdd5e464c65b883576ffc767ff21bd5d
180fc292afc09ea88e4003ce4350c518765b62567324721239dcca13c3a8cc12
fb0b5110b6d395a8abf2deb05c257734cba98901fd8a82e2f1e0455d00d02d3b
2e95ee0745aace88b4d2e11a9e180c67a08222051e4913e88e94b3655a490a15

Phishing
e25fc27be68e8fd9baf2d6107dcb86f2a0d4ff8a5d53875f81a7f028dccc208d

Ransomware
6103e26f6f9d5fd895d9c06e1f5e141ce74d8ebda999cda6a58a4393de5ed094

RedLine
0d740f667b80b2f47b2651b9b928c60a74e2c75a227787b1fa3daf7307edccf1

Remcos
6993ffac6e8c4020e152ce6ba165cf3efb429908340d2d9c02812dffc019cf0a
e09ce25b90ba76bd7eca94bf350f069048a57c13c79650662971fd19a2e7b9cb
96e975e9e509e40c6b069f4fe4ef338ddaa76472a30e3115374d5ae3b25c7616
95dbbe11e8a94998ba3eda7d1bef7ab0e5bb1f665b3aa17cc8c8da9a60411123
2782cd8a1b4f5152d56ae47c4af233a6d4ecb08f7fb23918467fbe5019c8a44d
0d946d7ae5e1460130b15e4fccd80aa1bf759e6120bd67dde6f068d5b7bc770e
bc4baad4a7983c54c1764b0aa57f12d536ce506253c82e06dd98e17bbb5f77ee
3418e1333e9001927ecc9000abf19f6dfd97a2a48399c9769182a132df8b39dc

Snake
50da6193edc4080ca313473b640cfda31c3bd316d87c3a4d899269018fd292a1
32b8347426eb7803ca7926c6c44a8ab0c6725cf93f87543b14678fd51f24756e

Stop
d9ebdf7028e4b6845582810ee54a56b92caf160fb5ef38adf7fcaf957994c535

StormKitty
ea64c1b1f9cdfe8cc9854ce7381ad8955cdfb36d580e4858166f6d26abe5af99
218073bda7a00e780704c1289d5e22ad27bb3ba11f210afa18af33a6ad5176e9

TrickBot
b935b9d1b59bacea9c5b308266981c94e81ab5826b3128e2ede8b04f8b9f3ace

Unknown Malware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Ursnif
e1c53b0e0d02d22d90496aa67298086866f78fbe18ee00b17ce4fd1beb0f033c

Vidar
4277f535c9ba7220bd853269f0b2b75a702eb6c298240e4439179405072283dd
2a12c0ad367e86bf5f1b59b12825128dc50c712bc606a7b59c89ccf3cb90e48f