Daily IoCs for 2021-04-29

################################################################
#                     IOCs (@RedBeardIOCs)                     #
################################################################
#                                                              #
#     Date:    2021-04-29                                      #
#     Total:    136 samples                                    #
#     Stats:                                                   #
#              - AgentTesla: 33                                #
#              - CryLock: 12                                   #
#              - CrySIS: 1                                     #
#              - Cryptbot: 4                                   #
#              - FormBook: 3                                   #
#              - Hancitor: 1                                   #
#              - LockBit: 16                                   #
#              - Lokibot: 5                                    #
#              - Nanocore: 26                                  #
#              - Njrat: 3                                      #
#              - Phishing: 3                                   #
#              - Ransomware: 5                                 #
#              - Remcos: 4                                     #
#              - Trojan: 2                                     #
#              - Unknown Malware: 18                           #
#                                                              #
################################################################


AgentTesla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CryLock
352de6e46097ddb3fe2feb3b9ee24477920f5b1f679f69ce98f69c7cb9b38a32
221f020c9b70c89a99c0186bda7a513c8312f6f3381602720e02b341a209dc99
ead25da65bb7f20ada150cd41f29368565e66668ad425893bb9df1ee74d7266a
f28e56e730a54d09bd69b7e8ed77b27551df972257d076e14eb001f00462e5e7
49fb8356b2fd07eead7ef29802423443a2d7b697590550362ea4671231f40069
d5ae2d06f26291c73d1e184e1e4e4ab18a617c76589df4fa3fa8246cddcc1829
56430e774ce908f7d5a394401f9ec54dbe2a079787242522712d1d024a941dc4
3ad9be1ab8b5d396f3666f97bd7c9ca6b7df867f7de2d8f6f80f2d2bc66f2590
14e65f9f9571c3abba4456a34076c5822175ab75bf39ef5ece07f76dc1bcb1dd
98be945966501b59ed8b0af7c2a81a5d19800c01c03c22b8f2c171af55ee9c85
8ea03f56d8505d502936114ec285e30b821a0691a6774a8a0192871d9f1c3c29
8a34e837eb8a230839d2df5536b798479b893b1dc62ccd8e0197c1a0f8e7e229

CrySIS
8e5b18b526e283c02a89a046e5d6d914874206dbefbc10a63be7219b10d16db1

Cryptbot
65cb803d8339bc32863bd557a882cf2016ad7945b18f344aeb94860ca8f6b235
86cc56ab30280ab0e8febc8ba615b8d8984e0c0fe1e1fd59ca644bac249f05bc
63484c2c972dc0955814ed8e924b86e754a3e6f66c8662bb224b2695fd06e294
ccdbb3bf66aa7a511df6f2c8b6d9ae96f225d6bcadad521e771109692f864392

FormBook
c9023147ae6c924b482ce1a2ee4377659c07a75836b91754834db9e8327efe35
bc88f7ce08e0f3cd87267fff8188fbdfa3fc9e733db9775d5f06eff82a39a3d6
68fa5c7578986b14dab2861f5c887f387ded73c6a3129091743a8f1751a4c518

Hancitor
47f6a6e063f5db45441a013c7ac43526cf66a7427bc06fd3a44e7305c8d89675

LockBit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Lokibot
6afb7d96cbc3935c2856dde7f82ad56ce58c101baf242a64d4018b2982caf8c8
578543de3f7666fd85d5bfb286f30b737af858684f5d377c1b3d99e935b5018c
c463a33901072f08dc5221bbbd07668c54c95799e29b4dfd3bd496eeeb2cb819
0ff48b0aa04d33a036b4dd3cf4eab9ded7ec2f14d40b1e135c96fbe965312160
03ddd7fbc456dfe2408a00727347e029a2b2ad6bd870ff10c324d94baf57dcfa

Nanocore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Njrat
163de0b46536daa1a1a49ed2f2c91a3b32a0adc941002b33109d3623bd818fd2
b1eb6dca624a1a78cd91360e6af46b0d7bc0afaca59ddf35cfff0ed2b9df4119
ca259651624d7fbae03d5d3d1fb5df1eabf7dd9df4d3bde0794e30eb6a0bbdbe

Phishing
be470c1b03d4a4ea8fcc8932598a6192f3ad8507cc4f661f8cd12b66032a059f
c30f81f577f9ac6c53f545395d32fc96eb5b259febdef3f933f86a6506d220d4
2ec766e4a9f7b89245bb2b38dfd32e1ec1048ebcc72e379be7a50e727c65af6b

Ransomware
fb107f9eeb7a457cd3bf2980cc99d1cb011339e48e6c3523ab2310ad6f5f072e
642f2a522839cd364d541c4be28dae3f69ff2d0d8ea4e81c205a393b5aa07329
6bc21092f49a473b0fd4d1e1a77ce5d7e97e961334764b606b7014710fb75466
fa110cc263c5616318e203be12888baccec9c9d3799864eafcfa89605f1ba723
a2b5ebfc52a447cde255e1ec1ac8797ad49b156ed427df8c292d6aeb4dad5523

Remcos
eb9e13fd092522e4dde08e96961117f9926e3ef70ca3b225f8c388e476541a21
adb89dda6285e09a24ff43fb71b94126a4a66c9b3319bfa300ab92e7b103e655
54b874aa168963924382bcadb4e63d087c7dbf587a52f16df9efa19157f700b2
72f73fdc1713ad20c964745083a93df3e914ab1ef8e28280f301cab49097fda0

Trojan
176aabdc30bfb007b0ad48f3c089527e22d27077a9b81783e45e91663d8ddfac
134c4961498310157d4d8f086bc40e99a6161e99775bab8952f1bdbda39d9ac6

Unknown Malware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