Daily IoCs for 2021-10-15

################################################################
#                     IOCs (@RedBeardIOCs)                     #
################################################################
#                                                              #
#     Date:    2021-10-15                                      #
#     Total:    140 samples                                    #
#     Stats:                                                   #
#              - AgentTesla: 27                                #
#              - BillGates: 3                                  #
#              - BitRAT: 5                                     #
#              - Cerberus: 1                                   #
#              - DanaBot: 2                                    #
#              - FormBook: 20                                  #
#              - Guloader: 1                                   #
#              - Lokibot: 1                                    #
#              - Nanocore: 11                                  #
#              - Neshta: 27                                    #
#              - Phobos: 22                                    #
#              - Raccoon: 11                                   #
#              - RedLine: 1                                    #
#              - Remcos: 6                                     #
#              - XpertRAT: 2                                   #
#                                                              #
################################################################


AgentTesla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BillGates
72e07f2b00890c6c4a75feaafa3653c5b07b841d34ad01686182ee04b48c13dc
622373b3957bb84f01ef43a931c9995fab3323bff4d223b3cfb324e5af11c97e
220e82423d163c0c355822f29136079c9cfd2156941328fa0c8d72b3a638c73d

BitRAT
9b926e79bbab07fcdebc46a1df72ef2db5b1634aac1409d4128e06e1014b0b9d
375b217d1a94daf3ae58ed7d4a82432c6bfa856dea25c62dde7ed8188e734f43
d96b06e833c185f4ea737e05d65b641a075812d909894494b2d604cfa17b399e
bddf396a0f76936b14356ac71c5823462741554321d8e6cdd6f452b3413da60c
a8130d6e0367f83f68640720c35d12b339c1a84e371cff73524fcaa0fc62f44c

Cerberus
4d5bea33058e5caaa59640afe11be565cbfacb07ecf682d4b5a22bbb3bea1df0

DanaBot
6a962910f2f319ed1967cadf788ef477211c05a8d0e89ba8bee027633f9b98ed
99cfc35ebc239b5d7ed9c3bc156372a849bb3426455542e3b12cb7f6ea0fb899

FormBook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Guloader
8e4dd31738a559924dc6c10223b4cc41d786102a1160cc96cf699d2a47c71b8d

Lokibot
4e51be51b27ae05959149ff78aa3ebdf1010ce97def9882590b843816318faa9

Nanocore
8bac59b258ea8ea81eccb35b6e2a4bb78e415c84ea9a7c24a46727d5be8c3023
fe986557aa3405039ec9108fecb562dc71526ddc82a1e18926da0c2d8df90f14
64746eaecc5e6a4291e3aebee725df439e8d1aed87320e0491323cce4774ec75
4560fe3afd5f2b78a9e9686dce317e32d5bec313315568b82c8a386297811047
0d57cda1a95f32e499a2019e5f29edd25e6960493583a2f476750868fffed263
ef4056b473560629f2ebb778036577b6fa592924b84d2ca128e320857d3ed862
b4166ee483d77e6380c979cf261347f2cb6154fa287c2c8db1d21ce646a4b8b6
0d2e62e016f98d3213e3ac755d335795035b76f6ad9d6b5370df9ca0cced055c
d961c394104e4b1bc58ed7f55f1cbffbeba82928d34470176ed9361b703c930c
5f6db1b31bea0be13c256a36aff36f4b01801ad3703e5b369491fd2dc60baae3
33426a294dd14b850e472dfa351ee2c2e80fae868c67a7acc1db3da86145e95c

Neshta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Phobos
905a07401de1f9cb03036541cac440ca5b593c34d00338c52c40568ff4e5ab1e
16253e0b117a087a7c07dfe7c85595acbf14dc811a1c001a0dd6dcffb34d5848
cef2789fa5c934eae6e966a83750c1a2a8a6d889ab3c209fcf530cd64d6106b4
3e48e54976b87e921f096ec7b54bd7e2971920fd7502df7aa60429a3b6ec3b9d
4c8a77b5914aafbc3854ba91df8a410cc4ae2b9353b632d9f080ef5fc56f5eb4
f4a040d3c45b7325c1a911fcd47762d06b484a67d19a319387936fa58532cb42
575b6dd67aa722e9e49a7f62cca511bcdb26b67a50cccba71f7c31bf78cc7bf3
e99a5a7750b07d7fcc90612508a398056789f4a64cd9c7810fd1dd5c1950a26a
7c553a88a8ac36848e8717a531b97de44f5dee4a3a7f4d5b59808055e8f16209
7b916076ef296d12a0865283a8f1ecad9becf38a61b4bcc5ef49aa14201fba6a
23199e77eaa9bdee522b3ede51b7e4e4fa3826371fee0780f7d36551a00c68d9
0a43459f54660a0a77c96b3adefc28cd237347e443d828fa1c66f7129e423f66
bf6e58d883a3fc3fde35cf44fceaec58339142717213d5c47a2d183481453d90
7025d87d3761277d602efcd722382c55f2d184a0b66d6ca15239626c57a5cbad
b043b901e7c2ee6707e5b39fc0a4a2d49307dff6b4796ee7931832040ce470b1
47f6fea39ba76c8e6c1fbd065396395969301b0d5f5c90955bf4fd2925d83441
cccd06312d54d199accf532ab2072dce530697559a8670d69c49c83d684dbba9
a3393f912ef7f2e86bb8bd7df18c53490f8ac09c830e9247391d9afb18216682
cfa9521a578c1508252cd3bfb18f7d48365f529f1f2a5d055faff269e959b373
7c16ebdee849b7bef5441015f10af4026935d8342c606053d7eb0c2f5b92b2bd
6f6503341d24e2bc9f06846585e53370fe9ef1ba98fa18988f6f7fa0e1ab9792
fd7256aa7648caf8e2fb2bd67f81dfb4fa06ab0db5d066dc64211b7236c50fc0

Raccoon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RedLine
6f698d80f11a020a8d76d5e8404768b1036b9fd1a00af215937beb20aacec7cd

Remcos
77c7753b30c50361f8b201bc0b79202b06efa3c1958c5f7242e0d192b88595c5
787d592049f8eed9c9ee846c9067a640e89fa19617b03670a97a913738d337f4
2df667c2a61c1cc161df7e8e1d7dcf1407a0bc30eb7eaf881c835fecfde5f086
0aff281c192e919ce8a4e2091a058aa3c8fab2379dd50d7dd7ac7217af4dc838
636abbcfa39fd806176a81b1b72a3d55b6d2c04e32863eb33d1324382c3d79cd
ec8a52d55cce244ac7d599b9a54b6aae59b73224f6b379c9ab999ab2a567709e

XpertRAT
f2926aaea4603961e15c9ac92eb599ddd51bd6e19bd7fded285a1db16753db87
25eab735d1bef60b4fd0718ea200771331c4337bf8e43134988de9ef1993ce4f