Daily IoCs for 2021-04-20

################################################################
#                     IOCs (@RedBeardIOCs)                     #
################################################################
#                                                              #
#     Date:    2021-04-20                                      #
#     Total:    110 samples                                    #
#     Stats:                                                   #
#              - AgentTesla: 40                                #
#              - Babuk: 2                                      #
#              - FormBook: 8                                   #
#              - Gozi: 4                                       #
#              - Lokibot: 5                                    #
#              - Nanocore: 19                                  #
#              - NetWire: 2                                    #
#              - Phishing: 3                                   #
#              - Phobos: 2                                     #
#              - Remcos: 2                                     #
#              - Scam: 1                                       #
#              - Snake: 5                                      #
#              - Stop: 1                                       #
#              - Thanos: 2                                     #
#              - Trojan: 2                                     #
#              - Unknown Malware: 12                           #
#                                                              #
################################################################


AgentTesla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Babuk
b81b68c3353c44c89740638e2e31eab6fea3bd6210e749ff092c8b32cd057a69
59ac7c1a064a53196eb135e59ab7b658577fd2ad22b45a02b77f1df630912591

FormBook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Gozi
f73327b6357761fed491260e72dc67d79c347160fb9e282cea04b67decf599f0
30e442cc20def0751051d23b9164116878a96bca5008c612709a2d24791d3141
8a8a7f72aaebec5c6ea759ae1af735b4e048be1f86fb55a39f3a6eb107ffc714
10938e4f9cff65be0a4a45dfe84d6202d6d9e3b31116312a4531322edcecc282

Lokibot
ebd99a86167517a8a4a6bf028049b55b99115184203d8a5af73524c0aa8e3b78
59e6627133bc5e0cc86e36c36127a40706ac0625972e1d801c2e41174804dae5
ff1545fd637fbb666fb8547b5379c86d0298328ff43ecab26f366a7be92d5992
d17007e806f09fafa6a47eed3fb86491197fd3d4f9a3bf130c39e6a7dfdede41
8fa6706864df42149629c774b1b9804420f68c7c1642c92e674ba35bbdba12b5

Nanocore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NetWire
083a52f7af54aca64643c1740c7e0990a5125c74c740c6bd796b765eead025b2
ce5b104a52cfe00e98c71ef31561136a2b23b58cabb5f02cb2e87ff5ccfd63f7

Phishing
9bc8bc498b0159e81bc8f84f13e74016aa2f6d240e3b3b2922460a3f127ff9ba
1e76dd5e13f26a58d9e9ffb257e5cef575e5d29c972f52afeb952fdf2f793534
e2b33fa87d47cece14588fef3805fc40bfd81476b31ebe3c2f65b2920c4f5035

Phobos
98f83ef5cf2bb30becef4c825c85b0b19fca5c3eec4532d662bbee17a366cf35
7cddad6d9678a3ea594fd411a7bcc92337c84e9be39260d4241059ef7fd5d67a

Remcos
5d9ba7ab51a7d06ad420cb23f7c1e02b911fe2e25d7af1eebe25d1690231d784
c3510432957649a77c6b3fee608455947dc668e3255d909217eb0cdf280b1c39

Scam
52d2f8e3513ba67f35de50102399b9c6d1f04ec668f4fc0a83f4a852ce34efad

Snake
0743f82a665649c6155637284bd36fa9163b73a9f721a91f5a64e549bb9bcdab
7b525b726b23d2d8a5a9b0498c1a634f6f003535744bd609b6381db965d3d72b
dbb1e1a914ad5e952209da3dcd59ef125a1578e5fb9d5d1a3fa50f770e64d32a
59396d086d40357f1228487c040b643dd0349259ba13556c198648a9d51ccf1c
376fb5dbb339a77640a9ebc77162ab11c63186c48fa6f7c0a1717caacb9b70b6

Stop
8ed3632a76583d9d3961815f52cb6eff0bef31cfdd67e5c74a463a492212ac2c

Thanos
27ba35dbeb5324bd780ae6a95c5aae93fcb47c5aa8f48b1c21f83000a55de2da
2d3d1b83067859ebb118ff1a99ac098806b65f566df094fad9a4debef4da911d

Trojan
6c78152760aa6d3d27528e2443dc599129e5b85988f4f3286b06d07ffd13f63e
c7b9329f47d2d1884e57cadeb958bfe635bef6907ad6a5b3a8862399fa353617

Unknown Malware
9bcdb52a2a3f1ebad2b546042f660f39f1eb4cc4487dfbf50282e9a3b8492eef
3bc02f8f4f24020eae4528077cf0aba7cf10826eb12b8921fadeda0095c6fde7
6a1f7edf41ac2d52e3d0442b825bbdaf404199ed8b45b33ecd52a58acc12087a
5a9312bc834e68c65fde94847f9adc19153abf2e8d5c3d1ffc25014ccb4a87ee
3d49bd774fbab032cef36dfe0e69ea30daf5fe55bb6e50277beed73d37d0a473
14fd8b46beb46c595187c13e5964f61d8bc5c6345dc72f02a128cbdc5508a860
573e40ea7a5ec510ca5bfbec3022158379b485c335fecd3b01471c94793e61dc
72d078d7d80b81ee600ed9ab07ca2337b43e7efd9fcc43d512451874d5840983
4fa8762edc461c9d4751b19716b680e6d6253ac204d2dc943df3e686a8a1570d
138639ef7d971b59b781e67dd146dba324be221590c7e1e75078f355e2ac3163
0722876b950d2eed180d802e8a93608eab4f7281dcf7296f26122ee4c9ad51a1
7192992e11e2c2de9fc0fb35393249a18b4d344cf6178ea82669e21cb39598c7