Daily IoCs for 2021-04-22

################################################################
#                     IOCs (@RedBeardIOCs)                     #
################################################################
#                                                              #
#     Date:    2021-04-22                                      #
#     Total:    153 samples                                    #
#     Stats:                                                   #
#              - AgentTesla: 50                                #
#              - Avaddon: 1                                    #
#              - Azorult: 3                                    #
#              - CrySIS: 1                                     #
#              - DanaBot: 1                                    #
#              - Ficker: 2                                     #
#              - FormBook: 7                                   #
#              - Lokibot: 6                                    #
#              - Makop: 3                                      #
#              - Nanocore: 40                                  #
#              - NetWire: 1                                    #
#              - Phishing: 1                                   #
#              - RedLine: 3                                    #
#              - Remcos: 6                                     #
#              - Snake: 10                                     #
#              - Trickbot: 2                                   #
#              - Unknown Malware: 9                            #
#              - Vidar: 1                                      #
#              - Xmrig: 2                                      #
#              - njRat: 4                                      #
#                                                              #
################################################################


AgentTesla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Avaddon
91e2140e38cab5d72b810dc8a3b0807cb6e7fb09e908379bafb4858ad15bc941

Azorult
d6bce670eedb3e82eaceb6ec24f159f3e8f805b42a2ff61c688edb686e0ff490
59ce85f7fb0c978fd4b266a422501474f7026ab70fbefce4261b414c96daea2c
f9fe8c62e7382cd9b7b1a500ba6265eb14c66f16a0c1a0fac7b1b4f809f2269f

CrySIS
023edddfe89bb5694a1221a82228f518a2700657a5510111b21e29101c9883a2

DanaBot
613b93ea5a9c267dcbb30d187625d5cf399fac4b9d35582bf0ad2f9a35cce60b

Ficker
bbd158f615d22141bedd7877768836e4c443482caed6ca95af347743b43377fc
8660ae3d98ca9d0c01119898b40ec369f809a3376b7a440c71b711356b942ef6

FormBook
c70e9173b6db63a207eaa33e35290e0bc29684473191f7e42a09705a17b494fe
e0bf21ef3c1cd1546e53ba980aa33cacfdb65ab46fbe5226468e3fe0aa5e7045
865b0f87dcd2c10afa2cb337c7dd2dc5e50051b71cce9799b14154ca98268c32
2a46aec0dc21ba85743f47c534c42fc66ba13459cb24a733f85ecfa1106501da
537799d26cd267658140824ec49b0bdd9e1a9699dfaa227a09850176127ce6d8
80513ce09728ee99387db56c825b6f2ec5ad274f5c90117d25ca822deeb98419
cc58e505c504c770a1031d30453615f7748b0618b872655ac79a059a072c194c

Lokibot
2a9a3c2802fda3ae429ad9d241ccfd7b45bcdf549445e556eff7337e19ae1c0b
4d12f3b90da946ad975debb3f08fe8d26ba0670c40c8c1e113fa815a2667d4a0
3169e26dadd657b41df3dd892e17dd858088f75e620370cf6b6cee771323b412
358986a6cadac55df9bcd743c6a7fbab9a0a69fd846363f0643f2afb4fc2609d
3374c4f247e55fadc2575988fe92d13e150c761568bebcbbc46d8e528ee48935
232c497790fbe48dfff53017da56ad25db41d70872c4e490596cbb33623a52a4

Makop
bc3d8114ab8a6c20179fa2dc1a2ffc8c0ea5c86dd6ff70c547ed929b89c64a5f
77703bf5f0224b4b6bc3c2333300eac887ce49e3e0bb4bc3d20b7e33cee749de
da6c310c6d9914a7481e5f331f3ae897ae45bd9dbc941f4fa617f983f3850275

Nanocore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NetWire
1f3f724caf07cb5b7b6f30175f24050a386196a82e524859f5da05d8ef7f1c59

Phishing
3015407cb88b5a99dd3ffe2cbab59c3092fc5c83b98185fa6e53e3a769b1ba75

RedLine
095e484a1b650f1178d17faab7b6b040ba3c564541af3a03ae825dd07b9f9df6
97e95e99fd499ec45a7c1d8683d5731ce5e7a8fb8b710622e578cd169a00d8d9
77aeeec4cf15c67180af1e8f9b5727548991c4ca40f341add9e8b9fa4b43f1ea

Remcos
ca29c55fec9f35e24bbe5220e419a83e28c0287b53646590ac185b5612f7342b
32599ed2ace4d5f117eebafb57fd52d6f41fb9eb40cd9449b6cdc694b37183fd
b390f028fc916452a60098233bca1695739995a0abe4eeba201dc690afa1c7e2
980b7e35e43b7589eb7dec6571e43fb6d3589c17559ac14d80115f6b575fc60a
c4be9438f9e6b3af481580c9a30ce86f1b7e9ac1919227cd85e3b0d079477124
a0fba13d528ad34c74a4977cd20da84dda908d6939ecc6c36c4c7bd6697b6df3

Snake
21da795f10f09a3b3efac01c2ec33f70f0b427e883469ca4566d385b7bdb6a57
d958a6fc78fa583d33861841a71c323e39040a38221afbec0315ceea2cb50912
11234d86add819c9970136583873eab1b1563e47144b73c9742ea858b76b7156
da6a4069ad89c93d4f21635cef3b8cc4f7e1c94634b88522218d8b9f6fa16560
c9ebf3cc2a1d18bb240557c9c399b060143071013c97762c3ea7bdcdfecda2bd
183471bdeea36267cb30376fca983a301ea5a1b6ab187fb0165150eb920b3a6f
b03b73402bf01a92292f4ae99cc88c7f8864c30d8e65349a26e26f02d01f6520
5a49f7ba91c1fba862065e2ffa0572c8c36517b290855f27b9d49294653c4ed3
4122c0dd139b66fcaccb8f4851c31c843b8303127438aa145b1548edbc513bef
6b8dc0debf80e3d58a8ca15993057f86d0f38816e7faf15f5787bbcf5e139907

Trickbot
f1f41922cad42c54276a8dfcb0edf98d1f216d85aab419db389305e1e7fc7f90
c41290001fb85d378a9d227177aa5cf6c2ba792f51715603c380691afa6aece3

Unknown Malware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Vidar
76be3c17c460fc2dcaa05ca22f1d71c08833765007705721837b87dece1898b4

Xmrig
56a3958992fb2ebfbdec3a7e5f2057131efc218cfaa8351b3852d13852255a68
d75c295249b2d6dab3cb1454babd15b324807b65d497f2879b714dcf899c65c3

njRat
62761233916dc6c5b89f4719f7a4b3873b82ff2c25d5b38b0b4a63bf2469d5f0
ce092c8ae8a0b528fc09255a3e80346630b3973824e99304a2b21248b4fa4925
7f7a994abb7b189d52a094ca84c819d1f99d25ed218a79768749f02611b55daf
ac5c8bfe0121bcd741d787e97a3e3c8d3ede44cd51a2f4b88028e662a3286519