Daily IoCs for 2021-11-13

################################################################
#                     IOCs (@RedBeardIOCs)                     #
################################################################
#                                                              #
#     Date:    2021-11-13                                      #
#     Total:    156 samples                                    #
#     Stats:                                                   #
#              - AgentTesla: 6                                 #
#              - AsyncRAT: 9                                   #
#              - Azorult: 2                                    #
#              - Backstage: 18                                 #
#              - BitCoin: 16                                   #
#              - Clipboard: 5                                  #
#              - FormBook: 2                                   #
#              - IPack: 3                                      #
#              - LimeRAT: 6                                    #
#              - Lokibot: 4                                    #
#              - Nanocore: 12                                  #
#              - Raccoon: 26                                   #
#              - RedLine: 34                                   #
#              - STRRAT: 1                                     #
#              - Snake: 9                                      #
#              - Vidar: 1                                      #
#              - Xmrig: 1                                      #
#              - njRat: 1                                      #
#                                                              #
################################################################


AgentTesla
29891027306c8c6997d2ec5d86e0d8dd78aeac3ce4c987d02bf474e69beecac0
2325162197da8504ad421b902511f3106fb06a8d16b60f82aa43b1774a8e94e0
3c7ba51edcb09fdad161cc256b5bee0154b662dc9ce759300b7b7f3cfdecf8a9
6d8bc73c6f2ef4ee700fc8bc4088f73a14dab355a2dd4e3e9aa3ddf52f7e946e
28a4b8dc421474de89dcf9812f81b175ad19df302bcf54b7a0179850a65be654
f582da2d90a267c8e5b3865b04eca0f86931c9a18cd0b8dd5b4ce84723a68348

AsyncRAT
eefd1f558b07ac5b3175d4a38c8d0a891147ace5310d04d5a53c64b085d38794
66565f226650737109f5c92aba113907bd8e4b64212c6e23b1c340bf748dfc68
1643590d39d92ccedad6f8e8d4785a24dbcb08625c42893d063c07ecda5fc821
7c4652b68b42a8adbd5667a1d2d832dfbf27caff2ffc15d40f120a7d12d04525
0b15b58bb3a03c334649497a4283f47e35405d2b69e16cbd09d29248ca4ba34c
f994e56106da6dc2ee424495c7cea57684eb42aa79f7cce30ad8b3d97bde3a73
146ba168c28c18051e19c0f2ff7084b8b4cf09d00d85e6dec1ae1b60f463a098
6d9ac758d08de79391140b2c62175e544e82a3e656a4e97dcfc293abe3656cb8
e934f7b9c7077a88d1aa4398daaed2411d77e4d16c8ff4e3d6be145adcd3a962

Azorult
b5f94e330b47c0dcf0e748af9e3e9a030d0c678301eb4ba5c391ad650ecf146a
bc1722809baae20c024e8e9c71c0ff81f6af06989f15518c573fcf2d5a8218df

Backstage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BitCoin
b8ce6e3c8998d452d3f34856d9b012749758e30efbfcaa25392e8ff170b30538
50eae923e8be39eb7bd1da5f88b0072f724b28e2c11f5675eaa2826a8d6808f8
0a0fc7c56b68c568da9bed10ffc833765a663375beb0f37a37dd4d45f6450c22
07231f012e04f3f062c792e5a2ba2537b8f770dd7bd0afab2493f640aa9cd12b
243f09f57979c04e8820101edebe6fc720a67e97d3a7e1bcd5c87c131bf78f18
cb5e0d02b17db3fb19aa2a7dc7ab3649ca246e9013cf1fcc15466097ef00f6e6
db74debb270d3357a84df2f373aba339c50e2cc6f4704cca5fb75ea2e8f63e27
05e2917b9df6ecce690d53e3b16cb1dcb012661a3d4966a0a3b29fadd105690d
1466b3e30550a65b23f32e5316581042938243cd2d1bbe66c294214725fbf825
418feda874793de29056de23e9845f635cf7d63f85c27916d4a4657b98737866
da6608059e21ceb9c398129c8505fa30e9861b775f694ef1318cb98dddcf1643
e44155eacd7a58cad14121cc9a9ad2f4146cf05da8f71b0751d7ff25d3283c97
06a2134339a6ff05c2a61e3f796f1c192e9cadc13f8ba5a600e538e89f6c7e4d
247a91614479a00aceda71280596a0fdf46b783b9371c31fac3422ccf5117e08
67377bcdf7764a1df3cfdde3de741e31fc9ca274e92f90872b5a68e5e3352065
05ab3b9e248a30ce63b15ff929a8ba5f7099f5cc3618ea9f297515d59cb004e6

Clipboard
331df11f37914f6198f16dd51527abfecd77ff93fd875970f16e92978047ec74
d301d49e9da2cef836f2d5de9f7984b968cfbbcc4f24354119b8262a935dffa4
dfb92eeb57230ec4363e2bef7b40d0d1a1d7da8546661bb9879e2a6344a4c9c5
a78aa2e571da58d0458efef1aff2135453642e004e6684fa5567a71aa82a2965
03a8e7d6944e5b0431d732bde69f69c319fc827feca236884605db47d35a3ac3

FormBook
49117884713ba3caf2c1d3f3e4259c4baf696ac5dfc1632ca8fd6bca93bfc569
7a1b8316f5ab5e580a39374469dd8029949c791b6ac33627b3824868bd5aaf28

IPack
5b237c9073e71880951b70b9b3d1cb85adcea56ebea00a9aaa90dce387ef333e
4379c7249cf01fdd1f87e304a94c1137c1d0af8c56195ac77def0f7726bf2dd5
2d8c517e8ada7ab3c73c6bd6b67b2a8528d83e31eb1b4e9ddd2ec27c2b308c94

LimeRAT
780b58f0b7718cdfbf733122b8e8a1fb490596951dd3ead4cdc2059d352d616a
136e3a631c2ae2277eeff1a8a7c61bcc292a05a2421b33d89a110c7e5423dec5
37c3db846b611722768b95c17585624f476def65d0332b3cfb93709c1273a685
8f5c6e1ae35f861898a3fb880cbf67e0773517d35f6ca08db8d477a98523898b
a38940d1dc844ef1e1b4d84abf0b69dc5ff246d584b28ead92e54fb6123960b0
5fc7a8a5e2bc6fd516bd4d381709c85c0cb0e1bc022e18d2e905d87b6847dd0a

Lokibot
2756fc2a48cefac30493287ee3c78d299e71724df0560956e4728ea2a0dd3908
26eac4b61ee19be82debaf5aa6a9380eae4aa0ee77efc80b6299ec6873292672
3ed2e0272eddce486bda433f831557aa7044b679d4aee17dd9ce6a80175a6ef1
dde2244a4759f76b11dbfa35941344e152f190ebed0775a66b80b8b23db850ab

Nanocore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Raccoon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RedLine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STRRAT
b273e65f197b032e506d5e6f67e218e0d462488dc6465cc9866edd8ef78a107e

Snake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Vidar
2b01e08a0520a1cfe27519e45150584d0eb14842e8efcf05ecfc07fe93245d7a

Xmrig
e0895ae50fbb8bb062c5d822a1265877dfd20f6609e1b97a4f1db4ad5b0cf270

njRat
2cec2446796586d7565f1765cb3767c342744770767d76d94e5517a39f15cdbf