Daily IoCs for 2021-11-12

################################################################
#                     IOCs (@RedBeardIOCs)                     #
################################################################
#                                                              #
#     Date:    2021-11-12                                      #
#     Total:    163 samples                                    #
#     Stats:                                                   #
#              - AgentTesla: 36                                #
#              - Amadey: 1                                     #
#              - AsyncRAT: 5                                   #
#              - AveMaria: 7                                   #
#              - Backstage: 2                                  #
#              - BitCoin: 10                                   #
#              - Clipboard: 24                                 #
#              - Cryptbot: 1                                   #
#              - DCRat: 2                                      #
#              - DanaBot: 1                                    #
#              - FormBook: 14                                  #
#              - Lokibot: 8                                    #
#              - Mirai: 2                                      #
#              - Nanocore: 5                                   #
#              - Phoenix: 1                                    #
#              - Raccoon: 22                                   #
#              - RedLine: 8                                    #
#              - Remcos: 1                                     #
#              - SmokeLoader: 10                               #
#              - Vidar: 1                                      #
#              - Xmrig: 1                                      #
#              - Zeppelin: 1                                   #
#                                                              #
################################################################


AgentTesla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Amadey
a1c9b78a291901d7046204a1c12a3012753e315f747226ce84b2a1888d08eb99

AsyncRAT
1216f887e2a917e2d59e1ddff875f0b1400890a32d19a2337d73e53eaba35268
cd6e2cb71c1bc0538a776949c74feb37c8b223f67eb5d373417fc75a8fae630c
17bb519eeb38cd3bb5e532c2a0d609d7b7903e7513c463c0d11a65ad67803074
5aae9d82a715a6ae0f02687b2ffec0f48afc624f134a2a9082a3c9f711d63dad
743aabecc2e2139e518cfd238d634bb1bb5970b97e9082b5895f52f264379fb4

AveMaria
7e82a0227f7c7646d134e7c1c169be530f1240579ee1827208351e61783bf3eb
92ce1e7d920d7859ad91a4525d32ff403fc69dbf3881ed22a88484086b3a36bd
25e4f47a2d1d05d3cf7b7087718a9ba759dd212d2130a192300fddece18c1edd
4c68a25949c74184147fef01355e4e02bad02e7d8da1baadd61295b468ae16d8
d0b5063169741567a99f63e63cc9392af1d76dc98407e30abf953b0a51028d19
23d4dbfcc810cd89cba9311fc7aa7b511467b6ea5bcfb0fd67317ce45606257f
9d16867159971015fa1b4ed848a79f0b9a283b7271c7bfdd2619d77844844715

Backstage
4c7de941344d3b4328139cf382291d2ae92467a117658f7c9c80e4944303439c
7e1794ca90816edcf06dc7fd9d1cf0aef6f16b65820ea869c7c8668466547055

BitCoin
2f0d83fe716191434be4ff52bb05cb4190d09342ceb80a62fab275ea0ea788bc
8919f609da5d5ba9931276262f353ea3309770eaffc96a2435cba1234ad28184
137fdfc94984dbed57be21572d2387570768a464844ac9366cc9d3dd48cff3f2
c026adcd36a61f545313bd60d88d3157913d6974ec0d5a18733e32ace6c4f8b3
84f13e0e7e660b137022384315008614d124d53298b54c12e721201156ac96f6
99f24ced96c020caa5c61862a97e8fc202d207d9fb5a8024ece590c138fb535f
ee19d73febbbe72b857583646bd1bff224c5924ffc19400456052bfc32168f28
ee62d7f02717daba525f282b54e09a2a4d4d1c754abb3e66cca9586d4ed09158
83879a5804d01f45845354c58221c71dbf1fb7777c2d3afbab11a561de57ab06
d865c34374892e721b67e5ba588c8b364dfc81c5f17fe763b30f1165b71a033e

Clipboard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Cryptbot
1aa7778da7aa6b68f649b53c8346a853f598f4c1681cd978bec1cf75ce4accae

DCRat
1250fe11805147ce7d2ef573f2f6e26238741e7d255ee0ba29597f2a8d154ca2
1c592c3a61f9d183ab8cc98a541c38c6ed0dc15cdc33dca0149f13603378ee3a

DanaBot
8c4f92949b72be3b11a3cb28de4cd8d5c3fb51802eb21bbc5822411ab65eb1d1

FormBook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Lokibot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Mirai
7adb9cdf8a3c69fcc4487068b9ff4615b262f83342af0520598683c6c2e2d535
e42222a60fcb014e72bca10bd4376d7f4406ffad23146171b7e614bfb1c00277

Nanocore
d0db3a18c0593a628f5c7e2a92b48369c10823af44d4f1e97f0bfbfd84043c59
31def486c711a3e3b532b486b16cb0fe6f4878749671bb16737693bf4206233d
4548841abd05a6a0f2bb1373a658301f61af6b10779310e24868a3ce2a07b31a
6aad7e8f436969bcdd84d207b4d5ec4dd6ff4b55449e0bd2de20eee3ec82b011
88cd24d1e0a3363aee8b0ced6bb64fd6f778b405fdac74d1df139d386ac32060

Phoenix
afbff87f565f4634dbff39f7f909e22b5f9f5bde92ec75043b9d1dea7f9a0562

Raccoon
f248920a1e930072ecb9e885e1701c4d6935abee09ffba14f61f0494180922d3
5fa07901dbf552d92d4376d70e9cd3628cf1356110b976bb974b08581854093a
de2a2c72774bfb3e48c624ba07fcdef75b0fcf9a6665fba4b7bd14de476a5e61
9cd21169b96f9c616964fab0d9348c34956bdaa712ad3761408af2aea2ff3d1f
c29b97f1f726f8ef5064810f5bb960252ce9ac6e17316678a46bbbc266886923
72f0a495127d1b3e3bbab9ab771ed6adeb94ca7663c282679b9d115e0de1af30
18e784c6c045e8bc45a1a2c06d6013ef712cfd63f9b5843e31911fdf1a27a872
3271d6d5fd051b62669f805d104db7e1a247f016aa7265a4d7430d42745568d9
1d1ad9014ce8356b997ff90266f50fb3314d7135e4cc9832128ebfa49f5b8aec
a47363a53fca29bf876a2f37f6ff391372d6d3e0667bd3ccb42a2343d60db71d
838d0581c4647d46336fe7cb9fa2e6adab7a37d18494b62bb14b5f232ce92c07
a17af85841ad82e3e69c6c83be66c9746e25b0ffed6adad9d0667c63e1296297
8dda40a5568292661c1157e6edf3454e9fbf6d2215085b2ac39731276f1e83e3
9f442ecc0a1f0860e971b3a8ca4de7874be0237be7f86aecbebbee142ec48d35
16ac64db6e5d8e444cb61ce7928e9e8fa3df38a9876c358801674b1c81f4cb25
62d3d49b10a2748bd455fc2ea1e01d6ef2df60f65f896bd7bfdccd1af1cb2906
74f923a34a4d0703161deb822860f3aed7ccb5964aab2b3bfc5a8701533dc617
1f74714cf4d280da5fc9d5adccf5c782ec0a9d3a0cb9a6b83edf50725ef64701
cd9cfd4b81cf0344ef1a9fbe621a2bd6f518d1d7e0049aaf2e569dbe44faade0
6827e12df275d99a2ec405b0666d9ea4b0b24be7d7a7ab0109e0a47238ab1c62
52ffd9d939bf953dd9beabd41194b2ce282c6cd39e3bb6df1eb9ef4e9b9b8c5d
dbac71914a01e0b5eff5504d1ca5946302afab65dd3b63caaa18d5e8b5bb399b

RedLine
e7b65bb1639fca7aa4965766ea5f1c8f748a5e2c0a989a2985d6108c43e3b1b6
fb5573d3222e294a28c60e7138a8be83653415febc2a5d7658724de8ee645732
9ce30dcc54e4ea236c131026d8ab547c4adab242837cc41ecf8548e8e5b7f4a9
7bc1ad5772a42176e83fb5bdb552c7c495d5b0d6fd91ee750d5e25acd741fa35
7b533aa618353937c0d2b5554130bf6e9c7c38f96e5a32c26830b7445b3d0d48
ff682065570dc016ea31d80a432662dc01ec510429ca3dfc6bfeaab825a4fbef
75d857a3f793b63e7102a81beaddbc4de08876ea4f76f26d5b6b2f9abe761383
a3d61af1da096aa142a9c68fe7805c66f3ce71851c6bfbceb2951a5cbc7d07af

Remcos
c9fad97fbc7d306ae0a8b6ba457d295786934e6580b279e40ab2ca7ad5bd818c

SmokeLoader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Vidar
dff53d19280056b89ad33c80967596d27a89fc77414e1496aa32baaf2d69656d

Xmrig
9a77493009ed3d7eeff391732778cf7525df6838703c04adf02442a6f69b362e

Zeppelin
fc73801f4e0ba35d7c42ecb7e2af436635a5e2b9845e71663b0332d7722bbc92