Daily IoCs for 2021-05-17

################################################################
#                     IOCs (@RedBeardIOCs)                     #
################################################################
#                                                              #
#     Date:    2021-05-17                                      #
#     Total:    147 samples                                    #
#     Stats:                                                   #
#              - AgentTesla: 28                                #
#              - AsyncRAT: 2                                   #
#              - Avaddon: 5                                    #
#              - Bloodhound: 4                                 #
#              - CrySIS: 5                                     #
#              - Cryptbot: 6                                   #
#              - Djvu: 28                                      #
#              - Flubot: 1                                     #
#              - Nanocore: 19                                  #
#              - Qbot: 1                                       #
#              - Ransomware: 4                                 #
#              - RedLine: 6                                    #
#              - Remcos: 4                                     #
#              - Snake: 4                                      #
#              - Sodinokibi: 1                                 #
#              - Trojan: 1                                     #
#              - Unknown Malware: 21                           #
#              - Xmrig: 5                                      #
#              - Xorist: 2                                     #
#                                                              #
################################################################


AgentTesla
e9c6869ab0d7f83d208c06e0d5f58785280eb26f7103466159ceefda63228b53
023290e5b1583d7ec938c6f4372ef61f6d4a9b3e766af56023ef610bcfa5276f
54d93bf9fa152163e5ddbbdc621d7acda7e652814a7fe2367cef2ed7c16deac8
23523f50ec990354c7ede3ca1a873a09c948e1e16bbd4302b8554ad8b3874729
f1a5608a441dd2ec272cce425b7961216b6255c1b239fdfd55f6b537d7ec35f7
856e3e8e7712e9e6fe085a57b57004073d0a00628917829a2e0e1aa060c09729
3a1d8c876da72402d559a80f84ffd87d02e3c45ac6ec588841c8151d6f303ea9
580d75e411d1d35da8d65c6e9879f0504c4b97bf4fcb7f3d99891f048f933801
6e65c8f3d5ae780740159a27ce4102ff52f7c708feeab753b2cb01612b74c6be
e276b5f5931b82efa92a3d7a9e771b672c2e65fc69b04acb921ef96eff08f4f3
7723a3247f37a6823b863362658158027b32aebbb6254785bc1d8885e75273f5
e18b35bb58d2491c0a112bef5da1a6782b5853abeea43ea9661a90e7d7ba0f41
08b94d8dbe8ec5319215380c61095d2720bc67288698597c910cb49ecea5bcf6
5508c2ba915107cf9799ee45aa1c1859433558807f68d5e598785be760f81063
3937551301a8d5a3cbf65d0579e92cd2027581aefdc270b5b82a16b4049ffebc
0257f081c0709f4a50d493855097f9fd1690cda8e296ef2cbce4ba0f2bd2125a
aeabce5439fc293e11cc7065e8bfe3e695d09899ceb33b82cd4639dd44c29e2f
8912096c99c1b0742cdc8082c6177a5533ed3ec9223cbc9c765984378826ccb3
93e8f145cda4721b6c189b0037efc1a0c21dab11f09fd48a31d083cc16fc86bf
fa8b0a389e2c545323988497c4ec2a18381eadb6c1635de9bc3886ff73fc75c8
eda97f237540b1a4b57f6f48351f072341f0f141172d8a5b459142f3b66a53b6
eaa3cc4ba5bd4d56d0e6d5d4114d1dcb3fd60db8c826ad624a46e59400de16e4
1137a5b1100685623a208af986d530c8f603f82e874721bdac8ce48488baf08e
c597d4265fb6612f01311764c3ba3d5498180d954b083ac8bd709eefd4190b9b
0e3b95f77003ed810f3f9332199144d84519d055036f05016f6fcc0b8e85a157
83a4ac3b5fa8425384fd7efa4297f89c35d84420d3be3a4be510b5f2f81c2ab8
4101978291fdbabd9d54b91c13b0f5a17be3395881f9a9cfda430f9e7858b5a7
a95c85bdff921b2d7a2a04b936e6a165ea7d60a22df3bbd492972b5000f6e013

AsyncRAT
6c3b8f706293d8462261afe66048575af6798cd0ebaec43f77a742609be0f869
7e4b5ba225a7bc65b9fca1010c1238bf6580369508c04a1205b61936c6e654e8

Avaddon
03407468d1d62572a5a1c00463626127c43bb8cbc33f64858a0e66167ec03a97
48d7cd572f14aed7a90d6b66097a885a889e6e7416a6aaa2eb442706ff661275
1a2eb88e8c189acb63177f0f27050e067340ccdec996de672f20f02f46f7d292
693b7b4d0546eafa22837413e7c98f18d276f1c6a2459a51371fc29b9d91b625
34de1542ad6cd0f8dd003c061efd1618696ca1c06343fc7532a880ccd2b497c2

Bloodhound
401b940b4d13b7d7608f6b3868e550cabc9e7e9618f61af95226cca5cb9ff7fd
e8d908180262896f06f55659490240a2e9d4807d417901f8c4977a79ebcd0ec2
27d1b55d02a6f66aa33e69b88e87f4d6d15b838d8bffadc7d0f27ccd1fd13ade
1f2d610bc9947ac5de70fbc58f27d8c9ebef039d135f71d31ce373cd0baa0335

CrySIS
60c17e1b9ac86054237c92919df589074bec4f80cd6b2b71d28482f7db3349ba
697d30450bc705e1cf17c776c490e7e9138c47aee2f112601df84872ab1a27e8
1255f63eaf41649db37d521c2351300503540a6b9931772be63533f9c950d0ca
6180e6282d23ddad0c3686f7c6883580fe76ad3954ce7396e46ff11be05f5ac2
17519c2a56136d8b3dec57b912249628885f0c4f0f0b7528c5206c8d0e6a0839

Cryptbot
ba15de0f65e1d9b9d7ed54603aed434676f2f0c8eb759fd20c9cf44693abf786
13e08f9498a0ca2dfa258215d1441a92cf517afe778016e25228544a0434fe12
da47b6551ea7779612a5b81ec843e4b810106d7b734f12d5c45925b6db5046e8
d8054370248c21f9121ea37e6b5bd114ad654d9a01c9bf4b13d35682d4e0a134
b1157cd51118df0799d614d5e740a08eaff194873cd9bc37270f6349a79edf80
b98f9bbe285b4790b082e92595344bf34e6ebc6ed30c8bb1fe61c90ed691a5c0

Djvu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Flubot
a6c494bbd120b97271d2d96c9dd4ba228317a7ecbf3e5c2c6c1d367a9dc471a0

Nanocore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Qbot
593fe4509474a9bff2935b4ccd3ea7ebe962052f2b635a74d27936a443e4b611

Ransomware
ae91da58a702252cc0dabcf19fa65e9655c7b7143e71e048aad1ebe59a31aabf
749df59e11896888128788edac838794acacf8d995c390dec490d7a43b5acaee
9925f2bbd8a65868dcef2699ed389fcaf617dd3d680ef45e2ee429b58d8f348f
49fd52a3f3d1d46dc065217e588d1d29fba4d978cd8fdb2887fd603320540f71

RedLine
afeecca2330823f8d61a43e41d8fd173a9efd8fc3702f5aebe048ee691b60b00
7679746684265c26cd8a6c740864f448a39dea0a0cda9c12b652ccf8a1b3e22d
3754fd4d4c3ce07f20f56b9180fd2c13a2e2c8bc6b9ce5df882ef531693ab03c
da73145d1d2b850a4a1b8fa9fd13dbc01e3dcd0d7e77bcc99a46d42d8f84bd51
b37accef525d50be036a89cd2ed3be77ac91022c7894dd9108d293fd3c42eded
aacb0d7244ebcbc856672d785a567886dea922406bd2de860c59121bbf5d3aa1

Remcos
9a11c83839b1379e794a24659adf6dd9515f5581c24e97aca7fe1f3fa19ce0d6
31c2da635b27d04d62c7864226ac4f061af4ab1e098ceec5e3ca0e536623a3a5
48bcb0e6b4777a8483d3a42a0b48bb93dcac5963510e2287b5ccdf78f3e51526
3d263b6e2cdc6e43060faf06203a211ed5f716238157fc36f3f0d5b21777c0ac

Snake
aff5da18a88c8500003f4cb1ddb357ac5d573aea0ed16f0f9f2a2ad48e5d73a0
33fb229cfe2f2fa9655a350500ff0df9f8d54edbb65aaf8ca3cd578b44f78610
203a910c4c8ee9e3b45116319761aeaed9137c1d8d8580c96455d1c103760de5
0f1be755acdb612ec76934b749fede12106d32ea219db9632f115bdacfe40213

Sodinokibi
d41cad46eda4cb052fbf406ab8102bcae4c1138d5bb4d17ba3d6c3bcbb1a21ba

Trojan
c0a384c3a2ea94cfce96fd8bbd99fdea032f246031c6930ecd8c5b7b5dcca8ff

Unknown Malware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Xmrig
71d2d8d144ff4faa6cbffed52933c1788e221df1847b417010c1175b8782b482
6e1d886985053da777d9a7af54c9b26694798427eaf15ec7e9e92d394e8c3473
d9f385fc718ede074cb5d92ad873aecad0bf697560732edce2e08cc40a097f47
eea4fdd5fa39d6145f4c5abfb3beb63c1d750b2bba95d5d9d52f245aa07dc02d
feb12de92aa1536ba75f69b41bf74cc3bd8438df7eb0f0705ebbd1de73994624

Xorist
0a87b7ace7c891582509045a00f7db90cecd201e31daf7c5ff6aa94504d233bb
4812b929fd1806c34a72cefeab8b404ec63627d856cb63814633f60b54218341