Daily IoCs for 2021-01-14

################################################################
#                     IOCs (@RedBeardIOCs)                     #
################################################################
#                                                              #
#     Date:    2021-01-14                                      #
#     Total:    225 samples                                    #
#     Stats:                                                   #
#              - AgentTesla: 19                                #
#              - Cerber: 8                                     #
#              - CobaltStrike: 2                               #
#              - FormBook: 6                                   #
#              - HawkEye: 4                                    #
#              - IcedID: 3                                     #
#              - Jupyter: 1                                    #
#              - Loki: 9                                       #
#              - MassLogger: 3                                 #
#              - Matiex: 8                                     #
#              - Nanocore: 10                                  #
#              - NetWire: 5                                    #
#              - Phishing: 38                                  #
#              - Phobos: 2                                     #
#              - Ransomware: 9                                 #
#              - RedLine: 2                                    #
#              - Remcos: 62                                    #
#              - Scam: 6                                       #
#              - Snake: 5                                      #
#              - Spam: 1                                       #
#              - Unknown Malware: 20                           #
#              - Vjworm: 1                                     #
#              - Xorist: 1                                     #
#                                                              #
################################################################


AgentTesla
57d29a806a8f61716622871af83a32d6f07c40a0191fa8cee0aa3900226d0f11
103c0e7e2cc42883ab3c546d495e92986e093838b7b33caa6fdec29005fb68f4
a4fdc26d6b70eaf0a62cca36286412901f48881eae616d38b96d8ae0cb0f29c7
28305850e7d07e3129c026d2af0597125279590a7ce6d64945e3b8815d11f230
d43f5992ce3a4a65de2462f789d1244e1ff2df48c3d8f132f793922bb0513c06
0f0cac521eddc83b86542aaf28e05b0146a4643b3645b434b34f2ec30131b73d
3dda437b8bd6179e19df5188210a736b76ac59f070161f299d31689bc0408adb
1760b657755f0891214e821f9435509c25cdd5d0da0205e8f390c1b57aad9a77
a7ded0a686f9bd3b93d18a37776bf51568d4f26ae67726419cdaabfd2566acef
36037db38d91691cf7b09c76ec9e641fea7ea1cc05dea09baac376e653e784ab
e784d2af6231d9e9f52c0b2627bb5375bc50d8258c33ae6ad2ce903b8f5e7cc7
c0c094a6eb4a6e1051e79144ff16ae6d24b52007ac96fa0d8b40319635e1ea55
3f5875e04f990beb5b89b4f10cae743d9aa3f9b0a384423e872c81d1465f0b8d
ea5a29bc3a13bb5db5c28571a756b1d186c3032c573df2cc61c095dfe7bc5066
8f5c5531c9c9e814c8d3e59727ccf998a251ce413782f1e712b396aabafd994a
5c772492a4f2038485cdb8d53f6189a94f3f302edb008ced3c1ff65b7db4ff8f
d9f9c20cffb078037e8936fe93ab6237a29b6fe41075305ec1dd5800242606bb
4b18fd9a805fceb4cfb1321ae2faddf8e6c36a17edb8f5ef54ca35f882e21efb
202304c9f34a61450378d7a25d95cd19de30fdf7c1453a47303e5a6e5e6279ad

Cerber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CobaltStrike
1a7c07b7b65543860a861613464731fdb15954e62917e488c5667fb5330a5def
d3c315b315aecdfa7951a34157f264111aa62caee3384a6c0301871d8fc8770b

FormBook
f777596fe0fa9c11e6ff244810d6c6d4846f9c03b8840ad88ac8853de8a766db
30dd3160b2a93b2b20726e2707ad4781b8e6e3802865fc1f0582a3b9eb1644e0
41440a2e9db109558bde920dddba0eee3a5f269eef4c0d80eedf6a0bf0445a70
1d2cf0287f43172cf4b7e250574319fa36b733e98878622e2ea016f5c0437679
edcbf58883f09441ef7eb461421b7ec33655663420ba2722ef5c45b62600f25c
468a5fa19b50d02ae7d842b9892e4406bc523371b64ae599517ec04a2ec5abc7

HawkEye
9ae5ef3fd4feea105c1ed3f1e69fd4fa328e8f29f1937097280f7eee7f8d749e
56bd25acdb97ce17f8351b926c48a4f63e348c40f6c5913219b0745d99f6b31d
f9ee81b7def0b0008cef43847fb9ba520c0b57a49e7a71b47ff8d6ee1fec4298
5207f3d079a52017e7977296c9eba782d3d5eae5adec94fa38acdd88c184496d

IcedID
7514782350b6350389b11d177f2f9cb6cabb95f4aec9e8377ea9248a1722710b
36614a01566de26bcaec36177422c484b9ed2a5faa8061a7d528680323d0346c
a66236e86cf2b98abac970ef37589cb14e684df8aaf6928ef58d4c563ebb4f7e

Jupyter
19be477b07477e45e61f60f50012da1b3d45d689df0715d08ee69d87ce63ceb4

Loki
092079f16dc67cf3ebe88fbe156ebf31218cf741e3433b77a45a355b63ace9eb
1c0f9ece4e79f76ab6dd81f9d7278eeeca46e0739390a30222600764b86b3df9
c7c001f29eb88786385f54395ecc75b780e9b54dd2eae54bcce61656a784e04d
d5a16e5b25db8bece713af0963f126349dda1dbfc13d03f678a14ce618037ee8
ac783649783642e7162d11a2ddf869e7505cd783454a1f05c69edbbda7fc8ce3
8bf2e74e3e32d5df3046ca75ebc408f68d5b766ca13c221712fb0b83558b66eb
9f4258e5c61e45d8cedece680a26b83be12413727685afdf469bc91727751a8c
86cc691d1a83b5a867eea2af03ea1ebdc33e4a439a2e74bd29520ce1831c4c71
909b3558b85ccc4b1890253c148345b2eecd0511c6d33f76752e14d56c9d9018

MassLogger
c0bc32ac8075ff6d3c44a8579529f8e9363a9d8520db70ff0665ac83e96ca1fa
a39304a39ad9b9427b000045f7f5c60ed7790fe1a79d604ba9379bb94c0da593
a03978c04933f2bf257560e45711309befea454e6ca2ed2c63c1e09c110019c6

Matiex
a50f9f14e25f3b15015e0cc0a341299cf48d33288d49ac9d4df105e6b43da031
af8629a317a5fe7aa5900f445cd855b902a495c497646c3ef1485ea5a9d026a7
8dc7f9f4ff16b9c00ae3869b02dcd27b084a5a23dfceeced28c71042b8f953e2
b99dc427b778399210624abc51312720ff95e1fd9b74dcdb8cdbd50f15a98b3c
8f90054a9987161f6b011278b0ab9cb107f3d97b0bb21451b2488a2244edf270
04a779da9cc34e893ed3e91b4c2d9a6b21d615064a2da09aa6e372f63336a389
115a5ef0e9607c5165578660e574dddc285b36961185720ef365547f1e8afc83
1148166a9bd0203e795976f8c881ea21892a7a9cdb8a3573d6cf9ce1393be832

Nanocore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NetWire
6d94a0cb105763a3637b4f03e701fe5da74c78a2118c7449bd12716a5ca2a3a5
a180f3cc01325567b2dd11c8a1db94299fcb2a1c5363a1733456d087cc7ecdcd
c654c7db1dce32b11f378395c25b402437c310e06350a196fac925fc7368a8e6
41dbe67f8521046283d43077e26d6fef8a830e94f6ad1b1765dc5056f8d81846
e2ca1d708de42fa96bf9f6b4ae7059af755ad2b694bc91f59b4e696ddf6a81fb

Phishing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Phobos
98242c473a73d281f7bda9249b75eb0275b7605d086c0e6fc6ae92970de1ac2b
610f3e8d40b2af26a9ba06cf8897dc8af95e2d27209fe364d55d8711952466bc

Ransomware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RedLine
1f0942a2eecf4990e027c7d609e319adcf4563f984dd0d8ef2b370a1817f3c1c
b721b7bd732b96647e8603f5beaa7bd1a0ab6f861f525eeaae3927a367d4231e

Remcos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Scam
95ae3c5ee04e1108e4e9f123d6c4bf1a8550d1426c87fd152425d91516a69bbd
b72d1f0873b86d6179979730ec5d963d604bd31d498372bcb7e611f8d23692bd
8619a233d5df18fd136c3985794d87669927fa8315529dc1c17f9df90c4f33aa
b434291a928b6e149ee525493a6599c769e5e59a12d550047ac259660abb5c0d
2f367cc9cdf8f91830934218c8d6ee8e696ce6d861bc2d82200ce268684dfd00
2f7a3ead895957109ae7c9d3f6c7d292258651335b59f884b0d4a5b2afcb9dfc

Snake
2394c4fb7bea229f3842aeb5d70bd61a42b2d93a8ed2054f35dd497370602e43
3a4d839dd867042efff6cc03629ad9a7a4cc6ab55437891161b6fdc48af09cd1
4cd6d8d6f9dfe589520699a6108588b94febff21e4ee904d0c3964c56967ba99
01b4386663c7137bd14cfc0e80f665af5747a3e9f2eaf88677ff4c0c78eb66e1
9a654036705d1183d6d86f20b3124a1c3e03034286391311b66034130f7ed645

Spam
cfba4551a97fb1243a58b9c5a068d58f6057512eec746187f0de819a9c047de7

Unknown Malware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Vjworm
dad9b44c48d3ac1c59c5932e5dab027ed3490837b17fcd309cf8cf88b9e6177b

Xorist
ba38b75c29572b15f436b6592393728081868b61fa59d2b61d414c74e5ca0abe