Daily IoCs for 2021-04-14

################################################################
#                     IOCs (@RedBeardIOCs)                     #
################################################################
#                                                              #
#     Date:    2021-04-14                                      #
#     Total:    145 samples                                    #
#     Stats:                                                   #
#              - AgentTesla: 24                                #
#              - AsyncRAT: 6                                   #
#              - Azorult: 1                                    #
#              - Ficker: 1                                     #
#              - FormBook: 13                                  #
#              - Lokibot: 3                                    #
#              - Makop: 3                                      #
#              - Nanocore: 4                                   #
#              - NetWire: 3                                    #
#              - Phishing: 5                                   #
#              - Ragnarok: 2                                   #
#              - Ransomware: 3                                 #
#              - Remcos: 2                                     #
#              - Snake: 5                                      #
#              - Trojan: 2                                     #
#              - Unknown Malware: 20                           #
#              - Wannacry: 44                                  #
#              - WastedLocker: 1                               #
#              - Xmrig: 3                                      #
#                                                              #
################################################################


AgentTesla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AsyncRAT
985192a385a7af12757aefba56ece922e6e9f42f66968c88e403911169062f2b
8fcbc9107e8b5c1d96fafa754d05b8230f0ed660381d930f215d04e909fc6065
adda179263e7be02da87bf6d32fba4600f1e1d760d94232f4b346cac638cde53
e70f979d76b4d9c5fa3491b4f1bae514aa410f2f67cf3c61c937b466a3c1684f
023c7a0c9ed1add9423b651f25364cf4950b0e844853794bcbc1698bf2405879
dc6b0f0b7d3069d32345cc25dc0b33ee4a803f293c21d0b9a593fd53a0161b8e

Azorult
d5a7b27699a473bee566a2bfa88086565d67c4b0d582a839e449368d6fb4e0b5

Ficker
e6dd0ba5204967e8d45149f3ae50d28707e314e88f0744b725bd16ed0e6e0a48

FormBook
a8f1fa1b80fda001331fc4cc87470e189c55653ac5d486e6bf3de72720187022
779472f7e90f21867f49b117bc1317eb85ec0e1d54b85d4734883d7ee58d421b
75207a57f52f13f7147cef28385e857e910efde97558694525f636622fad8fbd
0d08b54442ca31c8e6efd08954f3e1ad3a0246ce4d4dcff6a41e3e87e25b1029
3a7994df6e69118ca5778366f7dbf26e37430d3b9d20a163ace830e5a1971ce9
1dee59cf62b44cd513ab3ddf71998d6593fe955bb39839aa169d7838a36fa68e
0f86d37e745368f3cd3c337b106228df4f0c48157ee44f8c836c34e985a3d51d
82283c1650cab1beb9be275611497f64362929c707f90f0649cbe986d2d5aac5
b5d8a24e97905a0333243481930777008b654c43dd04bbf995d75334183c8070
b2cba55143c23a1a0530cfddcaac25071cd343b565e192a3fb9023aa1e8d9ccc
4b19000b7e3d4b103fcb2c7be4fe4ca0a18f810a67b1f290e0416e0ebc8ae1b2
b3ea4e157f7722523ec5e1d805d44d4d6b08147d28a7276b56597b81bf8e6c53
39845ed843d294b766d7160c7b6bb765fc1b948efb60fd15e94cdf5f9e0e1382

Lokibot
8e96e3c97ff4dc19cacf26b6bab73c6330d5dcc96a7a094fa1c2e5005b75c9f5
63b795caa8ff26d971a08bf7ed0a6f033ea91f15ecafcdc14d5ff14d414ec5c7
e08ce97516361b9f513ddae199ac1a95761d9f7b327d78ba64e9090e0f80e8c9

Makop
15a156b78d960668cd5bad72884872f3c99b711ceec7841fdec5d073d5a95a98
f4d0047069d15d13e2ee696885cfb3982088caa7606337f65e649f37a1489954
8d424fe15726814917d0cb1ba5e7b7265ba0593fde6a24596a49251937e6c6fc

Nanocore
18b113ff17d7a5947ec4a7ad8cb23aff6cd96488d33919fc92fde6dc4f731a4d
e90ac6e88eb290c21bfa05980928a0d50b94b6f29c8e54acf6fb3dbae1dbae39
1d3fa8b545822ad6652b2d7255db2460e1ec4d592ebf788ad6a6174e90ca725b
622f56c1b78be8b51b7fc3134b845abccbf0a0557f70f3145ac8651454236233

NetWire
16fc50c5d5b5419d2a3244294c7d6a77087edca488ec63146b573b31f1526809
20a728ce6d005a7e6d451645c75da3c6c3a50d847ea1d6c638a8d153aa580797
3e4d51c93e584902549b54e3b22595a4f78a87a9eb4648be7af3b5cc6a682078

Phishing
96bc461fffb568e590bf5d8f3ee15691c36a897de112e50e1982850230577185
e7dec8bbd500f4ee85567c6d675ff5d07c5caf5d50ae97c94ab80f398e2f601c
904aea127ea9bde456a142128bd5b4dc557da69fe46b975e17d4e296c445d8f5
7f6747f539daa8e6bc1a6ec58482aa9c628d2beef3cee5c82f509a3663306045
bca5d13665426a11841bd2f57a6fbf7caf480e19876f9c2a0131b837cccb77a6

Ragnarok
d65c5342abfbee005a58eee1a15f4666dd54a8d3e7c2d85591da31f31b757448
467be4279ce6d4a973aa79eae37ad09174b79c5eb48c03093c9a52a4bd04d092

Ransomware
541954eb1b04ec0973fee8ff1006857f358b499c4927e3e652c81a200accb6e3
0503d2ec3f8e4b25a6ed6c1923dd12adc7a0c4c38965d8aa782a34269071a96c
acaff4359db07784f208dd818fccffaa33afbb9e9e432c7b85965e7b8c5833e5

Remcos
3cfe04e045b4db52643fafe53e32e7024779235ed726ffdd4c000a3842b4074e
834b0b3a58344c14b3ece4bfc12eb71f53f17a1eebc76c97470a25e57b723dd6

Snake
1c7e26dd49cfed48aaadd9ecf80e8ead7aa179f4c50a226505cd855a5cd62dd7
8c2335608b726ce1d430ae88fff8366500fbd86becb6e1c08e4be800aa59658a
f27c6d23143bb1c0ea77515c806ee7d75889c31262c7c26a5868989fef41e466
3177deca419e6d85aee93bf244d5a847ae559ff607a2297a1a1c84c0dbb32c91
89d440a4a03bba2cb5c8bba7c4f7a9f069f7dfc37c83112cb274f84d85b23c68

Trojan
fe8d19b219e7ea3cf17d747932ecba2a45ca5fe0573870f7f0fe31c7726b074c
4cdbd105ab8117620731630f8f89eb2e6110dbf6341df43712a0ec9837c5a9be

Unknown Malware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Wannacry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WastedLocker
25c329ce75574a689af8c2e6e6687891581d6ca8937e3cb0e907f901456d25ba

Xmrig
9e35d403dd038e55a08b39fbd39b9326d2b997a436dd794b1d57eeafa4d3e822
52f130105d1a14e05840269397c0504127ba7a3fbce33be734eb2ce4c2cb95ce
1d9e2f10196ba34f3b7c5cc6e24c306fb401f8c63ea122fbc6d2c448226c576f