| SHA256 | Name | Type | Signature / Family | First Seen | Size |
|---|---|---|---|---|---|
| dd1ad88c179c424c… | IMage31-08-2026-cotizacion_114040_png.vb | vbs | RemcosRAT | 2026-09-01 | 142,796 B |
| ea8ea9ca27df40a6… | Booking180023png.vbs | vbs | Formbook | 2026-08-26 | 26,154 B |
| f0d9b7b035a8d760… | Booking-77380893png.vbs | vbs | Formbook | 2026-08-26 | 26,242 B |
| 8c30be78e53a882b… | Thông báo hàng đến của KMTC.PNG.js | js | HypeAgent | 2026-08-22 | 2,097,826 B |
| 5174ee9a27dfb547… | Commercial Invoice and PL#ZC00170.PNG | exe | XWorm | 2026-04-06 | 1,077,760 B |
| c62a9df821108cbe… | IMG-456377701.png.lnk | lnk | Stealc | 2026-03-11 | 1,549 B |
| b8a1bbd67a97c7be… | 3333.png.lnk.d | lnk | DarkGate | 2024-12-15 | 127,644 B |
| b230dfad1077e1b8… | PO-1021202416777 PNG2023-W111.xls | xls | - | 2024-10-21 | 868,352 B |
| f35c3de4c30d3e46… | PO-1018202416777 PNG2023-W101.xls | xls | - | 2024-10-18 | 868,864 B |
| 6799222df869a644… | header.png | unknown | DarkGate | 2024-05-17 | 2,328 B |
| f6dc3dc76e0d6e8d… | uwp4228677.png | unknown | RemcosRAT | 2024-01-15 | 18,594,320 B |
| 9f93bcbccee4e4ec… | runsysclean.png | exe | DarkGate | 2023-12-13 | 1,248,256 B |
| fae85ad14e4729c1… | cleanhelper.png | exe | DarkGate | 2023-12-13 | 2,702,592 B |
| 5fa94e852853df80… | legacy_l1.png | exe | DarkGate | 2023-12-13 | 496,640 B |
| c054520056949675… | qr.png | exe | CobaltStrike | 2023-07-21 | 2,730,664 B |
| 3ed2e75343ea0e5c… | 1210.png | exe | IcedID | 2023-06-23 | 712,736 B |
| 3ffc3c329ace3bf6… | 6419861983e7f.png | dll | Gozi | 2023-03-21 | 222,208 B |
| 17c84d77f79954ac… | 95.png | exe | IcedID | 2023-02-15 | 230,400 B |
| 2b317f6a1ffc33b3… | twain.png | exe | IcedID | 2023-02-14 | 171,008 B |
| 66241149fd6ac0ec… | apple.png.jpg | exe | IcedID | 2023-02-08 | 329,728 B |
| fbad60002286599c… | view.png.dll | exe | IcedID | 2023-02-03 | 297,984 B |
| 769cc60e51053a6f… | subtract_lost.png | exe | IcedID | 2022-11-16 | 97,792 B |
| 8104c9434708bb35… | more_still.png | exe | IcedID | 2022-11-10 | 84,480 B |
| 16f10dfa9fa85bb5… | templates624.png | exe | IcedID | 2022-11-09 | 67,072 B |
| e12a5c08a22c344f… | templates017.png | exe | IcedID | 2022-11-09 | 67,072 B |
| 6034615ebc1377cf… | river_very.png | exe | IcedID | 2022-11-09 | 84,480 B |
| e71772b0518fa9bc… | templates544.png | exe | IcedID | 2022-11-01 | 206,848 B |
| 1ec5dfb86a21e515… | templates101.png | exe | IcedID | 2022-10-31 | 206,848 B |
| dcdd26ab83a2a029… | templates070.png | exe | IcedID | 2022-10-31 | 206,848 B |
| 7a3f55d285e3520a… | templates078.png | exe | IcedID | 2022-10-31 | 206,848 B |
| 2291b8f51d493e73… | templates677.png | exe | IcedID | 2022-10-25 | 214,528 B |
| 9c21cf92159d8049… | 2cb02275-b3dd-422b-8734-1bdf2a220d00.png | unknown | IcedID | 2022-10-08 | 983,715 B |
| d7a1a28ccdc7c41a… | Gmdet.png.dll | dll | zgRAT | 2022-02-17 | 647,168 B |
| fa668d1a58b3b92d… | 6.png | exe | Gozi | 2021-12-14 | 1,781,920 B |
| 3e0b749221c4c89b… | yellowtank.png | dll | TrickBot | 2021-12-09 | 1,821,184 B |
| a35096dbb8b3f3bb… | yellowtank.png | dll | TrickBot | 2021-12-09 | 2,215,936 B |
| 09487d34e30a980b… | roben.png | dll | TrickBot | 2021-12-09 | 419,840 B |
| 4b88762a26c962cc… | panther.png | dll | TrickBot | 2021-12-09 | 2,023,424 B |
| 8bcfddc163b1eab5… | roben.png | dll | TrickBot | 2021-12-07 | 1,865,728 B |
| b88341c4bb9c3f3c… | roben.png | dll | TrickBot | 2021-12-07 | 1,741,824 B |
| 0e7bb37239f9267b… | roben.png | dll | TrickBot | 2021-12-07 | 1,813,504 B |
| 922887fb6a1c30bf… | roben.png | dll | TrickBot | 2021-12-07 | 1,865,728 B |
| 48d6dd14a8dfe178… | roben.png | dll | TrickBot | 2021-12-07 | 1,784,832 B |
| 07ab5f83e68abc1a… | sohio.png.dll | dll | TrickBot | 2021-11-19 | 440,320 B |
| 19f0c6a50f5c4fc4… | soccer.png.dll | dll | TrickBot | 2021-11-08 | 684,544 B |
| 41c22efc0cbeb340… | esmallruby.png | exe | TrickBot | 2021-10-26 | 675,883 B |
| a844f4b4cd3aa66b… | eflyairplane.png | exe | TrickBot | 2021-10-26 | 675,883 B |
| 65234c8a08c9a5e2… | subzero.png.dll | dll | TrickBot | 2021-10-21 | 723,456 B |
| 968a796e04e6cf1e… | aredplane.png | dll | TrickBot | 2021-10-19 | 602,112 B |
| 14da4c490e00343f… | redplane.png | dll | TrickBot | 2021-10-14 | 704,512 B |