| 136f43e74a23ebcf… | 136f43e74a23ebcff091527c02ddd9367f2554ac | exe | Cobalt Strike | 2026-10-30 | 698,880 B |
| 49bcc0a6fa25f1d0… | tree.exe | exe | RemcosRAT | 2026-10-26 | 480,768 B |
| 996672367ea46d6a… | Transaction_receipt.pdf | pdf | Action1RMM | 2026-10-19 | 200,249 B |
| 30c22eaa93689bf8… | REMS_document.pdf | pdf | - | 2026-10-11 | 190,697 B |
| ec00d75b13137b4a… | payload_ec00d75b.bin | exe | RemcosRAT | 2026-10-11 | 527,872 B |
| 07be0afdd645d8d0… | 07be0afdd645d8d0f8ccb48fa873932711325412 | ps1 | Cobalt Strike | 2026-10-07 | 1,899,556 B |
| 81883bede526e686… | goopdate.dll | dll | Cobalt Strike | 2026-10-05 | 448,040 B |
| 245f16270bf0dfec… | payment-receipt.pdf | pdf | - | 2026-10-02 | 182,397 B |
| ceb2f87c77c15df3… | Счет на оплату (с печатью) № 54000001584 | bat | RemcosRAT | 2026-10-02 | 5,968 B |
| 3b2d97f6d930500d… | NOTICE OF DOF ADJUSTMENT FOR IMPORT SHIP | exe | PureLogsStealer | 2026-09-23 | 1,900,032 B |
| 763ac38c6373a4d5… | goopdate.dll | dll | Cobalt Strike | 2026-09-21 | 1,128,896 B |
| 5ff753b070e7f442… | 沈阳地铁官方网站运维使用手册v1.4(北京晨阳科技有限公司2023年9月制v1. | exe | CobaltStrike | 2026-09-19 | 3,126,272 B |
| 021d369e92976960… | Kohzan Maru VI Full Vessel Q88.js | js | Formbook | 2026-09-18 | 2,979,542 B |
| 6f9689cece01fe83… | MV_TBN_Order_Quotation_Forms.js | js | Formbook | 2026-09-18 | 2,978,339 B |
| 475cafae4b1b1d04… | 475cafae4b1b1d04e379256333291d72ade6b0a5 | exe | WannaCry | 2026-09-18 | 5,298,176 B |
| 2bdbcfc9e44e0e6a… | swift.gz | zip | GuLoader | 2026-09-18 | 198,248 B |
| dcdf5d22f008a726… | dcdf5d22f008a72622dd1bebf29dcd0652e58296 | exe | Vidar | 2026-09-18 | 97,146,320 B |
| bb235a6362fcfa8c… | bb235a6362fcfa8c29211dd988f114db355a5c50 | exe | Vidar | 2026-09-18 | 14,048,120 B |
| 799a1a163336fe71… | 799a1a163336fe71ae4d743a4e1547b9bf2b7112 | exe | Vidar | 2026-09-18 | 13,631,888 B |
| 3d995f67024ab528… | 3d995f67024ab5280cff8f7dc1e67048ab972281 | ps1 | Vidar | 2026-09-18 | 1,333,523 B |
| 85a9b1a98c80d9c6… | coolgame_v1.0(1)_src_mod.apk | apk | - | 2026-09-17 | 37,592 B |
| 0e0f6e98af559b30… | Overexposure.apk | apk | - | 2026-09-17 | 9,073,867 B |
| 47adbabec4dff267… | service.bat | bat | SalatStealer | 2026-09-17 | 4,840,957 B |
| 7d6c3f77636fb571… | ORDER-20768-0037868.PDF.vbs | vbs | Formbook | 2026-09-17 | 1,107,878 B |
| 1ab3fa7d48ee9d14… | DOC-20260912MT.vbs | vbs | PureLogsStealer | 2026-09-17 | 1,482,839 B |
| 63f487269964719d… | holiday itinerary.vbs | vbs | - | 2026-09-17 | 23,141 B |
| 9be70fef03d307ec… | PETRONAS MALAYSIA SDN BHD PURCHASE ORDER | vbs | Formbook | 2026-09-17 | 25,225 B |
| 4e3af6e4126a5d84… | ТОО «Saruzhan KZ»_Order_180094817092026_ | vbs | LxBaseRAT | 2026-09-17 | 372,046 B |
| 852d3f10c8d6324a… | ΑΠΟΔΕΙΞΗ ΠΑΡΑΔΟΣΗΣ.vbs | vbs | LxBaseRAT | 2026-09-17 | 3,009,724 B |
| 1012987856fdaab4… | INVOICE#R09.vbs | vbs | AgentTesla | 2026-09-17 | 661,324 B |
| 7008af80cb565d40… | Kohzan Maru VI Vessel Q88.js | js | Formbook | 2026-09-17 | 20,951 B |
| 976f547b6edc855f… | Indent_MT26_075_Enquiry.js | js | PureLogsStealer | 2026-09-17 | 1,463,097 B |
| 1099d8ba66e80ba3… | new order.JS | js | Formbook | 2026-09-17 | 4,423,081 B |
| 3be4462c1ca1e51e… | PO230824312.js | js | pure | 2026-09-17 | 1,496,692 B |
| 6cda99ba17354145… | New offer 26P6011.js | js | PureLogsStealer | 2026-09-17 | 1,502,468 B |
| dbbea98a875d8b00… | New Quote PO 2000304.js | js | PureLogsStealer | 2026-09-17 | 1,499,019 B |
| 38d037df5a3fc9ef… | New offer quotes.js | js | PureLogsStealer | 2026-09-17 | 1,499,727 B |
| c0ba4d34a9b0e22f… | AAZORDER321202026pdf.js | js | Formbook | 2026-09-17 | 19,398 B |
| 107baac2ac087027… | RFQ.js | js | VIPKeylogger | 2026-09-17 | 14,156 B |
| 2943117df1a7efc5… | Advance Payment Transfer Confirmation.js | js | VIPKeylogger | 2026-09-17 | 1,289,704 B |
| 731602ae86c944ed… | Olvera HSBC Payment Confirmation Copy.js | js | - | 2026-09-17 | 21,273 B |
| 0ba40408b9f9d72e… | 8700003811_MGK_DEL2_pdf.js | js | PureLogsStealer | 2026-09-17 | 1,463,821 B |
| 1e934d796c27c341… | Chase Bank_Payment Advice.pdf.js | js | SiriusRAT | 2026-09-17 | 63,368 B |
| fafa9cbe0d7978f1… | NO-09809-PO-00890-MSN068-QTN-0698-2026.J | js | VIPKeylogger | 2026-09-17 | 4,321,539 B |
| 44517b774f4ecd71… | Purchase Order_4500360267.js | js | Formbook | 2026-09-17 | 3,102,637 B |
| ec70073fc284bb7c… | PO-101105.JS | js | PhantomStealer | 2026-09-17 | 4,891,995 B |
| fff43954a72b8803… | Request for quote- NC-0263-H26-2568-1.JS | js | AgentTesla | 2026-09-17 | 4,210,493 B |
| ef17f4314016eaee… | ricevuta di bonifico bancario.JS | js | AgentTesla | 2026-09-17 | 4,208,677 B |
| 9a690d59b2d84279… | IRICO -- INV IN-7016-D-003 pdf.JS | js | Formbook | 2026-09-17 | 4,410,347 B |
| b40d6bff5d7ec938… | purchase order.js | js | RemcosRAT | 2026-09-17 | 1,691,467 B |