| 61fc6b901be86d15… | Fabrika Sipariş.vbs | vbs | AsyncRAT | 2026-06-04 | 2,337,927 B |
| 075719f16c7819c5… | SAP-Ariba_ADNOC_CONTRACT_PDF.vbs | vbs | Formbook | 2026-06-04 | 418,396 B |
| 59dd87e52bca0e8e… | Payment.vbs | vbs | Formbook | 2026-06-04 | 28,466 B |
| ec58532e72b95a30… | INV __3838494kH5.vbs | vbs | LxBaseRAT | 2026-06-04 | 960,564 B |
| 74d799fc4c37d42c… | ssds.vbs | vbs | - | 2026-06-04 | 6,025 B |
| bc5c060f306d5218… | MOM_270526_xls 附件副本.vbs | vbs | Formbook | 2026-06-04 | 435,216 B |
| f7e70f307fd5783e… | Nemertina.vbs | vbs | RemcosRAT | 2026-06-04 | 52,567 B |
| f370243b089cf67f… | TT_Slip_SOA_Proforma Invoices.vbs | vbs | RemcosRAT | 2026-06-04 | 52,618 B |
| 6a2190283ef6a158… | SCANDOC24626.vbs | vbs | PhantomStealer | 2026-06-04 | 446,394 B |
| 4491fb5046f84845… | บันทึกพนักงาน.vbs | vbs | RemcosRAT | 2026-06-04 | 52,708 B |
| 429fd292d096a748… | PO_328-EWP-PO-06-2026_CBG-30AV_320039.vb | vbs | RemcosRAT | 2026-06-04 | 53,398 B |
| eec8491acfc02dd2… | Performance Report_0526_pdf.vbs | vbs | RemcosRAT | 2026-06-04 | 52,370 B |
| 7215aa95a56d3f2d… | spx.vbs | vbs | - | 2026-06-04 | 5,493 B |
| fb8c4861812dc07c… | Purchase Order PI TP1026230 CBB237.vbs | vbs | Formbook | 2026-06-04 | 15,802,814 B |
| d451229055d8e537… | Komercijalna Banka_копија за плаќање.pdf | vbs | SiriusRAT | 2026-06-04 | 18,576 B |
| 3d57334d08deff6d… | SCAN DOC LOI.r00 | r00 | RemcosRAT | 2026-06-04 | 1,295,510 B |
| 3a331a98cf9fcb2e… | 3a331a98cf9fcb2e15602dec26a697fefeda72ba | exe | WannaCry | 2026-06-04 | 5,298,176 B |
| 07fcef11cdf612ab… | 07fcef11cdf612ab33d9658f154170c387dfa8a1 | exe | WannaCry | 2026-06-04 | 5,298,176 B |
| 0bb63b72fee64376… | payment. 001 11436-06-03-2026.bat | exe | XWorm | 2026-06-04 | 715,264 B |
| 2c9b3c39034f9482… | payment. 001 774326.pdf..bat | exe | XWorm | 2026-06-04 | 878,592 B |
| 68af66991e125976… | payment. 001 224326.pdf.bat | exe | XWorm | 2026-06-04 | 820,736 B |
| 288e9320f7582f38… | SCAN 654HG - TYS SG _ pdf.JS | js | XWorm | 2026-06-04 | 3,668,552 B |
| ea84300a2c850020… | PO-09609-MQ-0975-QN-0970-200MM-0850-06-2 | js | XWorm | 2026-06-04 | 3,652,168 B |
| 4ac28f1f5fe3915b… | ifghellas_Scan.JS | js | XWorm | 2026-06-04 | 3,655,806 B |
| aeb4249cb76547ea… | IBHGD0987656789.exe | exe | XWorm | 2026-06-04 | 426,256 B |
| f7db794e7c5dc2bd… | Xeno.exe | exe | XWorm | 2026-06-04 | 10,485,760 B |
| c26f22caecd48f50… | PI04062026.js | js | XWorm | 2026-06-04 | 2,596,715 B |
| 5f45b1ee165a750c… | Sipariş - 05.04.2026.vbs | vbs | XWorm | 2026-06-04 | 2,529,521 B |
| 05e4bdd4b6514b10… | Request-for-Quotation.js | js | GuLoader | 2026-06-04 | 96,766 B |
| 5db322d8b86e975d… | pg.js | js | GuLoader | 2026-06-04 | 238,234 B |
| 056f7a2e002038fe… | file | exe | Amadey | 2026-06-04 | 11,651,964 B |
| f325e0c933afbda8… | script.ps1 | ps1 | ZuqraStealer | 2026-06-03 | 150 B |
| ab47c8073a579da8… | o | ps1 | KongTuke | 2026-06-03 | 6,261 B |
| 2491deb9264542ee… | main.ps1 | ps1 | - | 2026-06-03 | 6,190 B |
| 2bb3dc52c88743b3… | sample.ps1 | ps1 | - | 2026-06-03 | 1,835 B |
| 42a0b1752f57806d… | ROVATTI_OFF26IT00100673_030226.vbs | vbs | RemcosRAT | 2026-06-03 | 1,951,546 B |
| a903a9e5f6755981… | files_court.vbs | vbs | - | 2026-06-03 | 36,721 B |
| bb7d8002440edff5… | bb7d8002440edff52c3f1dc91926e3e5deac49fd | exe | WannaCry | 2026-06-03 | 5,298,176 B |
| d008976e319219ff… | d008976e319219ff3b046c9d6adf90a3784d681f | exe | WannaCry | 2026-06-03 | 5,298,176 B |
| a276e317c0e08cd0… | a276e317c0e08cd0190ec82f57b57089d8e6eaec | exe | WannaCry | 2026-06-03 | 5,298,176 B |
| 3a7ad1f4cc13618f… | 3a7ad1f4cc13618fb549375990cf3cb3581eec29 | exe | WannaCry | 2026-06-03 | 5,298,176 B |
| ef3f1c6150cde264… | ef3f1c6150cde264cbb33e2bfcaffa7960e53b7d | exe | WannaCry | 2026-06-03 | 5,298,176 B |
| d5a8f6f69e9da3b2… | d5a8f6f69e9da3b280b599ec3834b95aff7675c0 | exe | WannaCry | 2026-06-03 | 5,298,176 B |
| e6214ec3dc86e8aa… | xe6214ec3dc86e8aa709720e5fedaee79fd70b8d | exe | XWorm | 2026-06-03 | 4,166,656 B |
| b31714535f67657f… | QUOTATION_BISCO_0581 A105N MF471.pdf(983 | exe | XWorm | 2026-06-03 | 1,082,880 B |
| 2fe59a0eaf50f083… | June 03062026.exe | exe | GuLoader | 2026-06-03 | 292,592 B |
| 918eb87af81e9270… | inat-box-v15.apk | apk | - | 2026-06-02 | 19,192,343 B |
| 25c74fd8b9497b40… | Impostum.bat | bat | RemcosRAT | 2026-06-02 | 4,209 B |
| 9c45728ef269de5f… | Construcciones_CAMSA_S.L._REQ2060026.bat | bat | VIPKeylogger | 2026-06-02 | 4,233 B |
| d0b4afda9fdb84d9… | file | bat | - | 2026-06-02 | 8,883 B |