| 7382055280697248… | SOA.js | js | RemcosRAT | 2026-08-27 | 5,119,521 B |
| 4727cb5c0619c876… | HSBC PAYMENT RECEIPT MT103.js | js | Formbook | 2026-08-27 | 589,862 B |
| bb09baf5e11397e9… | AUGUST64_Maxima_International_Sourcing.j | js | RemcosRAT | 2026-08-27 | 1,110,083 B |
| 1c40688fb64c0a7c… | Request For Quotation.js | js | STRRAT | 2026-08-27 | 849,496 B |
| c3433cf9e999115b… | task.js | js | RemcosRAT | 2026-08-27 | 909,951 B |
| ebe55ff8fe1a36f2… | RFQ-20172512-gpi_waleedece - Copy.js | js | PhantomStealer | 2026-08-27 | 850,210 B |
| e26a447d2ecab16a… | ORDER#1011111.js | js | - | 2026-08-27 | 615,402 B |
| 958feb8e1b732720… | Dekont_20260827.js | js | AsyncRAT | 2026-08-27 | 378,265 B |
| bd488dd4dfefd3d4… | PARTICULARS_MV XIN HAI TONG 17.pdf.js | js | RemcosRAT | 2026-08-27 | 617,306 B |
| f51ee8992890be1a… | Doc.NOC-14022026-2077.js | js | HypeAgent | 2026-08-27 | 594,948 B |
| 0a19c18f55157df9… | AWWWWWB.js | js | - | 2026-08-27 | 611,820 B |
| 00a21e0dc9595049… | Invoice_796550.js | js | RemcosRAT | 2026-08-27 | 5,119,825 B |
| 95e6b45ebdcef03b… | Purchase Order.js | js | RemcosRAT | 2026-08-27 | 5,119,521 B |
| d0353bea1459160d… | PO230824312.js | js | PureLogsStealer | 2026-08-27 | 801,815 B |
| ccf527c09d04c4a3… | Price and lead time.JS | js | PhantomStealer | 2026-08-27 | 4,756,643 B |
| d6950a3d5af7529b… | Invoice_700594.js | js | RemcosRAT | 2026-08-27 | 5,119,485 B |
| 270fb59e1c8c8bd7… | ma.js | js | - | 2026-08-27 | 91,896 B |
| bde14c634f785ba4… | FedEx_AWB_.zip | zip | RemcosRAT | 2026-08-27 | 1,596,712 B |
| d1303941d2d3f6d1… | RFQ-SW10-321313.PDF.exe | exe | njrat | 2026-08-27 | 774,144 B |
| 368fda9d9000cba7… | RFQ-SW10-321313.vbs | vbs | njrat | 2026-08-27 | 605,335 B |
| 6f0f3928fa60d3d5… | 6f0f3928fa60d3d51e7fa1cedc94df4ec0b41d7a | exe | WannaCry | 2026-08-27 | 5,298,176 B |
| b66e79437c28bbb5… | confirmación de pago.js | js | XWorm | 2026-08-27 | 37,186,034 B |
| 3a7d3c12127e6ee4… | ORDEN DE COMPRA COPR0008041 LANCETAHG.js | js | XWorm | 2026-08-27 | 215,831 B |
| d32a7182a7dc9c21… | Reckless Driver photos Cam7 August 27 20 | js | XWorm | 2026-08-27 | 3,473,811 B |
| 0dfafc97bea52c09… | inv-2026-06.PDF.vbs | vbs | XWorm | 2026-08-27 | 616,527 B |
| a8971bb7e206506c… | Orden de compra.js | js | XWorm | 2026-08-27 | 610,178 B |
| b8333cb31310f8c5… | 20198d6aec9208e85f2411b054f3f306.exe | exe | Stealc | 2026-08-27 | 648,229 B |
| bd272ade65982548… | d71d6dc27d6a6ebb77b89f4c4d9916d5.exe | exe | Stealc | 2026-08-27 | 648,192 B |
| 3af1c09640d195f2… | file | exe | Stealc | 2026-08-27 | 3,403,200 B |
| f4fe3bd9512f1c6f… | file | exe | Stealc | 2026-08-27 | 9,300,840 B |
| ca9cf0a1f42a5b3b… | a85185758e34f35cd9012e9ba0fe30fd.exe | exe | Vidar | 2026-08-27 | 8,852,992 B |
| f954e919fc4b906f… | f954e919fc4b906fb7349cb7c4b3136486b60a68 | exe | Vidar | 2026-08-27 | 93,137,520 B |
| 9a11217533bdc294… | 9a11217533bdc294eac8a2a8182bcdd1bce2cdce | exe | Vidar | 2026-08-27 | 4,553,232 B |
| 7f92cb942b0f9da8… | 7f92cb942b0f9da8e0b3c7787fbfb83847115dde | exe | Vidar | 2026-08-27 | 3,667,440 B |
| 6345a7106ac6d329… | 6345a7106ac6d329643cd620eca5ac174f9aa659 | exe | Vidar | 2026-08-27 | 4,712,976 B |
| e6cc428cccc9aae9… | mpclient.dll | exe | Vidar | 2026-08-27 | 4,778,568 B |
| a8336d1223525123… | a8336d122352512323454e9fd24d9a7bcc096f79 | exe | Vidar | 2026-08-27 | 4,074,928 B |
| a1bde6f032dc7452… | a1bde6f032dc7452a8e447e9750a3b14a1e5c7e3 | exe | Vidar | 2026-08-27 | 5,000,803 B |
| 67ef2b5d6a41473c… | oke.vbs | vbs | - | 2026-08-26 | 1,013,334 B |
| f0d9b7b035a8d760… | Booking-77380893png.vbs | vbs | Formbook | 2026-08-26 | 26,242 B |
| ae8874e0c30be45c… | RFQ-2026-08-26-000952.vbs | vbs | - | 2026-08-26 | 26,306,186 B |
| 4ce3a97fe737c206… | 1466520643274.vbs | vbs | - | 2026-08-26 | 26,311,178 B |
| 2a44b6d6e3854532… | RQF1025133.vbs | vbs | - | 2026-08-26 | 24,136 B |
| 1f9eb3087aa6a443… | PO-000191 Shipment Swift.JS | js | AgentTesla | 2026-08-26 | 4,229,291 B |
| f7b927f2bb0ad3c3… | NEW ORDER.js | js | Formbook | 2026-08-26 | 3,099,884 B |
| e3965509664cf5c4… | MT103payment_from our customer.js | js | AgentTesla | 2026-08-26 | 600,406 B |
| 4217ded01472e61a… | Transferencia 24 Agosto 2026.js | js | LxBaseRAT | 2026-08-26 | 2,468,067 B |
| fab4dd056d32a185… | Faktura 33364379 - 25.08.2026_pdf.js | js | PhantomGate | 2026-08-26 | 75,979 B |
| 2762060d8d969389… | RFQ_Request For Quote - BMR0825026-PDF.J | js | Formbook | 2026-08-26 | 4,190,843 B |
| f68ef6e15f326e24… | payment-pdf.JS | js | AgentTesla | 2026-08-26 | 4,229,291 B |