| 4aac943dcb338f2a… | Payment Invoices.pdf.JS | js | AgentTesla | 2026-08-13 | 3,023,678 B |
| 1e17f7e1abf637c2… | SCANNED_DOCUMENT_HSBC CUSTOMER_PAYMENT_C | js | Formbook | 2026-08-12 | 3,105,771 B |
| fa7d31402f065f56… | Invoice Payment.vbs | vbs | AgentTesla | 2026-08-11 | 43,465 B |
| d1e92aca80c9beb0… | PAYMENT FOR SOA MAY JUNE JULY 2026.js | js | AveMariaRAT | 2026-08-11 | 77,409 B |
| 9dadc0f51d399365… | USD 42,480,25 Payment Receipt & SOA. | js | RemcosRAT | 2026-08-11 | 551,354 B |
| a66979f3bd65f8c8… | Ziraat Bankasi Payment Confirmation Copy | js | Formbook | 2026-08-11 | 6,181,097 B |
| c1e66135ab5b78d1… | Payment Slip9570-6758636.xls | xls | - | 2026-08-10 | 875,008 B |
| 7e8b04a5331275ab… | WIRE PAYMENT.xls | xls | - | 2026-08-07 | 1,227,264 B |
| b859ddd19d5d8da1… | Payment Slip-01.js | js | XWorm | 2026-08-06 | 1,077,745 B |
| c4fa09a189a835b2… | Payment-959329497.vbs | vbs | HypeAgent | 2026-08-05 | 25,991,296 B |
| ffaf92bc6677ccf4… | BANK DETAILS FOR PAYMENT.js | js | njrat | 2026-08-05 | 1,133,178 B |
| 912667faa8f9502a… | BANK DETAILS FOR PAYMENT.vbs | vbs | njrat | 2026-08-05 | 956,238 B |
| e4fe1cc359050cba… | 05-08- Payments-02.js | js | XWorm | 2026-08-05 | 1,049,236 B |
| db52832d1e67ce8a… | 05-08- Payments-01.js | js | XWorm | 2026-08-05 | 1,111,342 B |
| 034079b6594e0a5b… | Payment Advice 05082026.js | js | GuLoader | 2026-08-05 | 1,174,714 B |
| dc695ef912e9d06b… | Payment-Receipt.js | js | XWorm | 2026-08-04 | 209,703 B |
| 3ca553dfb5611a67… | Swift_Advice_payment_copy.pdf.bat | bat | Formbook | 2026-07-24 | 4,941 B |
| 577728d97e6e56ff… | z1INV_PAYMENT.vbs | vbs | - | 2026-07-24 | 38,911 B |
| 670063d3c24ab664… | PaymentXAdviceX-XAdviceXRefXXA2sv8yynp3x | rar | XWorm | 2026-07-24 | 885,168 B |
| 0d77bc9108d75148… | SOA AND CONFIRMATION OF OUTSTANDING PAYM | vbs | RemcosRAT | 2026-07-23 | 45,001 B |
| 3d24c75606bfa91b… | z1PaymentIssue07_20_26.vbs | vbs | XWorm | 2026-07-22 | 1,143,344 B |
| 09edc26a67787082… | Payment Advice - Advice Ref [A2sv8yynp3x | js | XWorm | 2026-07-22 | 2,607,095 B |
| d9a93a5a89a6ad4d… | CITI-Payment-Swifft-0009488938839-PDF.vb | vbs | RemcosRAT | 2026-07-20 | 45,536 B |
| 2624abf75eb9ebb0… | z82INVOICEPAYMENTS-23JULY2026.vbs | vbs | njrat | 2026-07-20 | 1,149,778 B |
| 80571d10fe416a63… | payment_0026 7514378.DOC | exe | XWorm | 2026-07-20 | 933,376 B |
| cfdc3020b0b705fe… | Payment Slip - Ref #8922.vbs | vbs | LxBaseRAT | 2026-07-16 | 1,749,335 B |
| ed2589d688255e2e… | payment Notice.js | js | XWorm | 2026-07-16 | 1,566,561 B |
| 122ea2e5316fd4d1… | Payment Notification - Ref #8922.vbs | vbs | LxBaseRAT | 2026-07-15 | 1,754,181 B |
| fb39d3b564103e08… | proof of payment.js | js | XWorm | 2026-07-15 | 1,636,909 B |
| 29dc8542e97e280e… | Proof of payment.js | js | XWorm | 2026-07-14 | 2,024,585 B |
| 64da4c1638c0e1a6… | rpayment_00267514376.bat | exe | njrat | 2026-07-13 | 1,005,568 B |
| 28e36507780c6c17… | npayment_0026_7514376.tar | tar | XWorm | 2026-07-13 | 821,054 B |
| 24d107d2614fc2b4… | PDF_INVOICE_893458548_PAYMENT.vbs | vbs | Formbook | 2026-07-11 | 1,280,207 B |
| 345f1a469766e833… | Payment_Advice.vbs | vbs | PhantomStealer | 2026-07-09 | 18,940 B |
| 905eb7ffdcfdf6d0… | InvoicePayment_Pdf.JS | js | XWorm | 2026-07-09 | 2,402,124 B |
| d9460d9ceadf0347… | ADCB_PAYMENT_COPY_PDF.bat | bat | Formbook | 2026-06-26 | 189,013 B |
| d9370a3a85d27b86… | SOA Payment Advice.vbs | vbs | AsyncRAT | 2026-06-17 | 2,196,941 B |
| 317f37073783fad9… | Payment Slip.xls | xls | RemcosRAT | 2026-06-15 | 475,136 B |
| e8475cc9b309e3c1… | 0000154364X-XPaymentXAdviceXNoteXfromX10 | xls | RemcosRAT | 2026-06-12 | 779,264 B |
| dece042526daa8ea… | INVOICE-PAYMENT ADVICE.vbs | vbs | Formbook | 2026-06-10 | 409,264 B |
| b09c4b720472ee2f… | payment. 001 11436-06-03-2026.bat | exe | RemcosRAT | 2026-06-04 | 869,888 B |
| 59dd87e52bca0e8e… | Payment.vbs | vbs | Formbook | 2026-06-04 | 28,466 B |
| 0bb63b72fee64376… | payment. 001 11436-06-03-2026.bat | exe | XWorm | 2026-06-04 | 715,264 B |
| 2c9b3c39034f9482… | payment. 001 774326.pdf..bat | exe | XWorm | 2026-06-04 | 878,592 B |
| 68af66991e125976… | payment. 001 224326.pdf.bat | exe | XWorm | 2026-06-04 | 820,736 B |
| 557d94a595dfd264… | Payment_Advice.xls | xls | - | 2026-05-28 | 564,224 B |
| 6a4d41d28e552bb1… | HSBC - Payment Advice_Ref[A2kBUN7v7eYE]_ | vbs | XWorm | 2026-05-27 | 2,893,955 B |
| 4a2e412c63653810… | Payment_USD.vbs | vbs | RemcosRAT | 2026-05-21 | 23,922 B |
| 9f079de0cb987908… | Payment_Advice_REMITTANCE_EUR100999.99-A | vbs | - | 2026-05-21 | 175,896 B |
| 96ca2023c77e761f… | Payment_Notification.z | z | GuLoader | 2026-05-21 | 527,314 B |