| SHA256 | Name | Type | Signature / Family | First Seen | Size |
|---|---|---|---|---|---|
| 705861f94f918b7c… | aeb.ch_clickfix.ps1 | ps1 | - | 2026-09-01 | 5,995 B |
| 435475ac115a9154… | snowplow-byte_coronawins_ladywin.ps1 | ps1 | Spambot.Kelihos | 2026-09-01 | 1,658,540 B |
| 64258a04e00ca400… | rubendeckwerth.ch_clickfix.ps1 | ps1 | - | 2026-09-01 | 5,448 B |
| 8c22c86461ce15d6… | Kath19634_ural3495_fds5412.ps1 | ps1 | Vidar | 2026-09-01 | 1,607,433 B |
| b0f2fe074f097302… | SOA.ps1 | ps1 | RemcosRAT | 2026-08-30 | 3,830,067 B |
| e4e8681f4bdd93b0… | crypted.ps1 | ps1 | Formbook | 2026-08-27 | 2,225,818 B |
| d2ceb5d5ca0d3e62… | crypted.ps1 | ps1 | SnakeKeylogger | 2026-08-27 | 1,625,856 B |
| f654ae1078af4d8f… | Millscrypted.ps1 | ps1 | SnakeKeylogger | 2026-08-27 | 1,768,758 B |
| c670939b8151c4b8… | KK3crypted.ps1 | ps1 | SnakeKeylogger | 2026-08-27 | 1,768,472 B |
| 99da07bf6dd825a5… | UGNcrypted.ps1 | ps1 | SnakeKeylogger | 2026-08-27 | 1,767,480 B |
| a20e35bc7bb093eb… | install.ps1 | ps1 | - | 2026-08-27 | 14,223 B |
| cc562815b5eb92aa… | VHLcrypted.ps1 | ps1 | - | 2026-08-27 | 2,289,420 B |
| ea810de463883ddc… | crypted.ps1 | ps1 | Formbook | 2026-08-27 | 2,223,982 B |
| e5aa0b1c39e9aa62… | mmmcrypted.ps1 | ps1 | SnakeKeylogger | 2026-08-27 | 1,766,922 B |
| 9a961c65027a2113… | crypted.ps1 | ps1 | Formbook | 2026-08-27 | 2,223,982 B |
| 3478aecf5ed50a42… | n1.ps1 | ps1 | SnappyClient | 2026-08-27 | 332,032 B |
| 8c531e9d4e4c1e22… | cryptedd.ps1 | ps1 | RemcosRAT | 2026-08-26 | 3,483,889 B |
| 14ba2ca2cfe9fa2d… | OJcrypted.ps1 | ps1 | SnakeKeylogger | 2026-08-26 | 1,662,841 B |
| 29e0a374d9b78614… | stage1.ps1 | ps1 | - | 2026-08-26 | 1,873 B |
| 197c01de3a78c4f0… | f2aadf34-0275-442e-b2db-8ac592.ps1 | ps1 | NetSupport | 2026-08-25 | 4,975,909 B |
| d7066697d8e7c6b4… | bleh.ps1 | ps1 | - | 2026-08-24 | 2,583 B |
| c23360a782643838… | b1.ps1 | ps1 | SnappyClient | 2026-08-23 | 302,305 B |
| 9c6ffb86b77c12ba… | notify.ps1 | ps1 | - | 2026-08-22 | 5,332 B |
| f5be102bc9678342… | ugcrypted.ps1 | ps1 | VIPKeylogger | 2026-08-21 | 1,820,695 B |
| bffb8462002de9dc… | eecrypted.ps1 | ps1 | VIPKeylogger | 2026-08-21 | 1,819,946 B |
| 5c07cc093157d933… | crypted.ps1 | ps1 | RemcosRAT | 2026-08-19 | 3,457,992 B |
| 2838ec99d9fbbfbf… | 21crypted.ps1 | ps1 | Formbook | 2026-08-19 | 2,273,304 B |
| 1edb13674d29efc6… | mycrypted.ps1 | ps1 | Formbook | 2026-08-19 | 2,286,248 B |
| 856d8419d52c0368… | KMcrypted.ps1 | ps1 | Formbook | 2026-08-19 | 2,276,236 B |
| c9625bc5f9206bd2… | kk1crypted.ps1 | ps1 | Formbook | 2026-08-19 | 2,311,368 B |
| 21f54a9d180619b9… | crypted.ps1 | ps1 | Formbook | 2026-08-19 | 2,246,466 B |
| 8e00b6d7f538f867… | crypted.ps1 | ps1 | MassLogger | 2026-08-19 | 720,946 B |
| 08f54c0432f0be0c… | Lincoln.ps1 | ps1 | AgentTesla | 2026-08-19 | 1,528,356 B |
| 4d70fd13a1aa624a… | crypted.ps1.1 | ps1 | RemcosRAT | 2026-08-19 | 3,711,073 B |
| adfefc2614695191… | crypted.ps1.2 | ps1 | RemcosRAT | 2026-08-19 | 3,789,820 B |
| f0262f2f37f5557c… | crypted.ps1.3 | ps1 | RemcosRAT | 2026-08-19 | 3,562,894 B |
| d1aaf73552c77ab6… | crypted.ps1.4 | ps1 | RemcosRAT | 2026-08-19 | 3,788,297 B |
| cc2b96a6c3555189… | crypted.ps1.5 | ps1 | RemcosRAT | 2026-08-19 | 3,518,524 B |
| 36f4c72c0bfa37b5… | External_Release_Final_5374.ps1 | ps1 | CountLoader | 2026-08-17 | 213,829 B |
| 09ee5443809176dc… | OpenLink.ps1 | ps1 | - | 2026-08-16 | 208 B |
| afbd387612dae6d6… | DRFa1X25.ps1 | ps1 | CountLoader | 2026-08-15 | 215,409 B |
| 1050e7ca3b05cc57… | Data.ps1 | ps1 | CountLoader | 2026-08-15 | 231,891 B |
| 3aef5773707bcd2a… | Delta.ps1 | ps1 | CountLoader | 2026-08-15 | 235,402 B |
| 1b151dd1b1ca6365… | view.ps1 | ps1 | Havoc | 2026-08-12 | 1,170 B |
| 2447a57cee38107f… | iis.ps1 | ps1 | - | 2026-08-10 | 21,076 B |
| 2c7b07427ba76f72… | script.ps1 | ps1 | - | 2026-08-09 | 736 B |
| 03afc80755453b8b… | payload_decryp.ps1 | ps1 | - | 2026-08-08 | 20,542 B |
| b44b849f45d08204… | script.ps1 | ps1 | - | 2026-08-08 | 1,082 B |
| 5aa0339a6544700f… | ps_loader_decrypted.ps1 | ps1 | - | 2026-08-06 | 22,011 B |
| 03d3f82e6cfedbc9… | 03d3f82e6cfedbc9eff6a65d6c903ef10febc882 | ps1 | - | 2026-08-02 | 1,641 B |