| 2cf0240e9d0ab7c4… | PAYMENT SLIP.scr | exe | njrat | 2025-10-10 | 530,952 B |
| 064da61a5e7ee28b… | PROOF-OF-PAYMENT.scr | exe | GuLoader | 2025-09-30 | 944,408 B |
| de8f73afa5a50d50… | Justificante pago Factura 3049.scr | exe | GuLoader | 2025-09-24 | 880,520 B |
| a56b222f8cf2bc73… | _! My Picutre.SCR | exe | njrat | 2025-08-03 | 337,408 B |
| 81ec61a49b5fcc4e… | dokumen.pub_data-science-from-scratch-fi | pdf | - | 2025-07-21 | 10,453,974 B |
| 8a92c05cc7a489e6… | r6232025ARRIVALNOTICEHBLSCAN_pdf.scr | exe | njrat | 2025-06-24 | 76,800 B |
| fbe8b5b1bb9bee5e… | 采购清单.scr | exe | Cobalt Strike | 2025-06-05 | 6,439,424 B |
| 1fa98e07edef331f… | SecuriteInfo.com.Script.SNH-gen.27752.26 | exe | njrat | 2025-06-04 | 861,184 B |
| cd9b74c85f023644… | FakeIDCardsCreator.exe | exe | Amadey | 2025-05-29 | 11,221,504 B |
| 88bf0db97f3bf88a… | Runtime Broker.scr.exe | exe | njrat | 2025-05-28 | 236,544 B |
| 621666d2d94d0e99… | script.ps1 | ps1 | njrat | 2025-05-26 | 769,568 B |
| 45d99d34f3dd06f6… | script2.ps1 | ps1 | njrat | 2025-05-26 | 3,682 B |
| 33ebc1a99345339f… | Credit note April_25.scr | exe | RemcosRAT | 2025-04-29 | 602,624 B |
| 614125ef1289a655… | script.exe | exe | LummaStealer | 2025-04-26 | 989,184 B |
| f2f20d4232da128f… | script.a3x | a3x | DarkGate | 2024-12-14 | 596,624 B |
| c98d70e7d8a6f73c… | Cooperation Agreement.scr | exe | LummaStealer | 2024-09-05 | 13,154,344 B |
| f733dd11b0014eb7… | FedEx Shipping Document.scr | exe | AZORult | 2024-08-27 | 613,384 B |
| e173dd358ec750f5… | death.ΓÇ«gpj.scr | exe | LockBit | 2024-08-02 | 477,736 B |
| d904ea46d611628b… | Stanley Tools - ScrewFix Exclusive Rewar | doc | - | 2024-07-21 | 12,421 B |
| 841200c9e115b489… | HGTQP09643009.scr | exe | RemcosRAT | 2024-05-14 | 1,103,360 B |
| 2f05419f0baf87fe… | script.a3x | a3x | DarkGate | 2024-05-14 | 559,792 B |
| 42b6480c1547bf38… | script.a3x | a3x | DarkGate | 2024-05-07 | 509,828 B |
| e6fcc25a9c1ea4e4… | QUOTATION_MAYQTRA031244·PDF.scr | exe | AgentTesla | 2024-05-02 | 724,992 B |
| 86e17aa882c690ed… | Document.doc.scr | exe | LockBit | 2024-04-24 | 199,168 B |
| 1c4d704dcf8a341a… | script.ahk | unknown | DarkGate | 2024-04-16 | 441 B |
| 78b3702f5c0f7efd… | script.au3 | au3 | DarkGate | 2024-01-24 | 477,940 B |
| 4ba483fde18e3600… | script.au3 | au3 | DarkGate | 2024-01-24 | 481,658 B |
| a86cd95594771888… | script.au3 | au3 | DarkGate | 2024-01-24 | 481,964 B |
| 46c5ed90e3d6b8bc… | script.au3 | au3 | DarkGate | 2024-01-24 | 480,884 B |
| b13b795f369654dd… | script.au3 | au3 | DarkGate | 2023-11-03 | 501,150 B |
| 6c4e944ed4aff9e0… | deobfuscated_script.js | js | Gozi | 2023-09-15 | 9,601 B |
| a72adbf4aefb73bd… | Milanaka_patched.scr | exe | RedLineStealer | 2023-06-12 | 2,127,360 B |
| fdd77d25eddc94ad… | doctorrecomend2023.pdf.scr | exe | RedLineStealer | 2023-06-09 | 5,108,872 B |
| a08fc81cd189984d… | Microstrategy - Global bank screen_16Mar | xlsx | TrickBot | 2023-03-17 | 195,748 B |
| 6690005ad4691a7a… | Screenshot_Map.zip | zip | AuroraStealer | 2023-01-21 | 8,454,820 B |
| 6dbd81ebf75f8c4e… | Document.pdf.scr.zip | zip | RedLineStealer | 2023-01-21 | 5,648,993 B |
| c7c27dbedea0db53… | 30-second promotional video to integrate | 7z | RedLineStealer | 2023-01-20 | 11,337,410 B |
| f2bf00d0e3d2462f… | script | ps1 | Gozi | 2022-12-07 | 209 B |
| b81d173c8ae0cd09… | scr.zip.zip | zip | RedLineStealer | 2022-07-30 | 3,403,869 B |
| 032fda43e5102e80… | screen.xls | xls | ZLoader | 2022-04-24 | 36,864 B |
| 5b33e1de431d3e2f… | script | unknown | Gozi | 2022-03-23 | 198 B |
| 7fbc7d878232d856… | subscription06679735.xlsb | xlsx | Dridex | 2021-12-03 | 117,280 B |
| 18056aac2b2166e4… | subscription0281528.xlsb | xlsx | Dridex | 2021-11-29 | 122,821 B |
| a49506cf573f268c… | subscription-45168038.xlsb | xlsx | Dridex | 2021-11-29 | 116,382 B |
| c9fa7a8c2ac44adf… | subscription374394.xlsb | xlsx | Dridex | 2021-11-29 | 107,008 B |
| 63ce1d00cc40a787… | subscription-068379.xlsb | xlsx | Dridex | 2021-11-26 | 70,697 B |
| a5e556540ab8d540… | subscription_1515911.xlsb | xlsx | Dridex | 2021-11-26 | 84,148 B |
| 1c5932f1fc2c9fa6… | subscription_080941.xlsb | xlsx | Dridex | 2021-11-26 | 88,239 B |
| 98f655b81232dc9c… | subscription_83558.xlsb | xlsx | Dridex | 2021-11-26 | 69,088 B |
| 115e3c2177c76253… | subscription60547.xlsb | xlsx | Dridex | 2021-11-24 | 69,799 B |