| d2ada62115df653e… | ps.ps1 | ps1 | - | 2026-07-15 | 114 B |
| 76b5f4074eefa2e8… | 315ws.net.ps1 | ps1 | - | 2026-07-15 | 21,019 B |
| 7ca0ba91ec68940e… | Ekspeditionssekretrens.vbs | vbs | RemcosRAT | 2026-07-15 | 35,313 B |
| 15a9a83377456de3… | EGPL-476-2026.vbs | vbs | RemcosRAT | 2026-07-15 | 26,035 B |
| d33f6bd48d7a46fa… | MFDMACHINERY INV0303.pdf.vbs | vbs | RemcosRAT | 2026-07-15 | 455,082 B |
| fc55ddc34f863747… | 351635-P-500001.vbs | vbs | SiriusRAT | 2026-07-15 | 466,020 B |
| b05a874ccc1a00c9… | PO 31874.vbs | vbs | AgentTesla | 2026-07-15 | 1,128,177 B |
| 122ea2e5316fd4d1… | Payment Notification - Ref #8922.vbs | vbs | LxBaseRAT | 2026-07-15 | 1,754,181 B |
| abd4aa5fa228310a… | ORDER-26095-008976PA.PDF.vbs | vbs | WSHRAT | 2026-07-15 | 9,618 B |
| 783b007d71a52488… | RFQ_Urun_Listesi.pdf.vbs | vbs | - | 2026-07-15 | 1,110,342 B |
| ff1218a7958943a4… | Orden de Compra [PO-NGHOE33748].vbs | vbs | AsyncRAT | 2026-07-15 | 1,213,877 B |
| bd6f1caabd3085c0… | RTL01358788740.vbs | vbs | PhantomStealer | 2026-07-15 | 19,902 B |
| 6a12f1abc4da3ddd… | RFQ Excipient (13072026).vbs | vbs | PureLogsStealer | 2026-07-15 | 456,146 B |
| b61df9782f0003db… | Avisoplag.vbs | vbs | RemcosRAT | 2026-07-15 | 25,857 B |
| 6eb2760cf83de7f1… | Doc_504_302_078.vbs | vbs | PhantomStealer | 2026-07-15 | 22,418 B |
| 3f048238fc1de832… | ORDEN DE COMPRA_868646.vbs | vbs | XWorm | 2026-07-15 | 1,287,387 B |
| ce9264c37e088339… | comprobante de pago.vbs | vbs | XWorm | 2026-07-15 | 1,253,304 B |
| 4bab64429419e028… | SİPARİŞ PO-2026000000329.vbs | vbs | XWorm | 2026-07-15 | 1,145,948 B |
| 3b60c1b6c35c39e6… | Purchase Order NO#POF0000095.vbs | vbs | XWorm | 2026-07-15 | 1,220,602 B |
| fb39d3b564103e08… | proof of payment.js | js | XWorm | 2026-07-15 | 1,636,909 B |
| 801c316223b29446… | Comprobante de pago.js | js | XWorm | 2026-07-15 | 2,522,372 B |
| f7c5c2b4cde3e190… | PEDIDO 2026-00529 - ATLÉTICO DE MADRID.j | js | GuLoader | 2026-07-15 | 225,890 B |
| 0d56e8fdf02abdec… | Payee Advice_PK562100002660522AE.vbs | vbs | GuLoader | 2026-07-15 | 26,252 B |
| ae1a58b73c14de3d… | TaxInvoiceMH1252.pdf.bat | exe | RemcosRAT | 2026-07-14 | 1,261,056 B |
| 82947e3951e1e32c… | hezhiad.com.ps1 | ps1 | - | 2026-07-14 | 20,864 B |
| c730cd6bf03eae34… | secured_stub.ps1 | ps1 | RemcosRAT | 2026-07-14 | 2,374,455 B |
| 732aabf0f9dd7268… | secured_stub.ps1 | ps1 | RemcosRAT | 2026-07-14 | 2,374,303 B |
| 65b85387dc62465b… | secured_stub.ps1 | ps1 | RemcosRAT | 2026-07-14 | 2,374,455 B |
| 42cef4aba1a6bb1d… | secured_stub.ps1 | ps1 | Formbook | 2026-07-14 | 1,555,307 B |
| 9c4faf515bac54a7… | ps.ps1 | ps1 | - | 2026-07-14 | 116 B |
| 73dc4fd52eb951dd… | EGPL-476-2026.vbs | vbs | - | 2026-07-14 | 26,020 B |
| cca1348574adbec1… | ITF_LOGISTICS_GROUP_ONLINE_CARRIER_INVIT | vbs | - | 2026-07-14 | 150 B |
| f62519453afb691d… | LADING_LOGISTICS_COMPANY_CARRIER_AGREEME | vbs | - | 2026-07-14 | 351 B |
| 99d0eb6047cc8c9f… | loader_8e7c4479c8530a2b.ps1 | ps1 | RemcosRAT | 2026-07-14 | 308,942 B |
| 8e6d648dd5b03d2d… | Demanda_Civil_Reparacion_Da±o_Patrimonia | js | - | 2026-07-14 | 10,889 B |
| 4e5c8cedafeb1be4… | Meccha Chameleon Auto Painter.exe | exe | njrat | 2026-07-14 | 24,064 B |
| 3738537154bfc5ea… | RFQ form for Materials & Parts.JS | js | XWorm | 2026-07-14 | 2,538,183 B |
| 29dc8542e97e280e… | Proof of payment.js | js | XWorm | 2026-07-14 | 2,024,585 B |
| 09a78d4ca618d275… | PO NO. 2500510 COLORSTAR CHEMICAL INDUST | bat | Formbook | 2026-07-13 | 1,266,395 B |
| 09cc1c77657400e8… | PDA-MV OCEAN WY-268546-1-PDF.vbs | vbs | RemcosRAT | 2026-07-13 | 26,215 B |
| 64da4c1638c0e1a6… | rpayment_00267514376.bat | exe | njrat | 2026-07-13 | 1,005,568 B |
| d99e59578c58923d… | PO_47W028051.js | js | XWorm | 2026-07-13 | 1,658,841 B |
| 28e36507780c6c17… | npayment_0026_7514376.tar | tar | XWorm | 2026-07-13 | 821,054 B |
| 4378723bbaa2ae5a… | Purchase order_090.xlsm | xlsm | XWorm | 2026-07-13 | 145,772 B |
| 957c3fc02297170c… | 2gnqD3iF9lpo4CzmS.ps1 | ps1 | Stealc | 2026-07-13 | 11,022 B |
| 0087b35d4460c970… | b5e9296e09961ff2_UndIcopslete2.msi | msi | Stealc | 2026-07-13 | 2,351,104 B |
| acf1cd593222c9dc… | UndIncomplete.exe | exe | Stealc | 2026-07-13 | 2,031,104 B |
| f3ba907b03f07e28… | Setup.exe | exe | Stealc | 2026-07-13 | 6,980,480 B |
| 81e6bc9a79e4234f… | ZA2A_DONE.ps1 | ps1 | PureCrypter | 2026-07-12 | 1,314,627 B |
| 05235d0287744075… | mpclient.dll | exe | ArkeiStealer | 2026-07-12 | 3,726,192 B |