| f9b504f0c27ae366… | f9b504f0c27ae366d420f81dbcb0a7042ec52c43 | exe | Vidar | 2026-09-15 | 5,535,664 B |
| f4f6feb4153d901d… | f4f6feb4153d901d89fc11921696346d40e2326b | ps1 | Vidar | 2026-09-15 | 1,348,408 B |
| 11a44b1a227a702b… | app-V59.apk | apk | - | 2026-09-14 | 4,899,678 B |
| 4f5ce73065d63ac5… | 1.bat | bat | - | 2026-09-14 | 2,027 B |
| 6413f86810874026… | 11.bat | bat | - | 2026-09-14 | 2,218 B |
| b82d28bbdc0012d2… | SSA _Document Viewer.bat | bat | ConnectWise | 2026-09-14 | 47,839 B |
| 0bb593e4bd1913df… | u.ps1 | ps1 | OverlordRAT | 2026-09-14 | 1,012 B |
| e51ee5140bead9c9… | Phyllosoma.vbs | vbs | RemcosRAT | 2026-09-14 | 65,343 B |
| 1bcfd2a841c6df34… | ORDER-269140-79868AP.DOCX.vbs | vbs | Formbook | 2026-09-14 | 813,616 B |
| 4bc790aaa3fa4b31… | INV&PL.vbs | vbs | RemcosRAT | 2026-09-14 | 66,170 B |
| fab631b04f4b27fb… | holiday itinerary.vbs | vbs | AgentTesla | 2026-09-14 | 23,910 B |
| 604495eeedb9f412… | FedEx_AWB_456789.js | js | RemcosRAT | 2026-09-14 | 21,809,258 B |
| 7a0219d5c29818ff… | STIVP-FIV-FMA-6349 - 01revCopies09092026 | js | RemcosRAT | 2026-09-14 | 4,822,322 B |
| 25de3f5c46ad24bf… | c2server.js | js | PivotC2 | 2026-09-14 | 19,006 B |
| 0cd320ac002f3f4e… | FedEx shipping Doc.js | js | PureLogsStealer | 2026-09-14 | 18,579,798 B |
| 8e6ee30d1b1fd6a7… | LPO160211(O).JS | js | AgentTesla | 2026-09-14 | 3,349,570 B |
| b6b7714067da24df… | RFQ_MI26_911_Sep2026.js | js | - | 2026-09-14 | 1,447,413 B |
| d25ce1de6e2166dc… | BIÊN LAI GIAO HÀNG.js | js | LxBaseRAT | 2026-09-14 | 1,264,007 B |
| 89feda1d6ac54606… | SOA 07-08 2026.JS | js | AgentTesla | 2026-09-14 | 3,678,209 B |
| 4aa00fe21e11c57c… | Synopsys _PO_528059.js | js | Formbook | 2026-09-14 | 3,055,247 B |
| abb6d27806319ad8… | Doc 001886_1308002341 Pdf.JS | js | Formbook | 2026-09-14 | 3,452,982 B |
| 456897ca44ef3b80… | MT.Princess_Vessel_Main_Information.js | js | AgentTesla | 2026-09-14 | 2,002,017 B |
| d11fccb3e9bf5a65… | ricezione del bonifico bancario.JS | js | AgentTesla | 2026-09-14 | 3,347,762 B |
| 9756d35bfaf89fb4… | PURCHASE ORDER.JS | js | DonutLoader | 2026-09-14 | 3,852,967 B |
| 8ce2b7991a970c2a… | SOA SEPTEMBER 2026.js | js | PureLogsStealer | 2026-09-14 | 1,482,660 B |
| 2697cd5d03556183… | Payment _Advice.JS | js | Formbook | 2026-09-14 | 3,456,622 B |
| 76d27e4fe46c4ff8… | SWIFT_Payment_Confirmation_ML76052.JS | js | PhantomStealer | 2026-09-14 | 3,963,066 B |
| e6b3f57b478e6b66… | 19AZY1108-SHIPMENT.js | js | Formbook | 2026-09-14 | 3,063,195 B |
| a2551c12d7fc25dd… | task.js | js | RemcosRAT | 2026-09-14 | 3,017,197 B |
| a801b1a5264d22d1… | PU_7837893.js | js | AsyncRAT | 2026-09-14 | 680,779 B |
| c168c59bde03e7f5… | SW_27817523.js | js | Formbook | 2026-09-14 | 1,862,877 B |
| a98ee9b73ce89a1a… | MAT-150-526-AN PDF.JS | js | XWorm | 2026-09-14 | 2,594,098 B |
| 59b25add9820bdc5… | 2026年9月 残業登録リスト.vbe | vbe | GuLoader | 2026-09-14 | 61,301 B |
| f65d4ddf2d769eb6… | f65d4ddf2d769eb6dd9cc7021845458f7cb49be0 | exe | Vidar | 2026-09-14 | 103,633,784 B |
| a0909b5a4798f8d9… | p?t=24787dbbaa8dbd0d9a12a37bd0e624c4_3a7 | exe | Vidar | 2026-09-14 | 6,929,272 B |
| 4ef2b2638d876707… | 4ef2b2638d87670790c999a61136c25449b4e0a3 | exe | Vidar | 2026-09-14 | 5,960,576 B |
| ccfcad61a64e7704… | serivce.bat | bat | SalatStealer | 2026-09-13 | 13,345,633 B |
| b2bdb2a4e93fb7d4… | fakemas.ps1 | ps1 | - | 2026-09-13 | 3,308 B |
| d3d877e529792a6e… | Docusign-Installer.vbs | vbs | ConnectWise | 2026-09-13 | 2,458 B |
| 1ebacc785bde14b8… | viсеlосitуХ64-v.8.861.exe | exe | Vidar | 2026-09-13 | 5,719,408 B |
| 6d22eee58d714dd3… | Bootstaraple_2.0.12.1782.exe | exe | Vidar | 2026-09-13 | 11,564,920 B |
| 3ff4f41605d3b7d5… | file.ps1 | ps1 | - | 2026-09-13 | 76,722 B |
| 43473c2ee7dc5543… | 43473c2ee7dc5543f3ce568a80b3cc372e8b3952 | exe | WannaCry | 2026-09-13 | 5,298,176 B |
| 4401bf9ce29018b2… | 4401bf9ce29018b259f30045b825d2e3c68dbb50 | exe | WannaCry | 2026-09-13 | 5,298,176 B |
| 8f87c47d2cd49eb5… | LB3.exe | exe | BlackMatter | 2026-09-13 | 150,528 B |
| c2bd45c96cdf7faf… | c2bd45c96cdf7faf05f3180ecc74e23ef60d1eea | exe | - | 2026-09-13 | 102,396,336 B |
| ad613fc80699e19b… | tax-refund.apk | apk | - | 2026-09-12 | 45,694,115 B |
| 3d9a86801bebaf54… | zapret-discord.bat | bat | SalatStealer | 2026-09-12 | 13,345,611 B |
| 850e9a04d7b41ea5… | hades_discord_injection.js | js | Hades | 2026-09-12 | 5,602 B |
| 864174e0518ccc0a… | task.js | js | RemcosRAT | 2026-09-12 | 3,011,749 B |