| bda30364f197a18d… | Details and Specification for Bulk Order | js | RemcosRAT | 2026-09-07 | 494,104 B |
| 8dd315436f3c560a… | Halkbank.pdf.js | js | AsyncRAT | 2026-09-07 | 218,839 B |
| 2c292220707ae3a2… | jkBPvYJsev.js | js | AsyncRAT | 2026-09-07 | 207,457 B |
| 7ffb3901f69e4731… | ZIRAAT BANKASI PAYMENT CONFIRMATION COPY | js | RemcosRAT | 2026-09-07 | 5,134,244 B |
| b9d5e9c5e18ca9ea… | Solicitud de cotización - Seiza.js | js | AsyncRAT | 2026-09-07 | 207,255 B |
| 3296f21bac3abcb1… | PO 1916326.js | js | LxBaseRAT | 2026-09-07 | 1,007,047 B |
| 124286309647b686… | Orden de compra reenviada.js | js | MassLogger | 2026-09-07 | 952,346 B |
| f8ff24c83362ce93… | Factura 0432.js | js | - | 2026-09-07 | 177,113 B |
| 4efd6dee40aca430… | Camera VD532326082016.js | js | RemcosRAT | 2026-09-07 | 493,953 B |
| 8d63e03b8b5b8d0b… | SOA.js | js | RemcosRAT | 2026-09-07 | 5,145,253 B |
| f16740f08bad013c… | SOAStatement-Documents=osTVLEETBooking # | js | RemcosRAT | 2026-09-07 | 5,507,105 B |
| bb5a5a81231e6a73… | STEP HakedisRaporu_130842.exe | exe | GuLoader | 2026-09-07 | 865,752 B |
| c3504d52b454f3c3… | Kuwin_App.exe | exe | RemcosRAT | 2026-09-07 | 660,992 B |
| 6f991d34519b6aee… | 88VBet_App.exe | exe | RemcosRAT | 2026-09-07 | 660,480 B |
| f77d8475b18be308… | Go8_App.exe | exe | RemcosRAT | 2026-09-07 | 660,480 B |
| 7532a69c27d5ccbc… | ratonClient.exe | exe | njrat | 2026-09-07 | 3,696,640 B |
| 39dd442df02e93ed… | 15544fd1ae60b192b52bbe1775c75178.exe | exe | njrat | 2026-09-07 | 26,624 B |
| 3ca4bd601320b58c… | 3ca4bd601320b58c7e6c5ee5b348b30e638b881a | apk | - | 2026-09-06 | 16,203 B |
| b9fd307d5a43dec3… | wrapper.apk | apk | - | 2026-09-06 | 11,098,134 B |
| a5af065f87ff970e… | xenofix.bat | bat | RatonRAT | 2026-09-06 | 1,887,134 B |
| b00fcf214a199fb2… | COMPROBANTE DE PAGO MOMATT.js | js | AsyncRAT | 2026-09-06 | 212,292 B |
| f9906595791bd667… | Comprobante de transferencia.js | js | MassLogger | 2026-09-06 | 952,346 B |
| 754bd1a147a369aa… | crypted.ps1 | ps1 | AsyncRAT | 2026-09-06 | 449,130 B |
| 5e84fd9106777b85… | Beta-Cheat_protected.exe | exe | AsyncRAT | 2026-09-06 | 3,939,840 B |
| 716a31908fdd9f7f… | KO_THE_CHAY_DUOC.exe | exe | RemcosRAT | 2026-09-06 | 660,992 B |
| 2fb694cdfaad46ea… | hello_khoe_khong.exe | exe | RemcosRAT | 2026-09-06 | 660,992 B |
| 6f201afc797370ac… | hostr.exe | exe | njrat | 2026-09-06 | 107,520 B |
| 35c66ce3e773fa40… | transferencia interbancaria (BBVA).js | js | AgentTesla | 2026-09-05 | 501,441 B |
| c4972ee913fba0da… | PUQ-SW10-321313.js | js | AsyncRAT | 2026-09-05 | 814,742 B |
| 2072c29a227b8cd1… | Rasmlar5⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀ | apk | - | 2026-09-04 | 5,357,500 B |
| 26981dedd90f93b8… | Details and Specification for Bulk Order | vbs | RemcosRAT | 2026-09-04 | 88,030 B |
| bc2ad7f3e659c85f… | CONFERMA D'ORDINE OE-202604673.vbs | vbs | RemcosRAT | 2026-09-04 | 78,642 B |
| 03f470bf77190e63… | FedEx_Shipment_Document.js | js | RemcosRAT | 2026-09-04 | 34,150,366 B |
| 97f981464e79696b… | ordine _76644.js | js | RemcosRAT | 2026-09-04 | 301,094 B |
| fd54f9b3a36484f1… | PO489443.pdf.js | js | RemcosRAT | 2026-09-04 | 62,527,166 B |
| 2872d04fde75cf1e… | Orden compra7474683736373637863.js | js | AgentTesla | 2026-09-04 | 39,758,882 B |
| 0b86cafcf0e1c94a… | orden de compra.js | js | - | 2026-09-04 | 291,907 B |
| c92bf5e0c31662ae… | task.js | js | RemcosRAT | 2026-09-04 | 294,637 B |
| 92560e59e41ce7d7… | Banco de Crédito del Perú_Copia de Pago. | js | RemcosRAT | 2026-09-04 | 3,107,168 B |
| e5754b0a31822971… | 4235739256-docs_offline_iframe_api_bin.j | js | - | 2026-09-04 | 326,005 B |
| d34417fcbf330629… | FedEx_Shipment_Document.js | js | RemcosRAT | 2026-09-04 | 30,396,806 B |
| 8209bb5223a3afbe… | FAC1T.js | js | QuasarRAT | 2026-09-04 | 85,781 B |
| 55e753769c333074… | PO_1175-2026.pdf.js | js | RemcosRAT | 2026-09-04 | 298,145 B |
| 638453730108ca41… | ТОО «Saruzhan KZ»_Order_1800940304092026 | js | LxBaseRAT | 2026-09-04 | 1,016,211 B |
| 2deccf4d047ace7f… | xDzmlkxwtW.js | js | AsyncRAT | 2026-09-04 | 211,514 B |
| 0f07126e64d4a576… | 202606230029750.pdf.js | js | AsyncRAT | 2026-09-04 | 207,226 B |
| c0306b05d5a21a02… | c0306b05d5a21a029af472c01e5a5e94f4307502 | exe | njrat | 2026-09-04 | 940,544 B |
| a9665d49a5bc5dce… | a9665d49a5bc5dced578a7aad5a285f848114824 | exe | njrat | 2026-09-04 | 878,592 B |
| 1884032fa01f5483… | 1884032fa01f5483b881248998fc7338979551cf | exe | njrat | 2026-09-04 | 866,304 B |
| c9ddb200f3d9a8de… | imageshippingdocu72625443.xls | xls | RemcosRAT | 2026-09-03 | 30,208 B |