| d38f4c8fe3deb633… | taskmanager.exe | exe | Amadey | 2026-09-06 | 421,888 B |
| a0a40326938bf08e… | 7914c967bb140672c77ca47508ab9807.exe | exe | Stealc | 2026-09-06 | 2,225,152 B |
| b2504aeadd83e577… | 275102d202213af0f41143e551a070f7.exe | exe | Stealc | 2026-09-06 | 2,332,160 B |
| 56740ce59e959dfc… | 0b5b7b13e69539c68703ecc6dcdf7329.exe | exe | Stealc | 2026-09-06 | 2,270,720 B |
| 3a297d846199ddff… | OpenBulletCE_1.3.exe | exe | SVCStealer | 2026-09-06 | 11,641,344 B |
| cffef18f1ab5c16c… | 46f77e3deac560c6eb74a5607550315d.exe | exe | Vidar | 2026-09-06 | 3,339,632 B |
| bcb14670733753d2… | Sancci-BootV2.exe | exe | Vidar | 2026-09-06 | 6,870,928 B |
| 716a31908fdd9f7f… | KO_THE_CHAY_DUOC.exe | exe | RemcosRAT | 2026-09-06 | 660,992 B |
| 2fb694cdfaad46ea… | hello_khoe_khong.exe | exe | RemcosRAT | 2026-09-06 | 660,992 B |
| 6f201afc797370ac… | hostr.exe | exe | njrat | 2026-09-06 | 107,520 B |
| f535cdbb32dd25fa… | QQ电脑版_buIzy6zd.exe | exe | CobaltStrike | 2026-09-05 | 4,641,032 B |
| 01227a8b5dca01ec… | Sexy_Chat_payload.apk | apk | - | 2026-09-05 | 5,011,648 B |
| a5ca944459c08038… | sbx0_main_18.4.js | js | - | 2026-09-05 | 425,856 B |
| c1b05dd8e7d060d2… | sbx1_main.js | js | - | 2026-09-05 | 325,015 B |
| 450b9cc8a3b5b9e1… | Doc912352026.xls | xls | - | 2026-09-04 | 30,208 B |
| 5865cccca8ec217c… | 2026app_K1.xls | xls | - | 2026-09-04 | 3,595,776 B |
| 3fb74a2ca0526e34… | spsx.vbs | vbs | - | 2026-09-04 | 6,899 B |
| 03f470bf77190e63… | FedEx_Shipment_Document.js | js | RemcosRAT | 2026-09-04 | 34,150,366 B |
| d34417fcbf330629… | FedEx_Shipment_Document.js | js | RemcosRAT | 2026-09-04 | 30,396,806 B |
| 638453730108ca41… | ТОО «Saruzhan KZ»_Order_1800940304092026 | js | LxBaseRAT | 2026-09-04 | 1,016,211 B |
| 2deccf4d047ace7f… | xDzmlkxwtW.js | js | AsyncRAT | 2026-09-04 | 211,514 B |
| 0221fdd0dd2d8e7a… | FedEx AWB-775254029642.IMG.js | js | - | 2026-09-04 | 614,103 B |
| 21dd3eb10681d40c… | Remittance Advice_03_09_2026.pdf.js | js | XWorm | 2026-09-04 | 340,161 B |
| c2e9fbca414575d5… | ErmWhatsWrongWithMyPC.exe | exe | XWorm | 2026-09-04 | 26,416,256 B |
| 87f1b3971bb5b44a… | 87f1b3971bb5b44a760fe934c32c9364d1b417fb | exe | XWorm | 2026-09-04 | 155,648 B |
| 19c85e2440604567… | 三菱UFJフィナンシャル・グループ 銀行 注文書番号 JP250-409-26. | js | XWorm | 2026-09-04 | 216,722 B |
| efd74888f8869acf… | Weekly Report 1150902-1.js | js | XWorm | 2026-09-04 | 3,354,329 B |
| 226aed4d99c5a463… | PURCHASE ORDER-PO-04867.js | js | XWorm | 2026-09-04 | 211,620 B |
| cf22f9ec1c9f574b… | cf22f9ec1c9f574b8281ee9c4bdb301be36ad83b | exe | XWorm | 2026-09-04 | 1,061,888 B |
| 0a2ef2c360cf6e3e… | 0a2ef2c360cf6e3e3e5d844ca03fecc31924ba0e | exe | Vidar | 2026-09-04 | 849,648 B |
| fc8e9d8470b6874f… | fc8e9d8470b6874ff2b7634fec6f488ae84fc64c | exe | Vidar | 2026-09-04 | 849,648 B |
| d520fe67dbf76530… | 5efaa1a7deb7076091d316c3a896c07667aa5633 | exe | Vidar | 2026-09-04 | 1,392,128 B |
| c9ddb200f3d9a8de… | imageshippingdocu72625443.xls | xls | RemcosRAT | 2026-09-03 | 30,208 B |
| f6abab0a0c4bfb92… | DOCUMENT4541334152662FEDEX.xls | xls | RemcosRAT | 2026-09-03 | 30,208 B |
| 4a7f7061ebce6c4c… | ps_yxBv3pbyrIcj_1788430580401.ps1 | ps1 | Formbook | 2026-09-03 | 2,260,046 B |
| 5086b7c16787a690… | ps_LdSxTLJsoHK1_1780649359263.ps1 | ps1 | Formbook | 2026-09-03 | 2,283,668 B |
| 6fdd045437150976… | FedEx8080675545shipping Doc.vbs | vbs | AsyncRAT | 2026-09-03 | 33,710,882 B |
| 56655a9305acaa54… | ekstre.xls.vbs | vbs | - | 2026-09-03 | 87,210 B |
| ae5b88f62d15d77d… | Fedex575789399253.js | js | - | 2026-09-03 | 299,324 B |
| 62d0ca3e2f36aead… | fedex7070806656755.js | js | PureLogsStealer | 2026-09-03 | 309,993 B |
| 8fe0d12dfe394ec4… | RFQ87365267TS.vbs | vbs | XWorm | 2026-09-03 | 638,783 B |
| 5fe1055c8dff5c3d… | 5fe1055c8dff5c3dcacfd42eb6424ebfc9db7b12 | exe | Vidar | 2026-09-03 | 365,056 B |
| bfd58bd43ba3879d… | 5fe1055c8dff5c3dcacfd42eb6424ebfc9db7b12 | exe | Vidar | 2026-09-03 | 1,390,080 B |
| 446cd26639c2d1e0… | 446cd26639c2d1e09dd9d9edebbd7150d6d5c0f4 | exe | Vidar | 2026-09-03 | 850,160 B |
| 510b4341c6763d5b… | 510b4341c6763d5bf045973f4f9832cb8b66a414 | exe | Vidar | 2026-09-03 | 850,160 B |
| 64d8f6456140746a… | 743759338B45950208EA9D6CB6A99AA1.exe | exe | njrat | 2026-09-03 | 24,064 B |
| 4f2153a9b63aac4c… | PCS-48K NEW.xls | xls | - | 2026-09-02 | 1,155,584 B |
| 04c50ef404477631… | ps_Vef9thK1xPcU_1788247758514.ps1 | ps1 | AsyncRAT | 2026-09-02 | 385,653 B |
| b39267e1dad336d3… | Fedex_shipping Doc3543652552.js | js | PureLogsStealer | 2026-09-02 | 291,018 B |
| 633cc0eaef33e569… | QUOTATION_2026-BISCOIND [BNXRT0075829457 | exe | XWorm | 2026-09-02 | 943,616 B |