| b40d6bff5d7ec938… | purchase order.js | js | RemcosRAT | 2026-09-17 | 1,691,467 B |
| 8ceea6fc7d2f8ddd… | LPO - 3959049.js | js | RemcosRAT | 2026-09-17 | 5,139,318 B |
| 78ff92d6c190a93a… | Quotation.js | js | AgentTesla | 2026-09-15 | 678,069 B |
| 40349b008884942a… | SKMBTTRC0CN0111019BK46K.js | js | AgentTesla | 2026-09-15 | 667,455 B |
| a358160820111766… | a358160820111766874c95b5e0f5121e5a65b178 | exe | WannaCry | 2026-09-15 | 5,298,176 B |
| d25ce1de6e2166dc… | BIÊN LAI GIAO HÀNG.js | js | LxBaseRAT | 2026-09-14 | 1,264,007 B |
| 986e787c5913f8b0… | 19AZY1108-SHIPMENT.js | js | Formbook | 2026-09-14 | 3,059,999 B |
| 57bd7f469168e8d6… | FRA - 291116 - pdf.js | js | AgentTesla | 2026-09-14 | 2,085,789 B |
| 640bf86675bf0d57… | trackerjacker.ps1 | ps1 | - | 2026-09-10 | 3,819 B |
| a11483cde5c77cc8… | tjgdm_01.ps1 | ps1 | - | 2026-09-10 | 423 B |
| 5b6fd6a98e6c75a1… | PO_LTT2026-009.js | js | RemcosRAT | 2026-09-10 | 22,438,888 B |
| e9951dbc13b4fb5a… | e9951dbc13b4fb5a2fe7b26783d8495131edf77b | exe | Vidar | 2026-09-10 | 7,086,080 B |
| 2713643f005df130… | 2713643f005df13042036d40bdd0d41e4eb5559b | exe | Vidar | 2026-09-10 | 97,534,920 B |
| 781a90261c1d55c7… | Patriotical.vbs | vbs | RemcosRAT | 2026-09-09 | 26,805 B |
| 1555f8caa68d8f9d… | 2.vbs | vbs | - | 2026-09-09 | 461 B |
| b72e09658cacf2b6… | Прилив_83-11122401333_20260909.js | js | XWorm | 2026-09-09 | 219,391 B |
| 794ee65789890d66… | HSBC_BANK_PAYMENT_RECEIPT_MT103.js | js | Formbook | 2026-09-08 | 3,256,433 B |
| 1f9fbcfd3c51f439… | ASYKHN-98778900.js | js | AsyncRAT | 2026-09-07 | 1,134,110 B |
| 57563715eddd2a3d… | 57563715eddd2a3d404518235fea75b7828cf093 | exe | Vidar | 2026-09-06 | 8,214,408 B |
| 5571c0d773d82cd7… | 5571c0d773d82cd7df0b4dd2603111c74368c287 | exe | Vidar | 2026-09-06 | 98,996,592 B |
| 54f44827efaa45b8… | 54f44827efaa45b8dd9a6d8cd2925dd41148eefd | exe | Vidar | 2026-09-06 | 92,705,136 B |
| 50e475897327e6b9… | lytkc14.ps1 | ps1 | ACRStealer | 2026-09-05 | 1,694,200 B |
| 7141b54f72e809eb… | djhgjh75034.ps1 | ps1 | ACRStealer | 2026-09-05 | 1,603,289 B |
| 35c66ce3e773fa40… | transferencia interbancaria (BBVA).js | js | AgentTesla | 2026-09-05 | 501,441 B |
| e02855a0c4e27b79… | pe_worker.js | js | - | 2026-09-05 | 784,279 B |
| 362c814cad84799a… | 04d7afd7f79ad0131b7b1d0be121f3380a541843 | js | - | 2026-09-05 | 24,622 B |
| acd9c6c8cdd44ae6… | aa3f03606a5109fc83683b9fe30a0ff1a7d43249 | js | - | 2026-09-05 | 14,351 B |
| 6542c5d1fa6435e6… | RFQ#1110264.vbs | vbs | - | 2026-09-04 | 19,290,731 B |
| 840532ba6a0d3d02… | LPG-6152187 - RTA5.js | js | HypeAgent | 2026-09-04 | 641,557 B |
| 312b7accf3c04a06… | Spare parts New order #000068.pdf.js | js | Formbook | 2026-09-04 | 3,059,585 B |
| efd74888f8869acf… | Weekly Report 1150902-1.js | js | XWorm | 2026-09-04 | 3,354,329 B |
| e4fba4f34b6734ac… | e4fba4f34b6734ac1ef34195a0635e38140b0a37 | exe | GuLoader | 2026-09-04 | 732,744 B |
| 7990a3ee52d92e1d… | 7990a3ee52d92e1d951b3757c5a9650140fcad22 | exe | GuLoader | 2026-09-04 | 463,096 B |
| 0947a9428b88899e… | 0947a9428b88899e5b5febf7b9feab7782e156d9 | exe | Vidar | 2026-09-04 | 14,121,880 B |
| cf7503ed829480a0… | cf7503ed829480a052a2b1e1110bf989b0833d70 | exe | Vidar | 2026-09-04 | 4,612,096 B |
| a158ac1913cdec97… | a158ac1913cdec970d074babc147c5d6406c0105 | exe | Vidar | 2026-09-04 | 9,229,824 B |
| 0a2ef2c360cf6e3e… | 0a2ef2c360cf6e3e3e5d844ca03fecc31924ba0e | exe | Vidar | 2026-09-04 | 849,648 B |
| ae5b88f62d15d77d… | Fedex575789399253.js | js | - | 2026-09-03 | 299,324 B |
| 7c83eaa84cbf4f5b… | 7c83eaa84cbf4f5bcde0d3d7c636b817e710fc33 | exe | Vidar | 2026-09-02 | 7,076,272 B |
| abcdf531d86451ab… | abcdf531d86451ab05ab7faf02a85f7c987a3069 | exe | Vidar | 2026-09-02 | 830,704 B |
| baccd5727990f699… | baccd5727990f699dd2aef46794f14205e7ba63a | exe | Vidar | 2026-09-01 | 99,711,352 B |
| 9043a7f372c707b8… | 9043a7f372c707b8d577229cfaed59ed6df121a8 | exe | Vidar | 2026-09-01 | 14,057,848 B |
| ab1ddcbfd3c78ca2… | INQ1002289.vbs | vbs | RemcosRAT | 2026-08-31 | 140,376 B |
| 7ec9b484a2f714bd… | 2268694271_INV_DUB_GTW_SW6_20260202_1111 | vbs | HypeAgent | 2026-08-31 | 144,091 B |
| 3d448929791d9fe0… | PO# 45821 & 45822.vbs | vbs | HypeAgent | 2026-08-31 | 145,563 B |
| 015e7de9c48a38a5… | RFQ-SW10-321313_5_b.js | js | LxBaseRAT | 2026-08-31 | 1,006,522 B |
| b3772c27111fa7cf… | TT Copy.JS | js | AgentTesla | 2026-08-31 | 3,902,247 B |
| daf231645181c993… | FedEx_AWB Documents.js | js | RemcosRAT | 2026-08-31 | 32,249,742 B |
| 3562111f5825300a… | Ziraat Bankasi Swift Mesaji.pdf.js | js | Formbook | 2026-08-31 | 1,269,079 B |
| 9f23616547f0ad6b… | 9f23616547f0ad6b9f121d8b742c5a562797093f | exe | WannaCry | 2026-08-31 | 5,298,176 B |