| 49bcc0a6fa25f1d0… | tree.exe | exe | RemcosRAT | 2026-10-26 | 480,768 B |
| 996672367ea46d6a… | Transaction_receipt.pdf | pdf | Action1RMM | 2026-10-19 | 200,249 B |
| ec00d75b13137b4a… | payload_ec00d75b.bin | exe | RemcosRAT | 2026-10-11 | 527,872 B |
| 07be0afdd645d8d0… | 07be0afdd645d8d0f8ccb48fa873932711325412 | ps1 | Cobalt Strike | 2026-10-07 | 1,899,556 B |
| 81883bede526e686… | goopdate.dll | dll | Cobalt Strike | 2026-10-05 | 448,040 B |
| ceb2f87c77c15df3… | Счет на оплату (с печатью) № 54000001584 | bat | RemcosRAT | 2026-10-02 | 5,968 B |
| 763ac38c6373a4d5… | goopdate.dll | dll | Cobalt Strike | 2026-09-21 | 1,128,896 B |
| 021d369e92976960… | Kohzan Maru VI Full Vessel Q88.js | js | Formbook | 2026-09-18 | 2,979,542 B |
| 6f9689cece01fe83… | MV_TBN_Order_Quotation_Forms.js | js | Formbook | 2026-09-18 | 2,978,339 B |
| 475cafae4b1b1d04… | 475cafae4b1b1d04e379256333291d72ade6b0a5 | exe | WannaCry | 2026-09-18 | 5,298,176 B |
| 20e2c56d71fcaa1e… | 20e2c56d71fcaa1efa7a37e8e30211cd80fb7ff9 | apk | - | 2026-09-17 | 15,306 B |
| 139b70aee8e4aa8b… | 139b70aee8e4aa8b0f7ed08410d831293a14fc02 | apk | - | 2026-09-17 | 10,234 B |
| 0e0f6e98af559b30… | Overexposure.apk | apk | - | 2026-09-17 | 9,073,867 B |
| c5061b4ffd1b5d87… | signed (6).apk | apk | - | 2026-09-17 | 9,123,951 B |
| 276a326f3efe26af… | tiktok18.apk | apk | - | 2026-09-17 | 20,900,180 B |
| 32076454e6bcae04… | TikTok18+.apk | apk | - | 2026-09-17 | 3,613,311 B |
| dca1705c1e7f2857… | tiktok18.apk | apk | - | 2026-09-17 | 20,919,462 B |
| 0a53ab4c4ba552e6… | VibeXVIP.apk | apk | - | 2026-09-17 | 20,972,657 B |
| 4a30a14572a04fc4… | tiktok18.apk | apk | - | 2026-09-17 | 20,755,519 B |
| 63f487269964719d… | holiday itinerary.vbs | vbs | - | 2026-09-17 | 23,141 B |
| 9be70fef03d307ec… | PETRONAS MALAYSIA SDN BHD PURCHASE ORDER | vbs | Formbook | 2026-09-17 | 25,225 B |
| 852d3f10c8d6324a… | ΑΠΟΔΕΙΞΗ ΠΑΡΑΔΟΣΗΣ.vbs | vbs | LxBaseRAT | 2026-09-17 | 3,009,724 B |
| 7008af80cb565d40… | Kohzan Maru VI Vessel Q88.js | js | Formbook | 2026-09-17 | 20,951 B |
| 1099d8ba66e80ba3… | new order.JS | js | Formbook | 2026-09-17 | 4,423,081 B |
| 6cda99ba17354145… | New offer 26P6011.js | js | PureLogsStealer | 2026-09-17 | 1,502,468 B |
| c0ba4d34a9b0e22f… | AAZORDER321202026pdf.js | js | Formbook | 2026-09-17 | 19,398 B |
| fafa9cbe0d7978f1… | NO-09809-PO-00890-MSN068-QTN-0698-2026.J | js | VIPKeylogger | 2026-09-17 | 4,321,539 B |
| ec70073fc284bb7c… | PO-101105.JS | js | PhantomStealer | 2026-09-17 | 4,891,995 B |
| ef17f4314016eaee… | ricevuta di bonifico bancario.JS | js | AgentTesla | 2026-09-17 | 4,208,677 B |
| 9a690d59b2d84279… | IRICO -- INV IN-7016-D-003 pdf.JS | js | Formbook | 2026-09-17 | 4,410,347 B |
| b40d6bff5d7ec938… | purchase order.js | js | RemcosRAT | 2026-09-17 | 1,691,467 B |
| 712fba94aeb4793f… | Purchase Order - PO-2603113056899.JS | js | AgentTesla | 2026-09-17 | 4,329,475 B |
| 3d717f14093fc40c… | PROPOSED_FRAMEWORK_DESIGN_DEMENSION.js | js | LxBaseRAT | 2026-09-17 | 1,280,208 B |
| 4cd3bb5a1250dc56… | PO8980 TRC-93008A6(with IRCF) 20pcs.js | js | AsyncRAT | 2026-09-17 | 161,425 B |
| 8ceea6fc7d2f8ddd… | LPO - 3959049.js | js | RemcosRAT | 2026-09-17 | 5,139,318 B |
| 8fb12b79c494bf5d… | Inquiry Taiwan Display.js | js | RemcosRAT | 2026-09-17 | 5,240,788 B |
| b6f881bb73e51ddb… | Zapytanie ofertowe BILFINGER 4830-26.js | js | RemcosRAT | 2026-09-17 | 5,811,608 B |
| 9049c2435e438b14… | REQUEST FOR QUOTATION.js | js | STRRAT | 2026-09-17 | 849,400 B |
| 4dc267430fda3c90… | ekstre.pdf.js | js | Formbook | 2026-09-17 | 1,900,319 B |
| a1bd72a20327d0f6… | ΕΠΙΒΕΒΑΙΩΣΗ ΤΗΣ ΠΑΡΑΓΓΕΛΙΑΣ 74833.js | js | AgentTesla | 2026-09-17 | 41,023,786 B |
| b2cd4b50131bd8c5… | ЗАКАЗ НА ПОКУПКУ 0836338736.js | js | RemcosRAT | 2026-09-17 | 455,242 B |
| b623d32b769220a3… | Quotation.JS | js | Formbook | 2026-09-17 | 4,410,347 B |
| 2065cde3ae93c2ec… | Orden de compra 52177236.JS | js | RemcosRAT | 2026-09-17 | 5,802,225 B |
| 1bf117a026723e42… | rcc8807811.js | js | MassLogger | 2026-09-17 | 439,498 B |
| 48dc7d3389931651… | PO - BOLAND83254.JS | js | Formbook | 2026-09-17 | 4,415,811 B |
| f10f34ad2508e94c… | RFQ-09.17.js | js | MassLogger | 2026-09-17 | 481,802 B |
| 54a2c561e9413544… | TRANSFERENCIA 48393938.js | js | Formbook | 2026-09-17 | 40,994,040 B |
| c7c71e0287d20f43… | Profma_Inv#837493930_pdf.js | js | RemcosRAT | 2026-09-17 | 5,035,163 B |
| 0097150be945c41e… | XScan17901RF.JS | js | XWorm | 2026-09-17 | 3,779,707 B |
| decd9cec9001b918… | Skovtr.vbs | vbs | GuLoader | 2026-09-17 | 387,273 B |