| 883cbc1c488dde26… | DOC-269015-006754AT.DOCX.vbs | vbs | Formbook | 2026-09-15 | 815,364 B |
| 608ffc819d6369b8… | ORDER-260915-007868.DOCX.vbs | vbs | Formbook | 2026-09-15 | 924,530 B |
| 1bcfd2a841c6df34… | ORDER-269140-79868AP.DOCX.vbs | vbs | Formbook | 2026-09-14 | 813,616 B |
| bf5abb5d8ed08b97… | Hilton Заказ_ 006854101 10092026 docx.js | js | LxBaseRAT | 2026-09-10 | 1,022,545 B |
| 91e05a06b2e8f9b6… | AGR2208289694.DOCX.js | js | PureLogsStealer | 2026-09-07 | 475,484 B |
| d8739a18c93585e0… | FedEx docx.js | js | RemcosRAT | 2026-09-01 | 32,269,310 B |
| 979eee6c5c214881… | AB 0172_2508026_docx.bat | bat | RemcosRAT | 2026-08-25 | 1,089,510 B |
| 0f1351b04bb48780… | DOC-26824-789056.DOCX.vbs | vbs | WSHRAT | 2026-08-25 | 1,770,035 B |
| 24cca7ccaf73871a… | Doc-00780-26820AT.DOCX.vbs | vbs | Vjw0rm | 2026-08-20 | 692,965 B |
| 6a05db1db4b89f3b… | OD00140818026docx.vbs | vbs | RemcosRAT | 2026-08-18 | 934,707 B |
| bc1e8bde23210814… | OB00140818026docx.js | js | RemcosRAT | 2026-08-18 | 1,063,451 B |
| 7122e04e3c5af238… | Purchase_Order_July_-CEDF9837E7488349383 | js | PureLogsStealer | 2026-08-18 | 1,027,077 B |
| af83fae1ac6272b2… | Purchase_Order_July_-CDF9837E74883493839 | js | PureLogsStealer | 2026-08-18 | 1,012,172 B |
| 5cefdb8a9e0120db… | Purchase_Order_July_-CDF9837E74883493839 | js | PureLogsStealer | 2026-08-18 | 1,024,869 B |
| 5640665b796ba1f4… | SA Ordine Ref00145 1208026_docx .js | js | RemcosRAT | 2026-08-13 | 2,195,381 B |
| d8ed131b01ea2d2b… | Ref-17-07-202645001Docx.bat | bat | RemcosRAT | 2026-07-17 | 927,199 B |
| b0e2c4681aec46f6… | RATE QUOTATION - ALL PORTS - EXPORT - OC | hta | XWorm | 2026-07-02 | 31,110 B |
| 12898ccc6a9cf84d… | SWIFT2024001013.docx | doc | TrickBot | 2026-05-21 | 91,423 B |
| d9c2c5c17a6812fd… | PO#240145_2025_AMH_Technologies_4_08-12_ | bat | VIPKeylogger | 2026-05-20 | 188,780 B |
| 798059f1564052c2… | New_purchase_order_inquiry_may_2026_docx | js | XWorm | 2026-05-20 | 545,222 B |
| 97ae3e5222fff724… | rdocx.vbs | vbs | AgentTesla | 2026-04-27 | 18,091 B |
| 636b3d4415bcef24… | confirmation_of_funds_transfers_docx.vbs | vbs | XWorm | 2026-04-13 | 32,972 B |
| 6418313861c6a784… | new_inquiry_docx.bat | bat | - | 2026-02-23 | 7,604 B |
| e581a47768d45ca9… | ZF CVS Turkey_docx.bat | bat | RemcosRAT | 2025-12-03 | 7,669 B |
| 1a71a8bc099c9ab4… | 1a71a8bc099c9ab4d4c65431aa2190690ee0be76 | doc | TrickBot | 2025-11-05 | 329,191 B |
| c8159db3b711e88d… | GS-25100014-DOCX.exe | exe | GuLoader | 2025-10-31 | 427,339 B |
| 1d4ee7e7b4f27568… | 1d4ee7e7b4f27568f3d46a62070715e4c0b3d1c2 | doc | TrickBot | 2025-10-30 | 329,190 B |
| 1b0dbeaad0cf9c60… | Поръчка за покупка_CVE2-52022.docx | doc | TrickBot | 2025-10-29 | 329,189 B |
| defe1d14ab634443… | Big-Bang-Narocilnica_00121010025_Docx.vb | vbs | GuLoader | 2025-10-23 | 55,204 B |
| cd33ecf7a7348b9e… | PO20251020001 - AL ADRAK_docx.vbs | vbs | GuLoader | 2025-10-20 | 54,480 B |
| cee4d30832970abb… | Objednávka_unitradedoo101425-014010025_d | vbs | GuLoader | 2025-10-14 | 31,572 B |
| 2a988f6a3c40c1f9… | po-56-ns 056374TI.docx | doc | RemcosRAT | 2025-02-18 | 92,497 B |
| 38467e46d0bdad07… | Microsoft Word - FROM THE DESK OF SF Ann | pdf | - | 2024-12-09 | 1,122,463 B |
| f59ed31f271d90f6… | Potvrda_o_uplati.docx | doc | TrickBot | 2024-12-09 | 91,422 B |
| fa5995b67f40f6c2… | ╨ù╨░╨┐╨╕╤é ╨┤╨╛╨║╤â╨╝╨╡╨╜╤é╤û╨▓ ╤û╨╖ ╨┐╨ | exe | RemcosRAT | 2024-08-10 | 1,518,472 B |
| aebac18cfc24be9a… | Tractor Supply CO _ Yeti Crossroads Back | pdf | - | 2024-08-01 | 157,131 B |
| 40aa56690dafef35… | 3_Електронний запит від податкової служб | exe | RemcosRAT | 2024-02-13 | 2,334,561 B |
| 957baea98c48a7e8… | 55Seo SeungJoon44.docx | docx | LockBit | 2024-01-15 | 549,617 B |
| ee02e5051243512e… | 244e475d884c455bb1fbad1a4294f21c.docx | docx | LockBit | 2024-01-11 | 549,626 B |
| 28fd21516af228e2… | Lingiang_Cosmetic_Promotion_Program_2023 | doc | DarkGate | 2023-09-29 | 6,863 B |
| e45afde600fe6309… | DOCX_6802_1755_02_2023FINAL.exe | exe | RemcosRAT | 2023-08-16 | 1,325,200 B |
| 20ae918236cf658e… | 7fc379eee10b79726fcd7a2f6753bca8.docx | doc | Loki | 2023-07-26 | 11,087 B |
| e3671a89c420d13f… | proforma INV5400.docx | doc | Loki | 2023-07-06 | 11,086 B |
| 0d9a51628cb6ef7c… | PO-20-02-2023.docx | doc | Loki | 2023-02-20 | 11,801 B |
| 7fb463c1449236d0… | 03cea7c49abe78863ae2644ac77c8efb.docx | doc | LockBit | 2022-12-12 | 16,345 B |
| b9ee359288d73ab0… | 임범수.docx | docx | LockBit | 2022-12-05 | 159,290 B |
| 87e2e3291268aa3e… | 김기환.docx | docx | LockBit | 2022-12-01 | 159,288 B |
| e889beaba285e667… | AWB Docx.cab | cab | Loki | 2022-06-29 | 633,054 B |
| 94fa80c133c152ab… | Payment Copy.docx | doc | Loki | 2022-06-15 | 10,327 B |
| 0aadc47fb5644a46… | lifehacks_6582318243.docx | docx | Dridex | 2021-12-02 | 488,596 B |