| d0de0414d9280bef… | Description of items.js | js | XWorm | 2026-07-23 | 2,577,047 B |
| f541b3c75def48c7… | StartupScript_4597ca55.cmd | cmd | XWorm | 2026-05-20 | 33,933 B |
| 6a7fcdcfef6ee8db… | AWB524967.scr | exe | GuLoader | 2026-03-31 | 603,417 B |
| 0aaff85b11f5cc59… | screenshot1_915162331.jpeg.exe | exe | XWorm | 2026-03-23 | 776,252 B |
| 9664aa64777f25cf… | Screenshot 04-03-2026.lnk | lnk | Stealc | 2026-03-05 | 1,475 B |
| 25f61301b51a5fbd… | Screenshot 04-03-2026.lnk | lnk | Stealc | 2026-03-05 | 1,183 B |
| 55a5544e47bde8e5… | pseudepiscopacy.scr | exe | GuLoader | 2025-12-04 | 513,024 B |
| bd8ff6ebbd58786c… | INV CAT-26104.pdf.scr | exe | GuLoader | 2025-11-12 | 852,984 B |
| 064da61a5e7ee28b… | PROOF-OF-PAYMENT.scr | exe | GuLoader | 2025-09-30 | 944,408 B |
| de8f73afa5a50d50… | Justificante pago Factura 3049.scr | exe | GuLoader | 2025-09-24 | 880,520 B |
| cd9b74c85f023644… | FakeIDCardsCreator.exe | exe | Amadey | 2025-05-29 | 11,221,504 B |
| 614125ef1289a655… | script.exe | exe | LummaStealer | 2025-04-26 | 989,184 B |
| f2f20d4232da128f… | script.a3x | a3x | DarkGate | 2024-12-14 | 596,624 B |
| c98d70e7d8a6f73c… | Cooperation Agreement.scr | exe | LummaStealer | 2024-09-05 | 13,154,344 B |
| f733dd11b0014eb7… | FedEx Shipping Document.scr | exe | AZORult | 2024-08-27 | 613,384 B |
| e173dd358ec750f5… | death.ΓÇ«gpj.scr | exe | LockBit | 2024-08-02 | 477,736 B |
| 2f05419f0baf87fe… | script.a3x | a3x | DarkGate | 2024-05-14 | 559,792 B |
| 42b6480c1547bf38… | script.a3x | a3x | DarkGate | 2024-05-07 | 509,828 B |
| 86e17aa882c690ed… | Document.doc.scr | exe | LockBit | 2024-04-24 | 199,168 B |
| 1c4d704dcf8a341a… | script.ahk | unknown | DarkGate | 2024-04-16 | 441 B |
| 78b3702f5c0f7efd… | script.au3 | au3 | DarkGate | 2024-01-24 | 477,940 B |
| 4ba483fde18e3600… | script.au3 | au3 | DarkGate | 2024-01-24 | 481,658 B |
| a86cd95594771888… | script.au3 | au3 | DarkGate | 2024-01-24 | 481,964 B |
| 46c5ed90e3d6b8bc… | script.au3 | au3 | DarkGate | 2024-01-24 | 480,884 B |
| b13b795f369654dd… | script.au3 | au3 | DarkGate | 2023-11-03 | 501,150 B |
| 6c4e944ed4aff9e0… | deobfuscated_script.js | js | Gozi | 2023-09-15 | 9,601 B |
| a08fc81cd189984d… | Microstrategy - Global bank screen_16Mar | xlsx | TrickBot | 2023-03-17 | 195,748 B |
| f2bf00d0e3d2462f… | script | ps1 | Gozi | 2022-12-07 | 209 B |
| 032fda43e5102e80… | screen.xls | xls | ZLoader | 2022-04-24 | 36,864 B |
| 5b33e1de431d3e2f… | script | unknown | Gozi | 2022-03-23 | 198 B |
| 7fbc7d878232d856… | subscription06679735.xlsb | xlsx | Dridex | 2021-12-03 | 117,280 B |
| 18056aac2b2166e4… | subscription0281528.xlsb | xlsx | Dridex | 2021-11-29 | 122,821 B |
| a49506cf573f268c… | subscription-45168038.xlsb | xlsx | Dridex | 2021-11-29 | 116,382 B |
| c9fa7a8c2ac44adf… | subscription374394.xlsb | xlsx | Dridex | 2021-11-29 | 107,008 B |
| 63ce1d00cc40a787… | subscription-068379.xlsb | xlsx | Dridex | 2021-11-26 | 70,697 B |
| a5e556540ab8d540… | subscription_1515911.xlsb | xlsx | Dridex | 2021-11-26 | 84,148 B |
| 1c5932f1fc2c9fa6… | subscription_080941.xlsb | xlsx | Dridex | 2021-11-26 | 88,239 B |
| 98f655b81232dc9c… | subscription_83558.xlsb | xlsx | Dridex | 2021-11-26 | 69,088 B |
| 115e3c2177c76253… | subscription60547.xlsb | xlsx | Dridex | 2021-11-24 | 69,799 B |
| a280bd9dda5d7761… | subscription-84799.xlsb | xlsx | Dridex | 2021-11-24 | 68,064 B |
| 444a0953b513aaad… | subscription-673890410.xlsb | xlsx | Dridex | 2021-11-24 | 70,272 B |
| 408c9e9613bc8de7… | loader script | unknown | TrickBot | 2021-08-18 | 256 B |
| 83fb67804fa25e79… | price CFR Hai phong port.scr.exe | exe | AZORult | 2021-07-29 | 419,766 B |
| cf0de0c3ff0e337e… | prescribe .07.21.doc | doc | TrickBot | 2021-07-15 | 89,576 B |
| 99cf59c32e63c462… | Invoice-7005123.scr | exe | Loki | 2021-04-21 | 439,800 B |
| dfe54a5cc97c3d0b… | SecuriteInfo.com.Trojan.Script.Generic.1 | xlsx | ZLoader | 2020-09-30 | 39,424 B |
| c8dc8ebef199b27a… | SecuriteInfo.com.Trojan.Script.Generic.5 | xlsx | ZLoader | 2020-09-30 | 39,936 B |
| 6d11d6a32bda7d7f… | SecuriteInfo.com.Trojan.Script.Generic.2 | xlsx | ZLoader | 2020-09-22 | 150,528 B |
| baa6456247affe4c… | SecuriteInfo.com.Trojan.Script.Generic.1 | xlsx | ZLoader | 2020-09-21 | 145,408 B |
| 480e24e75c71c5a6… | SecuriteInfo.com.Trojan.Script.Generic.1 | xlsx | ZLoader | 2020-09-21 | 146,944 B |