| SHA256 | Name | Type | Signature / Family | First Seen | Size |
|---|---|---|---|---|---|
| 0fdcf90171bae4a3… | stage6.vbs | vbs | - | 2026-09-10 | 369,261 B |
| ee2bb60a2b980442… | stage2_decrypted.js | js | - | 2026-08-30 | 591,691 B |
| 29e0a374d9b78614… | stage1.ps1 | ps1 | - | 2026-08-26 | 1,873 B |
| 502d7eca58b9d3ad… | stager.ps1 | ps1 | - | 2026-07-06 | 715 B |
| e6d3a52f44ffda39… | stage.ps1 | ps1 | - | 2026-06-25 | 128 B |
| 07dcf848c4af8eac… | stager.ps1 | ps1 | DonutLoader | 2026-06-02 | 994 B |
| 4800f0259853c7f5… | nextstage.ps1 | ps1 | Amadey | 2025-10-03 | 9,390,907 B |
| 5aead2773474aa64… | stage2.exe | exe | LummaStealer | 2025-06-10 | 333,824 B |
| 39289d15b69d40f7… | 20230621_lastStage.bin | dll | Gozi | 2023-06-21 | 57,344 B |
| 69d646441885a01d… | stage_2gozi.dll | dll | Gozi | 2023-03-21 | 39,936 B |
| 88adde1c67af1d13… | 2nd-stage.dll | dll | Gozi | 2023-01-31 | 111,104 B |
| 1d1c844dbe07f096… | staged_dll_http.dll | exe | CobaltStrike | 2022-04-01 | 17,408 B |
| 5508c235113e3822… | RedLine_stage2.exe | exe | RedLineStealer | 2021-09-26 | 192,944 B |
| 2fe3f6fc8b9b9f4d… | RedLine_Stage4.exe | exe | RedLineStealer | 2021-09-26 | 120,832 B |