| SHA256 | Name | Type | Signature / Family | First Seen | Size |
|---|---|---|---|---|---|
| 2312ae3c94e311c8… | SWIFT COPY_TXT.JS | js | DonutLoader | 2026-09-08 | 11,993,345 B |
| 432d02c9cae47063… | cert.txt | lua | SmartLoader | 2026-06-15 | 354,771 B |
| 5ffd86adef74a4ee… | New_Order.txt.vbs | vbs | - | 2026-05-21 | 17,305 B |
| af5bc8fc2df1debf… | Password.txt.lnk | lnk | XWorm | 2026-04-17 | 1,325 B |
| cb14c05efa0cecbb… | death.txt | bat | - | 2026-03-19 | 6,149 B |
| 25a341cfe3de1044… | DiscordBot.txt | bat | QuasarRAT | 2026-01-26 | 691,205 B |
| 5469a41e3e13d805… | trade.txt.lnk | lnk | Stealc | 2025-10-23 | 1,730 B |
| c8ebdb9d8aed9667… | detail.txt.lnk | lnk | Stealc | 2025-10-23 | 1,728 B |
| 0f6998c8df794ca2… | 123.txt.ps1 | ps1 | LummaStealer | 2025-05-15 | 17,777 B |
| a8e1ceb70062c09b… | remcoss.txt | unknown | RemcosRAT | 2024-08-26 | 659,456 B |
| 87ac13ac12bef9b6… | Informazioni.txt | url | Gozi | 2023-10-09 | 192 B |
| 2617651bf6fed3ab… | TJLAFI20.txt | unknown | LummaStealer | 2023-08-02 | 100 B |
| dbb80ac555af3436… | PowerShell .txt | ps1 | - | 2023-05-15 | 7,543 B |
| 85c3946865956212… | Direzione txt url | url | Gozi | 2023-03-15 | 195 B |
| 60421cb9998dc07e… | AgenziaEntrate txt url | url | Gozi | 2023-03-15 | 195 B |
| c80b9eaec3324930… | impresa txt url | url | Gozi | 2023-03-14 | 195 B |
| 67f14cb9d372a7a2… | azienda txt url | url | Gozi | 2023-03-14 | 195 B |
| f7b7f524138f10ad… | contratto txt url | url | Gozi | 2023-03-14 | 192 B |
| 817a6a44fcdbdf05… | 192.210.240.101_Cards_Credits.txt | txt | - | 2022-08-30 | 4,873 B |