| 136f43e74a23ebcf… | 136f43e74a23ebcff091527c02ddd9367f2554ac | exe | Cobalt Strike | 2026-10-30 | 698,880 B |
| dfc45c4f5c47878f… | Xenos.exe | exe | - | 2026-10-28 | 374,272 B |
| 49bcc0a6fa25f1d0… | tree.exe | exe | RemcosRAT | 2026-10-26 | 480,768 B |
| 5ff753b070e7f442… | 沈阳地铁官方网站运维使用手册v1.4(北京晨阳科技有限公司2023年9月制v1. | exe | CobaltStrike | 2026-09-19 | 3,126,272 B |
| 89d0f591a743900b… | 89d0f591a743900b2b3922b63d223de7347f909c | exe | Stealc | 2026-09-18 | 797,696 B |
| 1f423c42e631e5b5… | 1f423c42e631e5b57350566821bc0561f9105ec4 | exe | Stealc | 2026-09-18 | 797,696 B |
| 9eb7a6a0199d3790… | 9eb7a6a0199d37909f2d682d9dff839cc6e335d1 | exe | Stealc | 2026-09-18 | 797,696 B |
| af23e31dddd570b2… | af23e31dddd570b2747feff467157e265c1a6627 | exe | Stealc | 2026-09-18 | 797,696 B |
| 0e0f6e98af559b30… | Overexposure.apk | apk | - | 2026-09-17 | 9,073,867 B |
| 0a53ab4c4ba552e6… | VibeXVIP.apk | apk | - | 2026-09-17 | 20,972,657 B |
| 4e3af6e4126a5d84… | ТОО «Saruzhan KZ»_Order_180094817092026_ | vbs | LxBaseRAT | 2026-09-17 | 372,046 B |
| 852d3f10c8d6324a… | ΑΠΟΔΕΙΞΗ ΠΑΡΑΔΟΣΗΣ.vbs | vbs | LxBaseRAT | 2026-09-17 | 3,009,724 B |
| 16e5bc0d684d1745… | vfpjvxaj.JS | js | AgentTesla | 2026-09-17 | 4,329,475 B |
| 3d717f14093fc40c… | PROPOSED_FRAMEWORK_DESIGN_DEMENSION.js | js | LxBaseRAT | 2026-09-17 | 1,280,208 B |
| 6839aec150db76e5… | ĐƠN HÀNG MỚI.js | js | LxBaseRAT | 2026-09-17 | 1,283,707 B |
| 7cd0a912696add8b… | ESAPRequest_fquotation.JS | js | XWorm | 2026-09-17 | 3,455,013 B |
| 4d6277a69db80b92… | JS2.js | js | XWorm | 2026-09-17 | 5,519,830 B |
| 0097150be945c41e… | XScan17901RF.JS | js | XWorm | 2026-09-17 | 3,779,707 B |
| 3c3548771958a554… | whеlосitуХХ64-v.3.217.exe | exe | Vidar | 2026-09-17 | 5,985,216 B |
| e9cd0d2924e8c398… | SecuriteInfo.com.X97M.DownLoader.2343.27 | xlsx | TrickBot | 2026-09-17 | 158,208 B |
| 3103a55e5f39fe47… | xupr.hydra-modilimitado.apk | apk | - | 2026-09-16 | 37,465,567 B |
| cf4cd52d002d27e0… | XOR_Loader.exe | exe | Vidar | 2026-09-16 | 1,175,040 B |
| 5bae7e992228ae84… | FedEx_Shipment_Doc.rar | rar | - | 2026-09-16 | 770,087 B |
| 19823c1ac3847ec7… | PO 20373.vbs | vbs | LxBaseRAT | 2026-09-15 | 1,022,552 B |
| 883cbc1c488dde26… | DOC-269015-006754AT.DOCX.vbs | vbs | Formbook | 2026-09-15 | 815,364 B |
| 982293f2b322088b… | Fedex268534836_pdf.vbs | vbs | - | 2026-09-15 | 42,973,314 B |
| 608ffc819d6369b8… | ORDER-260915-007868.DOCX.vbs | vbs | Formbook | 2026-09-15 | 924,530 B |
| 3860906a1321b987… | FedEx_AWB_5678987.js | js | RemcosRAT | 2026-09-15 | 43,393,516 B |
| 21563c89eba5552b… | FedEx shipping_Doc6474637.js | js | - | 2026-09-15 | 38,634,990 B |
| 7fa77e3669118b0f… | Purchase Inquiry for Attached Product_0W | js | LxBaseRAT | 2026-09-15 | 1,270,652 B |
| 8fdd20f919919a45… | BIÊN LAI GIAO HÀNG..js | js | LxBaseRAT | 2026-09-15 | 1,276,196 B |
| 54bb7a5945f2c3e6… | BIÊN LAI GIAO HÀNG.c.js | js | LxBaseRAT | 2026-09-15 | 1,280,312 B |
| f9c9af68c10c0e3a… | FedEx_Shipment_Doc.js | js | RemcosRAT | 2026-09-15 | 38,620,748 B |
| 66aa9a4f2b57ce3a… | OrderC54200979.xls | xls | - | 2026-09-15 | 807,424 B |
| 25b58b838162c795… | Свифт 1509026.js | js | XWorm | 2026-09-15 | 636,167 B |
| 7c388bfc8638159a… | Factura pendiente de pago.exe | exe | XWorm | 2026-09-15 | 125,952 B |
| 958f2b36bdddb666… | Setup.exe | exe | Vidar | 2026-09-15 | 6,585,792 B |
| 1bcfd2a841c6df34… | ORDER-269140-79868AP.DOCX.vbs | vbs | Formbook | 2026-09-14 | 813,616 B |
| 604495eeedb9f412… | FedEx_AWB_456789.js | js | RemcosRAT | 2026-09-14 | 21,809,258 B |
| 0cd320ac002f3f4e… | FedEx shipping Doc.js | js | PureLogsStealer | 2026-09-14 | 18,579,798 B |
| d25ce1de6e2166dc… | BIÊN LAI GIAO HÀNG.js | js | LxBaseRAT | 2026-09-14 | 1,264,007 B |
| 9ffcc473076a03e3… | FedEx_customs_Doc.js | js | RemcosRAT | 2026-09-14 | 17,540,884 B |
| d7ef43fc5e665d8d… | FedEx_AWB_456789.js | js | - | 2026-09-14 | 19,638,510 B |
| 98f47f9d835386ae… | QUOTATION [PSMTC109335A] 83001-26 - POWE | exe | XWorm | 2026-09-14 | 914,432 B |
| a98ee9b73ce89a1a… | MAT-150-526-AN PDF.JS | js | XWorm | 2026-09-14 | 2,594,098 B |
| 4d11737fffa17df4… | F12890.js | js | XWorm | 2026-09-14 | 733,086 B |
| 4c961419d68e77aa… | Confirmacion de pago.js | js | XWorm | 2026-09-14 | 17,435,278 B |
| 0df31ae16304556f… | whуlосitуХ64-v.9.911.exe | exe | Vidar | 2026-09-14 | 7,059,856 B |
| 1ebacc785bde14b8… | viсеlосitуХ64-v.8.861.exe | exe | Vidar | 2026-09-13 | 5,719,408 B |
| 6d22eee58d714dd3… | Bootstaraple_2.0.12.1782.exe | exe | Vidar | 2026-09-13 | 11,564,920 B |