################################################################ # ThreatFox IOCs: recent MD5 hashes - CSV format # # Last updated: 2025-09-26 23:30:50 UTC # # # # Terms Of Use: https://threatfox.abuse.ch/faq/#tos # # For questions please contact threatfox [at] abuse.ch # ################################################################ # # "first_seen_utc","ioc_id","ioc_value","ioc_type","threat_type","fk_malware","malware_alias","malware_printable","last_seen_utc","confidence_level","reference","tags","anonymous","reporter" "2025-09-26 23:30:50", "1602600", "3d52078b10a5b3217be92c21d06b3923", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "None", "None", "0", "Grim" "2025-09-26 23:30:49", "1602597", "8b1bbbbac27e285bff9ddeb2773e4859", "md5_hash", "payload", "win.hijackloader", "DOILoader,GHOSTPULSE,IDAT Loader,SHADOWLADDER", "HijackLoader", "", "95", "None", "None", "0", "Grim" "2025-09-26 23:30:48", "1602594", "42f28fac2390c91f803fbac891b0dbfa", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "None", "None", "0", "Grim" "2025-09-26 23:30:41", "1602591", "2e00774b055bb4dac7de33b0bcd1bd65", "md5_hash", "payload", "win.asyncrat", "None", "AsyncRAT", "", "95", "None", "None", "0", "Grim" "2025-09-26 23:30:40", "1602588", "3359a50481f5645286a18a3430634079", "md5_hash", "payload", "win.aurotun_stealer", "None", "Aurotun Stealer", "", "95", "None", "None", "0", "Grim" "2025-09-26 23:30:39", "1602585", "c8077bfe8e217eb160a34f3aa7d86d1d", "md5_hash", "payload", "win.gcleaner", "None", "GCleaner", "", "95", "None", "None", "0", "Grim" "2025-09-26 23:30:38", "1602582", "bbcd4d282f1326ed3b2acb2fc05de8cb", "md5_hash", "payload", "win.ghost_rat", "Farfli,Gh0st RAT,PCRat", "Ghost RAT", "", "95", "None", "None", "0", "Grim" "2025-09-26 23:30:37", "1602579", "9e5ef29b20d6d3d5cf4e35b12d60b172", "md5_hash", "payload", "win.agent_tesla", "AgenTesla,AgentTesla,Negasteal", "Agent Tesla", "", "95", "None", "None", "0", "Grim" "2025-09-26 23:30:36", "1602576", "e928cda8eb5465fbe86c25dcf32d3a7c", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "None", "None", "0", "Grim" "2025-09-26 23:30:35", "1602573", "17e1479708535b21cb8150b484653e68", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "None", "None", "0", "Grim" "2025-09-26 23:30:34", "1602570", "84c1b837882e018491d8d09f474c8e1e", "md5_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "", "95", "None", "None", "0", "Grim" "2025-09-26 23:30:32", "1602567", "715e7dd3c707f270cdcf253987f841b9", "md5_hash", "payload", "win.aurotun_stealer", "None", "Aurotun Stealer", "", "95", "None", "None", "0", "Grim" "2025-09-26 23:30:31", "1602564", "c18614012f47dc3bbe2b62db87808aac", "md5_hash", "payload", "win.coinminer", "None", "Coinminer", "", "95", "None", "None", "0", "Grim" "2025-09-26 23:30:30", "1602561", "fbf63b20a9cf385713171b2883b85e07", "md5_hash", "payload", "win.rhadamanthys", "None", "Rhadamanthys", "", "95", "None", "None", "0", "Grim" "2025-09-26 23:30:29", "1602558", "e74a1c7981521ba8fee11f596f8fa626", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "None", "None", "0", "Grim" "2025-09-26 23:30:28", "1602555", "a643bcfd5f40f8b07df5ceb38acc1b8a", "md5_hash", "payload", "win.stealc", "None", "Stealc", "", "95", "None", "None", "0", "Grim" "2025-09-26 23:30:27", "1602552", "23898d6777cd7fc0e96956e296c0f87c", "md5_hash", "payload", "win.rhadamanthys", "None", "Rhadamanthys", "", "95", "None", "None", "0", "Grim" "2025-09-26 23:30:26", "1602549", "fd774fe3436bf9bb7135699461a34aef", "md5_hash", "payload", "win.stealc", "None", "Stealc", "", "95", "None", "None", "0", "Grim" "2025-09-26 23:30:25", "1602546", "71d635bfd642b1b9fbb6ceb86a3ef77d", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "None", "None", "0", "Grim" "2025-09-26 23:30:24", "1602543", "a27262e393d5bb1a922b4979d3c6ee7b", "md5_hash", "payload", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "", "95", "None", "None", "0", "Grim" "2025-09-26 23:30:23", "1602540", "f3e7911858dda7a6ecf97af313841223", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "None", "None", "0", "Grim" "2025-09-26 23:30:22", "1602537", "e6d632d9d8f14c4d7e71c01dffe63a9d", "md5_hash", "payload", "win.riseloader", "None", "RiseLoader", "", "95", "None", "None", "0", "Grim" "2025-09-26 23:30:21", "1602534", "20112e421939007414b399ac72e87fbe", "md5_hash", "payload", "win.riseloader", "None", "RiseLoader", "", "95", "None", "None", "0", "Grim" "2025-09-26 23:30:20", "1602531", "d79c06c34d41c8132c674898a509031c", "md5_hash", "payload", "win.riseloader", "None", "RiseLoader", "", "95", "None", "None", "0", "Grim" "2025-09-26 23:30:19", "1602528", "a188f2c429734fb193fcd29eadfd69f9", "md5_hash", "payload", "win.riseloader", "None", "RiseLoader", "", "95", "None", "None", "0", "Grim" "2025-09-26 23:30:18", "1602526", "c7fdc8720d2ca344ea987c963d56c4d7", "md5_hash", "payload", "win.riseloader", "None", "RiseLoader", "", "95", "None", "None", "0", "Grim" "2025-09-26 23:30:17", "1602523", "3411fb6f74583251ac0f556d10d80fba", "md5_hash", "payload", "win.guidloader", "None", "GUIDLOADER", "", "95", "None", "None", "0", "Grim" "2025-09-26 23:30:16", "1602520", "dd3135292600448019bc1282049a58c3", "md5_hash", "payload", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "", "95", "None", "None", "0", "Grim" "2025-09-26 23:30:15", "1602517", "0e381afc008186ad18cf2b9eda451008", "md5_hash", "payload", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "", "95", "None", "None", "0", "Grim" "2025-09-26 23:30:13", "1602514", "fd817202314d4067c2dc9c51d98f0268", "md5_hash", "payload", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "", "95", "None", "None", "0", "Grim" "2025-09-26 23:30:12", "1602511", "121bb22209964b7d4af9242134ae594c", "md5_hash", "payload", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "", "95", "None", "None", "0", "Grim" "2025-09-26 23:30:11", "1602508", "ddd256fb71e5219a0aadde0a2d0d273c", "md5_hash", "payload", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "", "95", "None", "None", "0", "Grim" "2025-09-26 23:30:10", "1602505", "aa7af6e9c17ab8eaada64d232c14853f", "md5_hash", "payload", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "", "95", "None", "None", "0", "Grim" "2025-09-26 23:30:09", "1602502", "589796c940aac07e9389b60fbf3f7523", "md5_hash", "payload", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "95", "None", "None", "0", "Grim" "2025-09-26 23:30:08", "1602499", "bbdb6987daa7635e764c134b580d28a4", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "", "95", "None", "None", "0", "Grim" "2025-09-26 23:30:06", "1602496", "b78add2b21a1fb324fc492c196458c09", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "None", "None", "0", "Grim" "2025-09-26 23:30:05", "1602493", "e9152fa33c5a23f1d15235049bf45a77", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "", "95", "None", "None", "0", "Grim" "2025-09-26 23:30:04", "1602490", "eef01da8c18de3fc7869717f93721038", "md5_hash", "payload", "win.strelastealer", "None", "StrelaStealer", "", "95", "None", "None", "0", "Grim" "2025-09-26 23:30:02", "1602487", "f9b958386d28f258867e0b92be151e09", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "", "95", "None", "None", "0", "Grim" "2025-09-26 23:30:00", "1602484", "60de389f7de9d3dc7489f9413a3fb69c", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "", "95", "None", "None", "0", "Grim" "2025-09-26 23:29:59", "1602481", "4084e3f2ebf7a4b1618eb9c57416fe6b", "md5_hash", "payload", "win.vipkeylogger", "None", "VIP Keylogger", "", "95", "None", "None", "0", "Grim" "2025-09-26 23:29:58", "1602478", "89ff15bae1bc050ba6e57fd659e764c2", "md5_hash", "payload", "win.troystealer", "None", "troystealer", "", "95", "None", "None", "0", "Grim" "2025-09-26 23:29:57", "1602475", "ca5d5c31c3ebd26d1d8ddbe68e41cc2b", "md5_hash", "payload", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "95", "None", "None", "0", "Grim" "2025-09-26 23:29:56", "1602472", "064e9a4c9c67f25501dc43834c44d5a5", "md5_hash", "payload", "win.xenorat", "None", "XenoRAT", "", "95", "None", "None", "0", "Grim" "2025-09-26 23:29:55", "1602469", "709c5b5d53f5ef3eccb8dc4329ba9d2c", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "", "95", "None", "None", "0", "Grim" "2025-09-26 23:29:54", "1602466", "1036d6b51f3684aa656eca637debc828", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "", "95", "None", "None", "0", "Grim" "2025-09-26 23:29:53", "1602463", "01239e83b8d41459d5fa6ebf0f1dcf8f", "md5_hash", "payload", "win.xworm", "None", "XWorm", "", "95", "None", "None", "0", "Grim" "2025-09-26 23:29:52", "1602460", "04351d5139488559740d6218f9c4b866", "md5_hash", "payload", "win.xworm", "None", "XWorm", "", "95", "None", "None", "0", "Grim" "2025-09-26 23:29:51", "1602457", "e88e85a581edead861fcc4971768572d", "md5_hash", "payload", "win.guidloader", "None", "GUIDLOADER", "", "95", "None", "None", "0", "Grim" "2025-09-26 23:29:50", "1602454", "1fabfe9a9dd908094b136392335f62a5", "md5_hash", "payload", "win.agent_tesla", "AgenTesla,AgentTesla,Negasteal", "Agent Tesla", "", "95", "None", "None", "0", "Grim" "2025-09-26 23:29:49", "1602451", "6aac2e3bc489cff895916cfc1ea83242", "md5_hash", "payload", "win.agent_tesla", "AgenTesla,AgentTesla,Negasteal", "Agent Tesla", "", "95", "None", "None", "0", "Grim" "2025-09-26 23:29:48", "1602448", "763f68a401d716378a6a55afef4b85c4", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "", "95", "None", "None", "0", "Grim" "2025-09-26 23:29:47", "1602445", "b3e1780b8689a4eb78f60dc8df092d8d", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "", "95", "None", "None", "0", "Grim" "2025-09-26 23:29:46", "1602442", "37db8c3cb65ff828a913a7241870f866", "md5_hash", "payload", "win.catchamas", "None", "Catchamas", "", "95", "None", "None", "0", "Grim" "2025-09-26 23:29:45", "1602439", "c343a325cf03540783ae8b0993a19dd1", "md5_hash", "payload", "win.asyncrat", "None", "AsyncRAT", "", "95", "None", "None", "0", "Grim" "2025-09-26 23:29:44", "1602436", "5cec1a673a56672290a4441f1ced1d1c", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "", "95", "None", "None", "0", "Grim" "2025-09-26 23:29:43", "1602433", "052b967fdd2a0e8ff6290800d2c59d93", "md5_hash", "payload", "win.agent_tesla", "AgenTesla,AgentTesla,Negasteal", "Agent Tesla", "", "95", "None", "None", "0", "Grim" "2025-09-26 23:29:42", "1602430", "d1ce0a314b019d9d1695350b740f7630", "md5_hash", "payload", "win.rhadamanthys", "None", "Rhadamanthys", "", "95", "None", "None", "0", "Grim" "2025-09-26 23:29:41", "1602427", "46c74b5220accd634126f908b2172d1f", "md5_hash", "payload", "win.salatstealer", "None", "SalatStealer", "", "95", "None", "None", "0", "Grim" "2025-09-26 23:29:40", "1602424", "6bd109e087910300bdafa55154df2831", "md5_hash", "payload", "win.salatstealer", "None", "SalatStealer", "", "95", "None", "None", "0", "Grim" "2025-09-26 23:29:39", "1602421", "eb3f16e236545da03c58202e6003d70b", "md5_hash", "payload", "win.xworm", "None", "XWorm", "", "95", "None", "None", "0", "Grim" "2025-09-26 23:29:38", "1602418", "ea79195fe9790fdeef5e3e8d33b2cded", "md5_hash", "payload", "win.xworm", "None", "XWorm", "", "95", "None", "None", "0", "Grim" "2025-09-26 23:29:37", "1602415", "e1961dcbe3664231d9affd0ddc5cabd2", "md5_hash", "payload", "win.agent_tesla", "AgenTesla,AgentTesla,Negasteal", "Agent Tesla", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:33:11", "1601807", "c99733010bf11a734c153e70b88eaa09", "md5_hash", "payload", "win.krakenkeylogger", "None", "KrakenKeylogger", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:33:10", "1601804", "295da332ce2cd1b25724b8c6fdad3854", "md5_hash", "payload", "win.krakenkeylogger", "None", "KrakenKeylogger", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:33:09", "1601801", "8da4c0ab7c022b25277d3a0cad21798d", "md5_hash", "payload", "win.krakenkeylogger", "None", "KrakenKeylogger", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:33:08", "1601798", "0477339311e1e0690a2ce400de5a25dc", "md5_hash", "payload", "win.redline_stealer", "RECORDSTEALER", "RedLine Stealer", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:33:07", "1601795", "0450cbe9cf426f9857131d4730ca898e", "md5_hash", "payload", "win.xworm", "None", "XWorm", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:33:06", "1601792", "c6c8dc34fd2735beab6bb1f8609bc67b", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:33:05", "1601789", "c48b806b5553a48b2f73b88d714ce6ca", "md5_hash", "payload", "win.troystealer", "None", "troystealer", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:33:04", "1601786", "fcb24423bcb5913809a33911443558ec", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:33:02", "1601783", "99c3184e60f6f0eed2157faa34735939", "md5_hash", "payload", "win.agent_tesla", "AgenTesla,AgentTesla,Negasteal", "Agent Tesla", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:33:01", "1601780", "8c824758d17ace05063668722b3109e6", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:33:00", "1601777", "f4eada0743d985d936f9ba3902a44f20", "md5_hash", "payload", "win.guidloader", "None", "GUIDLOADER", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:32:59", "1601774", "3ea5dc223fef0d8d959f3be548c4be64", "md5_hash", "payload", "win.masslogger", "None", "MASS Logger", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:32:58", "1601771", "5f36f9f448681a12e0d097dd37b4ddaa", "md5_hash", "payload", "win.guidloader", "None", "GUIDLOADER", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:32:57", "1601768", "0c14cdb4498258b007bf52acdabccf3a", "md5_hash", "payload", "win.krakenkeylogger", "None", "KrakenKeylogger", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:32:56", "1601765", "349b587a16492e9fa485fc5bfe4b3a8b", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:32:55", "1601762", "d122e2191fa117e0de511bd9707d197e", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:32:54", "1601759", "6e9b5aafe76978c72754cd13228a4bb4", "md5_hash", "payload", "win.krakenkeylogger", "None", "KrakenKeylogger", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:32:52", "1601756", "208ce31d7b37d17d069859f3ef0ea3c0", "md5_hash", "payload", "win.krakenkeylogger", "None", "KrakenKeylogger", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:32:51", "1601753", "d3748f7cb99d9d8ad8bda106fa6c6523", "md5_hash", "payload", "win.troystealer", "None", "troystealer", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:32:50", "1601750", "fcc62dc776526cc0f9e6c7edafcb2594", "md5_hash", "payload", "win.darkcloud", "None", "DarkCloud Stealer", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:32:49", "1601747", "cc38769ded7b2c6959c3199c84f8db91", "md5_hash", "payload", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:32:48", "1601744", "7ae9d64c120cf88a5d8079ec2542ca93", "md5_hash", "payload", "win.strelastealer", "None", "StrelaStealer", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:32:47", "1601741", "f632077cdacca6b399cc8a2a4a3b4c69", "md5_hash", "payload", "win.guidloader", "None", "GUIDLOADER", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:32:46", "1601738", "1eb5183cfd3ff79750be9dafbb56b7e8", "md5_hash", "payload", "win.masslogger", "None", "MASS Logger", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:32:45", "1601735", "6ebaea392ba661d3408653fef0037de6", "md5_hash", "payload", "win.masslogger", "None", "MASS Logger", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:32:44", "1601732", "2a896010e623f15fcda22dabce50fb40", "md5_hash", "payload", "win.strelastealer", "None", "StrelaStealer", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:32:43", "1601729", "e50e52bb9030e2900952d0768eb848a4", "md5_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:32:42", "1601726", "bb525f68da6fb8dfbe4dc44e33e1193d", "md5_hash", "payload", "win.xworm", "None", "XWorm", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:32:41", "1601723", "5515b2a1e61f448da9e045a8c5f2f568", "md5_hash", "payload", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:32:40", "1601720", "4d0ad8db3f658ad728de8db951f50b11", "md5_hash", "payload", "win.younglotus", "DarkShare", "YoungLotus", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:32:39", "1601717", "e0ccab18854569e47da189b78d084c35", "md5_hash", "payload", "win.webmonitor", "RevCode", "WebMonitor RAT", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:32:38", "1601714", "88a3db0853d92216b7a7f51519fe84f9", "md5_hash", "payload", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:32:36", "1601711", "c312a0067b8196b424eebec08357b21f", "md5_hash", "payload", "win.darkcloud", "None", "DarkCloud Stealer", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:32:35", "1601708", "c1cb4d98ea54d5408552509bba7dbf3c", "md5_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:32:34", "1601705", "7c107980477e32710046110944825718", "md5_hash", "payload", "win.rhadamanthys", "None", "Rhadamanthys", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:32:33", "1601702", "537ab20edc2a55ad778a59c3e75cadff", "md5_hash", "payload", "win.xworm", "None", "XWorm", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:32:32", "1601699", "c96f6c650dbfc1e4ad98a4ca9c5c450d", "md5_hash", "payload", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:32:31", "1601696", "328b2a460796db04f3d3f93963f4b629", "md5_hash", "payload", "win.salatstealer", "None", "SalatStealer", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:32:30", "1601693", "0755252c826a1427e4599d22c5fee3f8", "md5_hash", "payload", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:32:29", "1601690", "d8dd3e5331bc7797a7546646943d90b3", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:32:28", "1601687", "437618b22ef7ebb31d7bc51f23913e03", "md5_hash", "payload", "win.guidloader", "None", "GUIDLOADER", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:32:27", "1601684", "05c44962b40691d3412a4fcd323a744c", "md5_hash", "payload", "win.guidloader", "None", "GUIDLOADER", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:32:26", "1601681", "e349bd0463a61bf87242406f640d5524", "md5_hash", "payload", "win.krakenkeylogger", "None", "KrakenKeylogger", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:32:25", "1601678", "05afb0178ad592dc3c3d1d7f3918fd0c", "md5_hash", "payload", "win.xworm", "None", "XWorm", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:32:23", "1601675", "d0d99f924c84ff411dbf2f1fd25522e8", "md5_hash", "payload", "win.ghostsocks", "None", "GhostSocks", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:32:22", "1601672", "bbddcf46a8de309d9db1fc791e658268", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:32:21", "1601669", "25bdc29533d15c9f924b552f2ed516e5", "md5_hash", "payload", "win.asyncrat", "None", "AsyncRAT", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:32:20", "1601666", "8bd8b136dfc009d363ef772240caf48b", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:32:19", "1601663", "375cb8055313196662a03052caed2aef", "md5_hash", "payload", "win.krakenkeylogger", "None", "KrakenKeylogger", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:32:18", "1601660", "a171547aae102d6f86c16b4e2df316e9", "md5_hash", "payload", "win.agent_tesla", "AgenTesla,AgentTesla,Negasteal", "Agent Tesla", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:32:17", "1601657", "01d319e60594476bd85df1e23a8bb470", "md5_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:32:16", "1601654", "885111915715be36ce385456d8d9b6af", "md5_hash", "payload", "win.aurotun_stealer", "None", "Aurotun Stealer", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:32:15", "1601651", "906b09a84d70168d24a168566bd884a2", "md5_hash", "payload", "win.stealc", "None", "Stealc", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:32:14", "1601648", "16771ad1d7491ef2b9904b844fa9f5bb", "md5_hash", "payload", "win.masslogger", "None", "MASS Logger", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:32:13", "1601645", "22c7dd608f4c8cf8b126354e4ce1498b", "md5_hash", "payload", "win.masslogger", "None", "MASS Logger", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:32:12", "1601642", "e37ecf304ac846c03cdb04fa6cbfe1dd", "md5_hash", "payload", "win.strelastealer", "None", "StrelaStealer", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:32:10", "1601639", "76b073332f2bc4233e24dd9a3031be93", "md5_hash", "payload", "win.masslogger", "None", "MASS Logger", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:32:09", "1601636", "331353c2ef0400a7df1469526aae5f96", "md5_hash", "payload", "win.masslogger", "None", "MASS Logger", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:32:08", "1601633", "1508fc0c1388b4ecede098e585c8e5eb", "md5_hash", "payload", "win.masslogger", "None", "MASS Logger", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:32:07", "1601630", "4b8d613611a862def046214154911f3b", "md5_hash", "payload", "win.masslogger", "None", "MASS Logger", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:32:06", "1601627", "13492417dd4c7ff8a70245699eabf570", "md5_hash", "payload", "win.darkcloud", "None", "DarkCloud Stealer", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:32:05", "1601624", "f2baf5e77610d41aaf30894078ce9c47", "md5_hash", "payload", "win.coinminer", "None", "Coinminer", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:32:04", "1601621", "f665283962b63ad448b9ea160cceecb6", "md5_hash", "payload", "win.masslogger", "None", "MASS Logger", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:32:03", "1601618", "99846d752dcc4c49335ae1e98ee4a2b6", "md5_hash", "payload", "win.masslogger", "None", "MASS Logger", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:32:02", "1601615", "327cc1c7daf19bdaf2df76e24a7aa0a0", "md5_hash", "payload", "win.rhadamanthys", "None", "Rhadamanthys", "", "95", "None", "None", "0", "Grim" "2025-09-25 23:32:00", "1601612", "a46fd829228b24ce9b6d2160f84f2378", "md5_hash", "payload", "win.stealc", "None", "Stealc", "2025-09-26 23:30:50", "95", "None", "None", "0", "Grim" "2025-09-25 23:31:59", "1601609", "1ae2db37b7cd181421545760ed87c80e", "md5_hash", "payload", "win.vidar", "None", "Vidar", "2025-09-26 23:30:47", "95", "None", "None", "0", "Grim" "2025-09-25 23:31:58", "1601606", "b319a6e7300ac10e067352a9e30c288e", "md5_hash", "payload", "win.vidar", "None", "Vidar", "2025-09-26 23:30:46", "95", "None", "None", "0", "Grim" "2025-09-25 23:31:57", "1601603", "6c850692db8d5b590c88b2fc3794d25f", "md5_hash", "payload", "win.guidloader", "None", "GUIDLOADER", "2025-09-26 23:30:45", "95", "None", "None", "0", "Grim" "2025-09-25 23:31:56", "1601600", "ae56b5acb31f273cb6bc3c14a848d9a9", "md5_hash", "payload", "win.owlproxy", "None", "Owlproxy", "2025-09-26 23:30:44", "95", "None", "None", "0", "Grim" "2025-09-25 23:31:55", "1601597", "d88c8eee9db334347bf48dc4d67a21b9", "md5_hash", "payload", "win.xworm", "None", "XWorm", "2025-09-26 23:30:43", "95", "None", "None", "0", "Grim" "2025-09-25 23:31:54", "1601594", "bece6593173293201f711de6dead8e83", "md5_hash", "payload", "win.blackremote", "BlackRAT", "BlackRemote", "2025-09-26 23:30:42", "95", "None", "None", "0", "Grim" # Number of entries: 135