################################################################ # ThreatFox IOCs: recent MD5 hashes - CSV format # # Last updated: 2025-10-19 22:44:57 UTC # # # # Terms Of Use: https://threatfox.abuse.ch/faq/#tos # # For questions please contact threatfox [at] abuse.ch # ################################################################ # # "first_seen_utc","ioc_id","ioc_value","ioc_type","threat_type","fk_malware","malware_alias","malware_printable","last_seen_utc","confidence_level","reference","tags","anonymous","reporter" "2025-10-19 22:44:57", "1618210", "25e9fc6010b89648f02e8da1121c4b29", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "", "95", "None", "None", "0", "Grim" "2025-10-19 22:44:56", "1618207", "cda3bacaf482ae66746295d93d95d5fe", "md5_hash", "payload", "win.strelastealer", "None", "StrelaStealer", "", "95", "None", "None", "0", "Grim" "2025-10-19 22:44:55", "1618204", "84109d283687230f5dfcf60dabc59f76", "md5_hash", "payload", "win.quasar_rat", "CinaRAT,QuasarRAT,Yggdrasil", "Quasar RAT", "", "95", "None", "None", "0", "Grim" "2025-10-19 22:44:54", "1618201", "20e04263428ee7c59caeb7248e486ba9", "md5_hash", "payload", "win.quasar_rat", "CinaRAT,QuasarRAT,Yggdrasil", "Quasar RAT", "", "95", "None", "None", "0", "Grim" "2025-10-19 22:44:53", "1618198", "eba09a554fe5f6d31933e9dbcb2b4d79", "md5_hash", "payload", "win.quasar_rat", "CinaRAT,QuasarRAT,Yggdrasil", "Quasar RAT", "", "95", "None", "None", "0", "Grim" "2025-10-19 22:44:53", "1618195", "59659b4e17bb4555c96eea19e4730587", "md5_hash", "payload", "win.salatstealer", "None", "SalatStealer", "", "95", "None", "None", "0", "Grim" "2025-10-19 22:44:52", "1618192", "0042f1a21cee068ad4c92e379e95c434", "md5_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "", "95", "None", "None", "0", "Grim" "2025-10-19 22:44:51", "1618189", "0e77eec6449ae6d26e684f181d13563d", "md5_hash", "payload", "win.xenorat", "None", "XenoRAT", "", "95", "None", "None", "0", "Grim" "2025-10-19 22:44:50", "1618186", "d78a7c5e0add32170ba776f859012e6c", "md5_hash", "payload", "win.zingo_stealer", "Ginzo", "ZingoStealer", "", "95", "None", "None", "0", "Grim" "2025-10-19 22:44:49", "1618183", "fefd3627416d34ab1f1aef77720fdfe0", "md5_hash", "payload", "win.hijackloader", "DOILoader,GHOSTPULSE,IDAT Loader,SHADOWLADDER", "HijackLoader", "", "95", "None", "None", "0", "Grim" "2025-10-19 22:44:48", "1618180", "7db20b1942acf5405f2bddcddb708452", "md5_hash", "payload", "win.amadey", "None", "Amadey", "", "95", "None", "None", "0", "Grim" "2025-10-19 22:44:48", "1618177", "fafe849701c2ffe525d1379c93d949cc", "md5_hash", "payload", "win.amadey", "None", "Amadey", "", "95", "None", "None", "0", "Grim" "2025-10-19 22:44:47", "1618174", "51549b44a10df19912ec9adbb7769cdf", "md5_hash", "payload", "win.xworm", "None", "XWorm", "", "95", "None", "None", "0", "Grim" "2025-10-19 22:44:46", "1618171", "aca873cc7fc968ae0e1c40ce4e8da23f", "md5_hash", "payload", "win.asyncrat", "None", "AsyncRAT", "", "95", "None", "None", "0", "Grim" "2025-10-19 22:44:45", "1618168", "623a4ec531da1626002444142417d043", "md5_hash", "payload", "win.salatstealer", "None", "SalatStealer", "", "95", "None", "None", "0", "Grim" "2025-10-19 22:44:44", "1618165", "152f613226a8430fbd978db4a9cab7e5", "md5_hash", "payload", "win.rhadamanthys", "None", "Rhadamanthys", "", "95", "None", "None", "0", "Grim" "2025-10-19 22:44:43", "1618162", "8767f0ca7f98d0e0e513afc9e21040fd", "md5_hash", "payload", "win.stealc", "None", "Stealc", "", "95", "None", "None", "0", "Grim" "2025-10-19 22:44:43", "1618159", "f39dd5264b784547f60d4d5f1d898ae1", "md5_hash", "payload", "win.rhadamanthys", "None", "Rhadamanthys", "", "95", "None", "None", "0", "Grim" "2025-10-19 22:44:42", "1618156", "7d278d1b762954f8e7f365694adea615", "md5_hash", "payload", "win.redenergy_stealer", "None", "RedEnergy Stealer", "", "95", "None", "None", "0", "Grim" "2025-10-19 22:44:41", "1618153", "1c2b64540690f500d15939caa3387ef8", "md5_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim" "2025-10-19 22:44:40", "1618150", "ea1fa6af9ee6ea5fdf1664e6018e5b1e", "md5_hash", "payload", "win.rhadamanthys", "None", "Rhadamanthys", "", "95", "None", "None", "0", "Grim" "2025-10-19 22:44:39", "1618147", "843e725eba3cd24a9bf3c6732d8de93f", "md5_hash", "payload", "win.darktortilla", "None", "DarkTortilla", "", "95", "None", "None", "0", "Grim" "2025-10-19 22:44:38", "1618144", "cc036bc1c4a87c8fc575a4be15341e84", "md5_hash", "payload", "win.rhadamanthys", "None", "Rhadamanthys", "", "95", "None", "None", "0", "Grim" "2025-10-19 22:44:38", "1618141", "7ffb3572cf07c5c9d51bd934b56b0ab2", "md5_hash", "payload", "win.darktortilla", "None", "DarkTortilla", "", "95", "None", "None", "0", "Grim" "2025-10-19 22:44:37", "1618138", "f2a47a79e28f13804a0def70d58f240b", "md5_hash", "payload", "win.zstealer", "Z*Stealer", "ZStealer", "", "95", "None", "None", "0", "Grim" "2025-10-19 22:44:36", "1618135", "e15cca136f224797b39a056969c96c5a", "md5_hash", "payload", "win.rhadamanthys", "None", "Rhadamanthys", "", "95", "None", "None", "0", "Grim" "2025-10-19 22:44:35", "1618132", "675ceff3331f925e6051a8fddeabfe7e", "md5_hash", "payload", "win.rhadamanthys", "None", "Rhadamanthys", "", "95", "None", "None", "0", "Grim" "2025-10-19 22:44:34", "1618129", "068659452d0c12e9d6965a74cc921a95", "md5_hash", "payload", "win.quasar_rat", "CinaRAT,QuasarRAT,Yggdrasil", "Quasar RAT", "", "95", "None", "None", "0", "Grim" "2025-10-19 22:44:33", "1618126", "0a7de1f33c995ce3f240ab6b68684b63", "md5_hash", "payload", "win.quasar_rat", "CinaRAT,QuasarRAT,Yggdrasil", "Quasar RAT", "", "95", "None", "None", "0", "Grim" "2025-10-19 22:44:32", "1618123", "a6ab0e0bd357492df4dce90fd3a626c8", "md5_hash", "payload", "win.xworm", "None", "XWorm", "", "95", "None", "None", "0", "Grim" "2025-10-19 22:44:32", "1618120", "18a60dcf20b5ba38ce24a550e6d7cd0e", "md5_hash", "payload", "win.redline_stealer", "RECORDSTEALER", "RedLine Stealer", "", "95", "None", "None", "0", "Grim" "2025-10-19 22:44:31", "1618117", "69957ae31f93d0178e89b2e4ad1bd6c7", "md5_hash", "payload", "win.xworm", "None", "XWorm", "", "95", "None", "None", "0", "Grim" "2025-10-19 22:44:30", "1618114", "fce087e6dc906c6c23e72631522fa890", "md5_hash", "payload", "win.coinminer", "None", "Coinminer", "", "95", "None", "None", "0", "Grim" "2025-10-19 22:44:29", "1618111", "08a6be776429ccb8f4561e8a03131136", "md5_hash", "payload", "win.xworm", "None", "XWorm", "", "95", "None", "None", "0", "Grim" "2025-10-19 22:44:28", "1618108", "16c44bb4d15f7d5ddc3d25a11bb052bc", "md5_hash", "payload", "win.meterpreter", "None", "Meterpreter", "", "95", "None", "None", "0", "Grim" "2025-10-19 22:44:27", "1618105", "3ec541e1a8f74cb9aab3d16cdcc0b1d6", "md5_hash", "payload", "win.njrat", "Bladabindi,Lime-Worm", "NjRAT", "", "95", "None", "None", "0", "Grim" "2025-10-19 22:44:27", "1618102", "53e1c3989efd076c76766d348e89a152", "md5_hash", "payload", "win.redline_stealer", "RECORDSTEALER", "RedLine Stealer", "", "95", "None", "None", "0", "Grim" "2025-10-19 22:44:26", "1618099", "8f697f00d086e3ad89565ec7ade0539d", "md5_hash", "payload", "win.revenge_rat", "Revetrat", "Revenge RAT", "", "95", "None", "None", "0", "Grim" "2025-10-19 22:44:25", "1618096", "4bf47c1dcefd49df9ed60378a5adafc0", "md5_hash", "payload", "win.xworm", "None", "XWorm", "", "95", "None", "None", "0", "Grim" "2025-10-19 22:44:24", "1618093", "791a4416de44be3992b2718a893807d0", "md5_hash", "payload", "win.darkcloud", "None", "DarkCloud Stealer", "", "95", "None", "None", "0", "Grim" "2025-10-19 22:44:23", "1618090", "de038ee2b5164d994bba7aedcf388a3a", "md5_hash", "payload", "win.strelastealer", "None", "StrelaStealer", "", "95", "None", "None", "0", "Grim" "2025-10-19 22:44:22", "1618087", "99add7b4ac342fd7821d9c494aa4a9a8", "md5_hash", "payload", "win.rhadamanthys", "None", "Rhadamanthys", "", "95", "None", "None", "0", "Grim" "2025-10-19 22:44:21", "1618084", "d25ae81eac66e61e7cb86cf329d63fac", "md5_hash", "payload", "win.rhadamanthys", "None", "Rhadamanthys", "", "95", "None", "None", "0", "Grim" "2025-10-19 22:44:20", "1618081", "5e13c01ac4015c749ff58b378a67f2a9", "md5_hash", "payload", "win.stealc", "None", "Stealc", "", "95", "None", "None", "0", "Grim" "2025-10-19 22:44:19", "1618078", "f09c1b061f098216f181b9e39cc5feb1", "md5_hash", "payload", "win.rhadamanthys", "None", "Rhadamanthys", "", "95", "None", "None", "0", "Grim" "2025-10-19 22:44:18", "1618075", "a9cbc6f94d9b2792097b5a1dfbe85f61", "md5_hash", "payload", "win.gcleaner", "None", "GCleaner", "", "95", "None", "None", "0", "Grim" "2025-10-19 22:44:17", "1618072", "5000695b684311fc7e1bb6960965fbf5", "md5_hash", "payload", "win.coinminer", "None", "Coinminer", "", "95", "None", "None", "0", "Grim" "2025-10-19 22:44:16", "1618069", "277050abba0946b9ed9f57879a0d6ca7", "md5_hash", "payload", "win.dcrat", "DarkCrystal RAT", "DCRat", "", "95", "None", "None", "0", "Grim" "2025-10-19 22:44:16", "1618066", "686954102621e68218ae11fda60136a8", "md5_hash", "payload", "win.coinminer", "None", "Coinminer", "", "95", "None", "None", "0", "Grim" "2025-10-19 22:44:15", "1618063", "9948c58afd2fb386846a496eb6816a09", "md5_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "", "95", "None", "None", "0", "Grim" "2025-10-19 22:44:14", "1618060", "e8ecafa5df8c88701accf903bb147bfc", "md5_hash", "payload", "win.redline_stealer", "RECORDSTEALER", "RedLine Stealer", "", "95", "None", "None", "0", "Grim" "2025-10-19 22:44:13", "1618057", "0b51bdab3982ceda407dbed20495666c", "md5_hash", "payload", "win.njrat", "Bladabindi,Lime-Worm", "NjRAT", "", "95", "None", "None", "0", "Grim" "2025-10-19 22:44:12", "1618054", "5e003f02cab7fbe9c8e44a75e022765e", "md5_hash", "payload", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "95", "None", "None", "0", "Grim" "2025-10-19 22:44:11", "1618051", "a4fdb2c382d874c8cb72ab67842cad72", "md5_hash", "payload", "win.blackmatter", "None", "BlackMatter", "", "95", "None", "None", "0", "Grim" # Number of entries: 54