################################################################ # ThreatFox IOCs: recent SHA256 hashes - CSV format # # Last updated: 2025-05-18 02:02:13 UTC # # # # Terms Of Use: https://threatfox.abuse.ch/faq/#tos # # For questions please contact threatfox [at] abuse.ch # ################################################################ # # "first_seen_utc","ioc_id","ioc_value","ioc_type","threat_type","fk_malware","malware_alias","malware_printable","last_seen_utc","confidence_level","reference","tags","anonymous","reporter" "2025-05-18 02:02:13", "1525115", "21cfc0456efbfd7d450ea93e3170ccd17d8b308d39b92b2e94863116a08e4dbb", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim" "2025-05-18 02:02:07", "1525112", "8f3370aaf5651d6bc98794269a81acaa9f6990847636cbc1085d50cc36673d7c", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim" "2025-05-18 02:02:04", "1525109", "f497e0f58f93c129f70a89f01aa20b3a5372e4e9f83580ad9a1d8e613ab389a9", "sha256_hash", "payload", "win.troystealer", "None", "troystealer", "", "95", "None", "None", "0", "Grim" "2025-05-18 02:02:03", "1525106", "81997543956e55be841eb355689d94756b835a44ed083d57c8b61df05d762974", "sha256_hash", "payload", "win.xworm", "None", "XWorm", "", "95", "None", "None", "0", "Grim" "2025-05-18 02:02:01", "1525103", "63df9c4e6fda2207cb035da1fe9d6ef5f9b195a0c0169f75483408e43948cca2", "sha256_hash", "payload", "win.dcrat", "DarkCrystal RAT", "DCRat", "", "95", "None", "None", "0", "Grim" "2025-05-18 02:01:55", "1525100", "6a754fd38b06364bb6e59672330787c746e6b36cddb10169d7959c6024279453", "sha256_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "", "95", "None", "None", "0", "Grim" "2025-05-18 02:01:54", "1525097", "7521de9b4cccfd3833f5beb86a80696330a745c6cdde7c0e0c92462cd08f0f2f", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim" "2025-05-18 02:01:52", "1525094", "145289accb8c684e583ca3d99532d64d0a6a40142062e648c65ffd8da070c4c9", "sha256_hash", "payload", "win.reverse_rat", "None", "ReverseRAT", "", "95", "None", "None", "0", "Grim" "2025-05-18 02:01:50", "1525091", "98d520e91135c2ed5310a980253a6d1c2fca3a87214c664413416d8b959406c6", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim" "2025-05-18 02:01:49", "1525088", "8e06de8362aa306b91416672800eab1486086e1630efd643f56fe794f6c65c2e", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim" "2025-05-18 02:01:47", "1525085", "c86bb63d82014bf9a36c13fe6f94ab28c80888dd429a858194dc168b99756b1c", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim" "2025-05-18 02:01:46", "1525082", "0c181b7d7e866be58430f2b4ea0b8822bd1c1a5c64e63815ae9b8531134f42b4", "sha256_hash", "payload", "win.poscardstealer", "None", "poscardstealer", "", "95", "None", "None", "0", "Grim" "2025-05-18 02:01:45", "1525079", "c01b2a6d818eb13727f56b003f3f42cc6495256a8850e32a5590a7a96261b69e", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim" "2025-05-18 02:01:44", "1525077", "4797cb80b22ba0da0ede6593bfc16399a5ffc289400155115c8de7786ea0db49", "sha256_hash", "payload", "win.krakenkeylogger", "None", "KrakenKeylogger", "", "95", "None", "None", "0", "Grim" "2025-05-18 02:01:42", "1525074", "43a1d69c1f2d0c38298be7068a959e67dd980973eee15a1f143f15dadbb5b573", "sha256_hash", "payload", "win.agent_tesla", "AgenTesla,AgentTesla,Negasteal", "Agent Tesla", "", "95", "None", "None", "0", "Grim" "2025-05-18 02:01:40", "1525071", "08037de4a729634fa818ddf03ddd27c28c89f42158af5ede71cf0ae2d78fa198", "sha256_hash", "payload", "win.asyncrat", "None", "AsyncRAT", "", "95", "None", "None", "0", "Grim" "2025-05-18 02:01:39", "1525068", "c5243dc70d3c827625232487d03a0eb3f1a445a4983203fcff63fc8fcd3f5b79", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim" "2025-05-18 02:01:37", "1525065", "3255fdcd6de6c6672517ca718a96c0115ddd6267299cfe76ec109d4899b2a1ab", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim" "2025-05-18 02:01:36", "1525062", "30fc2960f2f2d22a93d2eea95401b32f71d1e067e05d08faaa564aafe7510385", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim" "2025-05-18 02:01:30", "1525059", "7162d72e84ee4967b18ed769212c9be81bfe7505e72e5c795ad8444c65df35db", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim" "2025-05-18 02:01:28", "1525056", "f6735d833ebf13de06be97b1cb8aa544e974e3dd2c566e16a4ab9716ff2f663e", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim" "2025-05-18 02:01:22", "1525053", "2c9f0a20bb3f0165a52858a879a4effeb1f0c3963f15df884f8baea7d3ff5f4a", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim" "2025-05-18 02:01:20", "1525050", "8eb08322033f193a5e7ea16d83c0cd324efaaab628fb245bdb27f6977c2a6d86", "sha256_hash", "payload", "win.gcleaner", "None", "GCleaner", "", "95", "None", "None", "0", "Grim" "2025-05-18 02:01:14", "1525047", "4bd4b880b6f35433701cbc2cbcf408260f58c21e654d7893901b3a6ba04fdd1f", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim" "2025-05-18 02:01:13", "1525044", "c08135233df7ec3cd1a594b44d030760983f733246af93d0357c43260ee1ad74", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim" "2025-05-18 02:01:12", "1525041", "b17daa18867c925a1b3c9b093d16773e0d9d8507981f4f0ea84b6528d511da49", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim" "2025-05-18 02:01:10", "1525038", "e0a8383a4c0beb02f1004468b777a85720343bf25e09f50d23975bb91fff4448", "sha256_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "", "95", "None", "None", "0", "Grim" "2025-05-18 02:01:09", "1525035", "9c65d850589e6ab34c6c8e65b8a3b4aa26fa913ca850472023a3b708f95c226b", "sha256_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "", "95", "None", "None", "0", "Grim" "2025-05-18 02:01:07", "1525032", "a8977835c0902ff41c536597be155d1fe6f66af9be6d435c186fbce1cfc5f3b8", "sha256_hash", "payload", "win.kelihos", "None", "Kelihos", "", "95", "None", "None", "0", "Grim" "2025-05-18 02:01:06", "1525029", "aed8dd0a6fbfac572a19165b8a46a6c732a350d960a6f4ff24b81596a3318e8a", "sha256_hash", "payload", "win.kelihos", "None", "Kelihos", "", "95", "None", "None", "0", "Grim" "2025-05-18 02:01:04", "1525026", "cb9b9a4ad6fc4595d77b0768c78ad8fa7d8a1420f93a9dcd3db7cdebd091c4d0", "sha256_hash", "payload", "win.screenlocker", "None", "ScreenLocker", "", "95", "None", "None", "0", "Grim" "2025-05-18 02:01:03", "1525023", "080784c30b5680a3fefbbe6ae23e2466e60904c0b3ae379643ba7b697989eff0", "sha256_hash", "payload", "win.screenlocker", "None", "ScreenLocker", "", "95", "None", "None", "0", "Grim" "2025-05-18 02:01:02", "1525020", "76a1e13e2ae561157a2d227dbb8cd71ef48cd78839d9551d15a17441b64ebe75", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim" "2025-05-18 02:01:00", "1525017", "05a7ff73cb4f91eafdf472336c1d319e0ce697817f72e2c916a5251dc4748336", "sha256_hash", "payload", "win.banatrix", "None", "Banatrix", "", "95", "None", "None", "0", "Grim" "2025-05-18 02:00:59", "1525014", "9164bf50a1cc1e548589aa14979c6fdbba0ec977f0e3ebb6e5d4d706f5c4df40", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim" "2025-05-18 02:00:57", "1525011", "260d329675466f49ea46d96831920929d78f23881137ecad447116e88d4f0271", "sha256_hash", "payload", "win.coinminer", "None", "Coinminer", "", "95", "None", "None", "0", "Grim" "2025-05-18 02:00:56", "1525008", "059a0a5f8ab02faae85536a23a83f9224c4ec60055ec5a1067fa0a026f72a1b4", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim" "2025-05-18 02:00:55", "1525005", "5cdc51b9038ac44a9a44ec9f85082006ba9aa81dfdf4f41ca2fb0d3e31ff3a93", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim" "2025-05-18 02:00:53", "1525002", "9085f21c1b1530bba6a058781ff7ebf33928dbecfe39ffb7bd2fc34344ac6bdb", "sha256_hash", "payload", "win.coinminer", "None", "Coinminer", "", "95", "None", "None", "0", "Grim" "2025-05-18 02:00:52", "1524999", "47b6f1e0346a0bb399ca8879aafbe96df8743f53665bdf4e725c0dbbc38fd833", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim" "2025-05-18 02:00:51", "1524996", "50928be47ca78ed6c558bb63b9cfb6e1c626fcc5ef05a4a5789f4d9136447429", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim" "2025-05-18 02:00:49", "1524993", "eeb833931321a3f9d4307aaa22b967c203fc34d45cd1ab25176b97331dc1c37b", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim" "2025-05-18 02:00:48", "1524990", "3038fc8a58eec6eff77e2fe6670d33a161fcac66f1bfdd6dd1633d0798b106de", "sha256_hash", "payload", "win.njrat", "Bladabindi,Lime-Worm", "NjRAT", "", "95", "None", "None", "0", "Grim" "2025-05-18 02:00:46", "1524987", "6aa5a517d11b9e284918d908934f6ec92fda37e7c75c2df496e406445c241d82", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim" "2025-05-18 02:00:44", "1524984", "da67b132c84b38b10b705a750126ee5ceffc68f1cc52e68d25929e80af8f6033", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim" "2025-05-18 02:00:42", "1524981", "c348c7e4d9028bdf84aba828bbb81ce46ae55c0246a94351edbfb9c63e41a8ee", "sha256_hash", "payload", "win.njrat", "Bladabindi,Lime-Worm", "NjRAT", "", "95", "None", "None", "0", "Grim" "2025-05-18 02:00:40", "1524978", "1bb62b8f0c01f58705361307deb03268199c6f6bac72680e88fdf7fbda20e03e", "sha256_hash", "payload", "win.ghost_rat", "Farfli,Gh0st RAT,PCRat", "Ghost RAT", "", "95", "None", "None", "0", "Grim" "2025-05-18 02:00:38", "1524975", "0b19084264fe9256d7368451aaf3d495b656cf2276a69c5bd8b7f59f138951cf", "sha256_hash", "payload", "win.dcrat", "DarkCrystal RAT", "DCRat", "", "95", "None", "None", "0", "Grim" "2025-05-18 02:00:37", "1524972", "903ee65f5cca5ef223d0a0f3f40fca223e5f07318826b68f7ab14d7dc1ec2f1d", "sha256_hash", "payload", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "95", "None", "None", "0", "Grim" "2025-05-18 02:00:35", "1524969", "8ef3426e9aa6403d62a7d7fa32f60dfe79b53b2951dcd6e125c0a6159c12eef8", "sha256_hash", "payload", "win.dcrat", "DarkCrystal RAT", "DCRat", "", "95", "None", "None", "0", "Grim" "2025-05-18 02:00:34", "1524966", "a28a41b1c71fe6d1f94f12689495be60f44f387625283c62635241bb67686a1d", "sha256_hash", "payload", "win.dcrat", "DarkCrystal RAT", "DCRat", "", "95", "None", "None", "0", "Grim" "2025-05-18 02:00:33", "1524963", "bd0d735a8bd758e6a751dfb19f7a66ce95e403a9df9688e2eefddab4301fa3b2", "sha256_hash", "payload", "win.dcrat", "DarkCrystal RAT", "DCRat", "", "95", "None", "None", "0", "Grim" "2025-05-18 02:00:31", "1524960", "b9f61373e4555764594de3df3cdce59ebb08258d3c11f721de68b72731441d0e", "sha256_hash", "payload", "win.screenlocker", "None", "ScreenLocker", "", "95", "None", "None", "0", "Grim" "2025-05-18 02:00:30", "1524957", "0a949be7d17d6df4d6f4f2d9f06bd5b4b33d262ef61ff83fdb7a9103082cf6e4", "sha256_hash", "payload", "win.formbook", "win.xloader", "Formbook", "", "95", "None", "None", "0", "Grim" "2025-05-18 02:00:27", "1524954", "a100668c95c95b6495c0396622fd787bd23f03f91296d6630b7bcbf1cd69b3a7", "sha256_hash", "payload", "win.quasar_rat", "CinaRAT,QuasarRAT,Yggdrasil", "Quasar RAT", "", "95", "None", "None", "0", "Grim" "2025-05-18 02:00:26", "1524951", "a2bf7e2d657258fc5a6a6b5b7f8994a7abf59260e83e0e4be4127531fbbf959c", "sha256_hash", "payload", "win.asyncrat", "None", "AsyncRAT", "", "95", "None", "None", "0", "Grim" "2025-05-18 02:00:25", "1524948", "06922dd72ff4f3e3cffcfe8a6f2070672c341588f3a8ea1f847a0cdf601854d5", "sha256_hash", "payload", "win.agent_tesla", "AgenTesla,AgentTesla,Negasteal", "Agent Tesla", "", "95", "None", "None", "0", "Grim" "2025-05-18 02:00:23", "1524945", "ba53acdb7d2c6ab550ec8696242a76ef562ca7da24c39656184d7e5333838177", "sha256_hash", "payload", "win.dcrat", "DarkCrystal RAT", "DCRat", "", "95", "None", "None", "0", "Grim" "2025-05-18 02:00:20", "1524942", "674a755e4f7bd797d0d0f22c530ced65c4a774d2f522129897cd91c501c64c8a", "sha256_hash", "payload", "win.asyncrat", "None", "AsyncRAT", "", "95", "None", "None", "0", "Grim" "2025-05-18 02:00:19", "1524939", "384620f94988af3dc7fbe73d9475b88d6912b00a3bc4ddd0c050aae356ac2809", "sha256_hash", "payload", "win.asyncrat", "None", "AsyncRAT", "", "95", "None", "None", "0", "Grim" "2025-05-18 02:00:17", "1524936", "c43c36331895be9c8dbc41b1993144c13953b10399423b013587bd7c5afe4279", "sha256_hash", "payload", "win.dcrat", "DarkCrystal RAT", "DCRat", "", "95", "None", "None", "0", "Grim" "2025-05-17 11:21:07", "1524713", "b8f00bd6cb8f004641ebc562e570685787f1851ecb53cd918bc6d08a1caae750", "sha256_hash", "payload", "unknown_loader", "None", "Unknown Loader", "", "50", "https://www.zscaler.com/blogs/security-research/technical-analysis-transferloader", "TransferLoader", "0", "juroots" "2025-05-17 11:21:07", "1524714", "b55ba0f869f6408674ee9c5229f261e06ad1572c52eaa23f5a10389616d62efe", "sha256_hash", "payload", "unknown_loader", "None", "Unknown Loader", "", "50", "https://www.zscaler.com/blogs/security-research/technical-analysis-transferloader", "TransferLoader", "0", "juroots" "2025-05-17 11:21:07", "1524715", "11d0b292ed6315c3bf47f5df4c7804edccbd0f6018777e530429cc7709ba6207", "sha256_hash", "payload", "unknown_loader", "None", "Unknown Loader", "", "50", "https://www.zscaler.com/blogs/security-research/technical-analysis-transferloader", "TransferLoader", "0", "juroots" "2025-05-17 01:59:12", "1524251", "8bcd87aebddfd8d5810fb0831a71229bc80efa384989484141dc2808529885f1", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim" "2025-05-17 01:59:11", "1524248", "d54167a2c70fa2a4d038fee137e4b3772856640abe81f7ed00b1e322a1900805", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim" "2025-05-17 01:59:09", "1524245", "f198bb6bee83222fdfe3e8041edc25f9dada1f715379d5c632c64a49f8171b38", "sha256_hash", "payload", "win.screenlocker", "None", "ScreenLocker", "", "95", "None", "None", "0", "Grim" "2025-05-17 01:59:08", "1524242", "cb112fd22daaab7536c3741ec96b151cc6125f55ea218613c1d3155625acc260", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim" "2025-05-17 01:59:07", "1524239", "bb57b8e646c8202ecd16a679d4d8b97c4ba74e913c92fe311c8e9cda5333e3d2", "sha256_hash", "payload", "win.agent_tesla", "AgenTesla,AgentTesla,Negasteal", "Agent Tesla", "", "95", "None", "None", "0", "Grim" "2025-05-17 01:59:05", "1524236", "7e268bf5ccd71be30eea4258e54cd291f4e0191fa6eb6b28825ba71098abd486", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim" "2025-05-17 01:59:04", "1524233", "4ba169f5c334b0f841bd919e5f06c1044a7c864fa6ab7d855ee8b12337c0e26a", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim" "2025-05-17 01:59:03", "1524230", "2871df2b1ffcf8b30a42cace024a0a85a90fc3a5f3b2be985cb00cc6eee0cc05", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim" "2025-05-17 01:59:01", "1524227", "45a638c989dc770b1c043699d1c6c67373b4d5310f95dfd627c642d35931710f", "sha256_hash", "payload", "win.ghost_rat", "Farfli,Gh0st RAT,PCRat", "Ghost RAT", "", "95", "None", "None", "0", "Grim" "2025-05-17 01:59:00", "1524224", "7b30344c6bf06b6ec7aba1e5f9ac6953014ea8b78631e2911d15612272668340", "sha256_hash", "payload", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "95", "None", "None", "0", "Grim" "2025-05-17 01:58:58", "1524221", "69af1d10dd1dacae362ab8fd4e5bcc97ddb363cdeb06a4bf1bc3db4dfc68b1e1", "sha256_hash", "payload", "win.troldesh", "Shade", "Troldesh", "", "95", "None", "None", "0", "Grim" "2025-05-17 01:58:57", "1524218", "2abb588a9e421c7e2da7f58231de94a990a89251957d1d71c8098cea1709b0f1", "sha256_hash", "payload", "win.amadey", "None", "Amadey", "", "95", "None", "None", "0", "Grim" "2025-05-17 01:58:56", "1524215", "a94c30191ea73419ebf08919e8a1c8ea0ace0e5d05da21e3692ed8a91f96c659", "sha256_hash", "payload", "win.coinminer", "None", "Coinminer", "", "95", "None", "None", "0", "Grim" "2025-05-17 01:58:54", "1524212", "868e724925e76c170363a3a3d1a9f302f522389cdfac2a26651d3f1052e03828", "sha256_hash", "payload", "win.redline_stealer", "RECORDSTEALER", "RedLine Stealer", "", "95", "None", "None", "0", "Grim" "2025-05-17 01:58:53", "1524209", "e11aa20425dc6577dda92c4e64c4c7ba74650900d4d52f9e57f555cf5b4356ed", "sha256_hash", "payload", "win.coldstealer", "None", "ColdStealer", "", "95", "None", "None", "0", "Grim" "2025-05-17 01:58:52", "1524206", "e1eaea80fc723c6ae674cb446cdd9b2bfd9e4093102e444eb86f0b1a4c5bdc75", "sha256_hash", "payload", "win.dostealer", "None", "DOSTEALER", "", "95", "None", "None", "0", "Grim" "2025-05-17 01:58:50", "1524203", "0b9c492b506d9ce227c13c35dd60ab2060c6dfeaf229877bf0a28bc34dbce09f", "sha256_hash", "payload", "win.njrat", "Bladabindi,Lime-Worm", "NjRAT", "", "95", "None", "None", "0", "Grim" "2025-05-17 01:58:49", "1524200", "1aa3ee229a01291246afb56e5c79d2c8de523bcd76e603c1bef084bb2acb3d24", "sha256_hash", "payload", "win.redline_stealer", "RECORDSTEALER", "RedLine Stealer", "", "95", "None", "None", "0", "Grim" "2025-05-17 01:58:48", "1524197", "d65d7e8220fcc8124f9ec3f06945e043db9861f0386afffcc13972db4c7dfb06", "sha256_hash", "payload", "win.quasar_rat", "CinaRAT,QuasarRAT,Yggdrasil", "Quasar RAT", "", "95", "None", "None", "0", "Grim" "2025-05-17 01:58:46", "1524194", "943699ed8f49842c31c0d7de09dce2b105e65b8931babc996d0beb67dd53aaeb", "sha256_hash", "payload", "win.quasar_rat", "CinaRAT,QuasarRAT,Yggdrasil", "Quasar RAT", "", "95", "None", "None", "0", "Grim" "2025-05-17 01:58:45", "1524191", "b84e1918251ab01c78812d26711528b38394633cdb819e5a9db2ce1fa865b4bf", "sha256_hash", "payload", "win.njrat", "Bladabindi,Lime-Worm", "NjRAT", "", "95", "None", "None", "0", "Grim" "2025-05-17 01:58:43", "1524188", "188c3798b6d41bdfa3981bb61a40b81f4fe123c64b9bed2d4c40951de2064f19", "sha256_hash", "payload", "win.quasar_rat", "CinaRAT,QuasarRAT,Yggdrasil", "Quasar RAT", "", "95", "None", "None", "0", "Grim" "2025-05-17 01:58:41", "1524185", "c1882e6c6759224796831228964c83a3f46c9d99f4fecfc0da0aa3ba18f831cd", "sha256_hash", "payload", "win.colony", "Bandios,GrayBird", "Colony", "", "95", "None", "None", "0", "Grim" "2025-05-17 01:58:40", "1524182", "65fd5041c1a1c4115b0c59995221023486f02e5e5d8e313c3e48f3a42ef9a623", "sha256_hash", "payload", "win.lambert", "Plexor", "Lambert", "", "95", "None", "None", "0", "Grim" "2025-05-17 01:58:38", "1524179", "f52eeccf731a3deb198e5ddb2e8dd8e5041c8c2d740fe1e2830f48d97ebd3801", "sha256_hash", "payload", "win.asyncrat", "None", "AsyncRAT", "", "95", "None", "None", "0", "Grim" "2025-05-17 01:58:37", "1524176", "a066757dfe3345e1e1fa00ff7257c5ee91251f725e3aa460eac92c17f7daed1b", "sha256_hash", "payload", "win.xworm", "None", "XWorm", "", "95", "None", "None", "0", "Grim" "2025-05-17 01:58:36", "1524173", "9ef929cb19bdcb4355d34e51d9e014223079fee809bdd7c47facea5cec8324e1", "sha256_hash", "payload", "win.reverse_rat", "None", "ReverseRAT", "", "95", "None", "None", "0", "Grim" "2025-05-17 01:58:34", "1524170", "bc6699756662da1ae9f17951f44a167e670379dac4b028aa3c1153623a22387b", "sha256_hash", "payload", "win.quasar_rat", "CinaRAT,QuasarRAT,Yggdrasil", "Quasar RAT", "", "95", "None", "None", "0", "Grim" "2025-05-17 01:58:33", "1524167", "58c6957733081459bec81413b4d13af0f1f185f2efff4ea47897be570ba0ae28", "sha256_hash", "payload", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "95", "None", "None", "0", "Grim" "2025-05-17 01:58:32", "1524164", "dce3dcd7656e25fd5af87ecd2967355c4e2de8d90b701cafdfcc509f03904c70", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim" "2025-05-17 01:58:30", "1524161", "b3c91a9caf078acc8c6b8b03807b035885f85acedbe907debb016d02414c1c35", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim" "2025-05-17 01:58:29", "1524158", "186ff54556fc88758fa7d80c8a2d901011ea59a2740d2f5cc793b5cd29a897af", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim" "2025-05-17 01:58:28", "1524155", "e0ffd8621c2519c898ef4381db8b83264e4589b6fad4f69dc3f8550465f4386b", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim" "2025-05-17 01:58:26", "1524152", "5125bdd56a603dcb3929a4bf2282467ded28ccfed837d908ad4eff4246f43e94", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim" "2025-05-17 01:58:25", "1524149", "0f378f4dbf137ca4abdf88f8d137684c4196935df8bc8e3cfabeb4bdc5c3ba75", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "2025-05-18 02:02:30", "95", "None", "None", "0", "Grim" "2025-05-17 01:58:23", "1524146", "4b49ecdac3221f60f27bf1fc2950f86a5ff640fab62729c4a6a84717a828bb3c", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "2025-05-18 02:02:30", "95", "None", "None", "0", "Grim" "2025-05-17 01:58:22", "1524143", "a41450093961f95d046caf4ed1e1160b268404bc980c7b411df8f36b8545ae49", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "2025-05-18 02:02:28", "95", "None", "None", "0", "Grim" "2025-05-17 01:58:21", "1524140", "aa5422f677a5edd3939d9652209e15fe56f26998a293bd23b521f48a3b3ca318", "sha256_hash", "payload", "win.darkcloud", "None", "DarkCloud Stealer", "2025-05-18 02:02:27", "95", "None", "None", "0", "Grim" "2025-05-17 01:58:18", "1524137", "ace5562cb154f79a019c1fc331a7dd39e2857b6d22dffe0986d6353cd5d2c5d3", "sha256_hash", "payload", "win.asyncrat", "None", "AsyncRAT", "2025-05-18 02:02:25", "95", "None", "None", "0", "Grim" "2025-05-17 01:58:16", "1524134", "8b6f5e8d604cefb319e3b76a745ecfb6e98e866b8dd190192a594488229b6a0f", "sha256_hash", "payload", "win.dcrat", "DarkCrystal RAT", "DCRat", "2025-05-18 02:02:24", "95", "None", "None", "0", "Grim" "2025-05-17 01:58:15", "1524131", "9fdf9e7540e981ffda3d6a60e9a44557fb5e1866d830187fd5415a6d0def7f92", "sha256_hash", "payload", "win.nimgrabber", "None", "NimGrabber", "2025-05-18 02:02:23", "95", "None", "None", "0", "Grim" "2025-05-17 01:58:13", "1524128", "92157f11be0dd49d07b0ef671b5a61b168f167cb0105af08520fa0ea246541ab", "sha256_hash", "payload", "win.nimgrabber", "None", "NimGrabber", "2025-05-18 02:02:21", "95", "None", "None", "0", "Grim" "2025-05-17 01:58:12", "1524125", "8453b3ac669bc4b733dda13643d3bb9b77ab956ac5a6f3941abb605c4ee6afd2", "sha256_hash", "payload", "win.nimgrabber", "None", "NimGrabber", "2025-05-18 02:02:15", "95", "None", "None", "0", "Grim" "2025-05-17 01:58:10", "1524122", "0484e1fa67b4eccdd208258e6052a50e9f3db9175ede4d36f73b851d59570045", "sha256_hash", "payload", "win.njrat", "Bladabindi,Lime-Worm", "NjRAT", "2025-05-18 02:02:06", "95", "None", "None", "0", "Grim" # Number of entries: 108