################################################################
# ThreatFox IOCs: recent SHA256 hashes - CSV format            #
# Last updated: 2025-09-03 00:30:46 UTC                        #
#                                                              #
# Terms Of Use: https://threatfox.abuse.ch/faq/#tos            #
# For questions please contact threatfox [at] abuse.ch         #
################################################################
#
# "first_seen_utc","ioc_id","ioc_value","ioc_type","threat_type","fk_malware","malware_alias","malware_printable","last_seen_utc","confidence_level","reference","tags","anonymous","reporter"
"2025-09-03 00:30:46", "1580988", "07f9efd37b4c05d3075ca73644493803f856b7fa32e32766334ffd4b92e438ba", "sha256_hash", "payload", "win.troystealer", "None", "troystealer", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:30:45", "1580985", "ff00d412bfd7b31a97892664fff8f23061d5fb27b26282803d31cafa10e393b5", "sha256_hash", "payload", "win.dcrat", "DarkCrystal RAT", "DCRat", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:30:44", "1580982", "51d75b54018eda95c4c93e1077cd799b13231ecbae89b9f88d68f00d17a65441", "sha256_hash", "payload", "win.ghost_rat", "Farfli,Gh0st RAT,PCRat", "Ghost RAT", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:30:43", "1580979", "a20e4dfb7eea3d41c5fd09918460fdfb83261bf7a22be1fe3d29a39faf9415ef", "sha256_hash", "payload", "win.rockloader", "None", "Rockloader", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:30:42", "1580976", "81aaa4374132fce34696a55cac25f3ab2fcca844500f88d13e4f217cde9349ec", "sha256_hash", "payload", "win.masslogger", "None", "MASS Logger", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:30:41", "1580973", "1b114b61f4a2313dc924eb4ff2cf26fd0c66b0a4127901d5be4531f1a201928e", "sha256_hash", "payload", "win.formbook", "win.xloader", "Formbook", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:30:40", "1580970", "19b1b578a7131791d368f8ee9952aa5d24b29f4879785b2bef21293304f21623", "sha256_hash", "payload", "win.agent_tesla", "AgenTesla,AgentTesla,Negasteal", "Agent Tesla", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:30:39", "1580967", "8c459da35cc2a38d218859f9fb816013c0d33c4bdd3792a69c20beaf5609687d", "sha256_hash", "payload", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:30:38", "1580964", "7e30454bb3e83a895f105099a3d38ad4ca539804bd437052219cb4fe1de153a8", "sha256_hash", "payload", "win.dcrat", "DarkCrystal RAT", "DCRat", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:30:37", "1580961", "d998bd4232ffd4b1781fff28431744bec81370200abcf9c483c87af224b5622d", "sha256_hash", "payload", "win.lokipws", "Burkina,Loki,LokiBot,LokiPWS", "Loki Password Stealer (PWS)", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:30:36", "1580958", "1f2af392cafd75426312e4862f6a1cedd40982bb0d49ca85f101fb60109b2b3f", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:30:35", "1580955", "cd8a36d4a80f14395a3fc5f76bdc04383afaf8dfbe0b79e743b244cd31808021", "sha256_hash", "payload", "win.asyncrat", "None", "AsyncRAT", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:30:34", "1580952", "21a9a414a0f76a93aaa20b2d9c7ffe3f48b5bca29a7c96d56cea5f105ac7afec", "sha256_hash", "payload", "win.meterpreter", "None", "Meterpreter", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:30:33", "1580949", "5868c11dade3d2e362682b1c5922e58c2adf30297d4c35a9fbb446401510704e", "sha256_hash", "payload", "win.krakenkeylogger", "None", "KrakenKeylogger", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:30:32", "1580946", "56c2cb8035b5ba012899b4b1e8c72736aa3fb773d2997aa2486e4833a49a225a", "sha256_hash", "payload", "win.masslogger", "None", "MASS Logger", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:30:31", "1580943", "64e1f83d15ab71c256ba99e2d752051295c2e5086de8816ccf113e9fafa637fc", "sha256_hash", "payload", "win.troystealer", "None", "troystealer", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:30:28", "1580940", "28e56de6f4c2baa3bb15a0887ed66f1e2360d7a4261362a26d91b405ab25df3a", "sha256_hash", "payload", "win.formbook", "win.xloader", "Formbook", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:30:27", "1580937", "dd24e53f878c083f08795e1482ee67c971b80b27264ea6d30adafeaaa9ae27df", "sha256_hash", "payload", "win.quasar_rat", "CinaRAT,QuasarRAT,Yggdrasil", "Quasar RAT", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:30:26", "1580934", "12bc2271f1028192e643c23aea3eb3d802dd24d03ece51f62db4dd0c81e7aff2", "sha256_hash", "payload", "win.quasar_rat", "CinaRAT,QuasarRAT,Yggdrasil", "Quasar RAT", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:30:25", "1580931", "d8a9e5f8d5aadae72f01192ef172c704460a6f4c5eeff545d23d6c19327b9171", "sha256_hash", "payload", "win.atlas_agent", "None", "AtlasAgent", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:30:24", "1580928", "55d8ae2d11aeb76c2214d735c46917541ac04febc6b2f8ac998d1173b838b5ce", "sha256_hash", "payload", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:30:23", "1580925", "f40b80a2809ee918dd4308317d4011a3ca87e2b92a3ab3d2fdaeef231d2e8510", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:30:22", "1580922", "b96d62f1722f493a739f3344197f48847bc0ba09b40230cf998efb615871b1d0", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:30:21", "1580919", "eb96ca17a4a1c2aa97dd6fb686a40cb226c49c8abec01190f1af75080a9aaa6b", "sha256_hash", "payload", "win.atlas_agent", "None", "AtlasAgent", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:30:20", "1580916", "f3f0c87303fcc19aae446de0ff80560e09fdc1fc4b20b3dd442871b2544c5c7d", "sha256_hash", "payload", "win.atlas_agent", "None", "AtlasAgent", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:30:19", "1580913", "cbc7b8123f7ef72341952e2e1acb4b8debdb0e3df2ecfcce92eedf95e208e63d", "sha256_hash", "payload", "win.krakenkeylogger", "None", "KrakenKeylogger", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:30:18", "1580910", "2c7e7bf4cd14456572dd850552354b46e89d511300f5dce48561a4f347f8d4b2", "sha256_hash", "payload", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:30:17", "1580907", "a79a39c9e310d322395ed90808899ade754a8732ac2d86a747d6a01761cee186", "sha256_hash", "payload", "win.phorpiex", "Trik,phorphiex", "Phorpiex", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:30:16", "1580904", "17f1957752f234a9bda043a5e2e36999a0b40aad118de4b3fe0de84c615a63df", "sha256_hash", "payload", "win.webmonitor", "RevCode", "WebMonitor RAT", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:30:15", "1580901", "5e088f3ae8bf2631e5aaa8de2facd537a65ef5e269924213e14ee41d94b6a446", "sha256_hash", "payload", "win.asyncrat", "None", "AsyncRAT", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:30:14", "1580898", "9e60dcf617abadf90bec587d1fe95bae738607beb79e27d62420a52b57fa82ef", "sha256_hash", "payload", "win.rhadamanthys", "None", "Rhadamanthys", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:30:13", "1580895", "7c59e32b06771e7a8009e4019b43791267e3e702b616fbdd3225e9c406709e40", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:30:12", "1580892", "f35e8036e143bcc7acb1abdeebb971f7fd96a1ae1e8f1c3bf45a915a5262aa3f", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:30:11", "1580889", "7660218fc7eda670cc4bb9f644231117b386b890dbceef4c44b449c67decf1e3", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:30:10", "1580886", "b7406ca9aa55a1047b23901fb2116d3c8879c8fff565e729628d9d151e72621e", "sha256_hash", "payload", "win.rhadamanthys", "None", "Rhadamanthys", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:30:08", "1580883", "419682a3e653941c5055aaf76a7df0bda437a65db7ffccb18534aa8639a92787", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:30:07", "1580880", "8b081afc4305a7731e4f1e4c12ebd1fe5c3ffe0d667923aaaf19731c62600ba4", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:30:06", "1580877", "eda24d00ccb349b411c67f24d53a9499d890a4467184be6d8b7014d1612feb38", "sha256_hash", "payload", "win.rhadamanthys", "None", "Rhadamanthys", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:30:04", "1580874", "819524e650df7f7050d41834f4a30b370e50d99add64ace080c2b57df5ba1997", "sha256_hash", "payload", "win.masslogger", "None", "MASS Logger", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:30:03", "1580871", "af9fecbef5a9cb1f1fdf251ae5d160190c8aece381d6dea27293e40b2d7aadbc", "sha256_hash", "payload", "win.asyncrat", "None", "AsyncRAT", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:30:01", "1580868", "bac1c55734deb634a60fd375eb28545a6ec0de446ef587c122d35e3bfa187b21", "sha256_hash", "payload", "win.amadey", "None", "Amadey", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:30:00", "1580865", "32cfff30d6ed1f3395b8ffbc8319fad8723f71547364a6cde2faddb2b80b5b1d", "sha256_hash", "payload", "win.rhadamanthys", "None", "Rhadamanthys", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:29:59", "1580862", "113138bc20beb3622e945f91d907f7ba942f49a5debf19bd6bed394fdb053533", "sha256_hash", "payload", "win.redline_stealer", "RECORDSTEALER", "RedLine Stealer", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:29:58", "1580859", "70edef5a9165f8776f6bde6c60108c0bbcc33e7d10e07d16024bfedf70ec008b", "sha256_hash", "payload", "win.asyncrat", "None", "AsyncRAT", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:29:57", "1580856", "ab944f7cb219427b232b32926ac1e7689dcf9eefb6253235bad5c7d541b53ef9", "sha256_hash", "payload", "win.dcrat", "DarkCrystal RAT", "DCRat", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:29:56", "1580853", "a4bb5616ecb06dcf4916e9cc5bcf5763bdea28c85b8bf1853c615f5621b11798", "sha256_hash", "payload", "win.dcrat", "DarkCrystal RAT", "DCRat", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:29:55", "1580850", "1f9da49f62360d200940ac5abe3936e48f46ec727873c4f13e41fe1a583381a7", "sha256_hash", "payload", "win.resolver_rat", "PureHVNC,ResolverRAT", "PureRAT", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:29:54", "1580844", "805e59d142a1b2539d79732417912388b5ceb70cedee8f736d755705c9ae977a", "sha256_hash", "payload", "win.krakenkeylogger", "None", "KrakenKeylogger", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:29:54", "1580847", "bd1c7fec482e5cae6c29f196953329ee39b3481542738f0b1395392fb9c3ee52", "sha256_hash", "payload", "win.masslogger", "None", "MASS Logger", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:29:53", "1580841", "0ef28af627a20a5be581f8dc7bff948415a909ad482ed18fdc4554902d20091f", "sha256_hash", "payload", "win.formbook", "win.xloader", "Formbook", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:29:52", "1580838", "5a30c4e68c8a9e2fa23d7176efd9f712624fb375d443c25b8829dd307e8b030d", "sha256_hash", "payload", "win.formbook", "win.xloader", "Formbook", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:29:51", "1580835", "68ef29d9bd6e88b4fda357fa69b156376a0a611d287e909285bebbc0d6afc059", "sha256_hash", "payload", "win.formbook", "win.xloader", "Formbook", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:29:50", "1580832", "49da12598beb3901e854a2c105e7e31d820db9b1f8becf581043fe4c30b1d589", "sha256_hash", "payload", "win.xworm", "None", "XWorm", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:29:49", "1580829", "3cc0955e9da17fac13c75e337c50a26cc19edf218c049a51de8ca8a9342457d9", "sha256_hash", "payload", "win.dcrat", "DarkCrystal RAT", "DCRat", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:29:48", "1580826", "4df0ed007f7b8dbb52f37facd1bef7638fc216804045167f2af37b32c68a2d71", "sha256_hash", "payload", "win.redline_stealer", "RECORDSTEALER", "RedLine Stealer", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:29:47", "1580823", "cad1738a30123d36693ddb0531b3b0ac14d8f9eb577609b25905ab28c4e9a3eb", "sha256_hash", "payload", "win.formbook", "win.xloader", "Formbook", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:29:46", "1580817", "bee53e45ad0bfd77218b9a515d9ce3bb2fc5675dc72458382867162d8482ac0f", "sha256_hash", "payload", "win.agent_tesla", "AgenTesla,AgentTesla,Negasteal", "Agent Tesla", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:29:46", "1580820", "e2c2cbcbc9e46e5be703a25776c6174e45a6a3843b1eb7b80d0d480ad2024c01", "sha256_hash", "payload", "win.asyncrat", "None", "AsyncRAT", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:29:45", "1580814", "e0fa3625c59ff00307dfa141f26a359cb20e1bf2bb1ffe2e93660294be9bfa8c", "sha256_hash", "payload", "win.lokipws", "Burkina,Loki,LokiBot,LokiPWS", "Loki Password Stealer (PWS)", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:29:44", "1580811", "420467d33863bad8c6b5ae5f84c4677c12d67fe3d3ae0ca2cb96f489a800665f", "sha256_hash", "payload", "win.peddlecheap", "None", "PeddleCheap", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:29:43", "1580808", "7fd0dcab090cc3010a5cd6d1be51d3fb1f7c50324ef7b35f36d0f149ab320899", "sha256_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:29:42", "1580805", "6e077a0d195558a6dbe2f78349db94ccddff1513a92288b9a1408256267560e7", "sha256_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:29:41", "1580802", "0d7b3d3a1a2257f09d90175a220ac804bbe48c1377bfbbe55b66440bb2728b39", "sha256_hash", "payload", "win.xworm", "None", "XWorm", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:29:40", "1580799", "e0059f8d6dfbf7bdddd47912c517a90d0c848ceb474445e920754ddb3119e902", "sha256_hash", "payload", "win.xworm", "None", "XWorm", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:29:39", "1580796", "e59f8ad1238df3f4da6140834e44391806267bd15b1b6d14efdfaa131b35da09", "sha256_hash", "payload", "win.xworm", "None", "XWorm", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:29:38", "1580793", "cc4f4e1466183b11cfda923915e34cfd338cbf87a656d911120ceb784846d334", "sha256_hash", "payload", "win.xworm", "None", "XWorm", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:29:37", "1580787", "22b65434503731629f03a1dd8796a0156f54f8aaabc0a31be33ca3193dfcc7c0", "sha256_hash", "payload", "win.xworm", "None", "XWorm", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:29:37", "1580790", "be47b60d0203fbf8aac0aabee21f7aa2e90ca5d17363576c3ee9b1d6efd63f14", "sha256_hash", "payload", "win.xworm", "None", "XWorm", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:29:36", "1580784", "3327c66297fef40ab4c8fc527d4100069b01ac665e45bd2683dca2528e915f03", "sha256_hash", "payload", "win.strelastealer", "None", "StrelaStealer", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:29:35", "1580781", "8727308a32fe5bc544074066b76ff9ffd8b47d49c387bf23a471f51c068c7f58", "sha256_hash", "payload", "win.xworm", "None", "XWorm", "", "95", "None", "None", "0", "Grim"
"2025-09-03 00:29:33", "1580778", "cf51d6c002f3888d63d0acc98231e21468f96bb68264f05c2014e3a9e588e6f0", "sha256_hash", "payload", "win.xworm", "None", "XWorm", "", "95", "None", "None", "0", "Grim"
"2025-09-01 21:14:18", "1580152", "739cb53f9ab48a779c7f0a9aa7829202f2b397e91918a5689b93877b40eba61d", "sha256_hash", "payload", "win.xworm", "None", "XWorm", "", "95", "None", "None", "0", "Grim"
"2025-09-01 21:14:17", "1580149", "460367fd0b8d29ba78b4446cf2d0efa756e696aa027d02776ea593a732bbef2e", "sha256_hash", "payload", "win.xworm", "None", "XWorm", "", "95", "None", "None", "0", "Grim"
"2025-09-01 21:14:16", "1580146", "fb05a0c8189bbb4dbd25e605bd8b6dda7532b14c5d76b3ce1da727c587c03b67", "sha256_hash", "payload", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "95", "None", "None", "0", "Grim"
"2025-09-01 21:14:15", "1580143", "8c3613b51afb7a2410531d5abad8979e77b2f86d07a084453a191291e8517ab0", "sha256_hash", "payload", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "95", "None", "None", "0", "Grim"
"2025-09-01 21:14:14", "1580140", "fc0d5d4af2961460dcda985611a26b7aac1b6cc1fe075468dc63644388a0069d", "sha256_hash", "payload", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "95", "None", "None", "0", "Grim"
"2025-09-01 21:14:13", "1580137", "83ee74b0415071f81860b3bf9bb3c07fd8a891f84050dc011f897029ce8c1497", "sha256_hash", "payload", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "95", "None", "None", "0", "Grim"
"2025-09-01 21:14:12", "1580134", "518dd198d24f9f8e06902a68fbc34e7ca9d602dae62e16cf9cdf5da4920ff77f", "sha256_hash", "payload", "win.meterpreter", "None", "Meterpreter", "", "95", "None", "None", "0", "Grim"
"2025-09-01 21:14:11", "1580128", "59b571d0172e21403951749bd1bd54c90ee45d11e90e63a6a87cc803122e26f3", "sha256_hash", "payload", "win.asyncrat", "None", "AsyncRAT", "", "95", "None", "None", "0", "Grim"
"2025-09-01 21:14:11", "1580131", "5fe952d8821bf7b60dfaa5a88bc8bf6221610398cd3d0dc605310b030ff7c995", "sha256_hash", "payload", "win.dcrat", "DarkCrystal RAT", "DCRat", "", "95", "None", "None", "0", "Grim"
"2025-09-01 21:14:09", "1580125", "9ac1c838a65913a20c7b266946226c724832edd82e3be8d6613ad5786b968d29", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim"
"2025-09-01 21:14:08", "1580122", "df0442cb22d02ff079e06ffaf287eebe2fbefe5744ebe428e4436589facca3fe", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim"
"2025-09-01 21:14:07", "1580116", "a26d8da6e2da56ce48758189df3a667bd48d2199fc2688f25eb96d30f10e369d", "sha256_hash", "payload", "win.agent_tesla", "AgenTesla,AgentTesla,Negasteal", "Agent Tesla", "", "95", "None", "None", "0", "Grim"
"2025-09-01 21:14:07", "1580119", "d1bb83fe0bb9688fc181c881a3e5a4cf6ae216941006d2ff52c2f286e27d4e4f", "sha256_hash", "payload", "win.agent_tesla", "AgenTesla,AgentTesla,Negasteal", "Agent Tesla", "", "95", "None", "None", "0", "Grim"
"2025-09-01 21:14:06", "1580113", "bf9003f364568b00fe65adb2c202ce3689ee1a7b7934fd18346359f3ace96289", "sha256_hash", "payload", "win.vipkeylogger", "None", "VIP Keylogger", "", "95", "None", "None", "0", "Grim"
"2025-09-01 21:14:05", "1580110", "b6cd984ed31123480cbc24bcfc796c942e6b462202d1deb32fb366454f278ef5", "sha256_hash", "payload", "win.masslogger", "None", "MASS Logger", "", "95", "None", "None", "0", "Grim"
"2025-09-01 21:14:04", "1580107", "93d56b4cba2d0d2f011d31d47f493989549431a4d3a8e916dd848144fe4beaac", "sha256_hash", "payload", "win.masslogger", "None", "MASS Logger", "", "95", "None", "None", "0", "Grim"
"2025-09-01 21:14:03", "1580104", "7fb51ecddea989bbc4c71fb744b95e9045e64c7a534d661d972c048a40050bb7", "sha256_hash", "payload", "win.formbook", "win.xloader", "Formbook", "", "95", "None", "None", "0", "Grim"
"2025-09-01 21:14:01", "1580101", "e2189c1992a5e092e0fc5595b914e4a2980b149624261ea72fa3b881ff696721", "sha256_hash", "payload", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "95", "None", "None", "0", "Grim"
"2025-09-01 21:14:00", "1580098", "8b1c2293d5ca82007d194e9960de64263105f2c2b6707e19d89534bcd1bb2d06", "sha256_hash", "payload", "win.formbook", "win.xloader", "Formbook", "", "95", "None", "None", "0", "Grim"
"2025-09-01 21:13:59", "1580095", "6307f6dcb83c11e69ad410e3d95d49834657fe2124f19c3c4e840d618bb53067", "sha256_hash", "payload", "win.krakenkeylogger", "None", "KrakenKeylogger", "", "95", "None", "None", "0", "Grim"
"2025-09-01 21:13:58", "1580092", "3826ecc2d0fc46bece9de18faaf48acea6615fda5320c8efe134b6439f099b73", "sha256_hash", "payload", "win.masslogger", "None", "MASS Logger", "", "95", "None", "None", "0", "Grim"
"2025-09-01 21:13:57", "1580089", "d1f7d720167c082a602177134934c8669fa9fa3110e50a2f03a336a78357abcd", "sha256_hash", "payload", "win.xworm", "None", "XWorm", "", "95", "None", "None", "0", "Grim"
"2025-09-01 21:13:56", "1580086", "0bd3008f62ecf3929dda01a2b5f244f7ffc63f899239975af53da875d59f6d48", "sha256_hash", "payload", "win.xworm", "None", "XWorm", "", "95", "None", "None", "0", "Grim"
"2025-09-01 21:13:55", "1580083", "0c816a698e51e5fc6bc477763023e7f9b8df667703f5835be297efccf0996de5", "sha256_hash", "payload", "win.quasar_rat", "CinaRAT,QuasarRAT,Yggdrasil", "Quasar RAT", "", "95", "None", "None", "0", "Grim"
"2025-09-01 21:13:54", "1580080", "25e9a59bf9a9c9d4cb8861c23570eb7b62aaa2ff23c3fe6dd4f5c44351a60b7e", "sha256_hash", "payload", "win.ghost_rat", "Farfli,Gh0st RAT,PCRat", "Ghost RAT", "", "95", "None", "None", "0", "Grim"
"2025-09-01 21:13:53", "1580077", "e1f3f354b62a6aee0053bcca716741af176676419060b06aed5be5d2f9544af3", "sha256_hash", "payload", "win.darkgate", "Meh,MehCrypter", "DarkGate", "", "95", "None", "None", "0", "Grim"
"2025-09-01 21:13:52", "1580074", "c5cf05219904b90310bb560281936dfa77045ce5d11093d53010a453d91f2b85", "sha256_hash", "payload", "win.quasar_rat", "CinaRAT,QuasarRAT,Yggdrasil", "Quasar RAT", "", "95", "None", "None", "0", "Grim"
"2025-09-01 21:13:51", "1580071", "2f5c65ee08f0584a47723bd5f9552843c03c49ab0bf90c960ea4443f7f535310", "sha256_hash", "payload", "win.quasar_rat", "CinaRAT,QuasarRAT,Yggdrasil", "Quasar RAT", "", "95", "None", "None", "0", "Grim"
"2025-09-01 21:13:50", "1580068", "4ce67fdd6929d296988354eacc1d6db5516b97782993047196cebe772c10d2d5", "sha256_hash", "payload", "win.nabucur", "None", "Nabucur", "", "95", "None", "None", "0", "Grim"
"2025-09-01 21:13:49", "1580065", "418472f0b1fa019d3a411046689a19fe37fbba18ce55fb86aa4ec615920a54f5", "sha256_hash", "payload", "win.dcrat", "DarkCrystal RAT", "DCRat", "", "95", "None", "None", "0", "Grim"
"2025-09-01 21:13:48", "1580062", "360c66edab52b893bc1795fd375f7b5ffbbf31ba3747068da38350ffd3286fe9", "sha256_hash", "payload", "win.quasar_rat", "CinaRAT,QuasarRAT,Yggdrasil", "Quasar RAT", "", "95", "None", "None", "0", "Grim"
"2025-09-01 21:13:47", "1580059", "7c24d1d9a6258516d1ec21877747ee6c28373dff48e65c0a69e85e953dd546fe", "sha256_hash", "payload", "win.dcrat", "DarkCrystal RAT", "DCRat", "", "95", "None", "None", "0", "Grim"
"2025-09-01 21:13:46", "1580056", "2feb8c5a7c576a92dae677c3b83246883e43f946665f4d923250938b203b16fc", "sha256_hash", "payload", "win.dcrat", "DarkCrystal RAT", "DCRat", "", "95", "None", "None", "0", "Grim"
"2025-09-01 21:13:45", "1580053", "9eb6bd48aa9c2f06c52b1b66927cbded6423d32d1d42c3f7c3fc074d4f58f789", "sha256_hash", "payload", "win.dcrat", "DarkCrystal RAT", "DCRat", "", "95", "None", "None", "0", "Grim"
"2025-09-01 21:13:44", "1580050", "b4e0ecd2deae4e1e27cb025851f224ecbda5598bab10e02232c8d93669964e91", "sha256_hash", "payload", "win.rhadamanthys", "None", "Rhadamanthys", "", "95", "None", "None", "0", "Grim"
"2025-09-01 21:13:43", "1580047", "4c3df5648a4b0412b690bad3da5b6694db67b89dd44b8d87cac52631a5712865", "sha256_hash", "payload", "win.rhadamanthys", "None", "Rhadamanthys", "", "95", "None", "None", "0", "Grim"
"2025-09-01 21:13:42", "1580044", "b786a73c7f19b8d9336266c409fd362c93f7c2d627d158b85f0a563ef0653ee0", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim"
"2025-09-01 21:13:41", "1580041", "140de266182e847a3d765c82be7aca92418c8a68b0345686e5475bde60bf7731", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim"
"2025-09-01 21:13:40", "1580038", "c2737036b26f6ff90d31646ffbb323b03a578f0e52f967f9ee9f34852616847b", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim"
"2025-09-01 21:13:39", "1580035", "7f41b100cd7fbb5e1ce966dc4b498f868a448b026cac4d836e92523250f7bb16", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim"
"2025-09-01 21:13:38", "1580032", "6360358e52d609029f844535cdb3ecbae0cec28b5e0fa1b5cc02659b459df43f", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim"
"2025-09-01 21:13:37", "1580029", "59b7bc4246d760f4ae78a480b14803a2f2b8a45d7e18a6bf2d1e969559bf4e2d", "sha256_hash", "payload", "win.dcrat", "DarkCrystal RAT", "DCRat", "", "95", "None", "None", "0", "Grim"
"2025-09-01 21:13:36", "1580026", "c09261df37268b34060769437c2ae12d3bc4da0d744fe329e5b13ad4dbbb9283", "sha256_hash", "payload", "win.purpleink", "None", "purpleink", "", "95", "None", "None", "0", "Grim"
"2025-09-01 21:13:35", "1580023", "30620c423c928e5e37f9386f7cb5e6ab87eaee7638975f4a8d8f90c56cb785f1", "sha256_hash", "payload", "win.acr_stealer", "None", "ACR Stealer", "", "95", "None", "None", "0", "Grim"
"2025-09-01 21:13:34", "1580020", "2398f931c24b3cb7b3687076b494fb2b34051d6ddfee53447d624b28911a44dd", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim"
"2025-09-01 21:13:33", "1580014", "fcd1e239225ebc53ed52d73a0337ed38f27f05a67a1bc53f6eae43048d28708b", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim"
"2025-09-01 21:13:33", "1580017", "7afa67898d1e6046fac0f896c9c7515a0003defe05e6ef1baafcfa3209d08a1c", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim"
"2025-09-01 21:13:31", "1580011", "d76b73fe5dcfbf71a21208815558b7ed0415b586f13967e77cc0e37591fd7665", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim"
"2025-09-01 21:13:30", "1580008", "97ff06a25f7c699e129771cde557021cbf49f4e6ed15dfeb9b7d29eacafa9926", "sha256_hash", "payload", "win.xworm", "None", "XWorm", "", "95", "None", "None", "0", "Grim"
"2025-09-01 21:13:29", "1580005", "3f7c7193e4ad4b3aaf4b7092f3952664d554887f22843fb5eff74ef69bcb329a", "sha256_hash", "payload", "win.rhadamanthys", "None", "Rhadamanthys", "", "95", "None", "None", "0", "Grim"
"2025-09-01 21:13:28", "1580002", "11515e65056d8dc6cb71897be2dceb35653f1c12b34070f87e7608769c1ce2e8", "sha256_hash", "payload", "win.rhadamanthys", "None", "Rhadamanthys", "", "95", "None", "None", "0", "Grim"
"2025-09-01 21:13:27", "1579999", "9003c1087aa81de7fe8b3f1bf2c17e4489c33d356c863e2a75d6dbae42a114f8", "sha256_hash", "payload", "win.rhadamanthys", "None", "Rhadamanthys", "", "95", "None", "None", "0", "Grim"
"2025-09-01 21:13:26", "1579996", "1ae8f5d331a1c6138b60c0e9b7f3ddecda3868e6c408b97a061ed50916245b93", "sha256_hash", "payload", "win.strelastealer", "None", "StrelaStealer", "", "95", "None", "None", "0", "Grim"
"2025-09-01 21:13:25", "1579993", "bc045ffac9e1161d5c20ab56f5c41cfaba19d98bc719967499acc14c0e752ef6", "sha256_hash", "payload", "win.stealc", "None", "Stealc", "", "95", "None", "None", "0", "Grim"
"2025-09-01 21:13:24", "1579990", "5a1fe3a5ee208b87acd8a605b3d0426c39aa3418f7ae80eaaf3a484004f88483", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim"
"2025-09-01 21:13:23", "1579987", "9a94fc8877306b371085bf268c7b41bdedec9bdffe3da530f95c4ef2182af996", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim"
"2025-09-01 21:13:22", "1579984", "50346bc9fec712d366fc6b0b75f160a4adbe7a832d7c116a86e480266d00ee19", "sha256_hash", "payload", "win.rhadamanthys", "None", "Rhadamanthys", "", "95", "None", "None", "0", "Grim"
"2025-09-01 21:13:21", "1579981", "ad9a9bcbe3da0377edafc371d2d5eaba74808c9e6c0583fa6fa3ba195770b7b6", "sha256_hash", "payload", "win.guidloader", "None", "GUIDLOADER", "", "95", "None", "None", "0", "Grim"
"2025-09-01 21:13:20", "1579978", "bfc9ac7d4fedbbe1c2818c3f5a66035577b69f17be2d4f7180a7658935b384fa", "sha256_hash", "payload", "win.masslogger", "None", "MASS Logger", "", "95", "None", "None", "0", "Grim"
"2025-09-01 21:13:19", "1579975", "a2caca44247c555fe0d4faa25320c58c6ceab37cee6a664ea76e594db4cbe979", "sha256_hash", "payload", "win.coinminer", "None", "Coinminer", "", "95", "None", "None", "0", "Grim"
"2025-09-01 21:13:18", "1579972", "3d7f6743ea132b221c213e8ccf751e57d9f7c274fbd0da2aed6a122487097a9e", "sha256_hash", "payload", "win.xworm", "None", "XWorm", "", "95", "None", "None", "0", "Grim"
"2025-09-01 21:13:17", "1579969", "4bdfcda0ec7e507468e4654dbb66811750a6f9d7ebd9077888cd803c75085a39", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim"
"2025-09-01 21:13:16", "1579966", "238f2bfc3e1c6d1c486718b215005532fcbf66a775339089253aa6208139205a", "sha256_hash", "payload", "win.amadey", "None", "Amadey", "", "95", "None", "None", "0", "Grim"
# Number of entries: 134