################################################################
# ThreatFox IOCs: recent MD5 hashes - CSV format               #
# Last updated: 2025-08-18 23:03:27 UTC                        #
#                                                              #
# Terms Of Use: https://threatfox.abuse.ch/faq/#tos            #
# For questions please contact threatfox [at] abuse.ch         #
################################################################
#
# "first_seen_utc","ioc_id","ioc_value","ioc_type","threat_type","fk_malware","malware_alias","malware_printable","last_seen_utc","confidence_level","reference","tags","anonymous","reporter"
"2025-08-18 23:03:27", "1571044", "37e490924cc7d25899183fe7c096f48d", "md5_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:03:26", "1571041", "54e93344046d4bc4c65b2d5c6de9df6e", "md5_hash", "payload", "win.agent_tesla", "AgenTesla,AgentTesla,Negasteal", "Agent Tesla", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:03:26", "1571038", "a4203690aa231979c8991cd60b11a782", "md5_hash", "payload", "win.masslogger", "None", "MASS Logger", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:03:25", "1571035", "077ee004efa72af9ac67d3cd4dc7dd63", "md5_hash", "payload", "win.krakenkeylogger", "None", "KrakenKeylogger", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:03:24", "1571032", "7ec90f69baad27c237eda9ae87dca203", "md5_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:03:23", "1571029", "941131e8cab2348700ac56e91a368490", "md5_hash", "payload", "win.rhadamanthys", "None", "Rhadamanthys", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:03:22", "1571026", "68996bb7f7838f26dbc3499d7e84f9c6", "md5_hash", "payload", "win.agent_tesla", "AgenTesla,AgentTesla,Negasteal", "Agent Tesla", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:03:21", "1571023", "04be5380462bdef17f618a6118cfd1f7", "md5_hash", "payload", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:03:20", "1571020", "cc73dbe245adc540ae0d2e1e7b082c86", "md5_hash", "payload", "win.coinminer", "None", "Coinminer", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:03:19", "1571017", "e59da04b96a70cf9f9edecb9e5d58b76", "md5_hash", "payload", "win.vipkeylogger", "None", "VIP Keylogger", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:03:18", "1571014", "9c8b0713f90196e542a5532b77188043", "md5_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:03:17", "1571011", "bc3c8bd8635c13c2e49fafd9c4cb36ed", "md5_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:03:16", "1571008", "eabf1bf8ee758190d049cfa3b71472b3", "md5_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:03:15", "1571005", "9e89b3a9bca360ebf229b43715ed693e", "md5_hash", "payload", "win.dcrat", "DarkCrystal RAT", "DCRat", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:03:14", "1571002", "417272ec7e839732342191324da04ed5", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:03:13", "1570999", "262369e346ffaa8941ca7b3dcdce2208", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:03:12", "1570996", "9851da89b46524d554d7a5d3091b4917", "md5_hash", "payload", "win.resolver_rat", "PureHVNC,ResolverRAT", "PureRAT", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:03:11", "1570993", "81d51c4b48540d0edff1d2bcf21cbf76", "md5_hash", "payload", "win.rhadamanthys", "None", "Rhadamanthys", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:03:10", "1570990", "8a18cf15ab5139d2d29a3b1666645d72", "md5_hash", "payload", "win.strelastealer", "None", "StrelaStealer", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:03:09", "1570987", "4558d2235e5b0377cb9f1be81a0c8884", "md5_hash", "payload", "win.strelastealer", "None", "StrelaStealer", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:03:08", "1570984", "c5d114281446624722dd908297ce65ea", "md5_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:03:07", "1570981", "acce530072008f7e4a77a8696743cdea", "md5_hash", "payload", "win.xworm", "None", "XWorm", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:03:06", "1570978", "ac14c5976e2db88002ef800b2fd6eb7b", "md5_hash", "payload", "win.coinminer", "None", "Coinminer", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:03:05", "1570975", "c06a5c61aaf7af4f005814d409c6735d", "md5_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:03:04", "1570972", "0da3d6163e946124e407772e5bbffd31", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:03:03", "1570969", "c61d70aa2f9d37f6b7a340225da18103", "md5_hash", "payload", "win.xworm", "None", "XWorm", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:03:01", "1570966", "6e2178613d2271b0b398cd307fad3e40", "md5_hash", "payload", "win.quasar_rat", "CinaRAT,QuasarRAT,Yggdrasil", "Quasar RAT", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:03:00", "1570963", "5a701ea8d043d796b70efd951de9d679", "md5_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:02:59", "1570960", "a48f03bf1ee28b7cf10fe4c650077740", "md5_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:02:58", "1570957", "e337df633e880d637d853fcfd07e7a28", "md5_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:02:57", "1570954", "97d559dcd7566dc41f25f61523ace2a9", "md5_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:02:56", "1570951", "b12ae4740ba6be9e720de4ee30fc277e", "md5_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:02:55", "1570948", "cb9424576cd272eff131650382267d52", "md5_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:02:54", "1570945", "f513a2ed8a51b4b35685410cb50102be", "md5_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:02:53", "1570942", "fb12771e1cb1945303a8aeab511c20fd", "md5_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:02:53", "1570939", "5d974b5f821b19e0234c2ee767f9f5a1", "md5_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:02:52", "1570936", "17be57ab8fcedb82505534232bf6091b", "md5_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:02:51", "1570933", "ce972d5a71b444f76c625f48f77dcac5", "md5_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:02:50", "1570930", "349826efb7acb9f8ca1e7535dececbe9", "md5_hash", "payload", "win.darkcloud", "None", "DarkCloud Stealer", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:02:49", "1570927", "ff301080d9616525ced3a29bfc8e4ac4", "md5_hash", "payload", "win.poscardstealer", "None", "poscardstealer", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:02:48", "1570924", "105ef1a50293008c0f283a5712b104c2", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:02:47", "1570921", "123c468c9bdfab161e5033fc900ef73a", "md5_hash", "payload", "win.krakenkeylogger", "None", "KrakenKeylogger", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:02:46", "1570918", "2885c02642e5f460ab96a828729ed4ec", "md5_hash", "payload", "win.quasar_rat", "CinaRAT,QuasarRAT,Yggdrasil", "Quasar RAT", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:02:45", "1570915", "5838cb23489e11a4a1d36f8870adff4d", "md5_hash", "payload", "win.agent_tesla", "AgenTesla,AgentTesla,Negasteal", "Agent Tesla", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:02:44", "1570912", "ef12955d3040c98fb9a9ac67a1ad6f55", "md5_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:02:43", "1570909", "5ac32719da8bca952542b01c9dd515d3", "md5_hash", "payload", "win.rhadamanthys", "None", "Rhadamanthys", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:02:42", "1570906", "128d4ff33e74e5cf794df0693be2678c", "md5_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:02:41", "1570903", "0bb002d3392a220cbef6783cb3dcc9fd", "md5_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:02:40", "1570900", "262878cfdf94e190a145d2dd5ca261b5", "md5_hash", "payload", "win.vipkeylogger", "None", "VIP Keylogger", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:02:39", "1570897", "193a801f0c460f5b705974b7b274c86f", "md5_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:02:38", "1570894", "d6c47092bd741ffbd422fe0ab9618bdc", "md5_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:02:37", "1570891", "305401380b16b0d17cb8ca76d6f44a6e", "md5_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:02:36", "1570888", "89c633e2dc2d8dab388e95fa26af9e77", "md5_hash", "payload", "win.njrat", "Bladabindi,Lime-Worm", "NjRAT", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:02:35", "1570885", "fafae4086b51b354132f586bf8f55a82", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:02:34", "1570882", "e47133883942fa94487bc7dd9319cd1b", "md5_hash", "payload", "win.meterpreter", "None", "Meterpreter", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:02:33", "1570879", "219c32eaa0e3d2206ef6e2065db9da7d", "md5_hash", "payload", "win.redline_stealer", "RECORDSTEALER", "RedLine Stealer", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:02:32", "1570876", "91770b901492ddc202a214975266d7b3", "md5_hash", "payload", "win.meterpreter", "None", "Meterpreter", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:02:31", "1570873", "7e6bf818519be0a20dbc9bcb9e5728c6", "md5_hash", "payload", "win.troystealer", "None", "troystealer", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:02:30", "1570870", "081b5fb48eab820ccf47065e724cc9b6", "md5_hash", "payload", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:02:29", "1570867", "8d026e01fcc9789f150b2c114f2feede", "md5_hash", "payload", "win.quantloader", "None", "QuantLoader", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:02:28", "1570864", "f4fa2d3ab5e5df5614decc3b9d74594b", "md5_hash", "payload", "win.dcrat", "DarkCrystal RAT", "DCRat", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:02:27", "1570861", "0dcfa83bc32f60d83428021a250188c8", "md5_hash", "payload", "win.agent_tesla", "AgenTesla,AgentTesla,Negasteal", "Agent Tesla", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:02:26", "1570858", "b25ccec179bdd3c5f8cba03fc36f0e17", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:02:25", "1570855", "6b5bc9a194f67b4da88b86892708e796", "md5_hash", "payload", "win.loda", "LodaRAT,Nymeria", "Loda", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:02:24", "1570852", "ff6d5147e78b5c900d16f6a2b5e4d382", "md5_hash", "payload", "win.xworm", "None", "XWorm", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:02:23", "1570849", "b0cc124a0acc736f10b8c24791106a2a", "md5_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:02:22", "1570846", "d44d45a0ec6ba61ccb9627ec9adb8168", "md5_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:02:21", "1570843", "ee15ac3e79fabc49c22e5f9e04d036ae", "md5_hash", "payload", "win.salatstealer", "None", "SalatStealer", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:02:20", "1570840", "76482e447cfbe7caac0cac43125da2ac", "md5_hash", "payload", "win.strelastealer", "None", "StrelaStealer", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:02:19", "1570837", "69a47130e70f4cb75e57a2244270bf99", "md5_hash", "payload", "win.strelastealer", "None", "StrelaStealer", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:02:18", "1570834", "25c90f7524acf1c6347becc8942677b4", "md5_hash", "payload", "win.agent_tesla", "AgenTesla,AgentTesla,Negasteal", "Agent Tesla", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:02:17", "1570831", "331af0393b908473a004ceaf3e3a78f9", "md5_hash", "payload", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:02:16", "1570828", "b0bebe8b8e499abfef3b02ff7e0e9f85", "md5_hash", "payload", "win.krakenkeylogger", "None", "KrakenKeylogger", "", "95", "None", "None", "0", "Grim"
"2025-08-18 23:02:15", "1570825", "0b7082399ec0ab2a8f1bdff01a602f6d", "md5_hash", "payload", "win.xworm", "None", "XWorm", "", "95", "None", "None", "0", "Grim"
# Number of entries: 74