################################################################ # ThreatFox IOCs: recent MD5 hashes - CSV format # # Last updated: 2026-03-04 06:08:14 UTC # # # # Terms Of Use: https://threatfox.abuse.ch/faq/#tos # # For questions please contact threatfox [at] abuse.ch # ################################################################ # # "first_seen_utc","ioc_id","ioc_value","ioc_type","threat_type","fk_malware","malware_alias","malware_printable","last_seen_utc","confidence_level","is_compromised","reference","tags","anonymous","reporter" "2026-03-04 06:08:14", "1758022", "186c77101c027a465b14cb4a74f8381e", "md5_hash", "payload", "unknown", "None", "Unknown malware", "", "100", "False", "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Gunra%20Ransomware", "gunra,ransomware", "0", "TheRavenFile" "2026-03-04 06:08:14", "1758020", "136e0bf4e5fe4d4249fe9570153a0b97", "md5_hash", "payload", "unknown", "None", "Unknown malware", "", "100", "False", "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Gunra%20Ransomware", "gunra,ransomware", "0", "TheRavenFile" "2026-03-04 06:08:13", "1758021", "b54edbcec7664fde548a7ba1fa8b3b78", "md5_hash", "payload", "unknown", "None", "Unknown malware", "", "100", "False", "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Gunra%20Ransomware", "gunra,ransomware", "0", "TheRavenFile" "2026-03-04 06:08:12", "1758023", "182024fc6c5fe0b1b33fdd9c7c37e368", "md5_hash", "payload", "unknown", "None", "Unknown malware", "", "100", "False", "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Gunra%20Ransomware", "gunra,ransomware", "0", "TheRavenFile" "2026-03-03 14:26:51", "1757483", "4ef033bc6262a87752a2c4fa9af179d2", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "", "95", "False", "None", "None", "0", "Grim" "2026-03-03 14:26:44", "1757480", "cf1c554e93a371e7ef74e5390dd2ba39", "md5_hash", "payload", "win.moker", "None", "Moker", "", "95", "False", "None", "None", "0", "Grim" "2026-03-03 14:26:35", "1757477", "16f325fb9ba51287f83f893ff0638a7d", "md5_hash", "payload", "win.quantloader", "None", "QuantLoader", "", "95", "False", "None", "None", "0", "Grim" "2026-03-03 14:26:28", "1757474", "d28a0ba347b26cf5a4051918ff94f482", "md5_hash", "payload", "win.quantloader", "None", "QuantLoader", "", "95", "False", "None", "None", "0", "Grim" "2026-03-03 14:26:19", "1757471", "ed22eea89ee3207e18847b0110e9c124", "md5_hash", "payload", "win.xworm", "None", "XWorm", "", "95", "False", "None", "None", "0", "Grim" "2026-03-03 14:26:11", "1757468", "ac39dd0a7c37d0dbd77633807bf07996", "md5_hash", "payload", "win.salatstealer", "None", "SalatStealer", "", "95", "False", "None", "None", "0", "Grim" "2026-03-03 14:26:02", "1757465", "ff724bb931ca65acf60ca85a503cb3aa", "md5_hash", "payload", "win.salatstealer", "None", "SalatStealer", "", "95", "False", "None", "None", "0", "Grim" "2026-03-03 14:25:53", "1757462", "26f1f38a8119680c60f7d923a0375410", "md5_hash", "payload", "win.salatstealer", "None", "SalatStealer", "", "95", "False", "None", "None", "0", "Grim" "2026-03-03 14:25:45", "1757459", "cc24c72c9653a1864c9f78c7e24e5bea", "md5_hash", "payload", "win.salatstealer", "None", "SalatStealer", "", "95", "False", "None", "None", "0", "Grim" "2026-03-03 14:25:37", "1757456", "3074617f590a007f4e6572c087760a47", "md5_hash", "payload", "win.salatstealer", "None", "SalatStealer", "", "95", "False", "None", "None", "0", "Grim" "2026-03-03 14:25:29", "1757453", "2825162eb8738e9adbe32773619eb634", "md5_hash", "payload", "win.coffee_loader", "None", "CoffeeLoader", "", "95", "False", "None", "None", "0", "Grim" "2026-03-03 14:25:21", "1757450", "6c7dc8d90ecbbf30ac991bde84c2ceb0", "md5_hash", "payload", "win.mirai", "None", "Mirai", "", "95", "False", "None", "None", "0", "Grim" "2026-03-03 14:25:14", "1757447", "73a8e38f92a174ba34c711226da24291", "md5_hash", "payload", "win.strelastealer", "None", "StrelaStealer", "", "95", "False", "None", "None", "0", "Grim" "2026-03-03 14:25:05", "1757444", "49efd867be8b4c8337d2064b6c3749d5", "md5_hash", "payload", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "95", "False", "None", "None", "0", "Grim" "2026-03-03 14:24:56", "1757441", "b8e0ea374aafc4fc9196a13ad2b0e3d7", "md5_hash", "payload", "win.mirai", "None", "Mirai", "", "95", "False", "None", "None", "0", "Grim" "2026-03-03 14:24:48", "1757438", "80cfb32b29b00d05415b4990da151da7", "md5_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "", "95", "False", "None", "None", "0", "Grim" "2026-03-03 14:24:40", "1757435", "f4194346ba76a8ad7f2b3ba380f93925", "md5_hash", "payload", "win.metastealer", "None", "MetaStealer", "", "95", "False", "None", "None", "0", "Grim" "2026-03-03 14:24:31", "1757432", "809e156be9744f233b184c83cb61b02e", "md5_hash", "payload", "win.metastealer", "None", "MetaStealer", "", "95", "False", "None", "None", "0", "Grim" "2026-03-03 14:24:23", "1757429", "7b91ea2dcb57dfd3829ee5ca75698957", "md5_hash", "payload", "win.meterpreter", "None", "Meterpreter", "", "95", "False", "None", "None", "0", "Grim" "2026-03-03 14:24:15", "1757425", "ff0a0d47229a92d95139f1d6bd8ac691", "md5_hash", "payload", "win.golroted", "None", "Golroted", "", "95", "False", "None", "None", "0", "Grim" "2026-03-03 14:24:06", "1757422", "83f5156c7eaa6fa7681d5783e4b0dc6f", "md5_hash", "payload", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "95", "False", "None", "None", "0", "Grim" "2026-03-03 14:23:58", "1757419", "5b020055fb7c2ac398768cfba07a5b9b", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim" "2026-03-03 14:23:50", "1757416", "f310ab5780a5c30c6ff6c7f3c8916544", "md5_hash", "payload", "win.quantloader", "None", "QuantLoader", "", "95", "False", "None", "None", "0", "Grim" "2026-03-03 14:23:42", "1757412", "29f352c9449534d38212375258517a45", "md5_hash", "payload", "win.asyncrat", "None", "AsyncRAT", "", "95", "False", "None", "None", "0", "Grim" "2026-03-03 14:23:33", "1757409", "f1752ee62888c477340309a53b8d2b9e", "md5_hash", "payload", "win.asyncrat", "None", "AsyncRAT", "", "95", "False", "None", "None", "0", "Grim" "2026-03-03 14:23:25", "1757406", "b3edaedf52442bca2403be04ae7b3b80", "md5_hash", "payload", "win.asyncrat", "None", "AsyncRAT", "", "95", "False", "None", "None", "0", "Grim" "2026-03-03 14:23:17", "1757403", "4942d213ea092bd0f24fb38c875f8a54", "md5_hash", "payload", "win.asyncrat", "None", "AsyncRAT", "", "95", "False", "None", "None", "0", "Grim" "2026-03-03 14:23:08", "1757400", "fe1fc5b31fb58378ed107ef930d271e3", "md5_hash", "payload", "win.asyncrat", "None", "AsyncRAT", "", "95", "False", "None", "None", "0", "Grim" "2026-03-03 14:23:00", "1757397", "dac7a6bf86b1f586c67c5349cb490c44", "md5_hash", "payload", "win.quasar_rat", "CinaRAT,QuasarRAT,Yggdrasil", "Quasar RAT", "", "95", "False", "None", "None", "0", "Grim" "2026-03-03 14:22:52", "1757394", "29987b88fb00a52d81762dc97ff7796b", "md5_hash", "payload", "win.asyncrat", "None", "AsyncRAT", "", "95", "False", "None", "None", "0", "Grim" "2026-03-03 14:22:44", "1757391", "396e15d704db0913fa71d6092a44cbf6", "md5_hash", "payload", "win.asyncrat", "None", "AsyncRAT", "", "95", "False", "None", "None", "0", "Grim" "2026-03-03 14:22:35", "1757387", "dac2cfac4adc0d6f618c035dbd34d219", "md5_hash", "payload", "win.asyncrat", "None", "AsyncRAT", "", "95", "False", "None", "None", "0", "Grim" "2026-03-03 14:22:25", "1757384", "c4aea68d3f23fefeca8d07a12af6ca2c", "md5_hash", "payload", "win.asyncrat", "None", "AsyncRAT", "", "95", "False", "None", "None", "0", "Grim" "2026-03-03 14:22:16", "1757381", "de6f8bebf69c293ca7adfb1c42eabed8", "md5_hash", "payload", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "95", "False", "None", "None", "0", "Grim" "2026-03-03 14:22:07", "1757378", "b327d2ff7fc3759ca1a53943c535d832", "md5_hash", "payload", "win.asyncrat", "None", "AsyncRAT", "", "95", "False", "None", "None", "0", "Grim" "2026-03-03 14:21:58", "1757375", "105a667049b780e82da51ac970f146af", "md5_hash", "payload", "win.strelastealer", "None", "StrelaStealer", "", "95", "False", "None", "None", "0", "Grim" "2026-03-03 14:21:50", "1757372", "8db14e2195be6d828346dc5c9cbc2823", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim" "2026-03-03 14:21:42", "1757369", "2ebd76c7d0c0ca119817183dae7c6260", "md5_hash", "payload", "win.terra_stealer", "StealerOne,SONE,Taurus Loader Stealer Module", "TerraStealer", "", "95", "False", "None", "None", "0", "Grim" "2026-03-03 14:21:32", "1757366", "b7fa192d0fab80e5816988da055256b8", "md5_hash", "payload", "win.strelastealer", "None", "StrelaStealer", "", "95", "False", "None", "None", "0", "Grim" "2026-03-03 14:21:23", "1757363", "c316be4e0d11e19936c577026d96a63c", "md5_hash", "payload", "win.metastealer", "None", "MetaStealer", "", "95", "False", "None", "None", "0", "Grim" "2026-03-03 14:21:13", "1757360", "067df7cf197945f6aac5413e722d5398", "md5_hash", "payload", "win.ismagent", "None", "ISMAgent", "", "95", "False", "None", "None", "0", "Grim" "2026-03-03 14:21:01", "1757357", "5b0bdc5dbe5eee1f523e7c3fc8d887d1", "md5_hash", "payload", "win.metastealer", "None", "MetaStealer", "", "95", "False", "None", "None", "0", "Grim" "2026-03-03 14:20:51", "1757354", "45bb3a259c36f008a8c25ff89ec9b0ff", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim" "2026-03-03 14:20:42", "1757351", "af8cf0f822a95aa93e9ff5ac119ac71f", "md5_hash", "payload", "win.smokeloader", "Dofoil,Sharik,Smoke,Smoke Loader", "SmokeLoader", "", "95", "False", "None", "None", "0", "Grim" "2026-03-03 14:20:33", "1757348", "1f4564be3647f3e23921ee47ee8f0a5e", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim" "2026-03-03 14:20:24", "1757345", "fbbc1a14ce16f349ea053e688860da23", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "", "95", "False", "None", "None", "0", "Grim" "2026-03-03 14:20:15", "1757342", "61bb1b6d672d6ce0f7331fee7de6f553", "md5_hash", "payload", "win.nanocore", "Nancrat,NanoCore", "Nanocore RAT", "", "95", "False", "None", "None", "0", "Grim" "2026-03-03 14:20:05", "1757339", "d7a1faeb8330ceeaa253de59308717a4", "md5_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "", "95", "False", "None", "None", "0", "Grim" "2026-03-03 14:19:56", "1757336", "0506b39eb6559b3d9655b1b534eea96b", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "", "95", "False", "None", "None", "0", "Grim" "2026-03-03 14:19:48", "1757333", "73b15d9195453be47404b18f3b17fdc2", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "", "95", "False", "None", "None", "0", "Grim" "2026-03-03 14:19:41", "1757330", "0606c43c9b6079e71f3f93930b865ae1", "md5_hash", "payload", "win.reverse_rat", "None", "ReverseRAT", "", "95", "False", "None", "None", "0", "Grim" "2026-03-03 14:19:35", "1757327", "4030d6ae880380fab20d3fb04122bba4", "md5_hash", "payload", "win.gcleaner", "None", "GCleaner", "", "95", "False", "None", "None", "0", "Grim" "2026-03-03 14:19:28", "1757324", "e468fff11b549b11c889c92acdba3f02", "md5_hash", "payload", "win.redline_stealer", "RECORDSTEALER", "RedLine Stealer", "", "95", "False", "None", "None", "0", "Grim" "2026-03-03 14:19:21", "1757321", "e81a49528a1714cfc61a3dd18c3d6250", "md5_hash", "payload", "win.ismagent", "None", "ISMAgent", "", "95", "False", "None", "None", "0", "Grim" "2026-03-03 14:19:13", "1757318", "ac2d535606ca9c278bbc85180ba02b78", "md5_hash", "payload", "win.asyncrat", "None", "AsyncRAT", "", "95", "False", "None", "None", "0", "Grim" "2026-03-03 14:19:05", "1757315", "ba91bf8cf959ce66da9854747f5adb37", "md5_hash", "payload", "win.newpass", "None", "NewPass", "", "95", "False", "None", "None", "0", "Grim" "2026-03-03 14:18:57", "1757312", "239a24dbb50b3314e98a7f8c15bfe2ff", "md5_hash", "payload", "win.systembc", "Coroxy,DroxiDat", "SystemBC", "", "95", "False", "None", "None", "0", "Grim" "2026-03-03 14:18:50", "1757309", "01bbac7bbc6550ea7b40304e1d8848d7", "md5_hash", "payload", "win.reverse_rat", "None", "ReverseRAT", "", "95", "False", "None", "None", "0", "Grim" "2026-03-03 14:18:43", "1757306", "5baf6d050a33e6cac14267979baed1b1", "md5_hash", "payload", "win.mercurialgrabber", "None", "MercurialGrabber", "", "95", "False", "None", "None", "0", "Grim" "2026-03-03 14:18:36", "1757303", "3394ce15331383eee6694e5c51016f26", "md5_hash", "payload", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "95", "False", "None", "None", "0", "Grim" "2026-03-03 14:18:28", "1757300", "95f53f2681e9f9d8866c785a94202eb5", "md5_hash", "payload", "win.neconyd", "None", "Neconyd", "", "95", "False", "None", "None", "0", "Grim" "2026-03-03 14:18:20", "1757297", "2838d2fc55d455dbf1ec068673a8d6bc", "md5_hash", "payload", "win.snojan", "None", "Snojan", "", "95", "False", "None", "None", "0", "Grim" "2026-03-03 14:18:12", "1757294", "5e364c1e35445b655ca30ab0c5bc7a4a", "md5_hash", "payload", "win.guidloader", "None", "GUIDLOADER", "", "95", "False", "None", "None", "0", "Grim" # Number of entries: 67