################################################################
# ThreatFox IOCs: recent MD5 hashes - CSV format               #
# Last updated: 2025-12-04 00:59:40 UTC                        #
#                                                              #
# Terms Of Use: https://threatfox.abuse.ch/faq/#tos            #
# For questions please contact threatfox [at] abuse.ch         #
################################################################
#
# "first_seen_utc","ioc_id","ioc_value","ioc_type","threat_type","fk_malware","malware_alias","malware_printable","last_seen_utc","confidence_level","reference","tags","anonymous","reporter"
"2025-12-04 00:59:40", "1667419", "959391ea11b3285ac2b67f6169ed189c", "md5_hash", "payload", "win.acr_stealer", "None", "ACR Stealer", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:59:39", "1667416", "4ba9689d8ad0415fc69153ac434022b4", "md5_hash", "payload", "win.stealc", "None", "Stealc", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:59:38", "1667413", "4673ccfd7723002365ae1abab123ef83", "md5_hash", "payload", "win.salatstealer", "None", "SalatStealer", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:59:37", "1667410", "91ff4ae4afc15bb658d88dbd7a1051ae", "md5_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:59:36", "1667407", "ab943920f96a90e50a368e128a8717ce", "md5_hash", "payload", "win.coinminer", "None", "Coinminer", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:59:35", "1667404", "ee6ac60d4101d872f046ba59e7cc65b3", "md5_hash", "payload", "win.agent_tesla", "AgenTesla,AgentTesla,Negasteal", "Agent Tesla", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:59:34", "1667401", "59155db478d8f41767563d5bf073df7b", "md5_hash", "payload", "win.salatstealer", "None", "SalatStealer", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:59:33", "1667398", "8ccb9a3bf5dbc2e80fd6baf7f0a2f321", "md5_hash", "payload", "win.salatstealer", "None", "SalatStealer", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:59:32", "1667395", "a71b32fc32e2b732888af1ab36480bbb", "md5_hash", "payload", "win.rhadamanthys", "None", "Rhadamanthys", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:59:31", "1667392", "61a637f731b2d38450c99cf350414aff", "md5_hash", "payload", "win.salatstealer", "None", "SalatStealer", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:59:30", "1667389", "7dccd36d018141480997bd88fa7d8e26", "md5_hash", "payload", "win.salatstealer", "None", "SalatStealer", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:59:29", "1667386", "0a24f71cbd3f52d0bc6c3f91b43754ae", "md5_hash", "payload", "win.agent_tesla", "AgenTesla,AgentTesla,Negasteal", "Agent Tesla", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:59:28", "1667383", "0cee71a26235fbb2bd141a1e93e1de92", "md5_hash", "payload", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:59:26", "1667380", "ef323b67ed1257c71e18e4c7c10d0575", "md5_hash", "payload", "win.nimgrabber", "None", "NimGrabber", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:59:25", "1667377", "a129cf94f07d44fc546ee1917e740e3b", "md5_hash", "payload", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:59:24", "1667374", "b0ea29c1cf661822df1f052da920e61d", "md5_hash", "payload", "win.dbatloader", "ModiLoader,NatsoLoader", "DBatLoader", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:59:23", "1667371", "e3f83ceebfca211deed67d7f5ef5e185", "md5_hash", "payload", "win.dbatloader", "ModiLoader,NatsoLoader", "DBatLoader", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:59:22", "1667368", "8eef2230ccba200f77aadcc193ecd180", "md5_hash", "payload", "win.dbatloader", "ModiLoader,NatsoLoader", "DBatLoader", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:59:21", "1667365", "2849c3e42e63db15cc641efde1f101bc", "md5_hash", "payload", "win.dbatloader", "ModiLoader,NatsoLoader", "DBatLoader", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:59:19", "1667362", "8b1fb04f89430b7c75e74bb92db9f5df", "md5_hash", "payload", "win.dbatloader", "ModiLoader,NatsoLoader", "DBatLoader", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:59:18", "1667359", "16559a9eb01cf0873641816e2bd22a6d", "md5_hash", "payload", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:59:17", "1667356", "22b201742d08b572ec54d756d48e9086", "md5_hash", "payload", "win.dbatloader", "ModiLoader,NatsoLoader", "DBatLoader", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:59:16", "1667353", "0e5050bc6814e2a2b2fe1c5e784cea5a", "md5_hash", "payload", "win.xworm", "None", "XWorm", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:59:15", "1667350", "beeb8cfd3e1a89295c449bf7665da652", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:59:14", "1667347", "bc5b0a131afbbdb1f56e38e9376af959", "md5_hash", "payload", "win.isr_stealer", "None", "ISR Stealer", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:59:13", "1667344", "ce398e9f13536f8da1e1f1634b0a9427", "md5_hash", "payload", "win.guidloader", "None", "GUIDLOADER", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:59:12", "1667341", "bfdfa68016b705afd4c4f60301f5f559", "md5_hash", "payload", "win.vipkeylogger", "None", "VIP Keylogger", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:59:11", "1667338", "3a86f0eec0a8e2be0dd62f1a7b755d8d", "md5_hash", "payload", "win.stealc", "None", "Stealc", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:59:10", "1667335", "1a88149b7336622ebb280d2d5ac67314", "md5_hash", "payload", "win.erbium_stealer", "None", "Erbium Stealer", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:59:08", "1667332", "23510ac78a9f18f81796b5b4e655742d", "md5_hash", "payload", "win.havoc", "Havokiz", "Havoc", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:59:07", "1667329", "ae47f697ea4e4ee3e7cfab1549239dcd", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:59:06", "1667326", "f1fe16e5378226845c5c2e230666de75", "md5_hash", "payload", "win.stealc", "None", "Stealc", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:59:05", "1667323", "b3ed12f0658946868c1007db56ebe4a4", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:59:03", "1667320", "e46b2d3f6715596ceb957defac4f82fb", "md5_hash", "payload", "win.masad_stealer", "None", "Masad Stealer", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:59:02", "1667317", "ac0bf28ffe0578b31a0dc302e79e5656", "md5_hash", "payload", "win.gcleaner", "None", "GCleaner", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:59:00", "1667314", "2e095bb3494d80f20c6f12c4798ef3b6", "md5_hash", "payload", "win.coffee_loader", "None", "CoffeeLoader", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:58:59", "1667311", "720804a1e38299c4ffa1e67a966c8e74", "md5_hash", "payload", "win.troystealer", "None", "troystealer", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:58:58", "1667308", "f63d7e0ddf3467973ec738325e2b1367", "md5_hash", "payload", "win.quantloader", "None", "QuantLoader", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:58:57", "1667305", "b649c684279994e3cf9dfc764f2f9143", "md5_hash", "payload", "win.troystealer", "None", "troystealer", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:58:55", "1667302", "2390299115599866cfe0f40b4596ea89", "md5_hash", "payload", "win.crimsonias", "None", "CrimsonIAS", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:58:54", "1667299", "e9be94914a3baad07f0dfc5116756570", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:58:53", "1667296", "f157efac383bac30af4319294015cfd9", "md5_hash", "payload", "win.salatstealer", "None", "SalatStealer", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:58:51", "1667293", "3cdf61953f81c5cf1a36505edf435f74", "md5_hash", "payload", "win.salatstealer", "None", "SalatStealer", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:58:49", "1667290", "50702876ca0152ef5bf89c632661f1f3", "md5_hash", "payload", "win.quantloader", "None", "QuantLoader", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:58:47", "1667287", "870a16d761816b9b61648ded7534fb86", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:58:45", "1667284", "93f5b1064127c877c3cc2043f2ad8b69", "md5_hash", "payload", "win.salatstealer", "None", "SalatStealer", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:58:43", "1667281", "7e35c2827815745a175fb618f9d56880", "md5_hash", "payload", "win.salatstealer", "None", "SalatStealer", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:58:42", "1667278", "f0a638cbbb4b527f74e59f28e372cc40", "md5_hash", "payload", "win.stealc", "None", "Stealc", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:58:41", "1667275", "cf636c14b01eec9fb05abe7a23a0aafd", "md5_hash", "payload", "win.ismagent", "None", "ISMAgent", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:58:39", "1667272", "d83a237e3bbc8eab7d3441f77b8ab207", "md5_hash", "payload", "win.socks5_systemz", "None", "Socks5 Systemz", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:58:38", "1667269", "34cc8fc563a5313f6be10aefd301f8a6", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:58:37", "1667266", "f83b90e59368c101beddcd519d540d66", "md5_hash", "payload", "win.vanillarat", "None", "vanillarat", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:58:36", "1667263", "7ff3ee45a9e02718801d15fc3b3af09f", "md5_hash", "payload", "win.coinminer", "None", "Coinminer", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:58:34", "1667260", "dc75e637d2e639314252bd8c2d72c5cc", "md5_hash", "payload", "win.erbium_stealer", "None", "Erbium Stealer", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:58:33", "1667257", "7b7e236c2bc0bea4fccc47b9df46308c", "md5_hash", "payload", "win.rhadamanthys", "None", "Rhadamanthys", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:58:32", "1667254", "c59deae4284eadcd9edc67b0db96abc4", "md5_hash", "payload", "win.erbium_stealer", "None", "Erbium Stealer", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:58:30", "1667251", "5342143429937867c76f0ba370ec0d11", "md5_hash", "payload", "win.erbium_stealer", "None", "Erbium Stealer", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:58:29", "1667248", "e0f510758219d19850dbeb6e0075d27f", "md5_hash", "payload", "win.erbium_stealer", "None", "Erbium Stealer", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:58:28", "1667245", "df6d2463377062d7a687f382ffef2088", "md5_hash", "payload", "win.erbium_stealer", "None", "Erbium Stealer", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:58:26", "1667242", "575a35e4a8dda21a712c57a2ea30b68f", "md5_hash", "payload", "win.erbium_stealer", "None", "Erbium Stealer", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:58:25", "1667239", "f3b08940d53495843b9ff6db3c11367a", "md5_hash", "payload", "win.erbium_stealer", "None", "Erbium Stealer", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:58:24", "1667236", "e5e7d9ddca1a529db1d76ceec96af674", "md5_hash", "payload", "win.acr_stealer", "None", "ACR Stealer", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:58:23", "1667233", "a2c18e72c92876b17bd9427081bd03c3", "md5_hash", "payload", "win.coinminer", "None", "Coinminer", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:58:22", "1667230", "949ce8d74fb987d0d11827a510cc730d", "md5_hash", "payload", "win.acr_stealer", "None", "ACR Stealer", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:58:21", "1667227", "55f9e504b16e515f588f7ac875f66723", "md5_hash", "payload", "win.neshta", "None", "neshta", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:58:20", "1667224", "5b72b65a02cb09f3b6bee414edb1607d", "md5_hash", "payload", "win.neshta", "None", "neshta", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:58:19", "1667221", "bac8f02dca8b63623a9b28eaad747813", "md5_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:58:18", "1667218", "1d5d8b62ff57a19b7a2ffaa3c703d9d9", "md5_hash", "payload", "win.moker", "None", "Moker", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:58:16", "1667215", "4536be40ae709b3448a95964b6ef1fed", "md5_hash", "payload", "win.coinminer", "None", "Coinminer", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:58:15", "1667212", "960ad9da0c6d048617b1a610ff382adf", "md5_hash", "payload", "win.acr_stealer", "None", "ACR Stealer", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:58:14", "1667209", "116caa672371172886c0ee13f7772341", "md5_hash", "payload", "win.coffee_loader", "None", "CoffeeLoader", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:58:13", "1667206", "f0f219d88230f5963806ce04d7e1acf3", "md5_hash", "payload", "win.krakenkeylogger", "None", "KrakenKeylogger", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:58:12", "1667203", "322fea934264c60a7518380801ce2476", "md5_hash", "payload", "win.krakenkeylogger", "None", "KrakenKeylogger", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:58:11", "1667200", "32dda9f2e60718811e8e8308a620ea85", "md5_hash", "payload", "win.amadey", "None", "Amadey", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:58:09", "1667196", "1ef957a43aa9c803c5f96f3f8261b365", "md5_hash", "payload", "win.socks5_systemz", "None", "Socks5 Systemz", "", "95", "None", "None", "0", "Grim"
"2025-12-04 00:58:08", "1667193", "97a13dbf605b7a363473ac6648567888", "md5_hash", "payload", "win.owlproxy", "None", "Owlproxy", "", "95", "None", "None", "0", "Grim"
"2025-12-03 10:40:57", "1666891", "773aae5bd834b3de00f97f2f47204eb6", "md5_hash", "payload", "unknown_rat", "None", "Unknown RAT", "", "50", "https://ti.qianxin.com/blog/articles/setcoderat-customized-for-chinese-speaking-regions-en/", "SetcodeRat", "0", "juroots"
"2025-12-03 10:40:57", "1666892", "2273578c084a5730c80e37be276ece90", "md5_hash", "payload", "unknown_rat", "None", "Unknown RAT", "", "50", "https://ti.qianxin.com/blog/articles/setcoderat-customized-for-chinese-speaking-regions-en/", "SetcodeRat", "0", "juroots"
"2025-12-03 04:28:52", "1666703", "796a4ba3254887981f8661c3e8c7832e", "md5_hash", "payload", "win.acr_stealer", "None", "ACR Stealer", "", "95", "None", "None", "0", "Grim"
"2025-12-03 04:28:51", "1666700", "6ad6b8e8dad4f6555786a44725800fc0", "md5_hash", "payload", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "95", "None", "None", "0", "Grim"
"2025-12-03 04:28:50", "1666697", "1a0c632f7e9409efbca74245f8e99283", "md5_hash", "payload", "win.quasar_rat", "CinaRAT,QuasarRAT,Yggdrasil", "Quasar RAT", "", "95", "None", "None", "0", "Grim"
"2025-12-03 04:28:49", "1666694", "11755c66c6e5413b454fd6c7148bb0a6", "md5_hash", "payload", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "95", "None", "None", "0", "Grim"
"2025-12-03 04:28:48", "1666688", "e21f9bc09d3e29f1a7a080001c6e2f21", "md5_hash", "payload", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "95", "None", "None", "0", "Grim"
"2025-12-03 04:28:48", "1666691", "6bab2763603ee712bf9edbc5b6872c82", "md5_hash", "payload", "win.quasar_rat", "CinaRAT,QuasarRAT,Yggdrasil", "Quasar RAT", "", "95", "None", "None", "0", "Grim"
"2025-12-03 04:28:47", "1666685", "ec5fa806746ba27493da43d660b60c36", "md5_hash", "payload", "win.mimikatz", "None", "MimiKatz", "", "95", "None", "None", "0", "Grim"
"2025-12-03 04:28:46", "1666682", "6dd6d93f4fc6acf6eeea7a98e12bc405", "md5_hash", "payload", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "95", "None", "None", "0", "Grim"
"2025-12-03 04:28:45", "1666679", "e4ff0d98a865d6bc1a4fa3c574448d41", "md5_hash", "payload", "win.privateloader", "None", "PrivateLoader", "", "95", "None", "None", "0", "Grim"
"2025-12-03 04:28:44", "1666676", "9d2fd1145e4c2054b805f0149fc0a7e9", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "", "95", "None", "None", "0", "Grim"
"2025-12-03 04:28:43", "1666673", "a868ecc09907a7f1868cbc8c165a4fe8", "md5_hash", "payload", "win.privateloader", "None", "PrivateLoader", "", "95", "None", "None", "0", "Grim"
"2025-12-03 04:28:42", "1666667", "c95602d4cc0eafc4d7743138118b612e", "md5_hash", "payload", "win.amadey", "None", "Amadey", "", "95", "None", "None", "0", "Grim"
"2025-12-03 04:28:42", "1666670", "086294773f43035c3302893954deec2c", "md5_hash", "payload", "win.amadey", "None", "Amadey", "", "95", "None", "None", "0", "Grim"
"2025-12-03 04:28:41", "1666664", "cfbb74dda04f7830ce4c4044482eb246", "md5_hash", "payload", "win.agent_tesla", "AgenTesla,AgentTesla,Negasteal", "Agent Tesla", "", "95", "None", "None", "0", "Grim"
"2025-12-03 04:28:40", "1666661", "e4f49201a6685f0811baf697dbe0ac80", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "", "95", "None", "None", "0", "Grim"
"2025-12-03 04:28:39", "1666658", "fddc330d87a43a8d0a8de9f108360ca2", "md5_hash", "payload", "win.masslogger", "None", "MASS Logger", "", "95", "None", "None", "0", "Grim"
"2025-12-03 04:28:38", "1666655", "a1c76cbbe0841df5f479e4191cb3e239", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "", "95", "None", "None", "0", "Grim"
"2025-12-03 04:28:37", "1666652", "bc79f67aa2c484893be13528eb641105", "md5_hash", "payload", "win.masslogger", "None", "MASS Logger", "", "95", "None", "None", "0", "Grim"
"2025-12-03 04:28:36", "1666649", "2736e27f8add019ea79d192b1beb4c6f", "md5_hash", "payload", "win.krakenkeylogger", "None", "KrakenKeylogger", "", "95", "None", "None", "0", "Grim"
"2025-12-03 04:28:35", "1666646", "eca24379a76dbdfa5af378ef2ff055eb", "md5_hash", "payload", "win.krakenkeylogger", "None", "KrakenKeylogger", "", "95", "None", "None", "0", "Grim"
"2025-12-03 04:28:34", "1666640", "60d88feb54040cac9adb74e3af322c3a", "md5_hash", "payload", "win.krakenkeylogger", "None", "KrakenKeylogger", "", "95", "None", "None", "0", "Grim"
"2025-12-03 04:28:34", "1666643", "8628f2ba198911d9f9a58f02c3142d34", "md5_hash", "payload", "win.agent_tesla", "AgenTesla,AgentTesla,Negasteal", "Agent Tesla", "", "95", "None", "None", "0", "Grim"
"2025-12-03 04:28:33", "1666637", "081c34be3592ff132276def9bd6968dc", "md5_hash", "payload", "win.masslogger", "None", "MASS Logger", "", "95", "None", "None", "0", "Grim"
"2025-12-03 04:28:32", "1666634", "dba2d029dd1f2e9969036411c5e136c8", "md5_hash", "payload", "win.guidloader", "None", "GUIDLOADER", "", "95", "None", "None", "0", "Grim"
"2025-12-03 04:28:31", "1666631", "3e53cfb7d979edb8b26fb2827c4428d6", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "", "95", "None", "None", "0", "Grim"
"2025-12-03 04:28:30", "1666628", "752a4e3410a695967be0a71fe920def6", "md5_hash", "payload", "win.redline_stealer", "RECORDSTEALER", "RedLine Stealer", "", "95", "None", "None", "0", "Grim"
"2025-12-03 04:28:29", "1666625", "e1911695e0efb5c0d2fef3bbbe79be44", "md5_hash", "payload", "win.krakenkeylogger", "None", "KrakenKeylogger", "", "95", "None", "None", "0", "Grim"
"2025-12-03 04:28:28", "1666619", "abb587c7cab32c2a9e23903c25ec8312", "md5_hash", "payload", "win.agent_tesla", "AgenTesla,AgentTesla,Negasteal", "Agent Tesla", "", "95", "None", "None", "0", "Grim"
"2025-12-03 04:28:28", "1666622", "2f722c069bc2612c7cf0548c625b34f8", "md5_hash", "payload", "win.masslogger", "None", "MASS Logger", "", "95", "None", "None", "0", "Grim"
"2025-12-03 04:28:27", "1666616", "c33e33d2373ea77fff877873f3036713", "md5_hash", "payload", "win.guidloader", "None", "GUIDLOADER", "", "95", "None", "None", "0", "Grim"
"2025-12-03 04:28:26", "1666613", "49a8fefe9eb5eaa59e2da51833ea1d0a", "md5_hash", "payload", "win.darktortilla", "None", "DarkTortilla", "", "95", "None", "None", "0", "Grim"
"2025-12-03 04:28:25", "1666610", "9a8a88ad4308cad8814369cb40e93bc5", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "", "95", "None", "None", "0", "Grim"
"2025-12-03 04:28:24", "1666607", "9bbcd3c3039db46f775970e80d8c97ee", "md5_hash", "payload", "win.redline_stealer", "RECORDSTEALER", "RedLine Stealer", "", "95", "None", "None", "0", "Grim"
"2025-12-03 04:28:23", "1666604", "10bf43a181b5258c242b5adfd10bec7c", "md5_hash", "payload", "win.masslogger", "None", "MASS Logger", "", "95", "None", "None", "0", "Grim"
"2025-12-03 04:28:22", "1666598", "35ecf5e29556e566664ec7aec3a13e2b", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "", "95", "None", "None", "0", "Grim"
"2025-12-03 04:28:22", "1666601", "b7faf6deed94ed572cd0b893ebd043d5", "md5_hash", "payload", "win.redline_stealer", "RECORDSTEALER", "RedLine Stealer", "", "95", "None", "None", "0", "Grim"
"2025-12-03 04:28:21", "1666595", "fc9f82c3268eb2034f059d9b8824c2b6", "md5_hash", "payload", "win.troystealer", "None", "troystealer", "", "95", "None", "None", "0", "Grim"
"2025-12-03 04:28:20", "1666592", "be9e942d68a2d7c5bc4ad3dbd1150f22", "md5_hash", "payload", "win.agent_tesla", "AgenTesla,AgentTesla,Negasteal", "Agent Tesla", "", "95", "None", "None", "0", "Grim"
"2025-12-03 04:28:19", "1666589", "e84cf90887e5403dbe365f7a4b47d3fe", "md5_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "", "95", "None", "None", "0", "Grim"
"2025-12-03 04:28:18", "1666586", "60e0d4abb8a3e0e30a8dabf8e022f4ee", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "", "95", "None", "None", "0", "Grim"
"2025-12-03 04:28:17", "1666583", "afab6b8ba19c70ddec165262dab71234", "md5_hash", "payload", "win.socks5_systemz", "None", "Socks5 Systemz", "", "95", "None", "None", "0", "Grim"
"2025-12-03 04:28:16", "1666577", "a3707686bc1b7ed52f9a86f68cc1de70", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "None", "None", "0", "Grim"
"2025-12-03 04:28:16", "1666580", "01eff61a41eba2a117721c8a81cae1b9", "md5_hash", "payload", "win.troystealer", "None", "troystealer", "", "95", "None", "None", "0", "Grim"
"2025-12-03 04:28:15", "1666574", "2af55e53f0619d0464df703b261f9f33", "md5_hash", "payload", "win.troystealer", "None", "troystealer", "", "95", "None", "None", "0", "Grim"
"2025-12-03 04:28:14", "1666571", "d183775b45bf0e8496d957554e702990", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "", "95", "None", "None", "0", "Grim"
"2025-12-03 04:28:13", "1666568", "b4b67dda46c13d8a031fb67a7219b9aa", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "", "95", "None", "None", "0", "Grim"
"2025-12-03 04:28:12", "1666565", "5b77eef5c260e68b1e376b10876f27ef", "md5_hash", "payload", "win.coffee_loader", "None", "CoffeeLoader", "", "95", "None", "None", "0", "Grim"
"2025-12-03 04:28:11", "1666562", "c70911de2bad51a9c008bae4d0255b4d", "md5_hash", "payload", "win.troystealer", "None", "troystealer", "", "95", "None", "None", "0", "Grim"
"2025-12-03 04:28:10", "1666559", "8d4a77e1fc1ba4ed1bd544af53500551", "md5_hash", "payload", "win.quasar_rat", "CinaRAT,QuasarRAT,Yggdrasil", "Quasar RAT", "", "95", "None", "None", "0", "Grim"
"2025-12-03 04:28:09", "1666556", "f5bfb672d4bfef9596c2392e8a3959cd", "md5_hash", "payload", "win.acr_stealer", "None", "ACR Stealer", "", "95", "None", "None", "0", "Grim"
"2025-12-03 04:28:08", "1666553", "e2032cda9a5da097ddb4c84161e160e7", "md5_hash", "payload", "win.troystealer", "None", "troystealer", "", "95", "None", "None", "0", "Grim"
"2025-12-03 04:28:07", "1666550", "e0414ae66b8ed242a8a3c26e7af14527", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "None", "None", "0", "Grim"
"2025-12-03 04:28:06", "1666547", "dd8cdce774704b7e64f0fc426d2d2a2f", "md5_hash", "payload", "win.coinminer", "None", "Coinminer", "", "95", "None", "None", "0", "Grim"
"2025-12-03 04:28:05", "1666544", "56cdcf3585bc8646cede7b7c33726b71", "md5_hash", "payload", "win.socks5_systemz", "None", "Socks5 Systemz", "", "95", "None", "None", "0", "Grim"
"2025-12-03 04:28:04", "1666538", "f72c1c6f9f8a2f05cbf16ae8366de3c7", "md5_hash", "payload", "win.troystealer", "None", "troystealer", "", "95", "None", "None", "0", "Grim"
"2025-12-03 04:28:04", "1666541", "119c34666a1e091619ebd1c5e2e78aa8", "md5_hash", "payload", "win.coinminer", "None", "Coinminer", "", "95", "None", "None", "0", "Grim"
"2025-12-03 04:28:03", "1666535", "2a72f4990717038e7c9ff8d55298c98e", "md5_hash", "payload", "win.agent_tesla", "AgenTesla,AgentTesla,Negasteal", "Agent Tesla", "", "95", "None", "None", "0", "Grim"
"2025-12-03 04:28:01", "1666532", "5c583e6e1d38d654a378e68e0d843533", "md5_hash", "payload", "win.cybergate", "Rebhip", "CyberGate", "", "95", "None", "None", "0", "Grim"
"2025-12-03 04:28:00", "1666529", "461a6c5fcd18251f3a2a72fa6934a77f", "md5_hash", "payload", "win.coffee_loader", "None", "CoffeeLoader", "", "95", "None", "None", "0", "Grim"
"2025-12-03 04:27:59", "1666523", "fe5569462d9ca145f78bc520e1e9a53e", "md5_hash", "payload", "win.guidloader", "None", "GUIDLOADER", "", "95", "None", "None", "0", "Grim"
"2025-12-03 04:27:59", "1666526", "e5e14f102cb4dd3286abec8355d14dfe", "md5_hash", "payload", "win.nanocore", "Nancrat,NanoCore", "Nanocore RAT", "", "95", "None", "None", "0", "Grim"
"2025-12-03 04:27:58", "1666520", "5e98e4dfb80ddbeb480fb37c233d6f44", "md5_hash", "payload", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "95", "None", "None", "0", "Grim"
"2025-12-03 04:27:57", "1666517", "09b0a41cce5a5ce2d0566c467c16e04b", "md5_hash", "payload", "win.quasar_rat", "CinaRAT,QuasarRAT,Yggdrasil", "Quasar RAT", "", "95", "None", "None", "0", "Grim"
# Number of entries: 141