################################################################ # ThreatFox IOCs: recent MD5 hashes - CSV format # # Last updated: 2026-01-10 19:47:00 UTC # # # # Terms Of Use: https://threatfox.abuse.ch/faq/#tos # # For questions please contact threatfox [at] abuse.ch # ################################################################ # # "first_seen_utc","ioc_id","ioc_value","ioc_type","threat_type","fk_malware","malware_alias","malware_printable","last_seen_utc","confidence_level","is_compromised","reference","tags","anonymous","reporter" "2026-01-10 19:47:00", "1700655", "3beaa43023ad2ec06bad08b3b8f36dde", "md5_hash", "payload", "win.masad_stealer", "None", "Masad Stealer", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:46:59", "1700652", "6b16544200f712036844281d6be4615e", "md5_hash", "payload", "win.masad_stealer", "None", "Masad Stealer", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:46:58", "1700649", "075b25a6b75d7b086132ef896638ab89", "md5_hash", "payload", "win.salatstealer", "None", "SalatStealer", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:46:57", "1700646", "2f87675e90953121627b9d42c78fa0e6", "md5_hash", "payload", "win.poscardstealer", "None", "poscardstealer", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:46:56", "1700643", "c865e3e21e00c0fc70b328325ec2a7f8", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:46:55", "1700640", "3ba01018824f36df58859d365af939e3", "md5_hash", "payload", "win.xworm", "None", "XWorm", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:46:54", "1700637", "96445bd6af4612dac8daf3962fc3f3b2", "md5_hash", "payload", "win.salatstealer", "None", "SalatStealer", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:46:53", "1700634", "309a0013a20b269be627e07d29047042", "md5_hash", "payload", "win.quantloader", "None", "QuantLoader", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:46:53", "1700631", "f42c3df63b8b64131812a8c2d6c0ddd0", "md5_hash", "payload", "win.masslogger", "None", "MASS Logger", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:46:52", "1700628", "976753d209ea69a4a23c6f8f41236f1c", "md5_hash", "payload", "win.quasar_rat", "CinaRAT,QuasarRAT,Yggdrasil", "Quasar RAT", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:46:51", "1700625", "a58990bf71a1eb82a13d3b2df860f944", "md5_hash", "payload", "win.asyncrat", "None", "AsyncRAT", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:46:50", "1700622", "45643f5ce63bb990dae8878fc4cb4652", "md5_hash", "payload", "win.diceloader", "Lizar", "DICELOADER", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:46:49", "1700619", "12f1b9a0081c25ad249ebb9e79f11bd4", "md5_hash", "payload", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:46:48", "1700616", "39aab08ff5e2776a191eac1b8eb7e67b", "md5_hash", "payload", "win.salatstealer", "None", "SalatStealer", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:46:47", "1700613", "1a168452c0ff8756f9b57764b1428eeb", "md5_hash", "payload", "win.bbsrat", "None", "BBSRAT", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:46:46", "1700610", "ab7ff50a59e8c19633734a0a7511076e", "md5_hash", "payload", "win.bbsrat", "None", "BBSRAT", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:46:45", "1700607", "07a111a3c9fd4b76760040210ab17643", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:46:44", "1700604", "67d7ee925b8f169d46cc3d2bf9739742", "md5_hash", "payload", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:46:43", "1700601", "85174aa99618a844a3ed52b9da512642", "md5_hash", "payload", "win.coinminer", "None", "Coinminer", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:46:42", "1700598", "83b6b3788ca6693d713331dbb0e89078", "md5_hash", "payload", "win.gogoogle", "BossiTossi", "GoGoogle", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:46:42", "1700595", "601a25f8147e5a07bd65ab402f0266df", "md5_hash", "payload", "win.guidloader", "None", "GUIDLOADER", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:46:41", "1700592", "db72c217f173856469a24585ba66e1ca", "md5_hash", "payload", "win.poscardstealer", "None", "poscardstealer", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:46:40", "1700589", "aacb412288570d9e278ecf46d465f5db", "md5_hash", "payload", "win.asyncrat", "None", "AsyncRAT", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:46:39", "1700586", "8ca2f38b2e41bb8587d0aaedb8ce158f", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:46:38", "1700583", "6a1987633d775de1e383ab99d7cb6588", "md5_hash", "payload", "win.quasar_rat", "CinaRAT,QuasarRAT,Yggdrasil", "Quasar RAT", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:46:37", "1700580", "9c796b299b55e966f7ec834c3fa9d902", "md5_hash", "payload", "win.bbsrat", "None", "BBSRAT", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:46:36", "1700577", "c9518f578dfc80b7d4b1daadcd8cf265", "md5_hash", "payload", "win.coinminer", "None", "Coinminer", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:46:35", "1700574", "27a8739ce8598a5839736a2d9932e990", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:46:34", "1700571", "2ea862c15510e325b38af9f66c28990e", "md5_hash", "payload", "win.coinminer", "None", "Coinminer", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:46:33", "1700568", "468489ca72a507ab0c2cbe99c722bff4", "md5_hash", "payload", "win.quantloader", "None", "QuantLoader", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:46:33", "1700565", "c460f6d9f569c7da5c56d9b26b94a7ea", "md5_hash", "payload", "win.xworm", "None", "XWorm", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:46:32", "1700562", "5d01c404254dd5d15f8828b79888871b", "md5_hash", "payload", "win.asyncrat", "None", "AsyncRAT", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:46:31", "1700559", "2cf31950e417733388d272695516a68a", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:46:30", "1700556", "b01722115a7f626bf1218683c07a8fad", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:46:29", "1700553", "3957cec5878cb5615240365c9f6e58a2", "md5_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:46:28", "1700550", "5105182de430d823912e8e7f2d7e1b1e", "md5_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:46:27", "1700547", "97175d795922a08fb61a348333f09064", "md5_hash", "payload", "win.salatstealer", "None", "SalatStealer", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:46:26", "1700544", "ce9e60a2f40d67dab89344d0948cf0cc", "md5_hash", "payload", "win.salatstealer", "None", "SalatStealer", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:46:25", "1700541", "16e3dc871e441167d41c7017f0c44452", "md5_hash", "payload", "win.asyncrat", "None", "AsyncRAT", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:46:24", "1700538", "ffd54ec754418fc5adeff14544a36884", "md5_hash", "payload", "win.strelastealer", "None", "StrelaStealer", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:46:23", "1700535", "e740bb72de9204d5f61a23d7069ac72c", "md5_hash", "payload", "win.collectorgoomba", "Collector Stealer", "CollectorGoomba", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:46:22", "1700532", "a03ef905b25587c0ab9a29db55bc63ee", "md5_hash", "payload", "win.collectorgoomba", "Collector Stealer", "CollectorGoomba", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:46:21", "1700529", "4eb4edf6a9173d4852489a76f960bb1a", "md5_hash", "payload", "win.collectorgoomba", "Collector Stealer", "CollectorGoomba", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:46:20", "1700526", "6cb5e450184b3b799d7b4f7fc31ea65e", "md5_hash", "payload", "win.coinminer", "None", "Coinminer", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:46:19", "1700523", "298c2fccbb8c5ffbfdcb27fcf3ad7c32", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:46:18", "1700520", "79f89f9fb551df4f293b2f4355594ec8", "md5_hash", "payload", "win.njrat", "Bladabindi,Lime-Worm", "NjRAT", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:46:18", "1700517", "68196314530337b4f16838f952aaa271", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:46:17", "1700514", "edcbfd32473e784ceb72db601442d641", "md5_hash", "payload", "win.poscardstealer", "None", "poscardstealer", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:46:16", "1700511", "9afd22a4677e377b59db24a583efc56f", "md5_hash", "payload", "win.salatstealer", "None", "SalatStealer", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:46:15", "1700508", "0e9b3120bc58a577668e7bd8ce5e72b7", "md5_hash", "payload", "win.coinminer", "None", "Coinminer", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:46:14", "1700505", "f5ecd9cd6912b8c5d61f5dda1b4c8c64", "md5_hash", "payload", "win.salatstealer", "None", "SalatStealer", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:46:13", "1700502", "2d4175f888fc3aef499c857b446a72f7", "md5_hash", "payload", "win.stealc", "None", "Stealc", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:46:12", "1700499", "a331a4712d3a8d92e3fa613a988df902", "md5_hash", "payload", "win.salatstealer", "None", "SalatStealer", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:46:11", "1700496", "6e81231f8db6d2475197454b5d453642", "md5_hash", "payload", "win.salatstealer", "None", "SalatStealer", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:46:10", "1700493", "599368a3bba9b6fa55d557275de245fe", "md5_hash", "payload", "win.agent_tesla", "AgenTesla,AgentTesla,Negasteal", "Agent Tesla", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:46:09", "1700490", "ca3f35212540eeea86dc34ad0253670b", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:46:08", "1700487", "79855504479a18853aa94aff884dd9e9", "md5_hash", "payload", "win.agent_tesla", "AgenTesla,AgentTesla,Negasteal", "Agent Tesla", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:46:07", "1700484", "1a1ded0861b7149c24b363d41c4c35e3", "md5_hash", "payload", "win.arkei_stealer", "ArkeiStealer", "Arkei Stealer", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:46:06", "1700481", "aea9fbc6555f0e458e151a6a70b94cbc", "md5_hash", "payload", "win.owlproxy", "None", "Owlproxy", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:46:05", "1700478", "6e53902a1ef573709b2f5d4e77c0053b", "md5_hash", "payload", "win.masad_stealer", "None", "Masad Stealer", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:46:04", "1700475", "851ce486dcc6af45c9ec549c32809571", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:46:04", "1700472", "4975c77bca0f1e0e12cfab66b9f0a44f", "md5_hash", "payload", "win.darkvision_rat", "None", "DarkVision RAT", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:46:01", "1700469", "00e9233e067e9905def24a907dfb759c", "md5_hash", "payload", "win.njrat", "Bladabindi,Lime-Worm", "NjRAT", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:46:00", "1700466", "1e2c427a8b4abadc590a9f08bd547402", "md5_hash", "payload", "win.asyncrat", "None", "AsyncRAT", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:45:59", "1700463", "231f6e9a473561c3e11ff53d8fe655aa", "md5_hash", "payload", "win.bbsrat", "None", "BBSRAT", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:45:58", "1700460", "478a1956d73a21b08567fe4ee38b6da2", "md5_hash", "payload", "win.asyncrat", "None", "AsyncRAT", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:45:57", "1700457", "36e6f46cc4d2de89baf3764e58c40de8", "md5_hash", "payload", "win.nimgrabber", "None", "NimGrabber", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:45:56", "1700454", "066e5b41aa01b8cfcf36e6e2551af6af", "md5_hash", "payload", "win.owlproxy", "None", "Owlproxy", "", "95", "False", "None", "None", "0", "Grim" "2026-01-10 19:45:54", "1700451", "e6d1bdd511538f7d43616d9ce5e4d9f3", "md5_hash", "payload", "win.dcrat", "DarkCrystal RAT", "DCRat", "", "95", "False", "None", "None", "0", "Grim" # Number of entries: 69