################################################################ # ThreatFox IOCs: recent MD5 hashes - CSV format # # Last updated: 2026-10-16 06:36:36 UTC # # # # Terms Of Use: https://threatfox.abuse.ch/faq/#tos # # For questions please contact threatfox [at] abuse.ch # ################################################################ # # "first_seen_utc","ioc_id","ioc_value","ioc_type","threat_type","fk_malware","malware_alias","malware_printable","last_seen_utc","confidence_level","is_compromised","reference","tags","anonymous","reporter" "2026-10-16 06:36:36", "1969104", "9b32572ea80935ca6944cffc999dd466", "md5_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "", "95", "False", "None", "None", "0", "Grim" "2026-10-16 06:36:35", "1969098", "387bef108ad9b3b52851c9d4073a4ad4", "md5_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "", "95", "False", "None", "None", "0", "Grim" "2026-10-16 06:36:35", "1969101", "33e354278dfb54d874ea209803d11c1f", "md5_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "", "95", "False", "None", "None", "0", "Grim" "2026-10-16 06:36:33", "1969095", "61d8a273b21a32ba2bab80a50c68f3ea", "md5_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "False", "None", "None", "0", "Grim" "2026-10-16 06:36:32", "1969092", "beb6e70f58ee7ee196fcdcd683bc414c", "md5_hash", "payload", "py.venus_stealer", "None", "Venus Stealer", "", "95", "False", "None", "None", "0", "Grim" "2026-10-16 06:36:31", "1969089", "3af01d015dc80e8c8e0bd1a7d76f425c", "md5_hash", "payload", "py.rn_stealer", "None", "RN Stealer", "", "95", "False", "None", "None", "0", "Grim" "2026-10-16 06:36:30", "1969086", "32be4c8fd972be646c25aff77e43c9d1", "md5_hash", "payload", "win.asyncrat", "None", "AsyncRAT", "", "95", "False", "None", "None", "0", "Grim" "2026-10-16 06:36:29", "1969083", "16c4af265fc87c0ffbdaab817fe1b679", "md5_hash", "payload", "py.venus_stealer", "None", "Venus Stealer", "", "95", "False", "None", "None", "0", "Grim" "2026-10-16 06:36:28", "1969080", "0d5c47ebc408855d8a71ad321ef1da14", "md5_hash", "payload", "win.sigloader", "None", "SigLoader", "", "95", "False", "None", "None", "0", "Grim" "2026-10-16 06:36:27", "1969077", "b97980c046ff56cd4393bc37bfea4db5", "md5_hash", "payload", "js.node_rat", "None", "NodeRAT", "", "95", "False", "None", "None", "0", "Grim" "2026-10-16 06:36:26", "1969074", "c48ae59baba99bfeedfee5f3ffcbb5c8", "md5_hash", "payload", "elf.leethozer", "None", "LeetHozer", "", "95", "False", "None", "None", "0", "Grim" "2026-10-16 06:36:25", "1969068", "c5657b30f1fb37aa0044380faa3e4187", "md5_hash", "payload", "win.ravenstealer", "None", "Raven Stealer", "", "95", "False", "None", "None", "0", "Grim" "2026-10-16 06:36:25", "1969071", "838e3bb35c69f9d5b4d273d6ed222a60", "md5_hash", "payload", "win.ravenstealer", "None", "Raven Stealer", "", "95", "False", "None", "None", "0", "Grim" "2026-10-16 06:36:24", "1969065", "d543edb2bb7fa74ab66802f6c9230d25", "md5_hash", "payload", "win.ravenstealer", "None", "Raven Stealer", "", "95", "False", "None", "None", "0", "Grim" "2026-10-16 06:36:22", "1969059", "6e18b5947f91746179267c88e79e8f1f", "md5_hash", "payload", "py.venus_stealer", "None", "Venus Stealer", "", "95", "False", "None", "None", "0", "Grim" "2026-10-16 06:36:22", "1969062", "f131d1cdf3849e1b627a474bd9460acd", "md5_hash", "payload", "win.ravenstealer", "None", "Raven Stealer", "", "95", "False", "None", "None", "0", "Grim" "2026-10-16 06:36:21", "1969055", "976f7e3cfb0e294e91d254e80ee921bf", "md5_hash", "payload", "win.sigloader", "None", "SigLoader", "", "95", "False", "None", "None", "0", "Grim" "2026-10-16 06:36:20", "1969052", "9f4b2e1530ee264f07e06c8950e2748f", "md5_hash", "payload", "win.sigloader", "None", "SigLoader", "", "95", "False", "None", "None", "0", "Grim" "2026-10-16 06:36:19", "1969049", "7500d0d6eeeda52ed769057153e6c1bb", "md5_hash", "payload", "win.sigloader", "None", "SigLoader", "", "95", "False", "None", "None", "0", "Grim" "2026-10-16 06:36:18", "1969046", "806c58be9684b1bc4af1a9c43763a4ce", "md5_hash", "payload", "win.sigloader", "None", "SigLoader", "", "95", "False", "None", "None", "0", "Grim" "2026-10-16 06:36:17", "1969043", "f80e26bd75d1f89ba1501002076195ae", "md5_hash", "payload", "win.meterpreter", "None", "Meterpreter", "", "95", "False", "None", "None", "0", "Grim" "2026-10-16 06:36:16", "1969040", "c69effcb1c7fd4177a9db86fe6ab8be8", "md5_hash", "payload", "win.sigloader", "None", "SigLoader", "", "95", "False", "None", "None", "0", "Grim" "2026-10-16 06:36:15", "1969037", "eb1e4beb11521b5ba4416704fbd3c102", "md5_hash", "payload", "win.sigloader", "None", "SigLoader", "", "95", "False", "None", "None", "0", "Grim" "2026-10-16 06:36:14", "1969034", "309d76027588d6eec3051077bb3b4540", "md5_hash", "payload", "win.sigloader", "None", "SigLoader", "", "95", "False", "None", "None", "0", "Grim" "2026-10-16 06:36:13", "1969031", "416655f0370ddb7e0d0fc54f136caecc", "md5_hash", "payload", "win.sigloader", "None", "SigLoader", "", "95", "False", "None", "None", "0", "Grim" "2026-10-16 06:36:12", "1969028", "78b6e15065dba4e35b56b32ee15b932b", "md5_hash", "payload", "win.salatstealer", "None", "SalatStealer", "", "95", "False", "None", "None", "0", "Grim" "2026-10-16 06:36:11", "1969025", "da726563859745e1312b910a2a693762", "md5_hash", "payload", "win.sigloader", "None", "SigLoader", "", "95", "False", "None", "None", "0", "Grim" "2026-10-16 06:36:10", "1969022", "048f5b7440b085874c751745877cbaa2", "md5_hash", "payload", "win.njrat", "Bladabindi,Lime-Worm", "NjRAT", "", "95", "False", "None", "None", "0", "Grim" "2026-10-16 06:36:09", "1969020", "0706cd387a4eba2beaf3325911a4957d", "md5_hash", "payload", "win.njrat", "Bladabindi,Lime-Worm", "NjRAT", "", "95", "False", "None", "None", "0", "Grim" "2026-10-16 06:36:08", "1969016", "c36775d184b8ce09562f299657331f1a", "md5_hash", "payload", "win.aurastealer", "AURA Stealer,AURASTEAL", "Aura Stealer", "", "95", "False", "None", "None", "0", "Grim" "2026-10-16 06:36:08", "1969018", "d2c20418550c97b75a6f0aa15aef57d1", "md5_hash", "payload", "win.asyncrat", "None", "AsyncRAT", "", "95", "False", "None", "None", "0", "Grim" "2026-10-16 06:36:07", "1969013", "49caf47dd348082411c3ca7cabfc49f9", "md5_hash", "payload", "py.stealler", "None", "stealler", "", "95", "False", "None", "None", "0", "Grim" "2026-10-16 06:36:06", "1969010", "affe4cd2a433123d83231b353a74e4a6", "md5_hash", "payload", "win.wannacryptor", "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry", "WannaCryptor", "", "95", "False", "None", "None", "0", "Grim" "2026-10-16 06:36:05", "1969007", "d9ac245d4b6a01de4ebff52aa77c5c90", "md5_hash", "payload", "win.coinminer", "None", "Coinminer", "", "95", "False", "None", "None", "0", "Grim" "2026-10-16 06:36:04", "1969004", "6ffefcd7dc6e26535d2e89fddc8fac73", "md5_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "", "95", "False", "None", "None", "0", "Grim" "2026-10-16 06:36:03", "1969001", "bd43519650bf3de09d993e9f01560a78", "md5_hash", "payload", "win.xworm", "None", "XWorm", "", "95", "False", "None", "None", "0", "Grim" "2026-10-16 06:36:02", "1968998", "ee3196a6eef869b3314c117b85ea4201", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim" "2026-10-16 06:36:01", "1968995", "7787b0d859a098508a1e4324ef0338d2", "md5_hash", "payload", "win.salatstealer", "None", "SalatStealer", "", "95", "False", "None", "None", "0", "Grim" "2026-10-16 06:36:00", "1968992", "420fd012909f99f3f38a16e091e008b5", "md5_hash", "payload", "win.salatstealer", "None", "SalatStealer", "", "95", "False", "None", "None", "0", "Grim" "2026-10-16 06:35:59", "1968989", "41d17a7523b9fcaac5d05863e6c5835a", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim" "2026-10-16 06:35:57", "1968986", "4f4c781a5c125e47b1e63a084e7adf7f", "md5_hash", "payload", "win.gcleaner", "None", "GCleaner", "", "95", "False", "None", "None", "0", "Grim" "2026-10-15 18:36:27", "1968209", "218290ca6743c69c0962344dfd55345a", "md5_hash", "payload", "win.icexloader", "None", "win.icexloader", "", "95", "False", "None", "None", "0", "Grim" "2026-10-15 18:36:23", "1968206", "88c6c9f1dc7417d65e5aaa9f0c62175c", "md5_hash", "payload", "win.shimrat", "None", "Shim RAT", "", "95", "False", "None", "None", "0", "Grim" "2026-10-15 18:36:22", "1968203", "7f47a50117bac7569e6b4de42926636e", "md5_hash", "payload", "win.shimrat", "None", "Shim RAT", "", "95", "False", "None", "None", "0", "Grim" "2026-10-15 18:36:21", "1968200", "60c15c055d93fe03e36eee15e8918df2", "md5_hash", "payload", "win.overlord", "None", "Overlord RAT", "", "95", "False", "None", "None", "0", "Grim" "2026-10-15 18:36:20", "1968197", "19cc684e9f4e4df52513afe0850625c8", "md5_hash", "payload", "py.blankgrabber", "None", "BlankGrabber", "", "95", "False", "None", "None", "0", "Grim" "2026-10-15 18:36:18", "1968194", "bdac86451884dc93354e6fca3a2804d0", "md5_hash", "payload", "win.icexloader", "None", "win.icexloader", "", "95", "False", "None", "None", "0", "Grim" "2026-10-15 18:36:17", "1968191", "a1711b1b301599ca23efa0608cf8c6cc", "md5_hash", "payload", "py.blankgrabber", "None", "BlankGrabber", "", "95", "False", "None", "None", "0", "Grim" "2026-10-15 18:36:16", "1968188", "3fa7acfb1027a720b419903c1f34ae44", "md5_hash", "payload", "win.ravenstealer", "None", "Raven Stealer", "", "95", "False", "None", "None", "0", "Grim" "2026-10-15 18:36:15", "1968182", "c4afe9385749092ab1292b0e9c3bfd5f", "md5_hash", "payload", "win.ravenstealer", "None", "Raven Stealer", "", "95", "False", "None", "None", "0", "Grim" "2026-10-15 18:36:15", "1968185", "65391af26b92b23d3ec09797b1375378", "md5_hash", "payload", "win.ravenstealer", "None", "Raven Stealer", "", "95", "False", "None", "None", "0", "Grim" "2026-10-15 18:36:14", "1968179", "1374c210c359d0da0d32e2df05f343b5", "md5_hash", "payload", "win.ravenstealer", "None", "Raven Stealer", "", "95", "False", "None", "None", "0", "Grim" "2026-10-15 18:36:12", "1968176", "71493b893d82e546373a1e8909d22b41", "md5_hash", "payload", "win.ravenstealer", "None", "Raven Stealer", "", "95", "False", "None", "None", "0", "Grim" "2026-10-15 18:36:07", "1968173", "3ba1d62b27d60491904422bbec123493", "md5_hash", "payload", "win.asyncrat", "None", "AsyncRAT", "", "95", "False", "None", "None", "0", "Grim" "2026-10-15 18:36:06", "1968170", "88d5f1fe1f327f66413b70317f38814d", "md5_hash", "payload", "win.asyncrat", "None", "AsyncRAT", "", "95", "False", "None", "None", "0", "Grim" "2026-10-15 18:36:05", "1968167", "68683f0e85cd8c22bd79c6b7e6b69987", "md5_hash", "payload", "py.stealler", "None", "stealler", "", "95", "False", "None", "None", "0", "Grim" "2026-10-15 18:36:04", "1968164", "ea5062488fc860f740d08e6cdb09623f", "md5_hash", "payload", "win.ravenstealer", "None", "Raven Stealer", "", "95", "False", "None", "None", "0", "Grim" "2026-10-15 18:36:03", "1968161", "b143c394225deb144635e86b9be31076", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim" "2026-10-15 18:36:02", "1968158", "5943946e506b78c9f6d9275e47d1d8c2", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim" "2026-10-15 18:36:01", "1968155", "53d9129f1070a601acdaa8558e6cff48", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "", "95", "False", "None", "None", "0", "Grim" "2026-10-15 18:35:59", "1968152", "1bbe0d3d698dfa58aa417f0cdf40230d", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "", "95", "False", "None", "None", "0", "Grim" "2026-10-15 18:35:58", "1968149", "3e37afb25cf59842460fb2d62e6c0918", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim" "2026-10-15 18:35:57", "1968146", "84430433d7561de3443e41d10ce3a15a", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim" "2026-10-15 18:35:56", "1968143", "15c7fa55b16a76eb4b9a14105a594e1c", "md5_hash", "payload", "win.asyncrat", "None", "AsyncRAT", "", "95", "False", "None", "None", "0", "Grim" "2026-10-15 18:35:55", "1968140", "489c6211af55230843247b2710c9aa40", "md5_hash", "payload", "win.phemedrone_stealer", "Ov3r_Stealer", "Phemedrone Stealer", "", "95", "False", "None", "None", "0", "Grim" "2026-10-15 18:35:54", "1968137", "354e10dff5df9290cf533edfa6aacb2c", "md5_hash", "payload", "win.stealc", "None", "Stealc", "", "95", "False", "None", "None", "0", "Grim" "2026-10-15 18:35:53", "1968134", "1b3c8742bcdeee6cd3dafd2cba12a508", "md5_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "", "95", "False", "None", "None", "0", "Grim" "2026-10-15 18:35:52", "1968131", "1520e1599ccc2f116ca0f89e5a935fe0", "md5_hash", "payload", "win.njrat", "Bladabindi,Lime-Worm", "NjRAT", "", "95", "False", "None", "None", "0", "Grim" "2026-10-15 18:35:51", "1968128", "2c0187de8eb73d79e622b5e8b898f1f0", "md5_hash", "payload", "win.njrat", "Bladabindi,Lime-Worm", "NjRAT", "", "95", "False", "None", "None", "0", "Grim" "2026-10-15 18:35:50", "1968122", "cd22bb73046551dfbafcc7f4c3ed505f", "md5_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "", "95", "False", "None", "None", "0", "Grim" "2026-10-15 18:35:50", "1968125", "2c1187bb99ed21458e686f5933f459c5", "md5_hash", "payload", "win.njrat", "Bladabindi,Lime-Worm", "NjRAT", "", "95", "False", "None", "None", "0", "Grim" "2026-10-15 18:35:49", "1968119", "2920af89e37017cc869ea4f83fee12ec", "md5_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "", "95", "False", "None", "None", "0", "Grim" "2026-10-15 18:35:48", "1968116", "104c9a1a490d8c05966f46bbbc62028d", "md5_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "", "95", "False", "None", "None", "0", "Grim" "2026-10-15 18:35:47", "1968112", "085820880b9361a6d9ce44e53caf66df", "md5_hash", "payload", "win.raton_rat", "None", "RatonRAT", "", "95", "False", "None", "None", "0", "Grim" "2026-10-15 18:35:46", "1968109", "248c2a231931da9a1c7c3f8de5a32b6b", "md5_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "", "95", "False", "None", "None", "0", "Grim" "2026-10-15 18:35:45", "1968106", "f585a123f6895634c470de505091d194", "md5_hash", "payload", "win.darktortilla", "None", "DarkTortilla", "", "95", "False", "None", "None", "0", "Grim" "2026-10-15 18:35:44", "1968103", "f26444d61c8dd0e56ea61119d0194716", "md5_hash", "payload", "win.shimrat", "None", "Shim RAT", "", "95", "False", "None", "None", "0", "Grim" "2026-10-15 18:35:43", "1968100", "56a742d00dda560b13135828ddb1142f", "md5_hash", "payload", "win.xworm", "None", "XWorm", "", "95", "False", "None", "None", "0", "Grim" "2026-10-15 18:35:42", "1968097", "069f2134a0ef7d7c30b1c607d2386c19", "md5_hash", "payload", "win.rokrat", "DOGCALL", "RokRAT", "2026-10-16 06:36:54", "95", "False", "None", "None", "0", "Grim" "2026-10-15 18:35:41", "1968091", "1a5cd2f8785e4c29adc3a6d2f7b4aff4", "md5_hash", "payload", "apk.facestealer", "None", "FaceStealer", "2026-10-16 06:36:52", "95", "False", "None", "None", "0", "Grim" "2026-10-15 18:35:41", "1968094", "aaa8bf51482779fa7ea42e8617ec601d", "md5_hash", "payload", "py.poet_rat", "None", "Poet RAT", "2026-10-16 06:36:53", "95", "False", "None", "None", "0", "Grim" "2026-10-15 18:35:40", "1968088", "f0c5a7427f91aef5cb4a210d24c7702b", "md5_hash", "payload", "osx.orat", "None", "oRAT", "2026-10-16 06:36:51", "95", "False", "None", "None", "0", "Grim" "2026-10-15 18:35:39", "1968085", "d5e0f002f8c28098ca24e3ab4836eab8", "md5_hash", "payload", "win.dynamicstealer", "None", "DynamicStealer", "2026-10-16 06:36:51", "95", "False", "None", "None", "0", "Grim" "2026-10-15 18:35:38", "1968082", "dabde1488755d4980b82dda7372d7917", "md5_hash", "payload", "win.aurastealer", "AURA Stealer,AURASTEAL", "Aura Stealer", "2026-10-16 06:36:50", "95", "False", "None", "None", "0", "Grim" "2026-10-15 18:35:37", "1968079", "72ef20c8bf9cd4c8243af969dc6574e7", "md5_hash", "payload", "win.wannacryptor", "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry", "WannaCryptor", "2026-10-16 06:36:49", "95", "False", "None", "None", "0", "Grim" "2026-10-15 18:35:36", "1968076", "c70b058564a67317ac7d3e535f2f6e64", "md5_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "2026-10-16 06:36:48", "95", "False", "None", "None", "0", "Grim" "2026-10-15 18:35:35", "1968073", "0d944fa82b4ea76cedb49336629405f3", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "2026-10-16 06:36:47", "95", "False", "None", "None", "0", "Grim" "2026-10-15 18:35:34", "1968070", "90434fecfdbd2498b48fb51e439571db", "md5_hash", "payload", "jar.crossrat", "Trupto", "CrossRAT", "2026-10-16 06:36:46", "95", "False", "None", "None", "0", "Grim" "2026-10-15 18:35:33", "1968064", "ed268509f47e630c9e36533fcd3e97bd", "md5_hash", "payload", "py.venus_stealer", "None", "Venus Stealer", "2026-10-16 06:36:44", "95", "False", "None", "None", "0", "Grim" "2026-10-15 18:35:33", "1968067", "daeaf107c068d6d165826c674404485b", "md5_hash", "payload", "win.guidloader", "None", "GUIDLOADER", "2026-10-16 06:36:45", "95", "False", "None", "None", "0", "Grim" "2026-10-15 18:35:32", "1968061", "21d9f24388907aae848d959660358586", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "2026-10-16 06:36:43", "95", "False", "None", "None", "0", "Grim" "2026-10-15 18:35:31", "1968058", "188d09a704c9f7652f3ab98996571f96", "md5_hash", "payload", "win.prometei", "None", "Prometei", "2026-10-16 06:36:43", "95", "False", "None", "None", "0", "Grim" "2026-10-15 18:35:30", "1968055", "d6a97cb82b93ac5c450807178fdbec18", "md5_hash", "payload", "win.prometei", "None", "Prometei", "2026-10-16 06:36:42", "95", "False", "None", "None", "0", "Grim" "2026-10-15 18:35:29", "1968052", "27512b501a2c656f455a0b0b50c86ae8", "md5_hash", "payload", "win.asyncrat", "None", "AsyncRAT", "2026-10-16 06:36:41", "95", "False", "None", "None", "0", "Grim" "2026-10-15 18:35:28", "1968049", "b64306cce7d298910529c15b84499d22", "md5_hash", "payload", "win.asyncrat", "None", "AsyncRAT", "2026-10-16 06:36:40", "95", "False", "None", "None", "0", "Grim" "2026-10-15 18:35:27", "1968046", "873fc496e92aa2cb806e215d11eb63ca", "md5_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "2026-10-16 06:36:40", "95", "False", "None", "None", "0", "Grim" "2026-10-15 18:35:26", "1968043", "d5339a8dd02123502d2fe1337c828e2c", "md5_hash", "payload", "win.amadey", "None", "Amadey", "2026-10-16 06:36:39", "95", "False", "None", "None", "0", "Grim" "2026-10-15 18:35:24", "1968040", "8b6216ec7574aaa4daef1d3e5bdb1e5a", "md5_hash", "payload", "py.venus_stealer", "None", "Venus Stealer", "2026-10-16 06:36:38", "95", "False", "None", "None", "0", "Grim" "2026-10-15 18:35:23", "1968037", "836dbe3a95c24eece97f788939523d6e", "md5_hash", "payload", "win.tofsee", "Gheg", "Tofsee", "2026-10-16 06:36:37", "95", "False", "None", "None", "0", "Grim" "2026-10-15 18:35:22", "1968034", "a7e5aee5cc12f8fde0bc93668413722b", "md5_hash", "payload", "win.ghost_rat", "Farfli,Gh0st RAT,PCRat", "Ghost RAT", "2026-10-16 06:36:34", "95", "False", "None", "None", "0", "Grim" "2026-10-15 00:46:24", "1966397", "ff811bbbdc68edb723eddf12f71027b8", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "", "95", "False", "None", "None", "0", "Grim" "2026-10-15 00:46:23", "1966394", "51b6ee98d8b8110b9a2217bdfa96cbe8", "md5_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "", "95", "False", "None", "None", "0", "Grim" "2026-10-15 00:46:16", "1966391", "68fd8ef08845e30e5433b0a3d5f12616", "md5_hash", "payload", "win.koistealer", "None", "Koi Stealer", "", "95", "False", "None", "None", "0", "Grim" "2026-10-15 00:46:14", "1966386", "756292201950433bdbeb154252bbe44c", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim" "2026-10-15 00:46:14", "1966389", "6247ac6aae6cd1963299aa5801f64e75", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim" "2026-10-15 00:46:11", "1966383", "97b67986332d3ed13fb982f0ac8d3d0f", "md5_hash", "payload", "py.venus_stealer", "None", "Venus Stealer", "", "95", "False", "None", "None", "0", "Grim" "2026-10-15 00:45:26", "1966380", "aab3a520dec95e364dcff3fdbbe0e115", "md5_hash", "payload", "win.gcleaner", "None", "GCleaner", "2026-10-15 18:36:09", "95", "False", "None", "None", "0", "Grim" "2026-10-14 23:26:06", "1966313", "03ad5910c89f99659272017c25dfd171", "md5_hash", "payload", "win.krakenkeylogger", "None", "KrakenKeylogger", "", "95", "False", "None", "None", "0", "Grim" "2026-10-14 23:26:05", "1966310", "a28f638256e93882894bf7038f267c80", "md5_hash", "payload", "win.phantom_stealer", "None", "Phantom Stealer", "2026-10-15 00:46:10", "95", "False", "None", "None", "0", "Grim" "2026-10-14 23:26:04", "1966307", "3b6e4262e140331b8380445e464f1cda", "md5_hash", "payload", "win.agent_tesla", "AgenTesla,AgentTesla,Negasteal", "Agent Tesla", "2026-10-15 00:46:09", "95", "False", "None", "None", "0", "Grim" "2026-10-14 23:26:03", "1966304", "93a62112f02c40b89ed1e2589a263223", "md5_hash", "payload", "win.agent_tesla", "AgenTesla,AgentTesla,Negasteal", "Agent Tesla", "2026-10-15 00:46:08", "95", "False", "None", "None", "0", "Grim" "2026-10-14 23:26:02", "1966298", "6cd3ddf619edf6e1487cbb5cae7ad331", "md5_hash", "payload", "win.asyncrat", "None", "AsyncRAT", "2026-10-15 00:46:06", "95", "False", "None", "None", "0", "Grim" "2026-10-14 23:26:02", "1966301", "1145637521b7fccbf9072deddc4b62cd", "md5_hash", "payload", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-15 00:46:07", "95", "False", "None", "None", "0", "Grim" "2026-10-14 23:26:01", "1966295", "83d4c0c3690792301381ae92ed6868c8", "md5_hash", "payload", "win.asyncrat", "None", "AsyncRAT", "2026-10-15 00:46:06", "95", "False", "None", "None", "0", "Grim" "2026-10-14 23:26:00", "1966292", "93031382c35368b570334ca96fc338d7", "md5_hash", "payload", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-15 00:46:05", "95", "False", "None", "None", "0", "Grim" "2026-10-14 23:25:59", "1966289", "ddb95711381fc35855472d28dbdb50e2", "md5_hash", "payload", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-15 00:46:04", "95", "False", "None", "None", "0", "Grim" "2026-10-14 23:25:58", "1966286", "2f2bde6d6206b182d652cc1e8c124e9a", "md5_hash", "payload", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-15 00:46:03", "95", "False", "None", "None", "0", "Grim" "2026-10-14 23:25:57", "1966283", "87180de7663dc32acab6edf49345abd8", "md5_hash", "payload", "jar.crossrat", "Trupto", "CrossRAT", "2026-10-15 00:46:03", "95", "False", "None", "None", "0", "Grim" "2026-10-14 23:25:56", "1966280", "69eca81580f69774e2737639bb55848d", "md5_hash", "payload", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-15 00:46:02", "95", "False", "None", "None", "0", "Grim" "2026-10-14 23:25:55", "1966277", "04fd284fa9214d5adca4d6adfac7b42f", "md5_hash", "payload", "jar.crossrat", "Trupto", "CrossRAT", "2026-10-15 00:46:01", "95", "False", "None", "None", "0", "Grim" "2026-10-14 23:25:54", "1966271", "23dc06a0ebbed92a832786f07b9ec139", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "2026-10-15 00:45:59", "95", "False", "None", "None", "0", "Grim" "2026-10-14 23:25:54", "1966274", "265beb192dab710bbc8cb0842d57ef99", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "2026-10-15 00:46:00", "95", "False", "None", "None", "0", "Grim" "2026-10-14 23:25:53", "1966268", "ba6f71de3fb70549ae9cf7ea82268666", "md5_hash", "payload", "win.xworm", "None", "XWorm", "2026-10-15 00:45:59", "95", "False", "None", "None", "0", "Grim" "2026-10-14 23:25:52", "1966265", "c6645e3d5488e98c990bda3dcffb9a6a", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "2026-10-15 00:45:58", "95", "False", "None", "None", "0", "Grim" "2026-10-14 23:25:51", "1966262", "419b1aaded9195fec567ca93477d68a1", "md5_hash", "payload", "jar.crossrat", "Trupto", "CrossRAT", "2026-10-15 00:45:57", "95", "False", "None", "None", "0", "Grim" "2026-10-14 23:25:50", "1966256", "27fc1568dce3fddc5a10eb955c1c3b86", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "2026-10-15 00:45:56", "95", "False", "None", "None", "0", "Grim" "2026-10-14 23:25:50", "1966259", "0e19505d9d3b7da6f6efdebe1426f85f", "md5_hash", "payload", "win.agent_tesla", "AgenTesla,AgentTesla,Negasteal", "Agent Tesla", "2026-10-15 00:45:56", "95", "False", "None", "None", "0", "Grim" "2026-10-14 23:25:49", "1966253", "9370214e8a6df62b2263cb73d0d335b1", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "2026-10-15 00:45:55", "95", "False", "None", "None", "0", "Grim" "2026-10-14 23:25:48", "1966250", "146c5d2cbf3373f83dcfa349a4c76ff7", "md5_hash", "payload", "win.agent_tesla", "AgenTesla,AgentTesla,Negasteal", "Agent Tesla", "2026-10-15 00:45:54", "95", "False", "None", "None", "0", "Grim" "2026-10-14 23:25:47", "1966246", "03a7ac64c9d997bf0743e8a1917e9836", "md5_hash", "payload", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-15 00:45:53", "95", "False", "None", "None", "0", "Grim" "2026-10-14 23:25:46", "1966240", "8a14671854cab047338e08ae086b1fee", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "2026-10-15 00:45:52", "95", "False", "None", "None", "0", "Grim" "2026-10-14 23:25:46", "1966243", "1d34e70958d2305ff628b97e0a2bfae6", "md5_hash", "payload", "win.phantom_stealer", "None", "Phantom Stealer", "2026-10-15 00:45:53", "95", "False", "None", "None", "0", "Grim" "2026-10-14 23:25:45", "1966237", "06ea1864fc2f4644106cd25b8d4fdbb4", "md5_hash", "payload", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-15 00:45:51", "95", "False", "None", "None", "0", "Grim" "2026-10-14 23:25:44", "1966234", "61a3a84b9b0c95433f1e79d9ef6699c9", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "2026-10-15 00:45:50", "95", "False", "None", "None", "0", "Grim" "2026-10-14 23:25:43", "1966231", "23ae60ca87897d6e45229b3e4c156fb1", "md5_hash", "payload", "win.njrat", "Bladabindi,Lime-Worm", "NjRAT", "2026-10-15 00:45:49", "95", "False", "None", "None", "0", "Grim" "2026-10-14 23:25:42", "1966225", "c05883a0cd30f17bbbb849af850e2e33", "md5_hash", "payload", "win.quasar_rat", "CinaRAT,QuasarRAT,Yggdrasil", "Quasar RAT", "2026-10-15 00:45:47", "95", "False", "None", "None", "0", "Grim" "2026-10-14 23:25:42", "1966228", "1a303cff53bf9e183485a2817d89c6a0", "md5_hash", "payload", "win.agent_tesla", "AgenTesla,AgentTesla,Negasteal", "Agent Tesla", "2026-10-15 00:45:48", "95", "False", "None", "None", "0", "Grim" "2026-10-14 23:25:41", "1966222", "b1c6ebe8a0bd4d6d3d6800acb45b69de", "md5_hash", "payload", "win.krakenkeylogger", "None", "KrakenKeylogger", "2026-10-15 00:45:47", "95", "False", "None", "None", "0", "Grim" "2026-10-14 23:25:40", "1966219", "7af648a93b30ceec0dcc427f4228e190", "md5_hash", "payload", "win.njrat", "Bladabindi,Lime-Worm", "NjRAT", "2026-10-15 00:45:46", "95", "False", "None", "None", "0", "Grim" "2026-10-14 23:25:39", "1966216", "d3ee116e4d0edf012d7523cdfef1e6b8", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "2026-10-15 00:45:45", "95", "False", "None", "None", "0", "Grim" "2026-10-14 23:25:38", "1966210", "03eab261035725ffbc1f1a1ac9fc5631", "md5_hash", "payload", "win.agent_tesla", "AgenTesla,AgentTesla,Negasteal", "Agent Tesla", "2026-10-15 18:36:39", "95", "False", "None", "None", "0", "Grim" "2026-10-14 23:25:38", "1966213", "9ce1f4155fdb4cfc30d6a34483821b9a", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "2026-10-15 18:36:40", "95", "False", "None", "None", "0", "Grim" "2026-10-14 23:25:37", "1966207", "99a3781212849e4b243c73b69960b2ec", "md5_hash", "payload", "win.agent_tesla", "AgenTesla,AgentTesla,Negasteal", "Agent Tesla", "2026-10-15 18:36:38", "95", "False", "None", "None", "0", "Grim" "2026-10-14 23:25:36", "1966204", "d05ea2faff5180cc51f7a4493c9c5661", "md5_hash", "payload", "win.darkcloud", "None", "DarkCloud Stealer", "2026-10-15 18:36:38", "95", "False", "None", "None", "0", "Grim" "2026-10-14 23:25:35", "1966201", "4dd66299e0cd2ab0a93952a18544a18f", "md5_hash", "payload", "jar.crossrat", "Trupto", "CrossRAT", "2026-10-15 18:36:37", "95", "False", "None", "None", "0", "Grim" "2026-10-14 23:25:34", "1966198", "0219119358e259a2e35ebdc8895e3301", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "2026-10-15 18:36:36", "95", "False", "None", "None", "0", "Grim" "2026-10-14 23:25:33", "1966195", "1f4bf3df208793973b277c100ba07b5b", "md5_hash", "payload", "win.darkcloud", "None", "DarkCloud Stealer", "2026-10-15 18:36:35", "95", "False", "None", "None", "0", "Grim" "2026-10-14 23:25:32", "1966192", "70d16f6a5cf59a30e6676a7ba58834b3", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "2026-10-15 18:36:34", "95", "False", "None", "None", "0", "Grim" "2026-10-14 23:25:31", "1966189", "53262ea8f36c9ae7f8f4186b1654738d", "md5_hash", "payload", "py.stealler", "None", "stealler", "2026-10-15 18:36:33", "95", "False", "None", "None", "0", "Grim" "2026-10-14 23:25:30", "1966186", "7dd5cd9ce3eb7740a35c1830e3794a8c", "md5_hash", "payload", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-15 18:36:32", "95", "False", "None", "None", "0", "Grim" "2026-10-14 23:25:29", "1966183", "5ad699de88e26025175d605e6630cb07", "md5_hash", "payload", "py.venus_stealer", "None", "Venus Stealer", "2026-10-15 18:36:32", "95", "False", "None", "None", "0", "Grim" "2026-10-14 23:25:28", "1966180", "957534bc1e1f7a1d68706c5a99075315", "md5_hash", "payload", "py.venus_stealer", "None", "Venus Stealer", "2026-10-15 18:36:31", "95", "False", "None", "None", "0", "Grim" "2026-10-14 23:25:27", "1966177", "8e178cda459ec88e20d9f81dbe9cd666", "md5_hash", "payload", "win.wannacryptor", "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry", "WannaCryptor", "2026-10-15 18:36:30", "95", "False", "None", "None", "0", "Grim" "2026-10-14 23:25:26", "1966171", "31a36671491334f38d841fcc338ab33c", "md5_hash", "payload", "py.venus_stealer", "None", "Venus Stealer", "2026-10-15 18:36:28", "95", "False", "None", "None", "0", "Grim" "2026-10-14 23:25:26", "1966174", "3c83dcfa2b10f7af4b6086157f992dc7", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "2026-10-15 18:36:29", "95", "False", "None", "None", "0", "Grim" "2026-10-14 23:25:25", "1966168", "1351e8e7bb03c7546fdb3f8b2c46ab96", "md5_hash", "payload", "win.darktortilla", "None", "DarkTortilla", "2026-10-15 18:36:27", "95", "False", "None", "None", "0", "Grim" "2026-10-14 23:25:24", "1966165", "a43b91f9795db45441b902b57fbaeb84", "md5_hash", "payload", "py.stealler", "None", "stealler", "2026-10-15 18:36:26", "95", "False", "None", "None", "0", "Grim" "2026-10-14 23:25:22", "1966162", "f736c6c9fcfb2608480270a303eceaee", "md5_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "2026-10-15 18:36:25", "95", "False", "None", "None", "0", "Grim" "2026-10-14 23:25:21", "1966159", "1d4fb096190a9bfa2410be9c76222a40", "md5_hash", "payload", "win.salatstealer", "None", "SalatStealer", "2026-10-15 18:36:24", "95", "False", "None", "None", "0", "Grim" "2026-10-14 23:25:20", "1966156", "3f1e0c178668177829107fbb4c461738", "md5_hash", "payload", "py.venus_stealer", "None", "Venus Stealer", "2026-10-15 18:36:24", "95", "False", "None", "None", "0", "Grim" "2026-10-14 23:25:19", "1966153", "e1172e680bb821986ad45b93117f585c", "md5_hash", "payload", "py.blankgrabber", "None", "BlankGrabber", "2026-10-15 18:36:13", "95", "False", "None", "None", "0", "Grim" "2026-10-14 23:25:18", "1966150", "483debef187327e3cf1357fd19902318", "md5_hash", "payload", "win.vidar", "None", "Vidar", "2026-10-15 18:36:11", "95", "False", "None", "None", "0", "Grim" "2026-10-14 23:25:17", "1966147", "1db68991d2fc57b5792b0a5b87840d91", "md5_hash", "payload", "py.venus_stealer", "None", "Venus Stealer", "2026-10-15 18:36:10", "95", "False", "None", "None", "0", "Grim" "2026-10-13 22:40:32", "1964363", "3626564a6ecda96008ba1c9ed08e5b2d", "md5_hash", "payload", "win.wannacryptor", "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry", "WannaCryptor", "2026-10-15 00:46:38", "95", "False", "None", "None", "0", "Grim" "2026-10-13 22:40:32", "1964366", "ca7dfa9c03546e9ee624cf957219053b", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "2026-10-15 00:46:39", "95", "False", "None", "None", "0", "Grim" "2026-10-13 22:40:31", "1964360", "2d7077c6484ec7ddf42538801fee4591", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "2026-10-15 00:46:37", "95", "False", "None", "None", "0", "Grim" "2026-10-13 22:40:30", "1964357", "b286ec8a4494ae366ce033356e20c6fe", "md5_hash", "payload", "win.asyncrat", "None", "AsyncRAT", "2026-10-15 00:46:37", "95", "False", "None", "None", "0", "Grim" "2026-10-13 22:40:29", "1964354", "19b589942c0a8fa9117f551dcd66a25e", "md5_hash", "payload", "elf.leethozer", "None", "LeetHozer", "2026-10-15 00:46:36", "95", "False", "None", "None", "0", "Grim" "2026-10-13 22:40:28", "1964351", "8ec1f874e11e97d9e797a02124b015dc", "md5_hash", "payload", "win.coinminer", "None", "Coinminer", "2026-10-15 00:46:35", "95", "False", "None", "None", "0", "Grim" "2026-10-13 22:40:27", "1964348", "a0e73661f813dcad31e3a265b73079a6", "md5_hash", "payload", "win.gcleaner", "None", "GCleaner", "2026-10-15 00:46:34", "95", "False", "None", "None", "0", "Grim" "2026-10-13 22:40:26", "1964345", "ef405c228559312b1398712e601ee4ad", "md5_hash", "payload", "win.coinminer", "None", "Coinminer", "2026-10-15 00:46:33", "95", "False", "None", "None", "0", "Grim" "2026-10-13 22:40:25", "1964339", "126d0d485ca47f59316eb5c1264f379b", "md5_hash", "payload", "py.venus_stealer", "None", "Venus Stealer", "2026-10-15 00:46:31", "95", "False", "None", "None", "0", "Grim" "2026-10-13 22:40:25", "1964342", "1a2677ba4d34323c9fbe97732214f9c1", "md5_hash", "payload", "win.quasar_rat", "CinaRAT,QuasarRAT,Yggdrasil", "Quasar RAT", "2026-10-15 00:46:32", "95", "False", "None", "None", "0", "Grim" "2026-10-13 22:40:23", "1964333", "90d36a8492c37d537fab266d31beb627", "md5_hash", "payload", "win.coinminer", "None", "Coinminer", "2026-10-15 00:46:30", "95", "False", "None", "None", "0", "Grim" "2026-10-13 22:40:23", "1964336", "8fe8a8a3c1b83cb9475c3c49c91517fb", "md5_hash", "payload", "win.coinminer", "None", "Coinminer", "2026-10-15 00:46:30", "95", "False", "None", "None", "0", "Grim" "2026-10-13 22:40:22", "1964330", "04d409feacf8e8025263b0c3339f27d3", "md5_hash", "payload", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-15 00:46:29", "95", "False", "None", "None", "0", "Grim" "2026-10-13 22:40:21", "1964327", "031fc988fb52f3ee6b38516b64910b95", "md5_hash", "payload", "py.venus_stealer", "None", "Venus Stealer", "2026-10-15 00:46:28", "95", "False", "None", "None", "0", "Grim" "2026-10-13 22:40:20", "1964324", "4daff4c89b65737a9d50f273e24c3542", "md5_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "2026-10-15 00:46:27", "95", "False", "None", "None", "0", "Grim" "2026-10-13 22:40:19", "1964318", "ae0f26b6412402f64976db9497de2cac", "md5_hash", "payload", "win.coinminer", "None", "Coinminer", "2026-10-15 00:46:25", "95", "False", "None", "None", "0", "Grim" "2026-10-13 22:40:19", "1964321", "6e0bee2ef3f4f954c611ad227f7df85b", "md5_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "2026-10-15 00:46:26", "95", "False", "None", "None", "0", "Grim" "2026-10-13 22:40:18", "1964315", "648e3fd6d7d3e5367e56b10a642019f1", "md5_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "2026-10-15 00:46:24", "95", "False", "None", "None", "0", "Grim" "2026-10-13 22:40:17", "1964312", "0888ad582ea95bd467f51e232af9a07c", "md5_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "2026-10-15 00:46:22", "95", "False", "None", "None", "0", "Grim" "2026-10-13 22:40:16", "1964309", "12e5865ad107877a4de58292719ac24a", "md5_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "2026-10-15 00:46:21", "95", "False", "None", "None", "0", "Grim" "2026-10-13 22:40:15", "1964303", "dc0fb67d73f6636cfcc34fca49814593", "md5_hash", "payload", "win.salatstealer", "None", "SalatStealer", "2026-10-15 00:46:19", "95", "False", "None", "None", "0", "Grim" "2026-10-13 22:40:15", "1964306", "05229a54380ee1a8f2c6b6325dc217c5", "md5_hash", "payload", "win.coinminer", "None", "Coinminer", "2026-10-15 00:46:20", "95", "False", "None", "None", "0", "Grim" "2026-10-13 22:40:14", "1964300", "1ede0a28303d25b820e63774c560d6a4", "md5_hash", "payload", "win.salatstealer", "None", "SalatStealer", "2026-10-15 00:46:18", "95", "False", "None", "None", "0", "Grim" "2026-10-13 22:40:13", "1964297", "e9d935a0a85bc216ae416b557b4cc701", "md5_hash", "payload", "win.salatstealer", "None", "SalatStealer", "2026-10-15 00:46:17", "95", "False", "None", "None", "0", "Grim" "2026-10-13 22:40:12", "1964291", "322eaa72b28a381900d496ffb3c83c82", "md5_hash", "payload", "win.salatstealer", "None", "SalatStealer", "2026-10-15 00:46:13", "95", "False", "None", "None", "0", "Grim" "2026-10-13 22:40:12", "1964294", "c5144ab045d1ddff2adcc8541060478e", "md5_hash", "payload", "win.tinymet", "TiniMet", "TinyMet", "2026-10-15 00:46:15", "95", "False", "None", "None", "0", "Grim" "2026-10-13 22:40:11", "1964288", "5bbaaf9d881188cff4b81d39b9b31267", "md5_hash", "payload", "win.salatstealer", "None", "SalatStealer", "2026-10-15 00:46:12", "95", "False", "None", "None", "0", "Grim" # Number of entries: 190