################################################################
# ThreatFox IOCs: recent MD5 hashes - CSV format               #
# Last updated: 2026-09-23 15:02:33 UTC                        #
#                                                              #
# Terms Of Use: https://threatfox.abuse.ch/faq/#tos            #
# For questions please contact threatfox [at] abuse.ch         #
################################################################
#
# "first_seen_utc","ioc_id","ioc_value","ioc_type","threat_type","fk_malware","malware_alias","malware_printable","last_seen_utc","confidence_level","is_compromised","reference","tags","anonymous","reporter"
"2026-09-23 15:02:33", "1929809", "7c2b5d3b7535da03eeecb3dacafef353", "md5_hash", "payload", "win.xworm", "None", "XWorm", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-23 15:02:31", "1929806", "833ccad990c6f300f761dde5a8349cf4", "md5_hash", "payload", "win.coinminer", "None", "Coinminer", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-23 15:02:30", "1929803", "e109149c37152c167818d22b4731a433", "md5_hash", "payload", "py.venus_stealer", "None", "Venus Stealer", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-23 15:02:29", "1929800", "9eabd76292ffbd379008775949032092", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-23 15:02:27", "1929797", "39ceeb8fd9a17098092434f43edaed18", "md5_hash", "payload", "win.logedrut", "None", "Logedrut", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-23 15:02:26", "1929794", "74e859da6c2d1c961af718b97873c564", "md5_hash", "payload", "win.logedrut", "None", "Logedrut", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-23 15:02:25", "1929791", "eb16b4f96693d5dca59711e8350bdad8", "md5_hash", "payload", "win.logedrut", "None", "Logedrut", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-23 15:02:23", "1929788", "31a715d2d44448b55d9691fa0301b9f6", "md5_hash", "payload", "win.logedrut", "None", "Logedrut", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-22 14:29:49", "1927463", "978d89575db96b5fab1fcd7dca36cb21", "md5_hash", "payload", "win.guidloader", "None", "GUIDLOADER", "2026-09-23 15:03:10", "95", "False", "None", "None", "0", "Grim"
"2026-09-22 14:29:38", "1927460", "b22f4529298513597f41a1ca0686d7f9", "md5_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "2026-09-23 15:02:59", "95", "False", "None", "None", "0", "Grim"
"2026-09-22 14:29:36", "1927457", "b27a6bee3b698829ca290fdfa981d3f7", "md5_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "2026-09-23 15:02:57", "95", "False", "None", "None", "0", "Grim"
"2026-09-22 14:29:35", "1927454", "351eed6919adf842104ec8a51528c795", "md5_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "2026-09-23 15:02:56", "95", "False", "None", "None", "0", "Grim"
"2026-09-22 14:29:34", "1927451", "e7b918320c08c51bf439c7cf7d052968", "md5_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "2026-09-23 15:02:56", "95", "False", "None", "None", "0", "Grim"
"2026-09-22 14:29:30", "1927448", "bcc375092546b5fdcf3bb3f48dd21e91", "md5_hash", "payload", "elf.leethozer", "None", "LeetHozer", "2026-09-23 15:02:52", "95", "False", "None", "None", "0", "Grim"
"2026-09-22 14:29:29", "1927445", "a72ce90402a259277d467c80b06acf64", "md5_hash", "payload", "elf.leethozer", "None", "LeetHozer", "2026-09-23 15:02:51", "95", "False", "None", "None", "0", "Grim"
"2026-09-22 14:29:28", "1927442", "c157a489271a6c3422c549ddb7ff8b89", "md5_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "2026-09-23 15:02:50", "95", "False", "None", "None", "0", "Grim"
"2026-09-22 14:29:27", "1927439", "56e1ff3671e6755f234f4c4847090f7f", "md5_hash", "payload", "win.salatstealer", "None", "SalatStealer", "2026-09-23 15:02:49", "95", "False", "None", "None", "0", "Grim"
"2026-09-22 14:29:23", "1927436", "5c84cc24fc6c7feb21bc68b3c84d686f", "md5_hash", "payload", "win.krakenkeylogger", "None", "KrakenKeylogger", "2026-09-23 15:02:46", "95", "False", "None", "None", "0", "Grim"
"2026-09-22 14:29:22", "1927433", "b8466d751faa6f9b65a47ef57cfd258d", "md5_hash", "payload", "apk.wolf_rat", "None", "WolfRAT", "2026-09-23 15:02:44", "95", "False", "None", "None", "0", "Grim"
"2026-09-22 14:29:20", "1927430", "449ec1cd1ec70055152c93591a2c0374", "md5_hash", "payload", "win.zstealer", "Z*Stealer", "ZStealer", "2026-09-23 15:02:44", "95", "False", "None", "None", "0", "Grim"
"2026-09-22 14:29:19", "1927427", "99951b90831ae5b6e96f72a6314243fa", "md5_hash", "payload", "apk.coper", "ExobotCompact,Octo", "Coper", "2026-09-23 15:02:42", "95", "False", "None", "None", "0", "Grim"
"2026-09-22 14:29:18", "1927424", "8075db3747de48b073caf66e04a8f7c8", "md5_hash", "payload", "win.flesh_stealer", "None", "Flesh Stealer", "2026-09-23 15:02:41", "95", "False", "None", "None", "0", "Grim"
"2026-09-22 14:29:16", "1927421", "ef57e1c40c1d2394552e43c0c48d63f1", "md5_hash", "payload", "js.ghostblade", "None", "GHOSTBLADE", "2026-09-23 15:02:40", "95", "False", "None", "None", "0", "Grim"
"2026-09-22 14:29:15", "1927418", "854ffcb31e2062156f47a9653c5ac3cf", "md5_hash", "payload", "py.venus_stealer", "None", "Venus Stealer", "2026-09-23 15:02:39", "95", "False", "None", "None", "0", "Grim"
"2026-09-22 14:29:14", "1927415", "42206a2575450ca372af187bd5a9167f", "md5_hash", "payload", "apk.clipper", "None", "Clipper", "2026-09-23 15:02:38", "95", "False", "None", "None", "0", "Grim"
"2026-09-22 14:29:13", "1927412", "45fdfc4903ce65f35042320cdaeb45ae", "md5_hash", "payload", "py.stealler", "None", "stealler", "2026-09-23 15:02:37", "95", "False", "None", "None", "0", "Grim"
"2026-09-22 14:29:11", "1927409", "16223a15bbd3368f8201420e2787cb09", "md5_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "2026-09-23 15:02:36", "95", "False", "None", "None", "0", "Grim"
"2026-09-22 14:29:10", "1927406", "9bbec7748a0426802a46456d50d6d768", "md5_hash", "payload", "win.vshell", "None", "VShell", "2026-09-23 15:02:35", "95", "False", "None", "None", "0", "Grim"
"2026-09-22 14:29:09", "1927403", "fb9389a7b2c117daa86601020fe905d0", "md5_hash", "payload", "win.defendnot", "None", "defendnot", "2026-09-23 15:02:34", "95", "False", "None", "None", "0", "Grim"
"2026-09-22 14:29:08", "1927400", "140b745c36195caa6e56c11898522ab0", "md5_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "2026-09-23 15:02:32", "95", "False", "None", "None", "0", "Grim"
"2026-09-21 18:27:03", "1926755", "7cc1bd83d32e117bd0ef78d73647c144", "md5_hash", "payload", "win.ghost_rat", "Farfli,Gh0st RAT,PCRat", "Ghost RAT", "2026-09-22 14:29:54", "95", "False", "None", "None", "0", "Grim"
"2026-09-21 18:27:01", "1926752", "cba5d54230e862787080f0b881f38b2f", "md5_hash", "payload", "win.quasar_rat", "CinaRAT,QuasarRAT,Yggdrasil", "Quasar RAT", "2026-09-22 14:29:53", "95", "False", "None", "None", "0", "Grim"
"2026-09-21 18:27:00", "1926749", "cfa1c609d1596ca066c6c6e9fce1ad44", "md5_hash", "payload", "ps1.phonyc2", "None", "PhonyC2", "2026-09-22 14:29:52", "95", "False", "None", "None", "0", "Grim"
"2026-09-21 18:26:58", "1926746", "9a3d0e61430550fc5f788c7cef6c1644", "md5_hash", "payload", "win.agent_tesla", "AgenTesla,AgentTesla,Negasteal", "Agent Tesla", "2026-09-22 14:29:51", "95", "False", "None", "None", "0", "Grim"
"2026-09-21 18:26:58", "1926743", "99f5be9f0047403db9afcda21b33ad3e", "md5_hash", "payload", "win.coinminer", "None", "Coinminer", "2026-09-22 14:29:50", "95", "False", "None", "None", "0", "Grim"
"2026-09-21 18:26:57", "1926740", "3bac388c6f1d1e79944780454f5482f4", "md5_hash", "payload", "win.coinminer", "None", "Coinminer", "2026-09-22 14:29:50", "95", "False", "None", "None", "0", "Grim"
"2026-09-21 18:26:56", "1926737", "3e26157a7c88e34cfed41c1e0ee85c93", "md5_hash", "payload", "win.vidar", "None", "Vidar", "2026-09-23 15:03:09", "95", "False", "None", "None", "0", "Grim"
"2026-09-21 18:26:55", "1926734", "6214f3fcc00cd747d244f0e2ab635618", "md5_hash", "payload", "win.agent_tesla", "AgenTesla,AgentTesla,Negasteal", "Agent Tesla", "2026-09-23 15:03:08", "95", "False", "None", "None", "0", "Grim"
"2026-09-21 18:26:54", "1926731", "876b3d66a85a25b1cdb566ab0454ad1e", "md5_hash", "payload", "win.asyncrat", "None", "AsyncRAT", "2026-09-23 15:03:07", "95", "False", "None", "None", "0", "Grim"
"2026-09-21 18:26:53", "1926728", "52924fe766055fbb3b58e1978076e2e6", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "2026-09-23 15:03:06", "95", "False", "None", "None", "0", "Grim"
"2026-09-21 18:26:53", "1926725", "26c0130537d14afcacdde5779d049d84", "md5_hash", "payload", "win.masslogger", "None", "MASS Logger", "2026-09-23 15:03:05", "95", "False", "None", "None", "0", "Grim"
"2026-09-21 18:26:52", "1926722", "8b412017ea27ddf94c4bd31b70588969", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "2026-09-23 15:03:05", "95", "False", "None", "None", "0", "Grim"
"2026-09-21 18:26:51", "1926719", "5395d02944c8a772316499b75d62a25e", "md5_hash", "payload", "win.agent_tesla", "AgenTesla,AgentTesla,Negasteal", "Agent Tesla", "2026-09-23 15:03:04", "95", "False", "None", "None", "0", "Grim"
"2026-09-21 18:26:50", "1926716", "204d2a41920c68f78e996daaf069c722", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "2026-09-23 15:03:03", "95", "False", "None", "None", "0", "Grim"
"2026-09-21 18:26:49", "1926713", "3d2debbfcd7317c0f8fb17a87107165b", "md5_hash", "payload", "win.vidar", "None", "Vidar", "2026-09-23 15:03:01", "95", "False", "None", "None", "0", "Grim"
"2026-09-21 18:26:48", "1926710", "4729d2eb5d04baebd30f88a84a5b7f07", "md5_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "2026-09-23 15:02:58", "95", "False", "None", "None", "0", "Grim"
"2026-09-21 18:26:47", "1926707", "e0cee01f0387179a8a9cb85323c56fe5", "md5_hash", "payload", "py.venus_stealer", "None", "Venus Stealer", "2026-09-23 15:02:55", "95", "False", "None", "None", "0", "Grim"
"2026-09-21 18:26:46", "1926704", "fa02c783061b979419a4fa42adb8234b", "md5_hash", "payload", "elf.leethozer", "None", "LeetHozer", "2026-09-23 15:02:54", "95", "False", "None", "None", "0", "Grim"
"2026-09-21 18:26:45", "1926701", "137ce92053ba81fb406fd00dc86abbf6", "md5_hash", "payload", "win.coinminer", "None", "Coinminer", "2026-09-23 15:02:53", "95", "False", "None", "None", "0", "Grim"
"2026-09-21 18:26:44", "1926698", "1fdeea7b4e90fb7ae24279d44818ae33", "md5_hash", "payload", "win.asyncrat", "None", "AsyncRAT", "2026-09-23 15:02:48", "95", "False", "None", "None", "0", "Grim"
"2026-09-21 18:26:43", "1926695", "14d1d1e2ffe3f28ec289be494ca8acb8", "md5_hash", "payload", "win.vshell", "None", "VShell", "2026-09-23 15:02:47", "95", "False", "None", "None", "0", "Grim"
"2026-09-21 18:26:42", "1926692", "59043e711f39d035a0dfc894a948e81d", "md5_hash", "payload", "win.vshell", "None", "VShell", "2026-09-23 15:02:47", "95", "False", "None", "None", "0", "Grim"
# Number of entries: 52