################################################################
# ThreatFox IOCs: recent MD5 hashes - CSV format               #
# Last updated: 2026-09-02 09:12:10 UTC                        #
#                                                              #
# Terms Of Use: https://threatfox.abuse.ch/faq/#tos            #
# For questions please contact threatfox [at] abuse.ch         #
################################################################
#
# "first_seen_utc","ioc_id","ioc_value","ioc_type","threat_type","fk_malware","malware_alias","malware_printable","last_seen_utc","confidence_level","is_compromised","reference","tags","anonymous","reporter"
"2026-09-02 09:12:10", "1893074", "047ac6aebe0fe80f9f09c5c548233407", "md5_hash", "payload", "win.medusa", "None", "Medusa", "", "50", "False", "https://threatcluster.io/cluster/china-nexus-threat-actor-fire-ant-targets-critical-infrastru-98a55c29", "None", "0", "threatcluster"
"2026-09-02 09:12:09", "1893075", "084132b20ed65b2930129b156b99f5b3", "md5_hash", "payload", "win.medusa", "None", "Medusa", "", "50", "False", "https://threatcluster.io/cluster/china-nexus-threat-actor-fire-ant-targets-critical-infrastru-98a55c29", "None", "0", "threatcluster"
"2026-09-02 09:12:09", "1893076", "0e43a0f747a60855209b311d727a20bf", "md5_hash", "payload", "win.medusa", "None", "Medusa", "", "50", "False", "https://threatcluster.io/cluster/china-nexus-threat-actor-fire-ant-targets-critical-infrastru-98a55c29", "None", "0", "threatcluster"
"2026-09-02 09:12:09", "1893077", "0f76936e237bd87dfa2378106099a673", "md5_hash", "payload", "win.medusa", "None", "Medusa", "", "50", "False", "https://threatcluster.io/cluster/china-nexus-threat-actor-fire-ant-targets-critical-infrastru-98a55c29", "None", "0", "threatcluster"
"2026-09-02 09:12:09", "1893078", "1079d416e093ba40aa9e95a4c2a5b61f", "md5_hash", "payload", "win.medusa", "None", "Medusa", "", "50", "False", "https://threatcluster.io/cluster/china-nexus-threat-actor-fire-ant-targets-critical-infrastru-98a55c29", "None", "0", "threatcluster"
"2026-09-02 09:12:08", "1893079", "129ba90886c5f5eb0c81d901ad10c622", "md5_hash", "payload", "win.medusa", "None", "Medusa", "", "50", "False", "https://threatcluster.io/cluster/china-nexus-threat-actor-fire-ant-targets-critical-infrastru-98a55c29", "None", "0", "threatcluster"
"2026-09-02 09:12:07", "1893080", "1b7aee68f384e252286559abc32e6dd1", "md5_hash", "payload", "win.medusa", "None", "Medusa", "", "50", "False", "https://threatcluster.io/cluster/china-nexus-threat-actor-fire-ant-targets-critical-infrastru-98a55c29", "None", "0", "threatcluster"
"2026-09-02 09:12:06", "1893081", "1d89b48548ea1ddf0337741ebdb89d92", "md5_hash", "payload", "win.medusa", "None", "Medusa", "", "50", "False", "https://threatcluster.io/cluster/china-nexus-threat-actor-fire-ant-targets-critical-infrastru-98a55c29", "None", "0", "threatcluster"
"2026-09-02 09:12:06", "1893082", "2716c60c28cf7f7568f55ac33313468b", "md5_hash", "payload", "win.medusa", "None", "Medusa", "", "50", "False", "https://threatcluster.io/cluster/china-nexus-threat-actor-fire-ant-targets-critical-infrastru-98a55c29", "None", "0", "threatcluster"
"2026-09-02 09:12:06", "1893084", "2c28ec2d541f555b2838099ca849f965", "md5_hash", "payload", "win.medusa", "None", "Medusa", "", "50", "False", "https://threatcluster.io/cluster/china-nexus-threat-actor-fire-ant-targets-critical-infrastru-98a55c29", "None", "0", "threatcluster"
"2026-09-02 09:12:05", "1893083", "2bade2a5ec166d3a226761f78711ce2f", "md5_hash", "payload", "win.medusa", "None", "Medusa", "", "50", "False", "https://threatcluster.io/cluster/china-nexus-threat-actor-fire-ant-targets-critical-infrastru-98a55c29", "None", "0", "threatcluster"
"2026-09-02 09:12:04", "1893085", "381b7a2a6d581e3482c829bfb542a7de", "md5_hash", "payload", "win.medusa", "None", "Medusa", "", "50", "False", "https://threatcluster.io/cluster/china-nexus-threat-actor-fire-ant-targets-critical-infrastru-98a55c29", "None", "0", "threatcluster"
"2026-09-02 09:12:04", "1893086", "3a8a60416b7b0e1aa5d17eefb0a45a16", "md5_hash", "payload", "win.medusa", "None", "Medusa", "", "50", "False", "https://threatcluster.io/cluster/china-nexus-threat-actor-fire-ant-targets-critical-infrastru-98a55c29", "None", "0", "threatcluster"
"2026-09-02 09:12:03", "1893087", "3c7316012cba3bbfa8a95d7277cda873", "md5_hash", "payload", "win.medusa", "None", "Medusa", "", "50", "False", "https://threatcluster.io/cluster/china-nexus-threat-actor-fire-ant-targets-critical-infrastru-98a55c29", "None", "0", "threatcluster"
"2026-09-02 09:12:02", "1893088", "4282de95cc54829d7ac275e436e33b78", "md5_hash", "payload", "win.medusa", "None", "Medusa", "", "50", "False", "https://threatcluster.io/cluster/china-nexus-threat-actor-fire-ant-targets-critical-infrastru-98a55c29", "None", "0", "threatcluster"
"2026-09-02 09:12:02", "1893089", "48f9bbdb670f89fce9c51ad433b4f200", "md5_hash", "payload", "win.medusa", "None", "Medusa", "", "50", "False", "https://threatcluster.io/cluster/china-nexus-threat-actor-fire-ant-targets-critical-infrastru-98a55c29", "None", "0", "threatcluster"
"2026-09-02 09:12:02", "1893090", "4d5e4f64a9b56067704a977ed89aa641", "md5_hash", "payload", "win.medusa", "None", "Medusa", "", "50", "False", "https://threatcluster.io/cluster/china-nexus-threat-actor-fire-ant-targets-critical-infrastru-98a55c29", "None", "0", "threatcluster"
"2026-09-02 09:12:01", "1893092", "4fb72d580241f27945ec187855efd84a", "md5_hash", "payload", "win.medusa", "None", "Medusa", "", "50", "False", "https://threatcluster.io/cluster/china-nexus-threat-actor-fire-ant-targets-critical-infrastru-98a55c29", "None", "0", "threatcluster"
"2026-09-02 09:12:01", "1893093", "568074d60dd4759e963adc5fe9f15eb1", "md5_hash", "payload", "win.medusa", "None", "Medusa", "", "50", "False", "https://threatcluster.io/cluster/china-nexus-threat-actor-fire-ant-targets-critical-infrastru-98a55c29", "None", "0", "threatcluster"
"2026-09-02 09:12:00", "1893091", "4ddca39b05103aeb075ebb0e03522064", "md5_hash", "payload", "win.medusa", "None", "Medusa", "", "50", "False", "https://threatcluster.io/cluster/china-nexus-threat-actor-fire-ant-targets-critical-infrastru-98a55c29", "None", "0", "threatcluster"
"2026-09-02 09:11:59", "1893094", "5d232b72378754f7a6433f93e6380737", "md5_hash", "payload", "win.medusa", "None", "Medusa", "", "50", "False", "https://threatcluster.io/cluster/china-nexus-threat-actor-fire-ant-targets-critical-infrastru-98a55c29", "None", "0", "threatcluster"
"2026-09-02 09:11:58", "1893095", "61ab3f6401d60ec36cd3ac980a8deb75", "md5_hash", "payload", "win.medusa", "None", "Medusa", "", "50", "False", "https://threatcluster.io/cluster/china-nexus-threat-actor-fire-ant-targets-critical-infrastru-98a55c29", "None", "0", "threatcluster"
"2026-09-02 09:11:57", "1893096", "62bed88bd426f91ddbbbcfcd8508ed6a", "md5_hash", "payload", "win.medusa", "None", "Medusa", "", "50", "False", "https://threatcluster.io/cluster/china-nexus-threat-actor-fire-ant-targets-critical-infrastru-98a55c29", "None", "0", "threatcluster"
"2026-09-02 09:11:57", "1893097", "6e248f5424810ea67212f1f2e4616aa5", "md5_hash", "payload", "win.medusa", "None", "Medusa", "", "50", "False", "https://threatcluster.io/cluster/china-nexus-threat-actor-fire-ant-targets-critical-infrastru-98a55c29", "None", "0", "threatcluster"
"2026-09-02 09:11:56", "1893098", "827d8ae502e3a4d56e6c3a238ba855a7", "md5_hash", "payload", "win.medusa", "None", "Medusa", "", "50", "False", "https://threatcluster.io/cluster/china-nexus-threat-actor-fire-ant-targets-critical-infrastru-98a55c29", "None", "0", "threatcluster"
"2026-09-02 09:11:55", "1893099", "876787f76867ecf654019bd19409c5b8", "md5_hash", "payload", "win.medusa", "None", "Medusa", "", "50", "False", "https://threatcluster.io/cluster/china-nexus-threat-actor-fire-ant-targets-critical-infrastru-98a55c29", "None", "0", "threatcluster"
"2026-09-02 09:11:55", "1893100", "89339821cdf6e9297000f3e6949f0404", "md5_hash", "payload", "win.medusa", "None", "Medusa", "", "50", "False", "https://threatcluster.io/cluster/china-nexus-threat-actor-fire-ant-targets-critical-infrastru-98a55c29", "None", "0", "threatcluster"
"2026-09-02 09:11:54", "1893101", "8e80b40b1298f022c7f3a96599806c43", "md5_hash", "payload", "win.medusa", "None", "Medusa", "", "50", "False", "https://threatcluster.io/cluster/china-nexus-threat-actor-fire-ant-targets-critical-infrastru-98a55c29", "None", "0", "threatcluster"
"2026-09-02 09:11:54", "1893102", "969d7f092ed05c72f27eef5f2c8158d6", "md5_hash", "payload", "win.medusa", "None", "Medusa", "", "50", "False", "https://threatcluster.io/cluster/china-nexus-threat-actor-fire-ant-targets-critical-infrastru-98a55c29", "None", "0", "threatcluster"
"2026-09-02 09:11:54", "1893103", "9c428a35d9fc1fdaf31af186ff6eec08", "md5_hash", "payload", "win.medusa", "None", "Medusa", "", "50", "False", "https://threatcluster.io/cluster/china-nexus-threat-actor-fire-ant-targets-critical-infrastru-98a55c29", "None", "0", "threatcluster"
"2026-09-02 09:11:53", "1893104", "9ea86dccd5bbde47f8641b62a1eeff07", "md5_hash", "payload", "win.medusa", "None", "Medusa", "", "50", "False", "https://threatcluster.io/cluster/china-nexus-threat-actor-fire-ant-targets-critical-infrastru-98a55c29", "None", "0", "threatcluster"
"2026-09-02 09:11:53", "1893105", "9ef5266a9fdd25474227c3e33b8e6d77", "md5_hash", "payload", "win.medusa", "None", "Medusa", "", "50", "False", "https://threatcluster.io/cluster/china-nexus-threat-actor-fire-ant-targets-critical-infrastru-98a55c29", "None", "0", "threatcluster"
"2026-09-02 09:11:52", "1893106", "a7cd7b61d13256f5478feb28ab34be72", "md5_hash", "payload", "win.medusa", "None", "Medusa", "", "50", "False", "https://threatcluster.io/cluster/china-nexus-threat-actor-fire-ant-targets-critical-infrastru-98a55c29", "None", "0", "threatcluster"
"2026-09-02 09:11:51", "1893107", "b754237c7b5e9461389a6d960156db1e", "md5_hash", "payload", "win.medusa", "None", "Medusa", "", "50", "False", "https://threatcluster.io/cluster/china-nexus-threat-actor-fire-ant-targets-critical-infrastru-98a55c29", "None", "0", "threatcluster"
"2026-09-02 09:11:51", "1893108", "bca2ccff0596a9f102550976750e2a89", "md5_hash", "payload", "win.medusa", "None", "Medusa", "", "50", "False", "https://threatcluster.io/cluster/china-nexus-threat-actor-fire-ant-targets-critical-infrastru-98a55c29", "None", "0", "threatcluster"
"2026-09-02 09:11:50", "1893109", "bd6e38b6ff85ab02c1a4325e8af29ce4", "md5_hash", "payload", "win.medusa", "None", "Medusa", "", "50", "False", "https://threatcluster.io/cluster/china-nexus-threat-actor-fire-ant-targets-critical-infrastru-98a55c29", "None", "0", "threatcluster"
"2026-09-02 09:11:50", "1893110", "c870ea6a598c12218e6ac36d791032b5", "md5_hash", "payload", "win.medusa", "None", "Medusa", "", "50", "False", "https://threatcluster.io/cluster/china-nexus-threat-actor-fire-ant-targets-critical-infrastru-98a55c29", "None", "0", "threatcluster"
"2026-09-02 09:11:49", "1893111", "c9c00c627015bd78fda22fa28fd11cd7", "md5_hash", "payload", "win.medusa", "None", "Medusa", "", "50", "False", "https://threatcluster.io/cluster/china-nexus-threat-actor-fire-ant-targets-critical-infrastru-98a55c29", "None", "0", "threatcluster"
"2026-09-02 09:11:49", "1893112", "c9f2476bf8db102fea7310abadeb9e01", "md5_hash", "payload", "win.medusa", "None", "Medusa", "", "50", "False", "https://threatcluster.io/cluster/china-nexus-threat-actor-fire-ant-targets-critical-infrastru-98a55c29", "None", "0", "threatcluster"
"2026-09-02 09:11:48", "1893113", "cd3e9e4df7e607f4fe83873b9d1142e3", "md5_hash", "payload", "win.medusa", "None", "Medusa", "", "50", "False", "https://threatcluster.io/cluster/china-nexus-threat-actor-fire-ant-targets-critical-infrastru-98a55c29", "None", "0", "threatcluster"
"2026-09-02 09:11:47", "1893114", "d18a5f1e8c321472a31c27f4985834a4", "md5_hash", "payload", "win.medusa", "None", "Medusa", "", "50", "False", "https://threatcluster.io/cluster/china-nexus-threat-actor-fire-ant-targets-critical-infrastru-98a55c29", "None", "0", "threatcluster"
"2026-09-02 09:11:47", "1893115", "e2cdf2a3380d0197aa11ff98a34cc59e", "md5_hash", "payload", "win.medusa", "None", "Medusa", "", "50", "False", "https://threatcluster.io/cluster/china-nexus-threat-actor-fire-ant-targets-critical-infrastru-98a55c29", "None", "0", "threatcluster"
"2026-09-02 09:11:46", "1893116", "ecb34a068eeb2548c0cbe2de00e53ed2", "md5_hash", "payload", "win.medusa", "None", "Medusa", "", "50", "False", "https://threatcluster.io/cluster/china-nexus-threat-actor-fire-ant-targets-critical-infrastru-98a55c29", "None", "0", "threatcluster"
"2026-09-02 09:11:45", "1893117", "ed9be20fea9203f4c4557c66c5b9686c", "md5_hash", "payload", "win.medusa", "None", "Medusa", "", "50", "False", "https://threatcluster.io/cluster/china-nexus-threat-actor-fire-ant-targets-critical-infrastru-98a55c29", "None", "0", "threatcluster"
"2026-09-02 09:11:45", "1893118", "f41ad99b8a8c95e4132e850b3663cb40", "md5_hash", "payload", "win.medusa", "None", "Medusa", "", "50", "False", "https://threatcluster.io/cluster/china-nexus-threat-actor-fire-ant-targets-critical-infrastru-98a55c29", "None", "0", "threatcluster"
"2026-09-02 09:11:44", "1893119", "fcb742b507e3c074da5524d1a7c80f7f", "md5_hash", "payload", "win.medusa", "None", "Medusa", "", "50", "False", "https://threatcluster.io/cluster/china-nexus-threat-actor-fire-ant-targets-critical-infrastru-98a55c29", "None", "0", "threatcluster"
"2026-09-02 09:11:43", "1893120", "fd3834d566a993c549a13a52d843a4e1", "md5_hash", "payload", "win.medusa", "None", "Medusa", "", "50", "False", "https://threatcluster.io/cluster/china-nexus-threat-actor-fire-ant-targets-critical-infrastru-98a55c29", "None", "0", "threatcluster"
"2026-09-02 06:33:33", "1893012", "b135d924f409aeb7be55feacd68e946f", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-02 06:33:32", "1893009", "07ec1d0d4f4b2029430ba43303cfde85", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-02 06:33:31", "1893006", "148e99089ecbe9cffadddd4f8f0114b2", "md5_hash", "payload", "win.agent_tesla", "AgenTesla,AgentTesla,Negasteal", "Agent Tesla", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-02 06:33:30", "1893003", "cbfdc0774c54d016bf35923d3c5603ae", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-02 06:33:29", "1893000", "6553bac9717b08d09db81cf9d47361e8", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-02 06:33:27", "1892997", "ef77cbff6f7e2157c38d27fea5b927ac", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-02 06:33:26", "1892994", "c856731038d020706aaaa7da2a8e46a5", "md5_hash", "payload", "win.nanocore", "Nancrat,NanoCore", "Nanocore RAT", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-02 06:33:25", "1892991", "17a06d209a2d60a1dbe2e71f3693548d", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-02 06:33:24", "1892988", "b1d271074cea3651385460a87c370aeb", "md5_hash", "payload", "win.coinminer", "None", "Coinminer", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-02 06:33:23", "1892985", "cea0892394ac5e26c48336c1b89629ed", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-02 06:33:22", "1892982", "981ab1ef2193514f56e37e8ed322837e", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-02 06:33:20", "1892979", "389055b0def3f57fc15695e1e7623534", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-02 06:33:19", "1892976", "44d0d337f28453d669f10960fc2b6a55", "md5_hash", "payload", "win.dcrat", "DarkCrystal RAT", "DCRat", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-02 06:33:18", "1892973", "e39ed5ab22ccb772f31c6f939b8f9875", "md5_hash", "payload", "win.raton_rat", "None", "RatonRAT", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-02 06:33:17", "1892970", "c57391593bb9d975cd014089eca9cf38", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-02 06:33:16", "1892967", "c84ac5fef6a85788d318a2c102695628", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-02 06:33:14", "1892964", "b474726d5d410a8edf0e4b9374ac609d", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-02 05:50:35", "1892586", "0962F56D7EC69F4F2A0162DCBE22116B", "md5_hash", "payload", "win.minifast", "None", "MiniFast", "", "50", "False", "https://threatcluster.io/cluster/mirage-kitten-targets-aviation-and-fintech-with-new-cross-pl-7386092f", "None", "0", "threatcluster"
"2026-09-02 05:50:35", "1892587", "1EA83E4E4592B01E4ACAB63EB867BEE5", "md5_hash", "payload", "win.minifast", "None", "MiniFast", "", "50", "False", "https://threatcluster.io/cluster/mirage-kitten-targets-aviation-and-fintech-with-new-cross-pl-7386092f", "None", "0", "threatcluster"
"2026-09-02 05:50:34", "1892588", "291AC3ABE73C5158E59A437B75D5F0AA", "md5_hash", "payload", "win.minifast", "None", "MiniFast", "", "50", "False", "https://threatcluster.io/cluster/mirage-kitten-targets-aviation-and-fintech-with-new-cross-pl-7386092f", "None", "0", "threatcluster"
"2026-09-02 05:50:34", "1892589", "366515822D5AC1CC500711EF57A2E32E", "md5_hash", "payload", "win.minifast", "None", "MiniFast", "", "50", "False", "https://threatcluster.io/cluster/mirage-kitten-targets-aviation-and-fintech-with-new-cross-pl-7386092f", "None", "0", "threatcluster"
"2026-09-02 05:50:34", "1892590", "795E053A990A1569FFDCB57F48F6D085", "md5_hash", "payload", "win.minifast", "None", "MiniFast", "", "50", "False", "https://threatcluster.io/cluster/mirage-kitten-targets-aviation-and-fintech-with-new-cross-pl-7386092f", "None", "0", "threatcluster"
"2026-09-02 05:50:33", "1892593", "CBAAF0900A13F28E380F49ADECEC932C", "md5_hash", "payload", "win.minifast", "None", "MiniFast", "", "50", "False", "https://threatcluster.io/cluster/mirage-kitten-targets-aviation-and-fintech-with-new-cross-pl-7386092f", "None", "0", "threatcluster"
"2026-09-02 05:50:32", "1892591", "810F8E3B88EB05F710C09552941D6F56", "md5_hash", "payload", "win.minifast", "None", "MiniFast", "", "50", "False", "https://threatcluster.io/cluster/mirage-kitten-targets-aviation-and-fintech-with-new-cross-pl-7386092f", "None", "0", "threatcluster"
"2026-09-02 05:50:32", "1892592", "BE086789568441D0D7E4679AEE51F566", "md5_hash", "payload", "win.minifast", "None", "MiniFast", "", "50", "False", "https://threatcluster.io/cluster/mirage-kitten-targets-aviation-and-fintech-with-new-cross-pl-7386092f", "None", "0", "threatcluster"
"2026-09-02 05:50:31", "1892594", "CF449F1992C2819E62AC44A0B06AC2E7", "md5_hash", "payload", "win.minifast", "None", "MiniFast", "", "50", "False", "https://threatcluster.io/cluster/mirage-kitten-targets-aviation-and-fintech-with-new-cross-pl-7386092f", "None", "0", "threatcluster"
"2026-09-02 05:50:31", "1892595", "DE5AF16A3757EF700B01DC34D67079AE", "md5_hash", "payload", "win.minifast", "None", "MiniFast", "", "50", "False", "https://threatcluster.io/cluster/mirage-kitten-targets-aviation-and-fintech-with-new-cross-pl-7386092f", "None", "0", "threatcluster"
"2026-09-02 05:50:30", "1892596", "E259C5EDF158AAC4CFE14F77DDD0B196", "md5_hash", "payload", "win.minifast", "None", "MiniFast", "", "50", "False", "https://threatcluster.io/cluster/mirage-kitten-targets-aviation-and-fintech-with-new-cross-pl-7386092f", "None", "0", "threatcluster"
"2026-09-02 05:50:30", "1892597", "E95A4366686E3F786EA3C056FAB5B0DA", "md5_hash", "payload", "win.minifast", "None", "MiniFast", "", "50", "False", "https://threatcluster.io/cluster/mirage-kitten-targets-aviation-and-fintech-with-new-cross-pl-7386092f", "None", "0", "threatcluster"
"2026-09-02 01:18:20", "1892853", "752050765e0b696a61f66f8f9d0657bf", "md5_hash", "payload", "win.coinminer", "None", "Coinminer", "2026-09-02 06:34:17", "95", "False", "None", "None", "0", "Grim"
"2026-09-02 01:18:19", "1892850", "d022bb6de095252f2b2051fe822c3fbe", "md5_hash", "payload", "win.amadey", "None", "Amadey", "2026-09-02 06:34:16", "95", "False", "None", "None", "0", "Grim"
"2026-09-02 01:18:18", "1892847", "74ce5e3a2f933a3eb411add5912bbdb6", "md5_hash", "payload", "win.vidar", "None", "Vidar", "2026-09-02 06:34:15", "95", "False", "None", "None", "0", "Grim"
"2026-09-02 01:18:16", "1892844", "a10410623b8b5ffaa0d7e7ce65ff21dc", "md5_hash", "payload", "win.vidar", "None", "Vidar", "2026-09-02 06:34:12", "95", "False", "None", "None", "0", "Grim"
"2026-09-02 01:18:15", "1892841", "ef02113b3b47834444477f5f63e08709", "md5_hash", "payload", "win.vidar", "None", "Vidar", "2026-09-02 06:34:11", "95", "False", "None", "None", "0", "Grim"
"2026-09-02 01:18:14", "1892838", "c33af353c748bb3502ce3e6e8ba4cc50", "md5_hash", "payload", "win.vidar", "None", "Vidar", "2026-09-02 06:34:10", "95", "False", "None", "None", "0", "Grim"
"2026-09-02 01:18:13", "1892835", "4ce48c3ad77274bc25aa46a951c12b42", "md5_hash", "payload", "win.vidar", "None", "Vidar", "2026-09-02 06:34:09", "95", "False", "None", "None", "0", "Grim"
"2026-09-02 01:18:12", "1892832", "e4d31628feacdf908bad5f70f4bafff7", "md5_hash", "payload", "win.vidar", "None", "Vidar", "2026-09-02 06:34:08", "95", "False", "None", "None", "0", "Grim"
"2026-09-02 01:18:11", "1892829", "6146a97d66898f7e4501a568ada3a223", "md5_hash", "payload", "win.vidar", "None", "Vidar", "2026-09-02 06:34:06", "95", "False", "None", "None", "0", "Grim"
"2026-09-02 01:18:10", "1892826", "5d7e30af602720a142f2d4f2df0b0ba1", "md5_hash", "payload", "win.vidar", "None", "Vidar", "2026-09-02 06:34:05", "95", "False", "None", "None", "0", "Grim"
"2026-09-02 01:18:06", "1892823", "e3588eea4c91251891eb52ce99489c16", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "2026-09-02 06:33:59", "95", "False", "None", "None", "0", "Grim"
"2026-09-02 01:18:05", "1892820", "7eba73fde69fbfbaedb7cfa1aef66e99", "md5_hash", "payload", "win.vidar", "None", "Vidar", "2026-09-02 06:33:58", "95", "False", "None", "None", "0", "Grim"
"2026-09-02 01:18:04", "1892817", "4e6f06b2eac9f0ca4b5246138073f694", "md5_hash", "payload", "win.vidar", "None", "Vidar", "2026-09-02 06:33:57", "95", "False", "None", "None", "0", "Grim"
"2026-09-02 01:18:03", "1892814", "9916e7785c705b3450c9702ac2a4a64d", "md5_hash", "payload", "win.vidar", "None", "Vidar", "2026-09-02 06:33:57", "95", "False", "None", "None", "0", "Grim"
"2026-09-02 01:18:02", "1892811", "f039b4fd32d47ae406e42f2e01d4bd19", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "2026-09-02 06:33:55", "95", "False", "None", "None", "0", "Grim"
"2026-09-02 01:18:01", "1892808", "7fe9e7c78b6338f423dbd0c46b923f4e", "md5_hash", "payload", "win.loda", "LodaRAT,Nymeria", "Loda", "2026-09-02 06:33:55", "95", "False", "None", "None", "0", "Grim"
"2026-09-02 01:18:00", "1892805", "5bac5b809694dd78ca1327a6c58a4216", "md5_hash", "payload", "win.coinminer", "None", "Coinminer", "2026-09-02 06:33:53", "95", "False", "None", "None", "0", "Grim"
"2026-09-02 01:17:59", "1892802", "f23fa10c058cd653d5d617308b38b9e4", "md5_hash", "payload", "jar.crossrat", "Trupto", "CrossRAT", "2026-09-02 06:33:52", "95", "False", "None", "None", "0", "Grim"
"2026-09-02 01:17:58", "1892799", "473a89208292a810486865506ce96e12", "md5_hash", "payload", "win.vidar", "None", "Vidar", "2026-09-02 06:33:51", "95", "False", "None", "None", "0", "Grim"
"2026-09-02 01:17:57", "1892796", "9b96009facbb218606b253b3050a57e6", "md5_hash", "payload", "win.vidar", "None", "Vidar", "2026-09-02 06:33:51", "95", "False", "None", "None", "0", "Grim"
"2026-09-02 01:17:56", "1892790", "a4d13e782a2f1fe7f59d6c60539908de", "md5_hash", "payload", "win.vidar", "None", "Vidar", "2026-09-02 06:33:48", "95", "False", "None", "None", "0", "Grim"
"2026-09-02 01:17:56", "1892793", "1e7869f2649c3105cbe22b8ca889025f", "md5_hash", "payload", "win.vidar", "None", "Vidar", "2026-09-02 06:33:49", "95", "False", "None", "None", "0", "Grim"
"2026-09-02 01:17:55", "1892787", "6aa6d5b82ddc1dde86b8c685b99c3b89", "md5_hash", "payload", "win.vidar", "None", "Vidar", "2026-09-02 06:33:47", "95", "False", "None", "None", "0", "Grim"
"2026-09-02 01:17:54", "1892784", "42cd21e5119193f0b631f87d9c87e36c", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "2026-09-02 06:33:46", "95", "False", "None", "None", "0", "Grim"
"2026-09-02 01:17:53", "1892781", "03a7bb983c61495a27eaa983150c6642", "md5_hash", "payload", "win.asyncrat", "None", "AsyncRAT", "2026-09-02 06:33:46", "95", "False", "None", "None", "0", "Grim"
"2026-09-02 01:17:52", "1892775", "9a7ee040e5bbe2fbac454e84c0ecea68", "md5_hash", "payload", "win.vidar", "None", "Vidar", "2026-09-02 06:33:44", "95", "False", "None", "None", "0", "Grim"
"2026-09-02 01:17:52", "1892778", "57cc33704c7c92b7deecb9c0e60cefb1", "md5_hash", "payload", "py.stealler", "None", "stealler", "2026-09-02 06:33:45", "95", "False", "None", "None", "0", "Grim"
"2026-09-02 01:17:51", "1892772", "db679fa6f7c2a5d8d1ef42e8b7be946e", "md5_hash", "payload", "py.venus_stealer", "None", "Venus Stealer", "2026-09-02 06:33:43", "95", "False", "None", "None", "0", "Grim"
"2026-09-02 01:17:50", "1892769", "fbcdc675ffc69cace3615ba1261763a9", "md5_hash", "payload", "win.stealc", "None", "Stealc", "2026-09-02 06:33:42", "95", "False", "None", "None", "0", "Grim"
"2026-09-02 01:17:49", "1892766", "3ef284d34290f2f784e12e005c1698b5", "md5_hash", "payload", "win.xworm", "None", "XWorm", "2026-09-02 06:33:41", "95", "False", "None", "None", "0", "Grim"
"2026-09-02 01:17:48", "1892763", "bb0438616439b60170233a6c41e036fe", "md5_hash", "payload", "win.vidar", "None", "Vidar", "2026-09-02 06:33:40", "95", "False", "None", "None", "0", "Grim"
"2026-09-02 01:17:47", "1892760", "4155c1a19ad80777f4dcb1dfe994b1a3", "md5_hash", "payload", "win.vidar", "None", "Vidar", "2026-09-02 06:33:39", "95", "False", "None", "None", "0", "Grim"
"2026-09-02 01:17:46", "1892754", "28a68370e62fc893cadac0d307db6771", "md5_hash", "payload", "win.vidar", "None", "Vidar", "2026-09-02 06:33:37", "95", "False", "None", "None", "0", "Grim"
"2026-09-02 01:17:46", "1892757", "59cfbfa1c167953401215831cd4d15ab", "md5_hash", "payload", "win.masslogger", "None", "MASS Logger", "2026-09-02 06:33:38", "95", "False", "None", "None", "0", "Grim"
"2026-09-02 01:17:45", "1892751", "040b65e7b991e772aac124dd1664dcc1", "md5_hash", "payload", "win.coinminer", "None", "Coinminer", "2026-09-02 06:33:36", "95", "False", "None", "None", "0", "Grim"
"2026-09-02 01:17:44", "1892748", "fd127ea7d3e1375b723541cdf5d52132", "md5_hash", "payload", "apk.loki", "None", "Loki", "2026-09-02 06:33:35", "95", "False", "None", "None", "0", "Grim"
"2026-09-02 01:17:43", "1892745", "0a910c63fc8053d4bf7fb905dde4d840", "md5_hash", "payload", "win.coinminer", "None", "Coinminer", "2026-09-02 06:33:34", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:59", "1892166", "17ffd9f15fde1f6745336904de98f7f6", "md5_hash", "payload", "win.vidar", "None", "Vidar", "2026-09-02 01:18:43", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:59", "1892169", "d5c466a742d8a3a43740ac6b1b23edf8", "md5_hash", "payload", "win.vidar", "None", "Vidar", "2026-09-02 01:18:44", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:58", "1892163", "87c4cc6038de755b2f92a6170f996e76", "md5_hash", "payload", "win.vidar", "None", "Vidar", "2026-09-02 01:18:42", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:57", "1892160", "dc35612daa6b90f8a43f1c227b9098f5", "md5_hash", "payload", "win.vidar", "None", "Vidar", "2026-09-02 01:18:42", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:56", "1892157", "8199bc5927704382b1c979647164d7d4", "md5_hash", "payload", "win.vidar", "None", "Vidar", "2026-09-02 01:18:41", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:55", "1892154", "aaabbc1075a27b11770a0852ebe95732", "md5_hash", "payload", "win.vidar", "None", "Vidar", "2026-09-02 01:18:40", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:54", "1892151", "4c92a36b3568f29fdc1c2a18d11bc3b6", "md5_hash", "payload", "win.vidar", "None", "Vidar", "2026-09-02 01:18:39", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:53", "1892148", "a6a805492262d48a585c61bf3949ec62", "md5_hash", "payload", "win.vidar", "None", "Vidar", "2026-09-02 01:18:38", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:51", "1892145", "9b34dee116e885bdeb52e12473ef5bc2", "md5_hash", "payload", "win.vidar", "None", "Vidar", "2026-09-02 01:18:36", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:50", "1892142", "7de419b49133d63738b5d6c552c0f094", "md5_hash", "payload", "win.vidar", "None", "Vidar", "2026-09-02 01:18:36", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:49", "1892139", "98d169463f862d086bf02ae8b5cd1d86", "md5_hash", "payload", "win.vidar", "None", "Vidar", "2026-09-02 01:18:34", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:47", "1892136", "ea7e4d8d746116a93ca6b92cf8e4869f", "md5_hash", "payload", "win.vidar", "None", "Vidar", "2026-09-02 01:18:32", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:45", "1892133", "3f84ee612332dcafeff3e5f5cfafc1de", "md5_hash", "payload", "win.coinminer", "None", "Coinminer", "2026-09-02 01:18:30", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:44", "1892130", "aae740360ec8cfe8c2573863f85d98be", "md5_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "2026-09-02 06:34:28", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:43", "1892124", "1d58f29c8364caeaa015c3e27b01eb21", "md5_hash", "payload", "win.vidar", "None", "Vidar", "2026-09-02 06:34:26", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:43", "1892127", "8266795c498edf5cd5463065e74faade", "md5_hash", "payload", "win.golroted", "None", "Golroted", "2026-09-02 06:34:27", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:42", "1892121", "c367f434aa20c7309783ad1853f7260d", "md5_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "2026-09-02 06:34:25", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:41", "1892118", "ab6ab7c69d532b0a30664b1eae3179c1", "md5_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "2026-09-02 06:34:24", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:40", "1892115", "07013ad4ee3f650891656fb801449be9", "md5_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "2026-09-02 06:34:23", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:39", "1892112", "3bf4daa72f54daa9d817b6b2feeb53be", "md5_hash", "payload", "win.vidar", "None", "Vidar", "2026-09-02 06:34:22", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:38", "1892106", "0b33bdca8e40807365c6f12be0643ee9", "md5_hash", "payload", "win.phorpiex", "Tldr,Trik,TwizT,phorphiex", "Phorpiex", "2026-09-02 06:34:21", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:38", "1892109", "08a689a9093f3c81904933456f8d3618", "md5_hash", "payload", "win.phorpiex", "Tldr,Trik,TwizT,phorphiex", "Phorpiex", "2026-09-02 06:34:21", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:37", "1892103", "47f2ce28e9aa42fa8fbb912bdfd854fb", "md5_hash", "payload", "win.vidar", "None", "Vidar", "2026-09-02 06:34:20", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:36", "1892100", "fdf655fb4cec2475d255915507a358e2", "md5_hash", "payload", "win.vidar", "None", "Vidar", "2026-09-02 06:34:19", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:35", "1892097", "9bc7883951f10740c7609f06ba192156", "md5_hash", "payload", "win.vidar", "None", "Vidar", "2026-09-02 06:34:18", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:34", "1892094", "e7c515d44e5a53d4f695cee4d9ae67b1", "md5_hash", "payload", "win.coinminer", "None", "Coinminer", "2026-09-02 06:34:14", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:33", "1892091", "1807503a422d180ea91f0a23cbd76962", "md5_hash", "payload", "win.njrat", "Bladabindi,Lime-Worm", "NjRAT", "2026-09-02 06:34:13", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:32", "1892088", "a56af1b76500fad38edb4958e6a29399", "md5_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "2026-09-02 06:34:07", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:31", "1892085", "33970f0d2d3ba1f4d505dec41eb157e6", "md5_hash", "payload", "win.nanocore", "Nancrat,NanoCore", "Nanocore RAT", "2026-09-02 06:34:04", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:30", "1892082", "6947fe506ee83239c32a4213a91e1365", "md5_hash", "payload", "win.wannacryptor", "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry", "WannaCryptor", "2026-09-02 06:34:03", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:29", "1892079", "548c6c4912046e948df0e2578cf4dd89", "md5_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "2026-09-02 06:34:01", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:28", "1892076", "7dde3aa953a54b22666dcadc568a870e", "md5_hash", "payload", "win.coinminer", "None", "Coinminer", "2026-09-02 06:34:00", "95", "False", "None", "None", "0", "Grim"
"2026-08-30 06:34:01", "1891358", "df436f62af38b7a5bcd8a3368a9f110a", "md5_hash", "payload", "win.nanocore", "Nancrat,NanoCore", "Nanocore RAT", "2026-09-02 01:18:35", "95", "False", "None", "None", "0", "Grim"
"2026-08-30 06:34:00", "1891355", "f6db29a1c53467f9d613666064785e98", "md5_hash", "payload", "win.quasar_rat", "CinaRAT,QuasarRAT,Yggdrasil", "Quasar RAT", "2026-09-02 01:18:33", "95", "False", "None", "None", "0", "Grim"
"2026-08-30 06:33:59", "1891352", "99ad52820bd7ae090c578610e367fcdb", "md5_hash", "payload", "win.coinminer", "None", "Coinminer", "2026-09-02 01:18:32", "95", "False", "None", "None", "0", "Grim"
"2026-08-30 06:33:58", "1891349", "70f6dff404b94d943db1514648700cfa", "md5_hash", "payload", "win.wannacryptor", "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry", "WannaCryptor", "2026-09-02 01:18:31", "95", "False", "None", "None", "0", "Grim"
"2026-08-30 01:34:19", "1891260", "7399b202c9c2fe7479680505e1f55e89", "md5_hash", "payload", "win.vidar", "None", "Vidar", "2026-09-02 01:18:39", "95", "False", "None", "None", "0", "Grim"
"2026-08-30 01:34:18", "1891257", "7d7fd1e5a3ef87809b2e82e000f835c7", "md5_hash", "payload", "win.coinminer", "None", "Coinminer", "2026-09-02 01:18:37", "95", "False", "None", "None", "0", "Grim"
# Number of entries: 151