################################################################ # ThreatFox IOCs: recent SHA256 hashes - CSV format # # Last updated: 2025-05-10 19:48:46 UTC # # # # Terms Of Use: https://threatfox.abuse.ch/faq/#tos # # For questions please contact threatfox [at] abuse.ch # ################################################################ # # "first_seen_utc","ioc_id","ioc_value","ioc_type","threat_type","fk_malware","malware_alias","malware_printable","last_seen_utc","confidence_level","reference","tags","anonymous","reporter" "2025-05-10 19:48:46", "1519388", "18d11d4c837fb6bb2c6806318cb1510ba7fdc54abe8e7a53c589fd12b3a02292", "sha256_hash", "payload", "win.darkcomet", "Breut,Fynloski,klovbot", "DarkComet", "", "95", "None", "None", "0", "Grim" "2025-05-10 19:48:44", "1519385", "c65ea1c461f9189510633ddd67c93ce23e84d4d81b56c8ca78553d0dec861455", "sha256_hash", "payload", "win.coinminer", "None", "Coinminer", "", "95", "None", "None", "0", "Grim" "2025-05-10 19:48:43", "1519382", "70cc1f20cf73146b96d6eba742fb3403f0a6aa19b6dced57d134bcae9deeb878", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim" "2025-05-10 19:48:41", "1519379", "823cf1cf0e67b456ce2f8e6ac0bf94c42ccd56259acb43da2e751f6397fdb75b", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "None", "None", "0", "Grim" "2025-05-10 19:48:40", "1519376", "9ccfe968b46b9c43056d5cfe626824f586f11791e22161262647fd67f5f05cf1", "sha256_hash", "payload", "win.screenlocker", "None", "ScreenLocker", "", "95", "None", "None", "0", "Grim" "2025-05-10 19:48:38", "1519373", "7e9c3cddc1273117a1dd9755024432a3f1075bb3680fa89c176d658bc3f1f8f2", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim" "2025-05-10 19:48:36", "1519370", "be6d79a5aa6d5f5d5c0bf12acf9052c3ee7657399c019da250fc860c0ccef911", "sha256_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "", "95", "None", "None", "0", "Grim" "2025-05-10 19:48:35", "1519367", "cdfe71f5f359be56fc6fb2b5bfa6c34042cd2e6114a82fa0c3b147106e731d6a", "sha256_hash", "payload", "win.troystealer", "None", "troystealer", "", "95", "None", "None", "0", "Grim" "2025-05-10 19:48:34", "1519364", "260e1a1e22d04ad3c1c50b010579f05e8b06f50003dff287667f4f757efa8511", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim" "2025-05-10 19:48:32", "1519361", "92088cdedc08a20576bdb1e8edab2555134ba5832628b7cd9c91515d21d3df4c", "sha256_hash", "payload", "win.troystealer", "None", "troystealer", "", "95", "None", "None", "0", "Grim" "2025-05-10 19:48:31", "1519358", "71d16f135efba49ec8ae572a4da9618e943dcab4733b37601498696acf2d119c", "sha256_hash", "payload", "win.njrat", "Bladabindi,Lime-Worm", "NjRAT", "", "95", "None", "None", "0", "Grim" "2025-05-10 19:48:29", "1519355", "fc21892aeb3c146f92a5721115252b5924c70494ae24460aa1d72c986aee2a36", "sha256_hash", "payload", "win.quasar_rat", "CinaRAT,QuasarRAT,Yggdrasil", "Quasar RAT", "", "95", "None", "None", "0", "Grim" "2025-05-10 19:48:27", "1519352", "e596bea77a032d4d8887eb905db0ecfc3b5bb4b90b70913dcbb19fbaf909b7b5", "sha256_hash", "payload", "win.gcleaner", "None", "GCleaner", "", "95", "None", "None", "0", "Grim" "2025-05-10 19:48:26", "1519349", "b659b56bc895cacbafd9c713d032b617f5be8b92eb099257992b8c70ee8a9212", "sha256_hash", "payload", "win.troystealer", "None", "troystealer", "", "95", "None", "None", "0", "Grim" "2025-05-10 19:48:24", "1519346", "d5f6f15bcd3ed0966d65943273a34f17f4ec7b54bda1e0b01843aa8f635be446", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "None", "None", "0", "Grim" "2025-05-10 19:48:23", "1519343", "0a0dad8466566dd7c8fade54680ac253da20a35a3f58b5dc495da60df609f762", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "None", "None", "0", "Grim" "2025-05-10 19:48:21", "1519340", "67dbfc74bebb4384c847b3c7c89b173878eb0e1e8e058a85ba5801b10ff62389", "sha256_hash", "payload", "win.asyncrat", "None", "AsyncRAT", "", "95", "None", "None", "0", "Grim" "2025-05-10 19:48:20", "1519337", "9e318e8fbdba0bc0f745c0d58ddd5799203dae43437fb3de470c7ead44ba6e49", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim" "2025-05-10 19:48:19", "1519334", "d95ff41bfbaa705e05507570aad939636676d3a691814214998c7b8607f93cd1", "sha256_hash", "payload", "win.masslogger", "None", "MASS Logger", "", "95", "None", "None", "0", "Grim" "2025-05-10 19:48:17", "1519331", "bbbceb4adf8900e5df33d28d9bac03afe37cff41166e475ae42166949006610a", "sha256_hash", "payload", "win.asyncrat", "None", "AsyncRAT", "", "95", "None", "None", "0", "Grim" "2025-05-10 19:48:16", "1519328", "1501573ebcb8323c908a4a7c28a8cb9e3d3ce88dedcf9e2fa587e87dfb4fc440", "sha256_hash", "payload", "win.babadeda", "None", "Babadeda", "", "95", "None", "None", "0", "Grim" "2025-05-10 19:48:14", "1519325", "58125004d2a317f64dc8a5ec7da308c7df7d9029f417d1e5dc124a8392e3fd8b", "sha256_hash", "payload", "win.nitol", "None", "Nitol", "", "95", "None", "None", "0", "Grim" "2025-05-10 19:48:13", "1519322", "6cd56f0b601722945ffc79d0a5468784fe9b1552fdd1931a64cd0f5608a7d697", "sha256_hash", "payload", "win.mars_stealer", "None", "Mars Stealer", "", "95", "None", "None", "0", "Grim" "2025-05-10 19:48:11", "1519319", "6be08c94108deb529fc50d4fd76c1a71e4a1329cbc618d550dccde597dc4f09e", "sha256_hash", "payload", "win.mars_stealer", "None", "Mars Stealer", "", "95", "None", "None", "0", "Grim" "2025-05-10 19:48:09", "1519316", "a6ac7ee4d2e5e55381b1c94ff5481fa23cd184dfd19698baee885d33a0c52fdf", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim" "2025-05-10 19:48:08", "1519313", "ea91cbe2f5f4483f652dc238b4a5638b7a807cebc5c7e0934f688fdacf526593", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim" "2025-05-10 19:48:06", "1519310", "6736c27429c62df075135d347a71c8b722aaae3a01f147f4bb900638db74d3fe", "sha256_hash", "payload", "win.coinminer", "None", "Coinminer", "", "95", "None", "None", "0", "Grim" "2025-05-10 19:48:05", "1519307", "f258f660f30a7f9669b025d9c2d5663f16c576a03f48e6fc169af692d43336c3", "sha256_hash", "payload", "win.coinminer", "None", "Coinminer", "", "95", "None", "None", "0", "Grim" "2025-05-10 19:48:03", "1519304", "17934a0f20115a17ff9b2e8b21e14714ea1248f97ca5f078b2d0138935f33bbf", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "None", "None", "0", "Grim" "2025-05-10 19:48:01", "1519301", "63ce8095b778fd43282035ea673c64a1a8107183c5af94392c6eb1f5adc745e7", "sha256_hash", "payload", "win.agent_tesla", "AgenTesla,AgentTesla,Negasteal", "Agent Tesla", "", "95", "None", "None", "0", "Grim" "2025-05-10 19:47:59", "1519298", "9515dac6a4ff603dec56b68d9644ce438a76273199fa5723b52cb25dda396c59", "sha256_hash", "payload", "win.reverse_rat", "None", "ReverseRAT", "", "95", "None", "None", "0", "Grim" "2025-05-10 19:47:58", "1519295", "aa931ee4d177705b5f0c4bb52d73e83b29efc9eee5d07fbe27b7fcf106c7b467", "sha256_hash", "payload", "win.quasar_rat", "CinaRAT,QuasarRAT,Yggdrasil", "Quasar RAT", "", "95", "None", "None", "0", "Grim" "2025-05-10 19:47:56", "1519292", "6a5990c454293b23fadeb91b55dd41e34a809a66027eb1dc7878077ac6f1d245", "sha256_hash", "payload", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "95", "None", "None", "0", "Grim" "2025-05-10 19:47:55", "1519289", "dbffa4624a220960c4b2f5aff0a3911e2f71f219fb5680e2eacf90b5dd067e46", "sha256_hash", "payload", "win.quasar_rat", "CinaRAT,QuasarRAT,Yggdrasil", "Quasar RAT", "", "95", "None", "None", "0", "Grim" "2025-05-10 19:47:53", "1519286", "dfaee0f6f841357303789062c57c7f10858a838be939e93ce6855670cd7c16a7", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "None", "None", "0", "Grim" "2025-05-10 19:47:51", "1519283", "b800bf6f11170ff68cd552484fa144571069513adad2d75ac7462b126b5f0816", "sha256_hash", "payload", "win.conti", "None", "Conti", "", "95", "None", "None", "0", "Grim" "2025-05-10 19:47:50", "1519280", "809fa6cc92b87617af3beac0c187d3e12d29e0f27bda4fbcd399210ddef0022b", "sha256_hash", "payload", "win.darkcomet", "Breut,Fynloski,klovbot", "DarkComet", "", "95", "None", "None", "0", "Grim" "2025-05-10 19:47:48", "1519277", "dd9cdaf4af582338fcbc03808d881386934d9beb5c7ecea667e3329b3a4ed376", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "None", "None", "0", "Grim" "2025-05-10 19:47:46", "1519274", "6353f67f8821a2d8f2c83bb0a53bc16e4a70ad17dec307c12d9dd5abb383c707", "sha256_hash", "payload", "win.screenlocker", "None", "ScreenLocker", "", "95", "None", "None", "0", "Grim" "2025-05-10 19:47:45", "1519271", "ea3c0aeccb6a55339f3abaf8bbd791dc4b07cfd749b3eb30ec1da72e430ce8c9", "sha256_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "", "95", "None", "None", "0", "Grim" "2025-05-10 19:47:43", "1519268", "f3f29bda95399edcd735bb64133d3dc5def59daae166c10ce983cd6aa3887d75", "sha256_hash", "payload", "win.nanocore", "Nancrat,NanoCore", "Nanocore RAT", "", "95", "None", "None", "0", "Grim" "2025-05-10 19:47:41", "1519265", "2aa789a884445cc20d9911635e40580f50fd9bb2c1408eb6e0075240ecbb4a65", "sha256_hash", "payload", "win.nanocore", "Nancrat,NanoCore", "Nanocore RAT", "", "95", "None", "None", "0", "Grim" "2025-05-10 19:47:39", "1519262", "f48da598062316a0cfb08df3bf30f916635a9ab3d76982c821bd9973aea64023", "sha256_hash", "payload", "win.nanocore", "Nancrat,NanoCore", "Nanocore RAT", "", "95", "None", "None", "0", "Grim" # Number of entries: 43