################################################################
# ThreatFox IOCs: recent SHA256 hashes - CSV format            #
# Last updated: 2026-07-07 08:21:28 UTC                        #
#                                                              #
# Terms Of Use: https://threatfox.abuse.ch/faq/#tos            #
# For questions please contact threatfox [at] abuse.ch         #
################################################################
#
# "first_seen_utc","ioc_id","ioc_value","ioc_type","threat_type","fk_malware","malware_alias","malware_printable","last_seen_utc","confidence_level","is_compromised","reference","tags","anonymous","reporter"
"2026-07-07 08:21:28", "1845949", "d1487fa8c36489e6e46c950484855b52d4bd3e5a6e86b9caffc7e9a3168a60f4", "sha256_hash", "payload", "elf.xmrig", "None", "XMRIG", "", "75", "True", "", "coinminer,cryptojacking,Monero,Outlaw,RandomX,xmrig", "1", "anonymous"
"2026-07-06 14:30:36", "1845692", "a670b03c1da00ee2c8622fd716085358d7e36ee98c4adafc9bda53eaadd59527", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-07-06 14:30:35", "1845689", "25d34c70c29605a0a7ebeeb836e8fcf45ec0ddff29dd0745b844b8ea39d0d9cb", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-07-06 14:30:34", "1845686", "7c501632cd3830735040964b69d73a5dc315d0422fe3f1012c4b50db58dc0663", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-07-06 14:30:33", "1845683", "452a92a4ff9639259c0aae08fcb4fe30e93c8843a4cf301b9746e8e6b899bb74", "sha256_hash", "payload", "win.agent_tesla", "AgenTesla,AgentTesla,Negasteal", "Agent Tesla", "", "95", "False", "None", "None", "0", "Grim"
"2026-07-06 14:30:32", "1845680", "3a69743c2e6248b3cfd9ed4b1f24d411aba3a5dc7cd2b787e23e0a77094bfc19", "sha256_hash", "payload", "win.asyncrat", "None", "AsyncRAT", "", "95", "False", "None", "None", "0", "Grim"
"2026-07-06 14:30:31", "1845677", "9b51c77931a32be41eb1b4919951e063da93bd60dfefe103ba004e8c84c7e6ee", "sha256_hash", "payload", "win.agent_tesla", "AgenTesla,AgentTesla,Negasteal", "Agent Tesla", "", "95", "False", "None", "None", "0", "Grim"
"2026-07-06 14:30:30", "1845674", "7efb9e34f0829837d0b8b8ec33124b2e68c2ee15f1c222afc7c2d4ed985f96d5", "sha256_hash", "payload", "win.formbook", "win.xloader", "Formbook", "", "95", "False", "None", "None", "0", "Grim"
"2026-07-06 14:30:29", "1845671", "fa23920dce139f976c8fe2cc7ce5001296429c259cc70f7f79777f69eff021be", "sha256_hash", "payload", "win.agent_tesla", "AgenTesla,AgentTesla,Negasteal", "Agent Tesla", "", "95", "False", "None", "None", "0", "Grim"
"2026-07-06 14:30:28", "1845668", "825aa515a905b7294efc080850e77d8962a1411c6f47468a2ce67a19770bc830", "sha256_hash", "payload", "win.wannacryptor", "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry", "WannaCryptor", "", "95", "False", "None", "None", "0", "Grim"
"2026-07-06 14:30:27", "1845665", "7675d23d748b0f2b60d9c074d6db1e843a69efd541bd96077065d04b5daa5637", "sha256_hash", "payload", "win.adaptix_c2", "None", "AdaptixC2", "", "95", "False", "None", "None", "0", "Grim"
"2026-07-06 14:30:27", "1845662", "b3ad1389f9962206c973c4acefbb32f3c26cbdb884c6f01445deeeb6f9f9f8e9", "sha256_hash", "payload", "win.backnet", "None", "BackNet", "", "95", "False", "None", "None", "0", "Grim"
"2026-07-06 14:30:25", "1845659", "11265b15cf310d8b0582883d1d0417891f8456f7ab620690fa0ddfd512ff494a", "sha256_hash", "payload", "win.adaptix_c2", "None", "AdaptixC2", "", "95", "False", "None", "None", "0", "Grim"
"2026-07-06 14:30:24", "1845656", "37f7127bcae8388c61432dc2d46b0df36cb33690ebbc5b725b28b33dfb145d4b", "sha256_hash", "payload", "win.asyncrat", "None", "AsyncRAT", "", "95", "False", "None", "None", "0", "Grim"
"2026-07-06 14:30:23", "1845653", "e438003e81399afda1a4801bdd3d347a757c2068c4dbbaa99d4f554972c546f0", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-07-06 14:30:22", "1845650", "7b3aa1d7625cf510dd111f1d390415de1538dfc011ec79242b44badd6d32b120", "sha256_hash", "payload", "win.stealc", "None", "Stealc", "", "95", "False", "None", "None", "0", "Grim"
"2026-07-06 14:30:21", "1845647", "128f48d4dda439d084c90f283d3bd9293a8d22bd86b9b5e2c57afaf5e487243b", "sha256_hash", "payload", "win.coinminer", "None", "Coinminer", "", "95", "False", "None", "None", "0", "Grim"
"2026-07-06 14:30:21", "1845644", "739daec38ce1a857f5bbe3d199e6c129be79014006afd5da0f53ac84f9483afa", "sha256_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "", "95", "False", "None", "None", "0", "Grim"
"2026-07-06 14:30:20", "1845641", "651a82b426efa1053fd38f2d28617b4324a74787934780d88c64b1cf0638d9cf", "sha256_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "", "95", "False", "None", "None", "0", "Grim"
"2026-07-06 14:30:19", "1845638", "56c1f7f57b3ede16315b84735bef589df8c00804d194f726489bb053af9dbf9a", "sha256_hash", "payload", "win.asyncrat", "None", "AsyncRAT", "", "95", "False", "None", "None", "0", "Grim"
"2026-07-06 14:30:18", "1845635", "afe399f61054f5855796a884b38b4d0977c03a216920980e44d776173ddfea80", "sha256_hash", "payload", "win.wannacryptor", "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry", "WannaCryptor", "", "95", "False", "None", "None", "0", "Grim"
"2026-07-06 14:30:17", "1845632", "80df68273b763bbd74207d708a49c4aae244a6cc85161e2efae0d73f373830a9", "sha256_hash", "payload", "win.agent_tesla", "AgenTesla,AgentTesla,Negasteal", "Agent Tesla", "", "95", "False", "None", "None", "0", "Grim"
"2026-07-06 13:26:10", "1845616", "b58bb405081d7085ce5c988d8a2dcd43565a53d13f67409c4142027230e75cc4", "sha256_hash", "payload", "unknown_loader", "None", "Unknown Loader", "", "100", "False", "", "ransomware-loader,unknown", "0", "375py"
"2026-07-06 13:26:09", "1845617", "1c4afcdf66e9b184ad862e21675ac5280308efb0699b60ac4335e58d4c30ef3e", "sha256_hash", "payload", "unknown_loader", "None", "Unknown Loader", "", "100", "False", "", "ransomware-loader,unknown", "0", "375py"
"2026-07-06 13:26:08", "1845618", "5c7e96390d91746354e55da5ef1517b001e116ff289ac984e9479b7efb04ae5e", "sha256_hash", "payload", "unknown_loader", "None", "Unknown Loader", "", "100", "False", "", "ransomware-loader,unknown", "0", "375py"
"2026-07-06 07:19:48", "1845307", "5f22ec5c14dfd47c92850a5fb3bd8e3754d538b8021b6238238e4020336cfb5c", "sha256_hash", "payload", "win.zedhou", "None", "Zedhou", "", "100", "False", "https://github.com/yankywilson/zohomurk-mustang-panda-analysis", "ctxmui,G0129,MustangPanda,ZohoMurk", "1", "anonymous"
"2026-07-06 07:19:48", "1845308", "f2bed071676feb831ed460489643fd57f6c6c1e0d024a1ea447820276fb13828", "sha256_hash", "payload", "win.zedhou", "None", "Zedhou", "", "100", "False", "https://github.com/yankywilson/zohomurk-mustang-panda-analysis", "ctxmui,G0129,MustangPanda,ZohoMurk", "1", "anonymous"
"2026-07-06 07:19:46", "1845309", "a43084f5af861f44c75c5273c779cb26d506cab6b51c33746626da504148a4ec", "sha256_hash", "payload", "win.zedhou", "None", "Zedhou", "", "100", "False", "https://github.com/yankywilson/zohomurk-mustang-panda-analysis", "ctxmui,G0129,MustangPanda,ZohoMurk", "1", "anonymous"
# Number of entries: 28