################################################################ # ThreatFox IOCs: recent SHA256 hashes - CSV format # # Last updated: 2026-09-23 17:20:36 UTC # # # # Terms Of Use: https://threatfox.abuse.ch/faq/#tos # # For questions please contact threatfox [at] abuse.ch # ################################################################ # # "first_seen_utc","ioc_id","ioc_value","ioc_type","threat_type","fk_malware","malware_alias","malware_printable","last_seen_utc","confidence_level","is_compromised","reference","tags","anonymous","reporter" "2026-09-23 17:20:36", "1930803", "ad56d2df3c9614af56f49ee645989ccea45591c2c0c1a565e48f6a94cf75beab", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "90", "False", "https://www.virustotal.com/gui/file/ad56d2df3c9614af56f49ee645989ccea45591c2c0c1a565e48f6a94cf75beab", "AMOS,ClickFix,Foxveil,macOS", "0", "c4ffeine" "2026-09-23 15:47:48", "1929826", "64c175284dc211529b811795c61ba5b8e5f30d162ea7f15845edae945a6fd9a4", "sha256_hash", "payload", "unknown", "None", "Unknown malware", "", "100", "False", "https://www.virustotal.com/gui/file/63de5b3b03e3fb95e4d736ce0bec76e54c5299a0553b310ed3b9f270df841a1e", "backdoor,bytebunk,php,reverseshell,webshell,wordpress", "0", "Efrain" "2026-09-23 15:47:46", "1930119", "e09f58caf00bfa37fd4868916bcb1f06fb551e405b7717a9157fa61e3150bb8d", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/e09f58caf00bfa37fd4868916bcb1f06fb551e405b7717a9157fa61e3150bb8d", "AMOS,cc2,ClickFix,Foxveil,macOS", "0", "c4ffeine" "2026-09-23 15:03:24", "1929678", "d3569641df7649f6bbf4f60703db437a64c9b4f25bb53ea3998e16f1f261101a", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/d3569641df7649f6bbf4f60703db437a64c9b4f25bb53ea3998e16f1f261101a", "AMOS,cc2,ClickFix,Foxveil,macOS", "0", "c4ffeine" "2026-09-23 15:02:33", "1929807", "2b5f0c927f5436d8c04d58bb8c9fba470cbbf4ce23eacf2d65e336ca2bb59d97", "sha256_hash", "payload", "win.xworm", "None", "XWorm", "", "95", "False", "None", "None", "0", "Grim" "2026-09-23 15:02:31", "1929804", "b9f239f6670f52d74ed55d1fbe7ca02feca1387e7aacd329abbcd1cf114e2b7d", "sha256_hash", "payload", "win.coinminer", "None", "Coinminer", "", "95", "False", "None", "None", "0", "Grim" "2026-09-23 15:02:29", "1929801", "717e8d99fea593ff2ab47baf848f226b0675b82a332cb06c21d4ccf38f9a6fac", "sha256_hash", "payload", "py.venus_stealer", "None", "Venus Stealer", "", "95", "False", "None", "None", "0", "Grim" "2026-09-23 15:02:28", "1929798", "c0448ee6790d9b3159b4f7557f351cca7c310144d187aef8ce8b2fea7deaca1b", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim" "2026-09-23 15:02:27", "1929795", "c4dc171f2513fcaf9d5ecc815a94aee4063b213ab380f80bd3ac422dee5205a7", "sha256_hash", "payload", "win.logedrut", "None", "Logedrut", "", "95", "False", "None", "None", "0", "Grim" "2026-09-23 15:02:25", "1929792", "f5f1f8c3e7b883793800ab6ccf21b3e60bd0730f300b4595fe74a33adc17a63c", "sha256_hash", "payload", "win.logedrut", "None", "Logedrut", "", "95", "False", "None", "None", "0", "Grim" "2026-09-23 15:02:24", "1929789", "eddbd0ecf7195d38fefae5b9d393abfa79e6f3f94bde19308ecef130a05a42e5", "sha256_hash", "payload", "win.logedrut", "None", "Logedrut", "", "95", "False", "None", "None", "0", "Grim" "2026-09-23 15:02:22", "1929786", "5191cf625dfc209a347f137b50aea199e82040fd5ee9086fb3e2de73c133f3cb", "sha256_hash", "payload", "win.logedrut", "None", "Logedrut", "", "95", "False", "None", "None", "0", "Grim" "2026-09-23 12:14:14", "1929618", "72c0e5dcac59407ffa0186988fba092a92e6e98ae57d1b606586ee1e1d200a31", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/72c0e5dcac59407ffa0186988fba092a92e6e98ae57d1b606586ee1e1d200a31", "AMOS,cc2,ClickFix,Foxveil,macOS", "0", "c4ffeine" "2026-09-23 09:27:26", "1929571", "835f2996734cfc372b8e99824ffb778753228733d23ae2e83608c8caad5ce9e6", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/835f2996734cfc372b8e99824ffb778753228733d23ae2e83608c8caad5ce9e6", "AMOS,cc2,ClickFix,Foxveil,macOS", "0", "c4ffeine" "2026-09-23 08:22:54", "1929481", "ac4d0608d32b97b8af1d9ab47dd5a88f3a0ca7406189e3e8edea5dec911d7c04", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/ac4d0608d32b97b8af1d9ab47dd5a88f3a0ca7406189e3e8edea5dec911d7c04", "AMOS,cc2,ClickFix,Foxveil,macOS", "0", "c4ffeine" "2026-09-23 07:44:26", "1928523", "a283e242a4b2e91131811128da4d04e823d2d1f52bcd25520db7d9fd0c2f54cc", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/a283e242a4b2e91131811128da4d04e823d2d1f52bcd25520db7d9fd0c2f54cc", "AMOS,cc2,ClickFix,Foxveil,macOS", "0", "c4ffeine" "2026-09-23 06:39:12", "1927776", "e7dd64dbda89025ae8f155705b437c6a41fcc7e8616b11f5ebc955bb48c2acaa", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:39:12", "1927777", "4974aae04758079e79c33715f6d12cfde035c6959cf22c87a43e16fb6326f7de", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:39:11", "1927778", "2e6b8b9d47d35eac4588740e9b07ab770318ef57d829cdff499280f936568a12", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:39:11", "1927779", "ff6956bbbaee8c070a95f15f6212df37f89e84b4b188edba86f1fa10960affa6", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:39:11", "1927780", "acda41b419e1644f00620033f14c61d568934b8af30d88013f558d037f513ec9", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:39:10", "1927781", "021e597cb405fb3c8f8d2eb7fcfdcd7defa48c30099ab21a4c5c390508d3ba92", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:39:10", "1927782", "ffab0457940304f6a089041b63a425dbf67d00f458477e8dcae5fe4129b49afc", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:39:10", "1927783", "c06555ff0ae9016a0c2cf6e300e4213a078e98fa4739c7244a6af26849cd7034", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:39:09", "1927784", "f47e314988c14a89a47032eb8ab5c0bdaad1fa81d331a785f15848c05eadd777", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:39:09", "1927785", "2e11b9370f7907dc46bd271335cef0796feba1d1be675515d4fb19bd40f2893d", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:39:08", "1927786", "200925c71852eec0b84be2a54f897952421b3e32ad7d291487d5b76c13bacf98", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:39:07", "1927787", "e955fe28d83b763dda8da871a44bac3ca7e9102e46f33a1923dec740c48f535f", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:39:06", "1927788", "14af37d9144376e64ca3e13da72a066c9490c299104bd418a4a40fd8f3fa6bfd", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "2026-09-22 18:49:14", "75", "False", "", "None", "0", "von" "2026-09-23 06:39:06", "1927789", "62b5398fe5aec960ad28de496159dc9a939551ac5008e6e3c76bbe51909490e8", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:39:05", "1927790", "7486fef819f0896ebfa563d95d1fc10158c1ef204f645101cc39b5b743dc8891", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:39:05", "1927792", "385b0e85bdb9dc598af3fecc36a83990c661e8210d2e4b5a461325aa04833644", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:39:04", "1927791", "0bdd6e94c14556ace9c10f239251ae409737783725fe0d1664235c3cdaf48b04", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:39:04", "1927793", "7405117e8903bea1f4a641f74e1b7b208ac70d74971cc668cec63bcd2f81d64a", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:39:03", "1927794", "224a541b2c20c94fd60113739a5a9730fbcc49fc635f61e3078fea2b87cd9022", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:39:03", "1927795", "9b874602ec4c1e77afb5d9f4cb890f0a0d4a5a000f5b05567d4b01606dd6647f", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:39:03", "1927796", "6196cb20d16b99920b874df4abd3e0a6b0becbd3355651fd2d38448933824267", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:39:02", "1927797", "cd8cc093d92926c4f512c7693dbaf3ebcc742b87f688dd02c6a34554ed5b0c96", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:39:02", "1927798", "71e95046d72811647a5be9ccf43db086b588bbc94a3ce920a6b271b01263ace2", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:39:02", "1927799", "b3ed3211a73bc80c547f9b689831ad53d6cf8c3ca80f1e9834b243d7575b5ec2", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:39:01", "1927800", "21cc237264256d2f140c10ea96a474750b6b0f33015f552343f677a04d7d721b", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:39:01", "1927801", "18110f785d235e450e06440028e4a31580af4ecceda0f5275630fd345e790abd", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:39:00", "1927802", "dc045b05c333a207dabe632efe6e6e80b77de8e393d8207659fcd3e8e5e5a493", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:38:59", "1927803", "3200d75f9b0b640085a4f5ba89ab5caf9753a0978efa7321a404dd43312ca8e8", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:38:59", "1927804", "1bb61516ab526b599de0916d5380ef34792f66fa40e10ab96119cd06bc2f17f6", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:38:59", "1927805", "fce1e311c3a1dce7fd3cf9a63c1002ae8bd38f112313722ce8cbe2bd5de770b2", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:38:58", "1927806", "3635c8827967fbc547a639fa881a5022069256dc3b49509fbe007014a967931e", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:38:58", "1927807", "45d6cbe1c9259d86d563c5e76d70383747ee8c613ef15af8d7ab27cc1ee28c3c", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:38:57", "1927808", "de630225d8d0503d258bd0344d385a0b6dddeef0e2c2fc8e3bef8c1b7e028750", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:38:57", "1927809", "0b4967488a634c33ff83e2099c2ea43fee7861e3878878be25df329e1670e902", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:38:57", "1927810", "635ff633c2f6ae307556570b304a7baa7699cbb66da490bb4fb4acb5942fa241", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:38:56", "1927811", "ebe7c281ed48e24067a1adcd86ea12ce512f1f713fbfe612f90459248c9568ba", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:38:56", "1927812", "26cfb954fc38e6a8a0f2a397e43ab618936efad35ab2bbed5ffaa05f2e6c3c23", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:38:56", "1927813", "3b1259cd8b3d7d6b4e023d10ff852ea65e30386294c5b8e2965872ab43e1db80", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:38:55", "1927814", "ba4dc6fea73d45733b0539211fcc5b8e00180912529e941e486d9c065a1999a4", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:38:55", "1927815", "d998b3b13371e30e65b63ac09eb5ac6528f2c7bc6ddeb713e4e4ede8eaaaa32a", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:38:55", "1927816", "656249987246add650ed6ad85990ba834c7b0e64c58541ec65623c603f8057a5", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:38:54", "1927817", "e2fc0ce48aa591c0481cbd9b0ecc90e25656d538de7afdadaf5032605327e2af", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:38:38", "1927818", "d13534468b681848241be3cb19985ba410760c2fba60cf44392d5381d2d0f5db", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:38:38", "1927819", "4df357063bd4098ff7cd610953ba11b6f5640da45b9f24a8562ce124c4faacab", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:38:37", "1927820", "0616b622463f1d9c733c28322a94490e598f34d746259c85e584728e77da05d0", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:38:36", "1927821", "be459810132371ba0def796b672629570863468ace13950a3a39615b841539bc", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:38:36", "1927822", "2ba4c56922dd038baa73309132404888cbb544d4ea03ffc197621cf86693eb15", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:38:35", "1927823", "aeaaa40323aeab65346865b8b6d21cd067b66f74c616041422266ada03d8bd98", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:38:35", "1927824", "b717c915ae684d9035f83d57d36d8d002cf3aa96951e429d210db6061dbc63ab", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:38:34", "1927825", "7a255cb756e9539d0c274c3a10ca0a9be13239cad1ad9ec50f5e00e6e2c8cec9", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "2026-09-22 18:49:17", "75", "False", "", "None", "0", "von" "2026-09-23 06:38:34", "1927826", "f547148f4a178466584dbf32ef69c406824d7ec594df2bc18dd2be05eba9a65e", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:38:34", "1927827", "98d8eadbfdf8c7ec994e08260599c9be991e7833c746f98692b18bdf71c9b9dc", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:38:33", "1927828", "ddef89011e7cf0634449d9e71162b15451b0e2593e88bbea48c363a1d1688af3", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:38:33", "1927829", "ae87446135743efe7823e312c833225d572c94010ba6523aa7ec0b582f6d966d", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:38:32", "1927830", "ba14e4d8601feb7aa9edbd40e5f263061f6ab16cd544b5db9cb7dd85fee50679", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:38:32", "1927831", "9e3a6111de0860fb76511e2fc0e77245ed1888825f0b2d7ec43f1541ab514768", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:38:31", "1927832", "8055feafc77ed8eddd81a448b91afcea48bfe23637cdf043385f6b58d1da436d", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:38:31", "1927833", "ee9ae5bd0a2c15a18d3d53ba490ae932070a8d93626d9c857d9c568852f58ffe", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:38:30", "1927834", "da299a4690e08a2955314dfd22b0eb2b41b7b8b1a3934aabf2d6400feba0d0d9", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:38:28", "1927835", "9696cbf7752fecb2fc6218c7f766b3ade7b1d12d36f9617cdbad5432a148b9a6", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:38:24", "1927836", "14093fc1457ca772d379ef8c1ea860ad74254cadeed23c5e90be99e8082f160c", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:38:24", "1927837", "7df9079d190838e1964ffcc86e6f0d6b95aee663b7aab236a4bd4f86795458cb", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:38:24", "1927838", "9e278d85301f14aa6adfb05fa73e675135a989bc0a2b4094d74e6e592b6b7f2a", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:38:23", "1927839", "9f24b1f7120b8de101a42efb12067ddff44081e208129fe489c1f11dca3b5e38", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:38:23", "1927840", "6737c225d71928aa6b9fae4332cb1f9879be34f65632eb2ce156ff59c0c89f22", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:38:22", "1927841", "acd33492caa5b601813eccad568b1a85e66f671e5255f64fc0338e3001c82a6c", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:38:22", "1927842", "1820b97c6476bbef6df984916e5c1aab915d31445643db3df97135755dfd7a71", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:38:21", "1927843", "e9cd9eb7d0fd4315abb83b9390aae751d3196969ba08a2edc85581e1458ecfc0", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:38:21", "1927844", "222c2a4493d0b37bc83beef4c4577e7a88f2ae6597cdf03ec960269b9c1b98a1", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:38:21", "1927845", "2ed611bcae6d8adf920120a579b2d3588674edad2604e76637eea805960d3630", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:38:20", "1927846", "baae7e5c21c6e783618233405ada6135ea8031db6954649fc30dbf47bbf5f26c", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:38:20", "1927847", "8c14621d2e79b38b2bef6f238c5124f7b7074d28f8f2f42fc5b0e873086e572a", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:38:19", "1927848", "eb3a4720b616a164a357d4525fc12d931297f5c8538c560997cc5c80bbcfc0b1", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:38:19", "1927849", "381a029abb74f23adc05d2f851b7b6ed366b1e5b6d2a4b5124301b347edeed7a", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:38:18", "1927850", "c3e3bdc3477e5cbda369bef24acf8d562f1a585cdc29346a624edc27f04f2a7b", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "75", "False", "", "None", "0", "von" "2026-09-23 06:38:18", "1928513", "43c50cfe74779f691edee95d91ae7850220339e1ffb8d3232796173d025d6c0e", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/43c50cfe74779f691edee95d91ae7850220339e1ffb8d3232796173d025d6c0e", "AMOS,cc2,ClickFix,Foxveil,macOS", "0", "c4ffeine" "2026-09-23 06:38:13", "1927701", "b9aba591f9ea7faccc80e23b5821e14a0fd208979737019c6d61c86e4bb813e9", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://bazaar.abuse.ch/sample/b9aba591f9ea7faccc80e23b5821e14a0fd208979737019c6d61c86e4bb813e9/", "AMOS,cc2,ClickFix,Foxveil,macOS", "0", "c4ffeine" "2026-09-23 06:38:13", "1927703", "6a73d4e992483ac5defd42418c6409b826e65fbe71c6d22a8d286704a1072c13", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/6a73d4e992483ac5defd42418c6409b826e65fbe71c6d22a8d286704a1072c13", "AMOS,cc2,ClickFix,Foxveil,macOS", "0", "c4ffeine" "2026-09-23 06:35:29", "1927882", "fe1d9d584b44e9be7088097658ce6ebf38e71b108342d2a9b7062ca6f5d8f393", "sha256_hash", "payload", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "100", "False", "", "Remcos", "0", "von" "2026-09-23 06:35:27", "1927967", "30de4fbfa5f12636a713cdd46cff465d3ca2f79f5d468c6dbcd5726016cb73c8", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/30de4fbfa5f12636a713cdd46cff465d3ca2f79f5d468c6dbcd5726016cb73c8", "AMOS,cc2,ClickFix,Foxveil,macOS", "0", "c4ffeine" "2026-09-23 06:35:25", "1928014", "08074ec033c1a5dcfb0125a352f7f499f29f61d8ed2ce2f693d48813074810d4", "sha256_hash", "payload", "unknown_rat", "None", "Unknown RAT", "", "100", "False", "https://www.virustotal.com/gui/file/08074ec033c1a5dcfb0125a352f7f499f29f61d8ed2ce2f693d48813074810d4", "ClickFix,Foxveil,macOS,module,RAT,websocket", "0", "c4ffeine" "2026-09-23 06:35:24", "1928015", "a7c0d024ed24dcbc1b17cbda430a39edb52325c30ad9b7207c0267e43fbec4b7", "sha256_hash", "payload", "unknown", "None", "Unknown malware", "", "100", "False", "https://www.virustotal.com/gui/file/a7c0d024ed24dcbc1b17cbda430a39edb52325c30ad9b7207c0267e43fbec4b7", "ClickFix,clipper,cryptocurrency,Foxveil,macOS,module", "0", "c4ffeine" "2026-09-23 06:35:24", "1928028", "86404edefda098891ad2422a49b524f3447eb5fabdc04c3c79845b4ff0361e2d", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/86404edefda098891ad2422a49b524f3447eb5fabdc04c3c79845b4ff0361e2d", "AMOS,cc2,ClickFix,Foxveil,macOS", "0", "c4ffeine" "2026-09-23 06:35:24", "1928046", "e8dc6ca549b0aed1513ba3a4285556bca1c237e9608f51623b56ec03813403df", "sha256_hash", "payload", "unknown", "None", "Unknown malware", "", "100", "False", "https://www.virustotal.com/gui/file/430956dbebb4bfde83d55ff57c6de288eccf557d36f552b1b2f7bbca94a87678", "backdoor,filemanager,php,webshell,wordpress", "0", "Efrain" "2026-09-23 06:35:21", "1928091", "40372ba52d15fe52679e3c67479b9967e1135a6dc960d390614e9b131c481e3e", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/40372ba52d15fe52679e3c67479b9967e1135a6dc960d390614e9b131c481e3e", "AMOS,cc2,ClickFix,Foxveil,macOS", "0", "c4ffeine" "2026-09-23 06:35:19", "1928125", "f5e8156d741ae4f7d5c5b1b0928cd96c7ec753975effa4ef6c9e6c47f6446297", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://bazaar.abuse.ch/sample/f5e8156d741ae4f7d5c5b1b0928cd96c7ec753975effa4ef6c9e6c47f6446297/", "AMOS,cc2,ClickFix,Foxveil,macOS", "0", "c4ffeine" "2026-09-23 06:35:15", "1928151", "eb8b9a20fc7dea1e0fb133053e6301153f4c0c99b87d56c0aefa9b63862668c0", "sha256_hash", "payload", "win.asyncrat", "None", "AsyncRAT", "", "95", "False", "None", "AsyncRAT,exe", "0", "whack_sh" "2026-09-23 06:35:15", "1928152", "8026d0802cf77574531070c123aabd3fb6c28f39b56efaed72f129e0a530007d", "sha256_hash", "payload", "unknown_loader", "None", "Unknown Loader", "", "95", "False", "None", "54e64e,dropped-by-Amadey,dropper,exe", "0", "whack_sh" "2026-09-23 06:35:15", "1928153", "21bfcedfb79ec8427ad3d766b66997983a2910d05164773159263b52a5cd6317", "sha256_hash", "payload", "unknown_loader", "None", "Unknown Loader", "", "95", "False", "None", "exe,loader", "0", "whack_sh" "2026-09-23 06:35:14", "1928154", "8fe5e64400bf61f51ae8174ed1494925593c51be91d3a50be7e0a53b50a1c1d9", "sha256_hash", "payload", "unknown_loader", "None", "Unknown Loader", "", "95", "False", "None", "9d2ca3,dropped-by-Amadey,exe,loader", "0", "whack_sh" "2026-09-23 06:35:14", "1928155", "8d312c308139b6957f7c188603ec0aae03647c89b444b863eec3aee589c6186f", "sha256_hash", "payload", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "100", "False", "None", "exe,RAT,Remcos,RemcosRAT", "0", "whack_sh" "2026-09-23 06:35:14", "1928156", "04bfc11db8257074ae1ec866d73e21a3131526385456a8e6adc30bc2d06ae580", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "95", "False", "None", "exe,VShell", "0", "whack_sh" "2026-09-23 06:35:05", "1928157", "87fd7403c047091ff5fce252c56150e1db4c4797a37855dc4dd30279ebd99e15", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "90", "False", "None", "exe,VShell", "0", "whack_sh" "2026-09-23 06:35:04", "1928158", "1e25bb36f94f904fd7c4a2d88752fa57c127a533276d0259b6f245386bbe3bd8", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "95", "False", "None", "exe,VShell", "0", "whack_sh" "2026-09-23 06:35:02", "1928159", "713cfb58fc152e5369f7e51d177223b69dfca974e0ee2064a9f8a794393d31ff", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-23 06:35:00", "1928160", "c9a3aec22b3c8448f043f5a4b1d81d1a6b2bc6ecff8941ac2c970af7e9321612", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-23 06:35:00", "1928161", "c426da4ab69f1b106b9bedbde91534d3e2e7213422126b838afac28d1a754243", "sha256_hash", "payload", "unknown_loader", "None", "Unknown Loader", "", "95", "False", "None", "dropper,elf", "0", "whack_sh" "2026-09-23 06:34:58", "1928162", "49ec1951b01bedae3a97bd3109656aab80b14a60544205cd4c9eb243a3635023", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-23 06:34:57", "1928163", "05c0b04b90d0f5aaafb14e46341f7821d9b0970541fec2fd701219dbfe94465a", "sha256_hash", "payload", "elf.bashlite", "gayfgt,Gafgyt,qbot,torlus,lizkebab", "Bashlite", "", "100", "False", "None", "Bashlite,elf,Gafgyt", "0", "whack_sh" "2026-09-23 06:34:57", "1928164", "3336124beee46cdc5beb66dc86ee7bb13a7442a1a9240e8ee2ea499533c83d18", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-23 06:34:56", "1928165", "979bd80a9ffde500946e02911d2824eab5fb25c265086b6569e6fff6977d21a6", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-23 06:34:52", "1928200", "ebc94e24e4df94f988dd0a2275e8a3f1957051814a3c39ec30bfaca2f5ca2607", "sha256_hash", "payload", "unknown_loader", "None", "Unknown Loader", "", "85", "False", "None", "elf,exe,loader", "0", "whack_sh" "2026-09-23 06:34:52", "1928201", "d36cff93b5c3936f33d95e76051dab320e8ee68e0a7f5e74e569ac1ee6278658", "sha256_hash", "payload", "elf.bashlite", "gayfgt,Gafgyt,qbot,torlus,lizkebab", "Bashlite", "", "100", "False", "None", "Bashlite,elf,Gafgyt", "0", "whack_sh" "2026-09-23 06:34:51", "1928202", "cb17af9bd8750abb7492620e48f44d45f89f0ca7e74556dcb3bf8cff2c4fd557", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-23 06:34:50", "1928203", "fd59794a4ac26aa4b1e26e6b1767e600d453425bf4edce1ad5353aa7af682960", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-23 06:34:50", "1928204", "74807d0932a9443559c12c035ebad996542d971d0b9f17a4b14bb955eed556ae", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-23 06:34:50", "1928205", "4134596a2392a5114a31817f47cee5e97e3a12877d6129f6011c169cbb6ee2ff", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-23 06:34:49", "1928206", "f9081df1dbc2fcf77f6daad99d3f19e0ede5e2053defdffa7f9fa97014e0dca1", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "95", "False", "None", "elf,exe,Mirai", "0", "whack_sh" "2026-09-23 06:34:48", "1928207", "e0bf0c2de41edbb4d3fe39cc5da2dbb6fb3737ae34e57ea1a3ed1667da33e34b", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-23 06:34:47", "1928208", "f270370cb4379196e3fca21476118932a4ef8fc8a46b987c8baddd6210f17eae", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-23 06:34:47", "1928209", "ae79cc20c0e9f55b3cb6993efc3fad68def359a303888c31c2f3625aa6449f29", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-23 06:34:46", "1928210", "f454fcc5810835d26f3ee7600fc6f23c9c236b5cdc90aa502b0078dcccd9b288", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-23 06:34:46", "1928211", "25f946d5bebb35015546c90f6256716e4283f8540aaf31773d06098fbf645801", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "95", "False", "None", "exe,VShell", "0", "whack_sh" "2026-09-23 06:34:46", "1928212", "f4eecad1c42f85b730e07959ade99e821d4b827cc77d0be9d76d0e34fd9fc7d8", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-23 06:34:45", "1928213", "9dd29d1e317598ff6114c98c01d30d355009ae334ae0c0f937e2954eb0f4b463", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai,upx", "0", "whack_sh" "2026-09-23 06:34:45", "1928214", "78fd3dae64a7a450838f0b3b7dc78fbd92362122d0b1722bc136f74ffd1545c2", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "95", "False", "None", "exe,VShell", "0", "whack_sh" "2026-09-23 06:34:42", "1928237", "2d02d5ca5d0510cbb68c7c4b05bc78a93760064ac6ea9bbc6c593ee8ae2d2def", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/2d02d5ca5d0510cbb68c7c4b05bc78a93760064ac6ea9bbc6c593ee8ae2d2def", "AMOS,cc2,ClickFix,Foxveil,macOS", "0", "c4ffeine" "2026-09-23 06:34:38", "1928265", "e103ac29edb9ccc98a0e98c70b7de87c88eae785ad02f6749eb8b56847bb138a", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-23 06:34:38", "1928266", "87a028420314fda20023059444fb52d2787fd1d3adedda908e70e1901443080d", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "2026-09-23 17:26:23", "100", "False", "None", "elf,Mirai,upx", "0", "whack_sh" "2026-09-23 06:34:38", "1928267", "f8519bddd26effa296e5f3fcd0372a00fdf17f0871ad445613dea0310cba1de7", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Gafgyt,Mirai", "0", "whack_sh" "2026-09-23 06:34:37", "1928268", "63e39179ccddbccd1efc432f0109fe90d37a02e4414cf5791353dcac74b58f5c", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-23 06:34:37", "1928269", "d5cba9661330ec7f84d45dc29ea80b46d172f39c043264f714ddc2c1b126a682", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-23 06:34:37", "1928270", "0cbf6f10c9a39d628bb5c0a3810f25d2f58b37a4351045ab200c62154d03734e", "sha256_hash", "payload", "elf.bashlite", "gayfgt,Gafgyt,qbot,torlus,lizkebab", "Bashlite", "", "100", "False", "None", "Bashlite,elf,Gafgyt,Mirai", "0", "whack_sh" "2026-09-23 06:34:36", "1928271", "abf50e95bd12dffe62df1ff147b5481accebd47fc29f640e4e5a9ecbcd914d9f", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai,upx", "0", "whack_sh" "2026-09-23 06:34:35", "1928272", "6955d78197fe503a53c57ffff66643de59c4bea21d79fbc95f2c24ec5ae89a82", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-23 06:34:35", "1928273", "97fa7b8b7ed62bd4ff35c44f846137a6cb1d71145dc4f9b2e71a1e3c4b9572f4", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-23 06:34:34", "1928274", "735380b6c067135575422956c45d65422e1286da78ad800b47e5ad4204512033", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-23 06:34:34", "1928275", "eef5d0dea6356bf0b05852eca3cefd3fdb87b06ebff7578496a2824f966ca4e8", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-23 06:34:33", "1928276", "aa13c3fd903c7026edc79e87c95873edeb9f789344d6ba7d780e891699115cc4", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-23 06:34:32", "1928277", "0e8bb85c6e8976111a9b33fd0f47b18d01d2755f3a34d365b991577e45b2f14a", "sha256_hash", "payload", "unknown_loader", "None", "Unknown Loader", "", "95", "False", "None", "elf,loader", "0", "whack_sh" "2026-09-23 06:34:31", "1928278", "302e1af8eb3930214b5bc1c15bb02d8ce360cc4ad49fc1615564c3288b3a6ccf", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-23 06:34:31", "1928279", "5196899532a56e73454398678e30c3f4d1091f084a861d36b6213b0a529e4c4f", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-23 06:34:30", "1928336", "04cf51edb8cfa50aafb64d94dfe132469d0c6b0810074ea121f759d65d97f982", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-23 06:34:29", "1928337", "14270dc1d285e7eaf8ccf3fee7f0e1bb9efe214c8db357ae5104809671793d90", "sha256_hash", "payload", "elf.bashlite", "gayfgt,Gafgyt,qbot,torlus,lizkebab", "Bashlite", "", "95", "False", "None", "Bashlite,elf,exe,Gafgyt", "0", "whack_sh" "2026-09-23 06:34:25", "1928338", "704dcac75a1ac1d08bc97d3c837a9cd4dc5f7b3ba84056b2557dcf4063638640", "sha256_hash", "payload", "unknown_loader", "None", "Unknown Loader", "", "95", "False", "None", "elf,loader", "0", "whack_sh" "2026-09-23 06:34:24", "1928339", "dcda5ec54ae2a736249894992a6cab2c5cfe65acd07c9e59c92d86fbd0564ce4", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-23 06:34:24", "1928342", "0e8d4bbbe9ded46090848a1a755e655f7c2771d48426b0bceecc9eb31d53ffa1", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-23 06:34:23", "1928340", "1b9afb8283c6396129ffd23aa89cc0321b7a12e995eaf0f98d4d478afb84e2ce", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-23 06:34:22", "1928341", "bb08fd9ce1f3508bc30a33646aeb66df3024e5c7da843cabd09ed19ae07bd8d1", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-23 06:34:22", "1928343", "504cb139bbc3d10dc2febee86d854db2b59c5aa55c6a5c49619dea4d37e1fc11", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-23 06:34:22", "1928344", "2f516e833a42b768ed8121ab74dd589f5513dd9531eaa8a5432ff49557bd4472", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-23 06:34:21", "1928345", "8c17745d754c000fc2bf4aed9ed42aa414cd11c473c2fc8d3c72c6593ea2f371", "sha256_hash", "payload", "elf.bashlite", "gayfgt,Gafgyt,qbot,torlus,lizkebab", "Bashlite", "", "100", "False", "None", "Bashlite,elf,Gafgyt,Mirai", "0", "whack_sh" "2026-09-23 06:34:16", "1928346", "b144e93c2a241f85346f7f2ed54c61d43d3d054e34383452bc94e4ae96dafccf", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-23 06:34:16", "1928347", "cb7e46569d44d677abacb2e7725f585a92d026b75136d3c912b6edeaf4a7bc42", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-23 06:34:15", "1928348", "9017f68b9ef0c1f5954e3b50c1984d88e1e49449f1b7afd220b6931fecfe0430", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-23 06:34:15", "1928349", "5e6582e44fa8f5f671f8ed5c83e9c20f91c8ef1a44cbaef06e9c1f65c890d6ff", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-23 06:34:15", "1928350", "fd66a2fe2fe980c283d6efe8209d075a4f0bc1e4c684757c58f12b1ad7189550", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-23 06:34:14", "1928390", "abdf65aa81dad1852db5d5d8c48d59c814b2b59667aa781fa106ba1333defc24", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/abdf65aa81dad1852db5d5d8c48d59c814b2b59667aa781fa106ba1333defc24", "AMOS,cc2,ClickFix,Foxveil,macOS", "0", "c4ffeine" "2026-09-23 06:34:12", "1928427", "6c8a2486bfec283efcb923f0979b6000bfc7e09ccfef8357c41316fc0d96fea7", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/6c8a2486bfec283efcb923f0979b6000bfc7e09ccfef8357c41316fc0d96fea7", "AMOS,cc2,ClickFix,Foxveil,macOS", "0", "c4ffeine" "2026-09-22 14:30:04", "1927397", "0e90d4f77f11fefd07b73406fe8770feacae370fec66c0631a1f20792be72d36", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://bazaar.abuse.ch/sample/0e90d4f77f11fefd07b73406fe8770feacae370fec66c0631a1f20792be72d36/", "AMOS,ClickFix,Foxveil,hiddenfix,macOS", "0", "c4ffeine" "2026-09-22 14:29:48", "1927461", "a90b6b91692ba6a20175f122bca4adb17492ce364ed976f3962814267387b493", "sha256_hash", "payload", "win.guidloader", "None", "GUIDLOADER", "2026-09-23 15:03:09", "95", "False", "None", "None", "0", "Grim" "2026-09-22 14:29:38", "1927458", "cd614205e7de293690475e9d3c275ef6ba19ecb4987125e71e22eb13f874bfe3", "sha256_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "2026-09-23 15:02:58", "95", "False", "None", "None", "0", "Grim" "2026-09-22 14:29:35", "1927455", "7ab6fdc92626e0f55f4496f1310b75908c2ac3b79db097b4802f514006bc72d2", "sha256_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "2026-09-23 15:02:57", "95", "False", "None", "None", "0", "Grim" "2026-09-22 14:29:34", "1927452", "beaa56e4a956e2d42d48ce0a156a6e17179b638c990eb577268b26f1e343143b", "sha256_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "2026-09-23 15:02:56", "95", "False", "None", "None", "0", "Grim" "2026-09-22 14:29:33", "1927449", "782b0015e50842e695bf8fd33038baf4d01e1a12d95b57555f4bd329349a4cfd", "sha256_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "2026-09-23 15:02:55", "95", "False", "None", "None", "0", "Grim" "2026-09-22 14:29:29", "1927446", "1bbc582eb7190bca4948c61eccfd7924e349fc41d1bf34fdfd81a4387cf384b2", "sha256_hash", "payload", "elf.leethozer", "None", "LeetHozer", "2026-09-23 15:02:51", "95", "False", "None", "None", "0", "Grim" "2026-09-22 14:29:28", "1927443", "25663736ac9bd769f0e1ab0f05c676409b76b5fe294ff18d97b0b7216596c838", "sha256_hash", "payload", "elf.leethozer", "None", "LeetHozer", "2026-09-23 15:02:51", "95", "False", "None", "None", "0", "Grim" "2026-09-22 14:29:27", "1927440", "d1a51a57b18261dc57cd47c17ab447930904981ed0ce918d4d0c5478707e5030", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "2026-09-23 15:02:49", "95", "False", "None", "None", "0", "Grim" "2026-09-22 14:29:26", "1927437", "7951d5418170b2789853edbc5d55b4658435097ae83bb10d4f9c0c6044a6cf21", "sha256_hash", "payload", "win.salatstealer", "None", "SalatStealer", "2026-09-23 15:02:49", "95", "False", "None", "None", "0", "Grim" "2026-09-22 14:29:22", "1927434", "7037a728d1eec6d7437349589ea39ab283d0b155cf3f26bb7a7d422ba3336b2e", "sha256_hash", "payload", "win.krakenkeylogger", "None", "KrakenKeylogger", "2026-09-23 15:02:45", "95", "False", "None", "None", "0", "Grim" "2026-09-22 14:29:20", "1927431", "2c530f2e10db77881730e7a9ec4e72244d59149fc8981a4f49c6e0fadc5fecee", "sha256_hash", "payload", "apk.wolf_rat", "None", "WolfRAT", "2026-09-23 15:02:44", "95", "False", "None", "None", "0", "Grim" "2026-09-22 14:29:19", "1927428", "4eb1b940a3fc720978fc4fa778e0739656a98109a096845fc898a4a6a16100c7", "sha256_hash", "payload", "win.zstealer", "Z*Stealer", "ZStealer", "2026-09-23 15:02:43", "95", "False", "None", "None", "0", "Grim" "2026-09-22 14:29:18", "1927425", "a88e1d7218e9d93e31690855e150fcd3173af55dde15f941a76660915ed6d4dd", "sha256_hash", "payload", "apk.coper", "ExobotCompact,Octo", "Coper", "2026-09-23 15:02:42", "95", "False", "None", "None", "0", "Grim" "2026-09-22 14:29:17", "1927422", "3ab441bc455c6259e23fad27e1bc5c311bb1daf8a5e6a394ae456e6a860da83c", "sha256_hash", "payload", "win.flesh_stealer", "None", "Flesh Stealer", "2026-09-23 15:02:41", "95", "False", "None", "None", "0", "Grim" "2026-09-22 14:29:16", "1927419", "0d066f4a16eb2463dc340e84c2cba87ea848ab3fdb40ef693e12aed87c75a9ba", "sha256_hash", "payload", "js.ghostblade", "None", "GHOSTBLADE", "2026-09-23 15:02:40", "95", "False", "None", "None", "0", "Grim" "2026-09-22 14:29:14", "1927416", "69ecbcac08744d10129b868c32ceaffff635c05b88ecb722ab1ab62601b92a1b", "sha256_hash", "payload", "py.venus_stealer", "None", "Venus Stealer", "2026-09-23 15:02:39", "95", "False", "None", "None", "0", "Grim" "2026-09-22 14:29:13", "1927413", "9886ead36fe363f34572173ab14b5833b75a4d4727ef41b02667cea04e7401a8", "sha256_hash", "payload", "apk.clipper", "None", "Clipper", "2026-09-23 15:02:38", "95", "False", "None", "None", "0", "Grim" "2026-09-22 14:29:12", "1927410", "273fe8743a0deb9e051e9a2aad3f919813767ce0fb4b58be72b1b22a1a4fead2", "sha256_hash", "payload", "py.stealler", "None", "stealler", "2026-09-23 15:02:37", "95", "False", "None", "None", "0", "Grim" "2026-09-22 14:29:11", "1927407", "d2ad1de448d843a7fa7a7d877b907440db0b5913e0d571b6ded64acf72ac56d0", "sha256_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "2026-09-23 15:02:36", "95", "False", "None", "None", "0", "Grim" "2026-09-22 14:29:10", "1927404", "d8f5c7466328944e9ef10d2b3ce7d08d11857ef24e0b5e1fb079de652f7506ac", "sha256_hash", "payload", "win.vshell", "None", "VShell", "2026-09-23 15:02:35", "95", "False", "None", "None", "0", "Grim" "2026-09-22 14:29:09", "1927401", "800e772f537565970a4d0873a91e631f0a74ebc354485df30e82865053ea2966", "sha256_hash", "payload", "win.defendnot", "None", "defendnot", "2026-09-23 15:02:34", "95", "False", "None", "None", "0", "Grim" "2026-09-22 14:29:08", "1927398", "993ab6888be9990b409d9ff41309719a6eff5a2f163c3dfb60cdc1070d013d2a", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "2026-09-23 15:02:32", "95", "False", "None", "None", "0", "Grim" "2026-09-22 13:15:19", "1927340", "fdb0a9a7f5d181c2ac16938a37d7faa375121a945d2e0e3e5c6f3340f8bdf6a4", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://bazaar.abuse.ch/sample/fdb0a9a7f5d181c2ac16938a37d7faa375121a945d2e0e3e5c6f3340f8bdf6a4/", "AMOS,cc2,ClickFix,Foxveil,macOS", "0", "c4ffeine" "2026-09-22 11:40:47", "1927326", "c59ad0ccb24fd26854831a949138182a707b7f61480b743e118508d4cd424a36", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://bazaar.abuse.ch/sample/c59ad0ccb24fd26854831a949138182a707b7f61480b743e118508d4cd424a36/", "AMOS,cc2,ClickFix,Foxveil,macOS", "0", "c4ffeine" "2026-09-22 11:00:30", "1927281", "9bda679c0a2996e9562e2e8477891771c61e872cd226d441d3b17e907c42a762", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://bazaar.abuse.ch/sample/9bda679c0a2996e9562e2e8477891771c61e872cd226d441d3b17e907c42a762/", "AMOS,cc2,ClickFix,Foxveil,macOS", "0", "c4ffeine" "2026-09-22 11:00:27", "1927315", "03745f11d65fcbea95ff01e32e31f0e0a687679deba39156be37ef977424d551", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://bazaar.abuse.ch/sample/03745f11d65fcbea95ff01e32e31f0e0a687679deba39156be37ef977424d551/", "AMOS,cc2,ClickFix,Foxveil,macOS", "0", "c4ffeine" "2026-09-22 08:30:54", "1927255", "f47ed4ce3fb2d369dc31737419e1546abb3be79052b910e52347c05500d908ab", "sha256_hash", "payload", "win.grandoreiro", "None", "Grandoreiro", "", "75", "False", "", "Banking Trojan,Grandoreiro", "0", "johnwick1" "2026-09-22 08:30:53", "1927257", "0588d510ec0457e8d52bf027abf5364e8af206005241e6eca0ec0b084a7528ae", "sha256_hash", "payload", "unknown", "None", "Unknown malware", "", "75", "False", "None", "cowrie,ssh-honeypot,unknown-binary", "0", "Portfwd" "2026-09-22 08:30:52", "1927258", "d729286210cc1566ea7eef55258bc20fe94e418cb478ac5544feb288e2fb803c", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://bazaar.abuse.ch/sample/d729286210cc1566ea7eef55258bc20fe94e418cb478ac5544feb288e2fb803c/", "AMOS,cc2,ClickFix,Foxveil,macOS", "0", "c4ffeine" "2026-09-22 05:00:46", "1926657", "4701f196c74af42b5ced01592bf4a74d54437b1c63b8aabfe1f92e9beabec769", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://bazaar.abuse.ch/sample/4701f196c74af42b5ced01592bf4a74d54437b1c63b8aabfe1f92e9beabec769/", "AMOS,cc2,ClickFix,Foxveil,macOS", "0", "c4ffeine" "2026-09-22 05:00:42", "1926675", "bb2d62df63ff1726eec5e17cc9e30850c39d0a15353aa267a916bcdb75d709c6", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://bazaar.abuse.ch/sample/bb2d62df63ff1726eec5e17cc9e30850c39d0a15353aa267a916bcdb75d709c6/", "AMOS,cc2,ClickFix,Foxveil,macOS", "0", "c4ffeine" "2026-09-22 05:00:36", "1926788", "8F096174B0DED0A598F634567C618E12808088848CD07EB99CA4AC57A744CDD9", "sha256_hash", "payload", "win.remoteadmin", "None", "RemoteAdmin", "", "100", "True", "", "None", "0", "greezy" "2026-09-22 05:00:35", "1926787", "D887F20EC383D7CE3A5727856BF7FA68CEB972108B6D0A5DD9924707E820DC24", "sha256_hash", "payload", "win.remoteadmin", "None", "RemoteAdmin", "", "100", "True", "", "None", "0", "greezy" "2026-09-22 05:00:32", "1926789", "87C640D3184C17D3B446A72D5F13D643A774B4ECC7AFBEDFD4E8DA7795EA8077", "sha256_hash", "payload", "win.remoteadmin", "None", "RemoteAdmin", "", "100", "True", "", "None", "0", "greezy" "2026-09-22 05:00:32", "1926790", "B7A495F517B9BF23F529552B145121F922AB4915E24B663AE68B3007DAEA3804", "sha256_hash", "payload", "win.remoteadmin", "None", "RemoteAdmin", "", "100", "True", "", "None", "0", "greezy" "2026-09-22 05:00:32", "1926810", "e34c9d3d3a50be99609cc843f91bbfcd0d79853b8c373c5146bcbf77643fb8c2", "sha256_hash", "payload", "win.remoteadmin", "None", "RemoteAdmin", "", "100", "False", "https://www.virustotal.com/gui/file/e34c9d3d3a50be99609cc843f91bbfcd0d79853b8c373c5146bcbf77643fb8c2/details", "None", "0", "greezy" "2026-09-22 05:00:25", "1926829", "a39eb6928c17a779f4030bf6ac0eeec41f828a64140f2a06cb63b8658e589267", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://bazaar.abuse.ch/sample/a39eb6928c17a779f4030bf6ac0eeec41f828a64140f2a06cb63b8658e589267/", "AMOS,cc2,ClickFix,Foxveil,macOS", "0", "c4ffeine" "2026-09-22 05:00:24", "1926851", "6fa9d4e59f3555278ff55dd617356a51ecb43239abafa333c8fa82da2a1c7088", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://bazaar.abuse.ch/sample/6fa9d4e59f3555278ff55dd617356a51ecb43239abafa333c8fa82da2a1c7088/", "AMOS,ClickFix,Foxveil,hiddenfix,macOS", "0", "c4ffeine" "2026-09-22 05:00:24", "1926852", "5cc27b17795bd0cb766249d43e4082c5b900ef9d1184877cfa9c048533c945e0", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://bazaar.abuse.ch/sample/6fa9d4e59f3555278ff55dd617356a51ecb43239abafa333c8fa82da2a1c7088/", "AMOS,ClickFix,Foxveil,hiddenfix,macOS", "0", "c4ffeine" "2026-09-22 05:00:16", "1926853", "a07994990f1976669d69febbe9603be9e10132fe9f6d6e8e4184fa91462cba72", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://bazaar.abuse.ch/sample/6fa9d4e59f3555278ff55dd617356a51ecb43239abafa333c8fa82da2a1c7088/", "AMOS,ClickFix,Foxveil,hiddenfix,macOS", "0", "c4ffeine" "2026-09-22 05:00:12", "1926922", "fbc460f7b29d7e709c28fc9368a592f3140fdb51fff5de54471450e250b6345a", "sha256_hash", "payload", "osx.macsync", "None", "MacSync", "", "100", "False", "https://www.virustotal.com/gui/file/fbc460f7b29d7e709c28fc9368a592f3140fdb51fff5de54471450e250b6345a", "ClickFix,macOS,MacSync,UnstoppableDomains", "0", "c4ffeine" "2026-09-22 05:00:08", "1926923", "25ce426b8b075dee1d250a417423b60d55c572a8b38641d919d87b83c4ea6edd", "sha256_hash", "payload", "osx.macsync", "None", "MacSync", "", "100", "False", "https://www.virustotal.com/gui/file/fbc460f7b29d7e709c28fc9368a592f3140fdb51fff5de54471450e250b6345a", "ClickFix,macOS,MacSync,UnstoppableDomains", "0", "c4ffeine" "2026-09-22 04:59:12", "1926998", "8098d0cf7a2460b14d7145b0c15a183c5fdbaa9e3932b1ee701aa4c2d59c0d9c", "sha256_hash", "payload", "win.stop", "KeyPass,Djvu", "STOP", "", "95", "False", "None", "exe,STOP", "0", "whack_sh" "2026-09-22 04:59:07", "1926999", "3f96a6e9f20241b149ebbc91f9e22f69722515e79bcbbc3c002fc2364f5e80b0", "sha256_hash", "payload", "unknown_loader", "None", "Unknown Loader", "", "95", "False", "None", "54e64e,dropped-by-Amadey,dropper,exe", "0", "whack_sh" "2026-09-22 04:59:07", "1927000", "0191133b622f9729ebd313976e44e311a9c17e5fd9f8600ba3c9dea0f649a809", "sha256_hash", "payload", "unknown_loader", "None", "Unknown Loader", "", "95", "False", "None", "54e64e,dropped-by-Amadey,dropper,exe", "0", "whack_sh" "2026-09-22 04:59:02", "1927001", "a183360883d6cb14e40bfc0761663f3d44e55fe4ef364d09917fa5f388401b1d", "sha256_hash", "payload", "unknown_loader", "None", "Unknown Loader", "", "95", "False", "None", "54e64e,dropped-by-Amadey,exe,loader", "0", "whack_sh" "2026-09-22 04:59:01", "1927002", "f813d309920d6109c1bfe88f1020d44814123e884a6a9fdb9bccb8a406c799cc", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "95", "False", "None", "exe,VShell", "0", "whack_sh" "2026-09-22 04:59:00", "1927003", "c062ac021106deaecc4902203a323946e4ffc38644ebe68c263931739cd42a1c", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "95", "False", "None", "exe,VShell", "0", "whack_sh" "2026-09-22 04:59:00", "1927004", "9727349443f01a5698c04810ff940ce90efa02421c375c6cff728fa4468a5214", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "95", "False", "None", "exe,VShell", "0", "whack_sh" "2026-09-22 04:58:59", "1927005", "ebfbdb9ee02f74d2734b3b3c57afeed7a02c8dd12d07b3a9ab14d3ce81511cc3", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "95", "False", "None", "exe,VShell", "0", "whack_sh" "2026-09-22 04:58:58", "1927006", "b63e4c97c1a2fe872f82f781dfa4179d200ff4e0ec6e650dc1e42134f38903b3", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "95", "False", "None", "exe,VShell", "0", "whack_sh" "2026-09-22 04:58:57", "1927007", "6eee92142627b47cadb3a4833b18fa1f850079a4e643db0ef2a462fb2cdbc6f6", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-22 04:58:56", "1927008", "18adfa234f839da6dfe8498c5ee850a5a2110c0c600746c96a0e152c81d0e19b", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-22 04:58:51", "1927009", "cb4f23546d6a357f4950b07c9783a26a43bb3b4bede2bdce635d59e7e34bac80", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-22 04:58:51", "1927010", "29eb6e30d78b3af2acefdf69632b5ce754e9cbab7c79873449f20c7945ad82a6", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-22 04:58:50", "1927011", "c7e7d77602c121ebe2785d8e4068b7d459abe975ad9e3e8471ba28e9783b8dca", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-22 04:58:49", "1927012", "45f31662334cc30b490ceb4abb90193980274a28204bcc862d1cdfe01326ba23", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-22 04:58:37", "1927039", "338b19ba5a4d15cca22d48c02c298064164d9db9654e7473880d12211f3cd185", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-22 04:58:36", "1927040", "6d5c8c504122fa391a42334e3361b721b5ed0750acba9635e1c7a04cfeb52d38", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-22 04:58:35", "1927041", "9e4413646e9515b8dd5edcb2f6d57d13a5e301f5635c762ba91b623bf0d439c8", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-22 04:58:32", "1927042", "a47c5e54519011fde2eec3241e0b00528896f74f620fe4d0c77e48754eda47ee", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-22 04:58:32", "1927043", "ead9fcd48103434fb918a59fb1635790e38cea0d7cf74ad7e5775759cf1ab43c", "sha256_hash", "payload", "unknown_loader", "None", "Unknown Loader", "", "85", "False", "None", "elf,exe,loader", "0", "whack_sh" "2026-09-22 04:58:31", "1927044", "c0a5374a425ee5030b2219520dfa3a3a51f27d3cc4404b016e695c4450fe3034", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "95", "False", "None", "elf,exe,Mirai", "0", "whack_sh" "2026-09-22 04:58:30", "1927045", "077702504d40c19f672550c9d303aa7eb5bf0c7d9e5ba24a92fa00654e46fea4", "sha256_hash", "payload", "unknown_loader", "None", "Unknown Loader", "", "85", "False", "None", "exe,loader", "0", "whack_sh" "2026-09-22 04:58:29", "1927046", "e1e7e2514db2bfe2b95687bde86209cc050eab2fb36e46ca7a2d36498bd812da", "sha256_hash", "payload", "unknown_loader", "None", "Unknown Loader", "", "85", "False", "None", "exe,loader", "0", "whack_sh" "2026-09-22 04:58:28", "1927047", "2d25f6667a62114c9baf23023b73ae11e82b970c092db36f8914cc3f0b26e835", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-22 04:58:28", "1927048", "0a3f82108ea0704c3cdf113434d5164eda5f4b59c1159cfe2625596b3d1995f7", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-22 04:58:27", "1927049", "aa52e1cbe3208208156ed785dfd651f758e4ef3fd58992144187500dd1159b2b", "sha256_hash", "payload", "elf.bashlite", "gayfgt,Gafgyt,qbot,torlus,lizkebab", "Bashlite", "", "100", "False", "None", "Bashlite,elf,Gafgyt", "0", "whack_sh" "2026-09-22 04:58:26", "1927050", "798a7016165a52c10f7b5f89fabbf6f5eaffc48d618b0b1986bacebcd4709975", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-22 04:58:26", "1927051", "8accb95e3c9bfe40e1f924c6a4e8bb52ad10323fc8c0c1677c69667bd7e41f71", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-22 04:58:25", "1927052", "b2fe5561a4cc833663c331ce638f6b827043b439e477d57037bdcc09d08e2ded", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-22 04:58:24", "1927053", "9f3849e652bb6daa6418275e733891fdc3c82cda04218d996cb183d4c4023e93", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-22 04:58:18", "1927067", "a5888f690801f422a9da5bfc2604c9a9205a12d10e33741e8a5eef997be52cb3", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "95", "False", "None", "exe,VShell", "0", "whack_sh" "2026-09-22 04:58:17", "1927068", "973f56952f4747ec92d1dc9fd3ee4b6b8b99d2c974a4ff3994ab7bd93dd41ac6", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "95", "False", "None", "exe,VShell", "0", "whack_sh" "2026-09-22 04:58:16", "1927069", "f88cc4a0a3f350fbde25428c268d0b625cec572f12b331e8f48eb365f7d04f92", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "95", "False", "None", "exe,VShell", "0", "whack_sh" "2026-09-22 04:58:16", "1927070", "c7a2de177666b20fb96bd52d930aad512daee6a45b4fcb933aa7ee9c0ad232f5", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-22 04:58:15", "1927071", "14af609b663f782b8a228bf86a6a06ac0fe3da4d07c8a75ec3844de85886652d", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-22 04:58:14", "1927072", "13f6c8dcecb6677e77680f2b75d82b17fcee135cc00b474bcff5d9c64a06e9bb", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-22 04:58:12", "1927073", "4f7c33e36a86daeecc7f465caae0492c7da4bf697eaf38e1bc11dc9c15cec142", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-22 04:58:11", "1927074", "ded67d13db4b33119436c67e94142e5e903ac5c7dbad6e98274914dc0f8d6182", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-22 04:58:10", "1927075", "7df437c77e314c8e5d2f9c0d3f686aeb656aaf877ac0d5f906e0e8d806bb2d09", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-22 04:58:09", "1927076", "5a3f01ea66a6b380b2b2a4e98c980db2e5400666ce69f3ce1de8e0d210318fb4", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-22 04:58:09", "1927077", "6d10bf73516f8aed08ffb44abd0391184763d9913405c90e004d92b9579f5933", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-22 04:58:08", "1927078", "a9fc9779102c5ff1f6e03bc8d1880bb52ac7c0dfe543eb93c07aa28766e8a876", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-22 04:58:06", "1927079", "fb1dc19c0ddc511361a6cca94dafd61d579d53a38ed3d3d8cefd25ffedc390b4", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-22 04:58:04", "1927080", "e7889354c0d2cce6cc0c6a34ec13afd79bf361388e76ed2b3b987e0613d9c6a6", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-22 04:58:04", "1927081", "5f85a860b374bb803aff4cc9e1d928b5ad3d678c0e252b45e7b88d3bed88b152", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-22 04:58:02", "1927082", "0356cc5dbb826085c0de5ca038d5888bf29cd4c80b26da987a2b9dc2eee727be", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://bazaar.abuse.ch/sample/0356cc5dbb826085c0de5ca038d5888bf29cd4c80b26da987a2b9dc2eee727be/", "AMOS,cc2,ClickFix,Foxveil,macOS", "0", "c4ffeine" "2026-09-22 04:58:02", "1927101", "4deefc89b2046999f1a6ea578950dab891579dfa5032b6d1d534f88aa000b7e5", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-22 04:58:01", "1927102", "526e532170acbc980bf41c48d1886b592a871c852d5ea86f98db4296bbbe85b6", "sha256_hash", "payload", "win.krbanker", "BlackMoon", "KrBanker", "", "90", "False", "None", "Blackmoon,dll,exe,KrBanker", "0", "whack_sh" "2026-09-22 04:58:00", "1927103", "b9533ce8e428f16f3d0e1946f19a6f756ff11a532d0b7e61ae402837f46c678e", "sha256_hash", "payload", "unknown_loader", "None", "Unknown Loader", "", "85", "False", "None", "elf,exe,loader", "0", "whack_sh" "2026-09-22 04:58:00", "1927104", "1c5da87ceeccbc89a8ef50adca486d59b99d42abc5dd6cb18212fc006a74837e", "sha256_hash", "payload", "unknown_loader", "None", "Unknown Loader", "", "85", "False", "None", "exe,loader", "0", "whack_sh" "2026-09-22 04:57:58", "1927105", "586960df8bf559ffbba600f11917a99baed4a875cb7faa5eabc060bcde67277b", "sha256_hash", "payload", "elf.bashlite", "gayfgt,Gafgyt,qbot,torlus,lizkebab", "Bashlite", "", "100", "False", "None", "Bashlite,Gafgyt,sh,wraith", "0", "whack_sh" "2026-09-22 04:57:58", "1927106", "bcfbd1d0c98844ddd4795a6df4e6431a494a0320c72413f188b50140cd30f506", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-22 04:57:57", "1927107", "97eaa49999cbcc866fc30ca2ba20f2a1d4e9b01d1c824d3924a185683d2b87c5", "sha256_hash", "payload", "elf.bashlite", "gayfgt,Gafgyt,qbot,torlus,lizkebab", "Bashlite", "", "100", "False", "None", "Bashlite,elf,Gafgyt", "0", "whack_sh" "2026-09-22 04:57:57", "1927108", "7aac36e30a811f7463cfb882ee6ff76834a60428c436b0b3fa15ff8f94b8db51", "sha256_hash", "payload", "elf.bashlite", "gayfgt,Gafgyt,qbot,torlus,lizkebab", "Bashlite", "", "100", "False", "None", "Bashlite,elf,Gafgyt", "0", "whack_sh" "2026-09-22 04:57:55", "1927109", "f407f10ce043dce0f4a8aeed21912f20f21f613ec0fe495394451097dc8ced0b", "sha256_hash", "payload", "elf.bashlite", "gayfgt,Gafgyt,qbot,torlus,lizkebab", "Bashlite", "", "100", "False", "None", "Bashlite,elf,Gafgyt,Mirai", "0", "whack_sh" "2026-09-22 04:57:54", "1927110", "3a37758233921a3022659d0e1dfc62d61c990cd8e787512939dad90bb443203b", "sha256_hash", "payload", "elf.bashlite", "gayfgt,Gafgyt,qbot,torlus,lizkebab", "Bashlite", "", "100", "False", "None", "Bashlite,elf,Gafgyt", "0", "whack_sh" "2026-09-22 04:57:53", "1927111", "32dcfd588d0602147330508b7f35e5f4424abf20a4459150c56a08e5ebb1693c", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-22 04:57:52", "1927112", "01c895e125b6c2214f509b0d0c94b81b29b34d3da3ec52d2014eeb4c19bd1086", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-22 04:57:52", "1927113", "6f518952f4f490993c223f25892dc70f35467c20aaffead61113de95161a78d4", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-22 04:57:51", "1927114", "a2a6d8a0b14a5c8108e8a0678ce60b43fff05f5d5ac8088482895746e645b18e", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-22 04:57:51", "1927115", "0f525163359e877881bd5a2ed6c231f829c2ff23d3c00f6105f9d860a6ed95cb", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "95", "False", "None", "elf,exe,Mirai", "0", "whack_sh" "2026-09-22 04:57:47", "1927126", "e8fdb578177f84033916427efad848f72d8fd43e1672744fc625b5165f2feca7", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://bazaar.abuse.ch/sample/e8fdb578177f84033916427efad848f72d8fd43e1672744fc625b5165f2feca7/", "AMOS,cc2,ClickFix,Foxveil,macOS", "0", "c4ffeine" "2026-09-21 18:27:01", "1926753", "7656ff1c8b9460450225453d8210d394579b0cd02bdad5f1e7be399cc6c06d34", "sha256_hash", "payload", "win.ghost_rat", "Farfli,Gh0st RAT,PCRat", "Ghost RAT", "2026-09-22 14:29:53", "95", "False", "None", "None", "0", "Grim" "2026-09-21 18:27:00", "1926750", "c16923aa6b647fe1b8e8b2879fc251e48d1f09b34351056d7afe83b18efcdbf6", "sha256_hash", "payload", "win.quasar_rat", "CinaRAT,QuasarRAT,Yggdrasil", "Quasar RAT", "2026-09-22 14:29:53", "95", "False", "None", "None", "0", "Grim" "2026-09-21 18:26:59", "1926747", "27831a5b95bbc1fab82732019109d94feefcb31fa4c4815eeb7500ba702c174d", "sha256_hash", "payload", "ps1.phonyc2", "None", "PhonyC2", "2026-09-22 14:29:52", "95", "False", "None", "None", "0", "Grim" "2026-09-21 18:26:58", "1926744", "89c1a2c27470e898513e95d6175c382cd5a33fd6a509cde700b213214ecf0b80", "sha256_hash", "payload", "win.agent_tesla", "AgenTesla,AgentTesla,Negasteal", "Agent Tesla", "2026-09-22 14:29:51", "95", "False", "None", "None", "0", "Grim" "2026-09-21 18:26:57", "1926741", "7618324f0ee19ea02ac6dd84246501c3de6a4e10d529c63a3a2ce224efd11f24", "sha256_hash", "payload", "win.coinminer", "None", "Coinminer", "2026-09-22 14:29:50", "95", "False", "None", "None", "0", "Grim" "2026-09-21 18:26:56", "1926738", "7cf2024df87ba1cb23e2db17b154ecd693318dd167a935467c86f57e57c88897", "sha256_hash", "payload", "win.coinminer", "None", "Coinminer", "2026-09-22 14:29:49", "95", "False", "None", "None", "0", "Grim" "2026-09-21 18:26:55", "1926735", "c4869285d769d9449bbaf0071878ac22491eefc59ee43269e50b26d2d3e22dcf", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "2026-09-23 15:03:08", "95", "False", "None", "None", "0", "Grim" "2026-09-21 18:26:54", "1926729", "eaad67ae6935cb76b29379c9e17b9d11994b4211dafefb6b55240e908ff4ba8e", "sha256_hash", "payload", "win.asyncrat", "None", "AsyncRAT", "2026-09-23 15:03:06", "95", "False", "None", "None", "0", "Grim" "2026-09-21 18:26:54", "1926732", "c65486c9a6e7ad11cf87ed332d09a70e613ec18805851609b6abde5b618a479c", "sha256_hash", "payload", "win.agent_tesla", "AgenTesla,AgentTesla,Negasteal", "Agent Tesla", "2026-09-23 15:03:07", "95", "False", "None", "None", "0", "Grim" "2026-09-21 18:26:53", "1926726", "9572479ba34ee697424f84bcf7ea4c5079750acc72a0ae53a6550eb73e386a1f", "sha256_hash", "payload", "win.formbook", "win.xloader", "Formbook", "2026-09-23 15:03:06", "95", "False", "None", "None", "0", "Grim" "2026-09-21 18:26:52", "1926723", "6e81b7f584f9bf03977a97fa1eed6deb1494f4a46a8ce65035a0e4a12e01172b", "sha256_hash", "payload", "win.masslogger", "None", "MASS Logger", "2026-09-23 15:03:05", "95", "False", "None", "None", "0", "Grim" "2026-09-21 18:26:51", "1926720", "acbee935f62700c1a758a166789368933edfd54b7e6a93a022143b59eb6ecf70", "sha256_hash", "payload", "win.formbook", "win.xloader", "Formbook", "2026-09-23 15:03:04", "95", "False", "None", "None", "0", "Grim" "2026-09-21 18:26:50", "1926717", "cd779076639126e20c3a7f2db656f376977953493fa33cc1ac232c4631f19810", "sha256_hash", "payload", "win.agent_tesla", "AgenTesla,AgentTesla,Negasteal", "Agent Tesla", "2026-09-23 15:03:03", "95", "False", "None", "None", "0", "Grim" "2026-09-21 18:26:49", "1926714", "b26c37434671d62ad1e1396db886d0419bf778d4ca5b3b54cf46319c40c277e0", "sha256_hash", "payload", "win.formbook", "win.xloader", "Formbook", "2026-09-23 15:03:01", "95", "False", "None", "None", "0", "Grim" "2026-09-21 18:26:48", "1926711", "2c7b182b19b4dd99edc3c7272abbdc0cf73df6ccdf5ca3d852d2fcf7cd8f2e05", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "2026-09-23 15:03:00", "95", "False", "None", "None", "0", "Grim" "2026-09-21 18:26:47", "1926708", "f0b0bac574efbd806924ffb0fc39901ac5ef4ef5bb280212e4c8da5f1d0e08a2", "sha256_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "2026-09-23 15:02:57", "95", "False", "None", "None", "0", "Grim" "2026-09-21 18:26:46", "1926702", "8f72fb281b388cbaa7ecdfaf6b16bf80247bf0e6a92daf5077ad7cd4f3aaeff2", "sha256_hash", "payload", "elf.leethozer", "None", "LeetHozer", "2026-09-23 15:02:53", "95", "False", "None", "None", "0", "Grim" "2026-09-21 18:26:46", "1926705", "bdeeb6376f243f3a0081013593fdff3c2db1b5c4b6885fd761bd3906c18673ba", "sha256_hash", "payload", "py.venus_stealer", "None", "Venus Stealer", "2026-09-23 15:02:54", "95", "False", "None", "None", "0", "Grim" "2026-09-21 18:26:45", "1926699", "b9fb7c4d7b12e27879677890d06c6fa3c3a406fe3b135636037682f92354b960", "sha256_hash", "payload", "win.coinminer", "None", "Coinminer", "2026-09-23 15:02:52", "95", "False", "None", "None", "0", "Grim" "2026-09-21 18:26:44", "1926696", "2b76adf160ac063a20642b37ac3331de49607c49649821c594bb9dfcd8b80c40", "sha256_hash", "payload", "win.asyncrat", "None", "AsyncRAT", "2026-09-23 15:02:48", "95", "False", "None", "None", "0", "Grim" "2026-09-21 18:26:43", "1926693", "f3181e1f809a1e05465dbfd372edfd18fa600db8ec1a5f0c0cb4fc4c8fb7ec4a", "sha256_hash", "payload", "win.vshell", "None", "VShell", "2026-09-23 15:02:47", "95", "False", "None", "None", "0", "Grim" "2026-09-21 18:26:42", "1926690", "19ff068a633d5bf3fd08f192014f55fdb4e18fc916c4d1246ee97d2f7a91be31", "sha256_hash", "payload", "win.vshell", "None", "VShell", "2026-09-23 15:02:46", "95", "False", "None", "None", "0", "Grim" "2026-09-21 00:40:20", "1926205", "9b8f75b3758536e5b79092411b979e5a9617e8f04f1c60f000cb99d603b46134", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "2026-09-22 18:49:13", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-21 00:40:19", "1926204", "13ef56abdc373ffa0761004b7c2d680f6d06b15d761642cc5538bafd8560d826", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "2026-09-22 18:49:13", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-14 06:00:05", "1917048", "6492bc2bfaa40a1a4c783fde77be26cd0381038f13deacce833ae84a6dbc5712", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "2026-09-22 18:49:13", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-14 05:59:54", "1917069", "1b647683b7fc5ee58b643bea788b28f03b236791e5737ab41896f6c15c32cc01", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "2026-09-22 18:49:13", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-12 07:29:15", "1913087", "880a9ea4c0bfcff656613559449a906f3da211c977fb8e29927b33322ccdd6dc", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "2026-09-23 17:26:24", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-12 07:29:12", "1915507", "9b717d713836c386fd57e786ff5ea94b51216d1f588452a1866d6f66f7e9ba01", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "2026-09-22 18:49:13", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-11 05:26:03", "1911828", "d3326ec9bb37c8bcb65ffcf639d51ffdc0628804eb974b86bc9f14c1dd2a2c4d", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "2026-09-22 18:49:13", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-11 05:26:00", "1911837", "0781d164ad718340e5a359c13527d75f55c8d01150f514cb0a7c05cff35f766a", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "2026-09-22 18:49:13", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2026-09-11 05:26:00", "1911839", "ba88bf0e1c20996bffe3d64f2c18c696a34c9d21f28dd0d8d99ce820ae3ef32a", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "2026-09-23 17:26:23", "100", "False", "None", "elf,Mirai", "0", "whack_sh" "2025-08-25 05:39:17", "1573704", "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "sha256_hash", "payload", "elf.mozi", "None", "Mozi", "2026-09-23 21:41:41", "100", "False", "", "None", "0", "hb_n4l" # Number of entries: 302