################################################################ # ThreatFox IOCs: recent SHA256 hashes - CSV format # # Last updated: 2026-08-02 15:20:43 UTC # # # # Terms Of Use: https://threatfox.abuse.ch/faq/#tos # # For questions please contact threatfox [at] abuse.ch # ################################################################ # # "first_seen_utc","ioc_id","ioc_value","ioc_type","threat_type","fk_malware","malware_alias","malware_printable","last_seen_utc","confidence_level","is_compromised","reference","tags","anonymous","reporter" "2026-08-02 15:20:43", "1867480", "042c76861bfba62c1e4946697a143a185488c0e15f41431c3cd5a51dc11e52a1", "sha256_hash", "payload", "win.salatstealer", "None", "SalatStealer", "", "95", "False", "None", "None", "0", "Grim" "2026-08-02 15:20:42", "1867477", "6167be94c33b2a86f9820cbc1b901700cf5d690193213cb14f44687dd4ed4e18", "sha256_hash", "payload", "py.stealler", "None", "stealler", "", "95", "False", "None", "None", "0", "Grim" "2026-08-02 15:20:38", "1867474", "c703f7c8a9719198f450e6e9f91df340f810a197ef44a24926212c18d70abc8a", "sha256_hash", "payload", "py.venus_stealer", "None", "Venus Stealer", "", "95", "False", "None", "None", "0", "Grim" "2026-08-02 15:20:36", "1867471", "40a1831b2c77c3026e01b6eb0e9846dd3c909ced0f55cb396165d23d9e5926c9", "sha256_hash", "payload", "win.phorpiex", "Tldr,Trik,TwizT,phorphiex", "Phorpiex", "", "95", "False", "None", "None", "0", "Grim" "2026-08-02 15:20:35", "1867468", "226d96500e4ca936191cbfa466e673130fcd0d9fa5c886067d837cb44856b560", "sha256_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "", "95", "False", "None", "None", "0", "Grim" "2026-08-02 15:20:33", "1867465", "5a49b31f84002a128f1cd0272619ae3aac4bc4b3065d567daee4300b6ac27a05", "sha256_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "", "95", "False", "None", "None", "0", "Grim" "2026-08-02 15:20:32", "1867462", "fcf3ceac44b1c95dcc7442ddac5b286f64954c00cc09a265eeedd4638dbfac2e", "sha256_hash", "payload", "win.phorpiex", "Tldr,Trik,TwizT,phorphiex", "Phorpiex", "", "95", "False", "None", "None", "0", "Grim" "2026-08-02 15:20:31", "1867459", "bc9eb5dab0d00a0de7c8df3b1d342b5ff435bc8a8cb40a04aaadb869755fe081", "sha256_hash", "payload", "py.stealler", "None", "stealler", "", "95", "False", "None", "None", "0", "Grim" "2026-08-02 15:20:30", "1867456", "7fb8b06a9ac3c0c6b475948d1b981586cea76a2fc53f57c54163352fd90f0c63", "sha256_hash", "payload", "win.wannacryptor", "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry", "WannaCryptor", "", "95", "False", "None", "None", "0", "Grim" "2026-08-02 15:20:28", "1867453", "8fe83c4ceebaf00bfa977ff415dc067c962f7159c75431a0849d4342e505573c", "sha256_hash", "payload", "py.venus_stealer", "None", "Venus Stealer", "", "95", "False", "None", "None", "0", "Grim" "2026-08-02 15:20:26", "1867450", "656a5cf0c4ea3a166c813b24dc4bce8403afb4305504805d654764712caf5a96", "sha256_hash", "payload", "win.wannacryptor", "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry", "WannaCryptor", "", "95", "False", "None", "None", "0", "Grim" "2026-08-02 15:20:25", "1867447", "0ce366b7463e6b3c9d389d1c799c9b64219e71112f13568e5e16efbfbebf9da9", "sha256_hash", "payload", "win.salatstealer", "None", "SalatStealer", "", "95", "False", "None", "None", "0", "Grim" "2026-08-02 15:20:24", "1867444", "bd283bdea40a7edcccaa1abc62a4b4c187cb5ff156e357bfcf9f7fd5f07462c4", "sha256_hash", "payload", "win.salatstealer", "None", "SalatStealer", "", "95", "False", "None", "None", "0", "Grim" "2026-08-02 15:20:23", "1867441", "93acec7eeff046efa957c819fed3c98eddcee365c276c62555a3f5ccb8a96a41", "sha256_hash", "payload", "win.salatstealer", "None", "SalatStealer", "", "95", "False", "None", "None", "0", "Grim" "2026-08-02 15:20:22", "1867438", "7458f3a8146a5f731699d68e1ac3d4f3d87525b020852b0bf8454fb44c1c77c6", "sha256_hash", "payload", "win.salatstealer", "None", "SalatStealer", "", "95", "False", "None", "None", "0", "Grim" "2026-08-02 15:20:21", "1867435", "ab79affe31326c3a59b74a3aa4863207251deb7279f02d6177cf3a84031b2162", "sha256_hash", "payload", "win.salatstealer", "None", "SalatStealer", "", "95", "False", "None", "None", "0", "Grim" "2026-08-02 15:20:20", "1867432", "9be73437f744884e7ee2af167deb9ffb93551419c2ad9b4f8852d3f7c5f3bb8b", "sha256_hash", "payload", "win.wannacryptor", "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry", "WannaCryptor", "", "95", "False", "None", "None", "0", "Grim" "2026-08-02 15:20:19", "1867429", "0628a7d09dd681ab6e1d0c904f8c7f2d3fb48183a4a57a7cfeaf4350b01406aa", "sha256_hash", "payload", "win.nanocore", "Nancrat,NanoCore", "Nanocore RAT", "", "95", "False", "None", "None", "0", "Grim" "2026-08-02 15:20:18", "1867426", "0f0fd4870160fab8ca35512ecef8425e8c0e733f7a771109598e8efa36fc42e3", "sha256_hash", "payload", "py.stealler", "None", "stealler", "", "95", "False", "None", "None", "0", "Grim" "2026-08-02 15:20:16", "1867423", "0ec1ed0daf72e7f3b2a9afb44d8e2de77b97b126788e54e0cb948cc176de91ba", "sha256_hash", "payload", "win.nanocore", "Nancrat,NanoCore", "Nanocore RAT", "", "95", "False", "None", "None", "0", "Grim" "2026-08-02 15:20:14", "1867420", "a94e9aca1aca0c7e006a0d8684c5423b1a3bd7e48734eee4f12f0caa3b5d901a", "sha256_hash", "payload", "win.coinminer", "None", "Coinminer", "", "95", "False", "None", "None", "0", "Grim" "2026-08-02 15:20:13", "1867417", "06185d74edbdc06f99095e96f74aa2e49a1cda2d02a294c11a9ac35a0231075e", "sha256_hash", "payload", "win.njrat", "Bladabindi,Lime-Worm", "NjRAT", "", "95", "False", "None", "None", "0", "Grim" "2026-08-02 15:20:11", "1867414", "068fa74e4843dd0a7fd1488f262281e9b6b0e19d67eb8d52b20d63fda158fd3e", "sha256_hash", "payload", "win.salatstealer", "None", "SalatStealer", "", "95", "False", "None", "None", "0", "Grim" "2026-08-02 15:20:10", "1867411", "dc87cc13bad5c4cc715ace4737ac6f303994a68ec8a772067da9765d642e1b28", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim" "2026-08-02 15:20:09", "1867408", "350e3bddcd39098123be338cfcd12ef78a0d6cfabc48a17c6dacf31397880b3c", "sha256_hash", "payload", "apk.clipper", "None", "Clipper", "", "95", "False", "None", "None", "0", "Grim" "2026-08-02 15:20:07", "1867405", "aef01ab9e284b663cdd5caf288eff4120406ae452f5fb73e4b135c542aa59919", "sha256_hash", "payload", "win.coinminer", "None", "Coinminer", "", "95", "False", "None", "None", "0", "Grim" "2026-08-02 15:20:06", "1867402", "0ffec6082c9540ac473d603f278168458f574ac9018ba5ed9b7b1e7ec1539133", "sha256_hash", "payload", "osx.electro_rat", "None", "ElectroRAT", "", "95", "False", "None", "None", "0", "Grim" "2026-08-02 15:20:02", "1867399", "ebe31ad40a9ce206268d9f355e42ca4979847bfd861b3d157c06ed1bd842219c", "sha256_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "", "95", "False", "None", "None", "0", "Grim" "2026-08-02 15:20:01", "1867396", "077480d961420c8b53b68059ce2493a1318756c7f9b93e2242020740f98afe20", "sha256_hash", "payload", "py.venus_stealer", "None", "Venus Stealer", "", "95", "False", "None", "None", "0", "Grim" "2026-08-02 15:19:59", "1867393", "74b3cf6d93a3afdd46589c02250d99d4165b5a025acd60b62e4bc3fc4970a2a1", "sha256_hash", "payload", "win.salatstealer", "None", "SalatStealer", "", "95", "False", "None", "None", "0", "Grim" "2026-08-02 15:19:58", "1867390", "7261c4276f44e0ac3b2ef43ba4de223ce1278db20286750608777f41df0d68fd", "sha256_hash", "payload", "win.salatstealer", "None", "SalatStealer", "", "95", "False", "None", "None", "0", "Grim" "2026-08-02 15:19:56", "1867387", "a11463bf176a39f72b5ab9c0e0401dbe0eb4be8d379b2d5fd5da21da0d2286e5", "sha256_hash", "payload", "win.salatstealer", "None", "SalatStealer", "", "95", "False", "None", "None", "0", "Grim" "2026-08-02 15:19:55", "1867384", "58786663acbf0f9d7572aa61bb95cac9ca918c7732e9833e4b384c9ddc30c986", "sha256_hash", "payload", "win.salatstealer", "None", "SalatStealer", "", "95", "False", "None", "None", "0", "Grim" "2026-08-02 15:19:54", "1867381", "46268916a2daa6d1af68366ec1baf9bb2514a4486395288c9118019f1f49fc32", "sha256_hash", "payload", "py.blankgrabber", "None", "BlankGrabber", "", "95", "False", "None", "None", "0", "Grim" "2026-08-02 15:19:53", "1867378", "b0171c900fcc422ebb4bae4807728717a9f7fd9dce2f6c3735a83196905a2105", "sha256_hash", "payload", "win.neshta", "None", "neshta", "", "95", "False", "None", "None", "0", "Grim" "2026-08-02 15:19:51", "1867375", "9d769ee6c8365659c7a703f221caab25f1a972bf1324dc3623d08e2eaa5b4856", "sha256_hash", "payload", "win.wannacryptor", "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry", "WannaCryptor", "", "95", "False", "None", "None", "0", "Grim" "2026-08-02 15:19:50", "1867372", "bc9165c426258d33799107d41a1e692504d7e69e02762475ab3b8cbcd19d5d40", "sha256_hash", "payload", "apk.clipper", "None", "Clipper", "", "95", "False", "None", "None", "0", "Grim" "2026-08-02 15:19:48", "1867369", "71f17c5e06548f128eb4f0cfafd247cc79894331f996c383fa5c2bcddfe9c5b8", "sha256_hash", "payload", "py.venus_stealer", "None", "Venus Stealer", "", "95", "False", "None", "None", "0", "Grim" "2026-08-02 15:19:47", "1867366", "4b67a337ba1a61a00d4145cad082fadc3a6daee3949f3dbe081680d3a6febe20", "sha256_hash", "payload", "win.coinminer", "None", "Coinminer", "", "95", "False", "None", "None", "0", "Grim" "2026-08-02 15:19:46", "1867363", "41dbfcca18129caecd4a958132d0346b6ca0c30bc8b06abf4e776bd2715e7244", "sha256_hash", "payload", "py.venus_stealer", "None", "Venus Stealer", "", "95", "False", "None", "None", "0", "Grim" "2026-08-02 15:19:45", "1867360", "40130f46a64522de4fd9a339f1b6b6656dce39b709a807cbeac4c9562ce3d9de", "sha256_hash", "payload", "win.zstealer", "Z*Stealer", "ZStealer", "", "95", "False", "None", "None", "0", "Grim" "2026-08-02 15:19:44", "1867357", "bb556307656b96aaaa46a3a52ec042b3f2d0711975fc808ec1b39309e87dd587", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim" "2026-08-02 15:19:43", "1867354", "c3bd9003c2a8b57c18442587a4d35f1bf0780b3d069bf5f7042e1351957403f5", "sha256_hash", "payload", "apk.facestealer", "None", "FaceStealer", "", "95", "False", "None", "None", "0", "Grim" "2026-08-02 15:19:42", "1867351", "4f3c97948a9cd189f0c75c7f604dbc675b3d59b1daf197424464a24c3b8e4617", "sha256_hash", "payload", "win.overlord", "None", "Overlord RAT", "", "95", "False", "None", "None", "0", "Grim" "2026-08-02 15:19:41", "1867348", "1d5d0dfa7d49213f59f48704305762a936492c57026336a0ff56eafdf5710a48", "sha256_hash", "payload", "win.yibackdoor", "None", "YiBackdoor", "", "95", "False", "None", "None", "0", "Grim" "2026-08-02 15:19:40", "1867345", "6569e21744a4f1d363c1a393ad75471072c8a17740b08c202b66af0a92cf961a", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim" "2026-08-02 15:19:39", "1867342", "47854afb3cfeb64a85dda148e00e5ca83168f431a28e5c5fb28733e37f484b13", "sha256_hash", "payload", "win.stealc", "None", "Stealc", "", "95", "False", "None", "None", "0", "Grim" "2026-08-02 15:19:37", "1867339", "4b7d75f5c35d8d326af5723fb77c44d769478c90ca2f88e2edfb3e08817fb29c", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "False", "None", "None", "0", "Grim" "2026-08-02 15:19:36", "1867336", "c75bee3494a32d7f23675c150f1c4365262cd5444967b92733bacaec7380bb88", "sha256_hash", "payload", "py.venus_stealer", "None", "Venus Stealer", "", "95", "False", "None", "None", "0", "Grim" "2026-08-02 15:19:35", "1867329", "a08521395145577e6227ece283b7fb0f0ee05c02ef587a7b4ea84284bc374722", "sha256_hash", "payload", "win.wannacryptor", "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry", "WannaCryptor", "", "95", "False", "None", "None", "0", "Grim" "2026-08-02 15:19:33", "1867325", "13f8cfe4648b807a0cbddd653c75254b60d1951e11e715f4e5a1a2c9ab29360b", "sha256_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "", "95", "False", "None", "None", "0", "Grim" "2026-08-02 15:19:32", "1867322", "b80d07610b81bddb3d7f30a207a2e134b559e06b8440598a926f3a9c1d439218", "sha256_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "", "95", "False", "None", "None", "0", "Grim" "2026-08-02 06:55:18", "1866906", "453e775ba32c43699a47bbfb2f0c9675f523d2a90c903a0e069086658d76485c", "sha256_hash", "payload", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "75", "False", "", "BlindEagle,HTMLSmuggling,RAT", "0", "operador614522" "2026-08-02 06:55:17", "1866907", "4be24ba6132ddc47ae55ee91183e7982394827b6d334e559fd24d5d056ae12a5", "sha256_hash", "payload", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-01 16:50:58", "75", "False", "", "BlindEagle,HTMLSmuggling,RAT", "0", "operador614522" "2026-08-02 06:55:17", "1866908", "c4fa2144908f8beb04d4c9c74070be2e08cdbdfcebcb368074fce577fe98a907", "sha256_hash", "payload", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-01 16:50:58", "75", "False", "", "BlindEagle,HTMLSmuggling,RAT", "0", "operador614522" "2026-08-02 06:55:17", "1866909", "256c87c965bc1ba9276df733da86a3a713d9f981eed04ffe15e160311bc070f9", "sha256_hash", "payload", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "75", "False", "", "BlindEagle,HTMLSmuggling,RAT", "0", "operador614522" "2026-08-02 06:55:16", "1866910", "903395145ce286d28296682ef245ac7d564db21d0757834961cdc903239d45e0", "sha256_hash", "payload", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "75", "False", "", "BlindEagle,HTMLSmuggling,RAT", "0", "operador614522" "2026-08-02 06:55:16", "1866911", "9f8e25e8b2b3fd1185e663d1060d0d43f620897f7ef5353738dec2078672171a", "sha256_hash", "payload", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "75", "False", "", "BlindEagle,HTMLSmuggling,RAT", "0", "operador614522" "2026-08-02 06:55:15", "1866912", "4f722dfacbe424bcde50dfc36e8629748f2721474c34978e28eb7c4e45ce4318", "sha256_hash", "payload", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "75", "False", "", "BlindEagle,HTMLSmuggling,RAT", "0", "operador614522" "2026-08-02 06:55:15", "1866913", "30528573c924a4b79d00403f9cd6fee37502e3c4434b1df16a302ff084192941", "sha256_hash", "payload", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "75", "False", "", "BlindEagle,HTMLSmuggling,RAT", "0", "operador614522" "2026-08-02 06:55:14", "1866914", "741cc13f514227ce73d22363e5488730dc56028cde4970a8eb734c447a46faab", "sha256_hash", "payload", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "75", "False", "", "BlindEagle,HTMLSmuggling,RAT", "0", "operador614522" "2026-08-02 06:55:14", "1866915", "9e44cbc8d47e63cb16abc6f1dfa678a1f1ec1197a2d0be161ab06cf02f638cae", "sha256_hash", "payload", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "75", "False", "", "BlindEagle,HTMLSmuggling,RAT", "0", "operador614522" "2026-08-02 06:55:13", "1866916", "b366c5797d0a60aaa4d40b121586ed881a7f92eb9050c88922fcae575c4c0ea8", "sha256_hash", "payload", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "75", "False", "", "BlindEagle,HTMLSmuggling,RAT", "0", "operador614522" "2026-08-02 06:55:12", "1866917", "d417e9dc79b008129b979c09cde0c9510f30f432361ab7fd66a133722e753e79", "sha256_hash", "payload", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "75", "False", "", "BlindEagle,HTMLSmuggling,RAT", "0", "operador614522" "2026-08-02 06:55:11", "1866918", "295614f9bf8a66878ed5429b3f2bb33981bae48c993964e79702a49d57e536d2", "sha256_hash", "payload", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "75", "False", "", "BlindEagle,HTMLSmuggling,RAT", "0", "operador614522" "2026-08-02 06:55:11", "1866919", "57ee67384c9545917776b27512c45cbdf8908a72e150489bfc3ffbf8c1309722", "sha256_hash", "payload", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "75", "False", "", "BlindEagle,HTMLSmuggling,RAT", "0", "operador614522" "2026-08-02 06:55:11", "1866920", "140eb57e93274c31571ed13bafc3d36267e970620d7b588b7735cec7b41cfbb9", "sha256_hash", "payload", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "75", "False", "", "BlindEagle,HTMLSmuggling,RAT", "0", "operador614522" "2026-08-02 06:55:10", "1866921", "d1d4d72e4759b1bb95cc16f8e2e3dbded8409f68bc0d761c51c27071778946be", "sha256_hash", "payload", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "75", "False", "", "BlindEagle,HTMLSmuggling,RAT", "0", "operador614522" "2026-08-02 06:55:10", "1866922", "f3a01fddd8e86301d795ebf2feb416049ce8bc237a97637c796f8ab84e3ab878", "sha256_hash", "payload", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "75", "False", "", "BlindEagle,HTMLSmuggling,RAT", "0", "operador614522" "2026-08-02 06:55:09", "1866923", "4f4dfad2cd9ff21d88353f568982655c240bee96a4034b05e6c1efacb515622e", "sha256_hash", "payload", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "75", "False", "", "BlindEagle,HTMLSmuggling,RAT", "0", "operador614522" "2026-08-02 06:55:09", "1866924", "54706d8d39e619a4e7e5a882d304dc34a86d9756da1f0be9df420ac60b8847ab", "sha256_hash", "payload", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "75", "False", "", "BlindEagle,HTMLSmuggling,RAT", "0", "operador614522" "2026-08-02 06:54:52", "1867142", "bd216916031c63a5f3174bc27d64babf31294363f1b8274e4ab7d8802c46d91c", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "80", "False", "https://honeylabs.net/lookup/95.155.151.113", "elf,iot", "0", "HoneyLabs" "2026-08-01 15:26:21", "1866891", "a337142611fcc576de5e9f66c3ea6c6560ad4546b65fc26128da391704cf398d", "sha256_hash", "payload", "win.darkmegi", "None", "DarkMegi", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:26:20", "1866888", "9af4be59ed11580fb6bd030154f3754bca7ed4cac423f2757d4bcbb00ac731ce", "sha256_hash", "payload", "win.darkmegi", "None", "DarkMegi", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:26:19", "1866885", "1385e8516443797d38586cb48d813895944a42fac9fd11354fc68d7704008823", "sha256_hash", "payload", "win.darkmegi", "None", "DarkMegi", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:26:18", "1866882", "4d812e300f9ce078bfc2a339214d924adb3b8cacb926df370bd3d4bfe758a16a", "sha256_hash", "payload", "win.darkmegi", "None", "DarkMegi", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:26:17", "1866879", "cb6e6f1ac01fea84d0eb0a3d62c25cab4f1ef74713a4960aaa7eef2d30c4d95b", "sha256_hash", "payload", "win.darkmegi", "None", "DarkMegi", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:26:16", "1866876", "f36ac03885daffa0f5a794f26d781d4538f1f7bfee4cc65c53b6f47717e1ec70", "sha256_hash", "payload", "win.darkmegi", "None", "DarkMegi", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:26:15", "1866873", "495609c54d92864f5acaacf9a7b3afb93651eda94011924124e3d9f5fee87f0e", "sha256_hash", "payload", "win.darkmegi", "None", "DarkMegi", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:26:14", "1866870", "34a1064b1713dde3b975e118f3504345fb427e69ebbd8687310535cc13238c18", "sha256_hash", "payload", "win.darkmegi", "None", "DarkMegi", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:26:13", "1866867", "1d5ae223f76a832f843906c0bb65f57912738f4bd3d75c4e7dc08780009928eb", "sha256_hash", "payload", "win.darkmegi", "None", "DarkMegi", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:26:11", "1866864", "78522cef155cb91d0d141e669e1d86496b2f99bd12ca1aa8cb5e71feb2f6a85e", "sha256_hash", "payload", "win.darkmegi", "None", "DarkMegi", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:26:10", "1866861", "499c922bab4e4a90f7aeea989003cacbfbf8e0a5adf3445fcd9218a233a28308", "sha256_hash", "payload", "win.darkmegi", "None", "DarkMegi", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:26:09", "1866858", "379fa7dc5e9d0c24ccc447b94e6411073a3b632167f2f829e11cd9de9be6143c", "sha256_hash", "payload", "win.darkmegi", "None", "DarkMegi", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:26:07", "1866855", "8671ab1812189739dcb89810b3c31485229490d7ee7da8a13947739f272d82b1", "sha256_hash", "payload", "win.darkmegi", "None", "DarkMegi", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:26:06", "1866852", "f4ee40d8468758eac0fabdafd5c26d2bdfb38fe13ea6d023a98cf74b1e8ff06d", "sha256_hash", "payload", "win.darkmegi", "None", "DarkMegi", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:26:05", "1866849", "7290ffa77eabbde606bfc3590af9f8dc78809ec19c9ea436304f3134b6e4fc4e", "sha256_hash", "payload", "win.darkmegi", "None", "DarkMegi", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:26:04", "1866846", "1ac0570ceb2f538a1f124e2d80b9bb279a13a71a134ff4759355762a4abe5e26", "sha256_hash", "payload", "win.darkmegi", "None", "DarkMegi", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:26:03", "1866843", "59761bd256f7f015ebb6563899da74a132ab7286a5b5e5a8f61cafcece9fab8c", "sha256_hash", "payload", "win.darkmegi", "None", "DarkMegi", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:26:01", "1866840", "9535448183b8e4345eaead5c94c4a2895f2e58c4bcc238842cb03434d48b2265", "sha256_hash", "payload", "win.darkmegi", "None", "DarkMegi", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:25:59", "1866837", "3036c7debc5134b4bae9040e25f9810505fbed3ae53417a84deba285218b8c2d", "sha256_hash", "payload", "win.darkmegi", "None", "DarkMegi", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:25:58", "1866834", "c4e44771666dab31641044c84271275c9e92ad2d1707b63898117b8f65317ead", "sha256_hash", "payload", "win.darkmegi", "None", "DarkMegi", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:25:57", "1866831", "f5f3e6fa3aa7bdb824ec544a89e03e048e7da160124d144f09f6b014a14b3336", "sha256_hash", "payload", "win.darkmegi", "None", "DarkMegi", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:25:56", "1866828", "34bae47de99294e4188c0f548effce53216c32f51ff76d28fd52292b70f4f28f", "sha256_hash", "payload", "win.darkmegi", "None", "DarkMegi", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:25:55", "1866825", "8292d674d39d6793dce024c90aec1b47ec65007c569501a652878687e682d032", "sha256_hash", "payload", "win.darkmegi", "None", "DarkMegi", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:25:53", "1866822", "ecc42df31157857f6bb17e6fd458b8bf10047a80edff10f76a3ad7126fdc6926", "sha256_hash", "payload", "win.darkmegi", "None", "DarkMegi", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:25:52", "1866819", "b72956e511dc7d916410a281111465d7d9a3220d89fe8611603e4e0004d9afb9", "sha256_hash", "payload", "win.darkmegi", "None", "DarkMegi", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:25:51", "1866816", "af816bd1922f161670d19a9d70271722383c817590dfe047bbedca288e451e81", "sha256_hash", "payload", "elf.kuiper", "None", "Kuiper", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:25:50", "1866813", "6a9ee6928a8e0fbd46bcd8fd9ad63e57eab47a53e36bbf6f29e24c842cd5b4a3", "sha256_hash", "payload", "elf.kuiper", "None", "Kuiper", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:25:49", "1866810", "f67a176503343855c88d9aac1217277ee4e2badc5e56fe403e56ca30e144b266", "sha256_hash", "payload", "py.venus_stealer", "None", "Venus Stealer", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:25:48", "1866807", "9f68c786b0d24c5dbc927ee347a3c6de9c4351a78de73f0c1128e8f7ee969431", "sha256_hash", "payload", "elf.kuiper", "None", "Kuiper", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:25:47", "1866804", "77d7a748ab647241403ab5741a7184501602877cc803ef33b6044feb5a708387", "sha256_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:25:46", "1866801", "fed541de0e768a6132da368ec8e0c66125ed7c144ca7d039bbcfe7b75192ecaa", "sha256_hash", "payload", "py.venus_stealer", "None", "Venus Stealer", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:25:45", "1866798", "7341fa7b28bdc411c4f73c171c036cf5cdd57b7fcd2b006231ac92c324a829fe", "sha256_hash", "payload", "elf.kuiper", "None", "Kuiper", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:25:44", "1866795", "44831dd69bd290d69459f93ac7b4378bd09ec9fb1ccac4e9f7d34dec7b068402", "sha256_hash", "payload", "elf.kuiper", "None", "Kuiper", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:25:43", "1866792", "7fd5f3ad0b3a152671dabe440ed5a5a05c640da4fe07a9caacb2f3a88d994596", "sha256_hash", "payload", "py.stealler", "None", "stealler", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:25:42", "1866789", "264a6ef8a8853d0e7dac18b0d4e043ab7579b4cc885093128012b34339cee194", "sha256_hash", "payload", "win.coinminer", "None", "Coinminer", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:25:41", "1866786", "e0e69bb3ffd353720874b03724fa6e8cf51021ba5ff2676582dbff4d44ee234e", "sha256_hash", "payload", "elf.kuiper", "None", "Kuiper", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:25:40", "1866783", "23a96937277baa16540097119666822d408d8c8afbe3480eefff3074a3ccedfd", "sha256_hash", "payload", "win.wannacryptor", "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry", "WannaCryptor", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:25:39", "1866780", "3b3c5e377794422830e760be0522cebb92c8272a491fb93aa74b3be21a48b6ff", "sha256_hash", "payload", "elf.kuiper", "None", "Kuiper", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:25:38", "1866777", "c28a7bf288adab51e1371dddf98d10cd81c6099cd346e6093f50b367c2cd0b46", "sha256_hash", "payload", "elf.kuiper", "None", "Kuiper", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:25:37", "1866774", "9250e9fd0d73df09d608a544d27f048089071562ceb40de3600e9b5d85fa5f50", "sha256_hash", "payload", "elf.kuiper", "None", "Kuiper", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:25:35", "1866771", "126d2fea7b1ea126a7dfa9d41a532a71ba1d41bb3473f5ba81694b2412059edc", "sha256_hash", "payload", "elf.kuiper", "None", "Kuiper", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:25:34", "1866768", "1ccfd6555390617b416bed0bd48ef3edba47bf042e102f504a2113bc356eeb0f", "sha256_hash", "payload", "win.phorpiex", "Tldr,Trik,TwizT,phorphiex", "Phorpiex", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:25:33", "1866765", "e8c96feda6791f0acdee4c084e0d438f7792a1d33aa31de036fdb6408ca7db97", "sha256_hash", "payload", "py.stealler", "None", "stealler", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:25:32", "1866762", "f07605b995cf701ea40c0d4a535c5c8cc256b004d67d80ee2876ebf0dc0eb680", "sha256_hash", "payload", "elf.kuiper", "None", "Kuiper", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:25:31", "1866759", "73cf812efdeafd903ef09c847457477950fa2b048c7b592e040c467a2082d091", "sha256_hash", "payload", "elf.kuiper", "None", "Kuiper", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:25:30", "1866756", "8d423e57b2cf148ce393b09c1c67540f591af26b242ec428b4b7986a17fadf30", "sha256_hash", "payload", "win.nanocore", "Nancrat,NanoCore", "Nanocore RAT", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:25:29", "1866753", "11621978916ef99d1c24cc4c7355d5a05d862dc9769b23f6685a21910d334726", "sha256_hash", "payload", "win.stealc", "None", "Stealc", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:25:28", "1866749", "08e678b14630558ba49781753227f1adc0534ea1d27ecf2b1c26a9eea89e23bb", "sha256_hash", "payload", "elf.kuiper", "None", "Kuiper", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:25:27", "1866746", "c23cb82c4e48e91f71b389cb16d419510a15bd1ebd9b3e53a7fd8f38960745a5", "sha256_hash", "payload", "win.coinminer", "None", "Coinminer", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:25:26", "1866743", "628e33326d90400f5921db3d3d07d0b10779961a5ca5660a5689e65c0c6ef6c3", "sha256_hash", "payload", "elf.kuiper", "None", "Kuiper", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:25:25", "1866740", "92b146eff8d54fff90445bd258e0e5a42f1277e213b9fa0137c7ab5074c01a46", "sha256_hash", "payload", "elf.kuiper", "None", "Kuiper", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:25:24", "1866737", "4c17b8c2d287de19641026b61af6567c2f08f65888fd7a620a919e83a2c08895", "sha256_hash", "payload", "win.coinminer", "None", "Coinminer", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:25:22", "1866731", "514b8816af6639c6185f03cb2969e7855f1883b6d8a651c7e218269435795b9a", "sha256_hash", "payload", "elf.kuiper", "None", "Kuiper", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:25:22", "1866734", "cafcc76c5d1e97e3b86529e6564f7d95ca189b70f2fa092dbd1f50a8d16d9c10", "sha256_hash", "payload", "win.salatstealer", "None", "SalatStealer", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:25:20", "1866728", "5f76fc369f3f759a64fe0770294a303c918c1dca5af021ba9ea0bbc7ab2559f6", "sha256_hash", "payload", "win.remotex", "None", "RemoteX", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:25:19", "1866725", "587fec092b6fb6fbbf3cead3a22061956d39ba949f65653f46ed60be8ffc704c", "sha256_hash", "payload", "elf.kuiper", "None", "Kuiper", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:25:18", "1866722", "f11bc43f99f2d7518365b726f3ce69ccff1d4e2ad6d2e7b3888c004efcacc80a", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:25:17", "1866719", "751bd836037a38f9edf5e4dc20174c2b53ec843082c732d63742287633b5c615", "sha256_hash", "payload", "win.coinminer", "None", "Coinminer", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:25:16", "1866716", "cad2fac072f40774247e90a9c3acc96fc85a57abf833e6d214975884060ff864", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:25:15", "1866713", "3fed685e1b41d37f28a2fbd69ee3755ab4797b5d9b60ca6d904b2c9529af12f8", "sha256_hash", "payload", "win.amadey", "None", "Amadey", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:25:14", "1866710", "aa3ec6bd662f64b5471ba79945d9e620adb66cae5e2887e44eea03d8abc99c73", "sha256_hash", "payload", "win.amadey", "None", "Amadey", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:25:13", "1866707", "e3620b7fe4c3cbdf89ac002190d6b04eaa810094fb657fd5351b0faeb1df7326", "sha256_hash", "payload", "elf.kuiper", "None", "Kuiper", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:25:12", "1866704", "266ee21a6c9f3408e472b4f146db4d1c6e5b0775bd04bae92862023d6c1e95f8", "sha256_hash", "payload", "elf.kuiper", "None", "Kuiper", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:25:10", "1866701", "d9438d408b84c4163116e57198768a83300895f442e0129e202cc2184b18cffb", "sha256_hash", "payload", "elf.kuiper", "None", "Kuiper", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:25:09", "1866695", "9a227c008092640c375b8eee5e43557f2cdb9dfe6a8cf55050cb3c4353df2e87", "sha256_hash", "payload", "py.venus_stealer", "None", "Venus Stealer", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:25:09", "1866698", "aaa5b19624b18bbe051b05d868b665b5e8988c338d079209cd84c2ebc31e16c2", "sha256_hash", "payload", "win.coinminer", "None", "Coinminer", "", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:25:08", "1866692", "e6d68f489e840cfd04b764b40adf3d41820d0c9d979d7af21edddc8295aaf1e2", "sha256_hash", "payload", "py.venus_stealer", "None", "Venus Stealer", "2026-08-02 15:20:45", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:25:07", "1866689", "a536b532e5ebaa0617688a42b5543b0a7144817e0dc12020826d74cc9b22c5a1", "sha256_hash", "payload", "win.salatstealer", "None", "SalatStealer", "2026-08-02 15:20:44", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:25:06", "1866686", "656a0518875d72b0cce6b288cb71d13cc0b6afc3e45cf9b578b9092a3f7da2bf", "sha256_hash", "payload", "win.nanocore", "Nancrat,NanoCore", "Nanocore RAT", "2026-08-02 15:20:41", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:25:05", "1866683", "c14164aa5550fec91514f073f35bbd23c28bc7eb740bc930c1e29daf9a9ed9ce", "sha256_hash", "payload", "win.nanocore", "Nancrat,NanoCore", "Nanocore RAT", "2026-08-02 15:20:40", "95", "False", "None", "None", "0", "Grim" "2026-08-01 15:25:03", "1866680", "eefacb5cf039f7512c110564a489c7464032eea8ddb1781d3cac69db2f106d0d", "sha256_hash", "payload", "vbs.lampion", "None", "lampion", "2026-08-02 15:20:37", "95", "False", "None", "None", "0", "Grim" # Number of entries: 143