################################################################
# ThreatFox IOCs: recent SHA256 hashes - CSV format            #
# Last updated: 2026-08-24 13:10:52 UTC                        #
#                                                              #
# Terms Of Use: https://threatfox.abuse.ch/faq/#tos            #
# For questions please contact threatfox [at] abuse.ch         #
################################################################
#
# "first_seen_utc","ioc_id","ioc_value","ioc_type","threat_type","fk_malware","malware_alias","malware_printable","last_seen_utc","confidence_level","is_compromised","reference","tags","anonymous","reporter"
"2026-08-24 13:10:52", "1886062", "f22a00d85ef32ea57af7e9a08f08dbc0c4b3a927e3d823945b619864c1b6e58c", "sha256_hash", "payload", "unknown", "None", "Unknown malware", "", "100", "False", "None", "botnet,panchan,ssh-worm", "0", "denis90711"
"2026-08-24 07:45:48", "1885915", "95871105a8ca339c39ede4b2da1e2d30989b5a91395b808ba81f3cf9f7ed0b14", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "80", "False", "https://honeylabs.net/lookup/150.241.65.250:889", "elf,iot", "0", "HoneyLabs"
"2026-08-24 04:56:47", "1885898", "af9aaa599b8082dbe04bf1784956e8775331097c5c5bae2f85ac163e08b0e187", "sha256_hash", "payload", "js.clearfake", "None", "ClearFake", "", "90", "False", "None", "ClearFake,ClickFix,EtherHiding", "1", "anonymous"
"2026-08-24 04:56:46", "1885897", "79b15f0d4987e0b3dbe23075487a0d984b2b857bf4c71ed1ca73bebd110c3801", "sha256_hash", "payload", "js.clearfake", "None", "ClearFake", "", "90", "False", "None", "ClearFake,ClickFix,EtherHiding", "1", "anonymous"
"2026-08-24 04:08:05", "1885889", "0e7d1a0e06c0110ad1c05be41894c4bcab4de73420dfb8fd9b9f0581975ef429", "sha256_hash", "payload", "js.clearfake", "None", "ClearFake", "", "90", "False", "None", "ClearFake,ClickFix,EtherHide,EtherHiding", "1", "anonymous"
"2026-08-24 04:08:05", "1885888", "41377be5f0885a5ed3a553ed97cd9f4762c70e99d688e011f8d7782bb7de3321", "sha256_hash", "payload", "js.clearfake", "None", "ClearFake", "", "90", "False", "None", "ClearFake,ClickFix,EtherHide,EtherHiding", "1", "anonymous"
"2026-08-23 16:11:22", "1884692", "75f29dca25c8bbc89db904b86f7e21e9bf588fc03a479cc15d0fb09eb05b47fe", "sha256_hash", "payload", "unknown", "None", "Unknown malware", "", "100", "False", "https://www.virustotal.com/gui/file/75f29dca25c8bbc89db904b86f7e21e9bf588fc03a479cc15d0fb09eb05b47fe", "blockchain-c2,ClickFix,deaddrop-resolver,lotl,nodejs,ton", "0", "Lenny3BO"
"2026-08-23 16:11:21", "1884693", "bd74366db38cbf1fe135934add5b1e92242916b888349fe4881f881781c91687", "sha256_hash", "payload", "unknown", "None", "Unknown malware", "", "100", "False", "https://www.virustotal.com/gui/file/75f29dca25c8bbc89db904b86f7e21e9bf588fc03a479cc15d0fb09eb05b47fe", "blockchain-c2,ClickFix,deaddrop-resolver,lotl,nodejs,ton", "0", "Lenny3BO"
"2026-08-23 16:11:16", "1884720", "66299f122474100fab00ce072a34d758fc7f11a04869f60f48cbac560bc8b403", "sha256_hash", "payload", "unknown", "None", "Unknown malware", "", "100", "True", "", "info-stealer", "0", "ReformedDoge"
"2026-08-23 16:11:16", "1884721", "879c25948bc991a1b4f01f215163d99d1faa78345f056f168f65eaeb4b9e9f6a", "sha256_hash", "payload", "unknown", "None", "Unknown malware", "", "100", "True", "", "info-stealer", "0", "ReformedDoge"
"2026-08-23 16:11:16", "1884719", "32f85cbf0fcd2acf319137a643e58416ccb609570dccb7676a03d614f451d4c2", "sha256_hash", "payload", "unknown", "None", "Unknown malware", "", "100", "True", "", "info-stealer", "0", "ReformedDoge"
"2026-08-23 11:19:30", "1885348", "cec1219e3640202c54a484ed3b88dd56fd26edfdb533c5eba8b2416e17ea6334", "sha256_hash", "payload", "win.crystal_ransom", "CrystalRansom", "Crystal Rans0m", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-23 11:19:25", "1885345", "496f3cba557efd0d708b008b906c45b985b996905b2f8eb922a23b892b57cfdf", "sha256_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-23 11:19:24", "1885342", "b3aa80f62cf946fa6d290d17d895c2885c8c628e698a786549a31f28bfd9aaa1", "sha256_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-23 11:19:23", "1885339", "44c79975608861ee3a4bc452a4d643316d1d09641d40d8c9a63ed7536f3821a7", "sha256_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-23 11:19:23", "1885336", "9d86ff6676fc5cb678c49c07ea88731b7016710b5a9666882042cbce1e3c51f2", "sha256_hash", "payload", "win.snappy_client", "SilabRAT", "SnappyClient", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-23 11:19:22", "1885333", "ffaf64672a89086ad11d0a290fa2468a2a16d7a0f54e57a1abf52b427f54ba0a", "sha256_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-23 11:19:21", "1885330", "cdcd5f2b289d8c9354c05b55e970218bceaf61d1decd05a628fc34799b7df0a1", "sha256_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-23 11:19:20", "1885327", "a4440955d55656174bdd1bb56840065f108b14d62951fc20e03192e3cc2e4c4e", "sha256_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-23 11:19:19", "1885324", "aa35ff5e481184ac1c98143e3b8eb22564f1ab521c9fa1350b8854e6cc4f1f90", "sha256_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-23 11:19:18", "1885321", "5b45ba17b839dc914d6c02e67cfd38a5600ae5550e63fd63f97052fbedaca544", "sha256_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-23 11:19:16", "1885318", "da8e26a61a3e854867aae352fe00da7df29ce57a7a3deca00691788b4bd1eaf1", "sha256_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-23 11:19:15", "1885315", "a99b053abcde0b4fc0421ce3dbf0ea59a21902f796824eb5df3ab2c35a5dac7f", "sha256_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-23 11:19:13", "1885312", "b10aa8116a3f9666386596e4a8ba7b9e4a58355b2ce232cd8ff5468d3328d0c0", "sha256_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-23 11:19:12", "1885309", "e2f09c867cb0194c3d7de3c01c9895a14c53d1dd7442a8965248b3ada1b7b945", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-23 11:19:11", "1885306", "660966e3a75d5243ba66ef04e8aea4d66bfb325a4f3959c6d15b476351ad8d41", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-23 11:19:10", "1885303", "b640207e137661b17a4b3c62c836e0d40c74df8ab42f637edf5ac3e238ad383f", "sha256_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-23 11:19:09", "1885300", "f07b7c03905657fe4ae3ebe52ffb81df7c04c520a1688bdaef2a2771240a086a", "sha256_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-23 11:19:08", "1885297", "48719c2330d78fbcec979eb173bf64fbb2b90e2efcc89f53635d3fca76d8a554", "sha256_hash", "payload", "win.nanocore", "Nancrat,NanoCore", "Nanocore RAT", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-23 11:19:07", "1885294", "f63453a6624e55650957b76802c76c24678821a145694e8dc86b61ab19681e0b", "sha256_hash", "payload", "py.akira_stealer", "None", "Akira Stealer", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-23 11:19:05", "1885291", "e173c3183c7624c28ca95956153be5206a560b07c2665507cb54a5e12efe6410", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-23 11:19:04", "1885288", "73de504b1d7c769d4d6bacd193b06f90aaf2fadb0fb7d2065eb02760d7074fde", "sha256_hash", "payload", "py.akira_stealer", "None", "Akira Stealer", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-23 11:19:01", "1885285", "796442361ec0029fc72ebf3fc4b67c69a4ed8214cce213602bff08e6bdfd3049", "sha256_hash", "payload", "win.salatstealer", "None", "SalatStealer", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-23 11:19:00", "1885282", "224863d550bc00850f8be7ea516d63d2004f167084dfc384cb0e1307159c082e", "sha256_hash", "payload", "py.stealler", "None", "stealler", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-23 11:18:59", "1885279", "3bd5d67962c2c260a0691c8b209a0d93ef40dddaee9cb048887b1070aa7a02ac", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-23 11:18:58", "1885276", "edfd37d6b17c72badfd6b1a42b9b2254ba799ae62274d1e944986a249e71a76d", "sha256_hash", "payload", "py.stealler", "None", "stealler", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-23 11:18:57", "1885273", "7dc2493b4e8680833bda7f854a2caf64743b8cf975fbd55b393636eef1867f08", "sha256_hash", "payload", "win.coinminer", "None", "Coinminer", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-23 11:18:56", "1885270", "db576e0cfabd6fadfff0534e764a29d73e288939baad993cc07cc7a9cc67a633", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-23 11:18:55", "1885267", "d8a25c8e3928fe213f3d40f80f6bb75c3dc17da4d50655fd15bb1160c3f7e687", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-23 11:18:53", "1885264", "9cfd1645a9ce589649c7821e75f72723a5e13d6dd3aab8a6bada7aa8d8651233", "sha256_hash", "payload", "win.asyncrat", "None", "AsyncRAT", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-23 11:18:51", "1885261", "20082d2052d2d406bb4193990d933dc9b78bf2ccc3f2618144ada1fb7e0a995e", "sha256_hash", "payload", "py.venus_stealer", "None", "Venus Stealer", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-23 11:18:49", "1885258", "f48debf0e99b16130594458c82205af33785a97f7d3df4cfed7cd30acd266b2d", "sha256_hash", "payload", "py.venus_stealer", "None", "Venus Stealer", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-23 11:18:48", "1885255", "1d7c06f35efeffe0a9e614e88a0a718c82f64cdfb65f7598104cec612ce24a45", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-23 11:18:47", "1885252", "11f3beea1d73e12968f999281374286c16fa7649407ed5cbc068195142a631f4", "sha256_hash", "payload", "win.snappy_client", "SilabRAT", "SnappyClient", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-23 11:18:46", "1885249", "6ded9017cd432164a43b918aad495ca55bba80a5c0785db7f416276fbf85a135", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-23 11:18:45", "1885246", "4772fcead4cf5168b4e26bebfc94df0f0bef08ba80871c13f23dc30ba788fa58", "sha256_hash", "payload", "win.wannacryptor", "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry", "WannaCryptor", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-23 11:18:43", "1885243", "803af293617ebe93de009614e1b029fa7bd07616e9c1dda0019fd6c69fe409e6", "sha256_hash", "payload", "py.venus_stealer", "None", "Venus Stealer", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-23 11:18:42", "1885240", "0325bda37ee3ae51de29b706986ee9345d9e110b14cdcbde615dd11f959c085a", "sha256_hash", "payload", "py.venus_stealer", "None", "Venus Stealer", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-23 11:18:42", "1885237", "fc0553851d495ff5b6aba8c8d472f210f5c5d7ac05dcb56c27c61941eaa3b7ea", "sha256_hash", "payload", "py.venus_stealer", "None", "Venus Stealer", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-23 11:18:41", "1885234", "0bb70961853f4ce36650d296b7e945e0dda5a9ac2964e7a217cc35bbfbb1f253", "sha256_hash", "payload", "py.venus_stealer", "None", "Venus Stealer", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-23 11:18:40", "1885231", "d63e71109ca0a304312ddc21def555dc9f73c71ddae8d7bcd6f94a189a2d8f0b", "sha256_hash", "payload", "py.venus_stealer", "None", "Venus Stealer", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-23 11:18:39", "1885228", "da48892335940717dbde6b5134723ba6915ba8cfc8439f79cba8c06fe648ca3e", "sha256_hash", "payload", "win.arkei_stealer", "ArkeiStealer", "Arkei Stealer", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-23 11:18:37", "1885225", "5aec6747c739a60918b2a427cfc5b2dee95159851a5fbf7faa8656fbc2279c25", "sha256_hash", "payload", "win.coinminer", "None", "Coinminer", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-23 11:18:36", "1885222", "10de7dbb4b67064d3dde4e2290916ae4cd7bdddb4b32f264921482616e273f0f", "sha256_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-23 11:18:35", "1885219", "900c6d0225ff5738b4d0893199fb53991886ed2a1158e5fb9997fd78a0b189ed", "sha256_hash", "payload", "win.coinminer", "None", "Coinminer", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-23 11:18:34", "1885216", "0329b1f7f7d4c751749a2ecd742d2aff51a45ce17d379fc65551952e29fd309e", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-23 11:18:33", "1885213", "90af1515c34b6d16b4f41f70120e73ebfc034c1756bce8b570b17eb4cfb2f873", "sha256_hash", "payload", "win.coinminer", "None", "Coinminer", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-22 11:17:40", "1884354", "0638be794bcc72c65d713483753dfd9b67a0af6095c90e0437c4e164a0eb0ec9", "sha256_hash", "payload", "win.stealc", "None", "Stealc", "2026-08-23 11:19:32", "95", "False", "None", "None", "0", "Grim"
"2026-08-22 11:17:39", "1884351", "e82ef52eacd50556a70b92faa957b021377506bc54d78bd4b8c7f9967fb747b9", "sha256_hash", "payload", "win.socks5_systemz", "ProxyBox", "Socks5Systemz", "2026-08-23 11:19:31", "95", "False", "None", "None", "0", "Grim"
"2026-08-22 11:17:38", "1884348", "fc9d4239c1570e3629d2ce849fb68d854b6021e1808e49816df9d797dc5090c3", "sha256_hash", "payload", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-23 11:19:29", "95", "False", "None", "None", "0", "Grim"
"2026-08-22 11:17:35", "1884345", "94bff010123a54c1435a63862e802c6a59d821be7d5ee0898f30b7dd83cef5b8", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "2026-08-23 11:19:27", "95", "False", "None", "None", "0", "Grim"
"2026-08-22 11:17:33", "1884342", "692dcba99a344de1a72c4f9241bd26197c1cf1b6bcd97fbcfea26785dd13edb6", "sha256_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "2026-08-23 11:19:26", "95", "False", "None", "None", "0", "Grim"
"2026-08-12 12:00:05", "1872757", "ed44c0375058d416da981d3cb3cf9ca4fb5e506c36a2082a0b20ade834e1cbc1", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "2026-08-24 04:18:06", "95", "False", "None", "None", "0", "Grim"
# Number of entries: 63