################################################################
# ThreatFox IOCs: recent SHA256 hashes - CSV format            #
# Last updated: 2026-10-16 08:48:39 UTC                        #
#                                                              #
# Terms Of Use: https://threatfox.abuse.ch/faq/#tos            #
# For questions please contact threatfox [at] abuse.ch         #
################################################################
#
# "first_seen_utc","ioc_id","ioc_value","ioc_type","threat_type","fk_malware","malware_alias","malware_printable","last_seen_utc","confidence_level","is_compromised","reference","tags","anonymous","reporter"
"2026-10-16 08:48:39", "1969232", "d9e3ff787455c70efc46e53f1ca51614ebb7c69fe66a314e41dca9c256c96794", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/c3b8375f092798ac851bfacdb94310ccabfebcbe106f6e7324764a0e4fd4ea57", "AMOS,ClickFix,Foxveil,macOS", "0", "c4ffeine"
"2026-10-16 08:48:38", "1969211", "7bcc530e31cc46fb9fc0acabd938d2c848c8de69c0e37d6b7d9263cfd4a18977", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/7bcc530e31cc46fb9fc0acabd938d2c848c8de69c0e37d6b7d9263cfd4a18977", "AMOS,chant,ClickFix,Foxveil,macOS", "0", "c4ffeine"
"2026-10-16 08:48:38", "1969233", "c3b8375f092798ac851bfacdb94310ccabfebcbe106f6e7324764a0e4fd4ea57", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/c3b8375f092798ac851bfacdb94310ccabfebcbe106f6e7324764a0e4fd4ea57", "AMOS,ClickFix,Foxveil,macOS", "0", "c4ffeine"
"2026-10-16 07:45:42", "1969171", "3f8f34747f212b978db927ca45365ab2a416b8149ff93ba625436ece55f92ac2", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/3f8f34747f212b978db927ca45365ab2a416b8149ff93ba625436ece55f92ac2", "AMOS,ClickFix,Foxveil,macOS,quill", "0", "c4ffeine"
"2026-10-16 07:45:42", "1969173", "a3358d45d9b172ccb27fd5b1ec076347e3226025e20ded26c319c5804171be51", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/a3358d45d9b172ccb27fd5b1ec076347e3226025e20ded26c319c5804171be51", "AMOS,ClickFix,Foxveil,macOS,willow", "0", "c4ffeine"
"2026-10-16 07:45:41", "1969178", "a208b24088153fa3ae18314706dabcf2a87bf9fc3beb1f365e1e12e4e456cfdf", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/a208b24088153fa3ae18314706dabcf2a87bf9fc3beb1f365e1e12e4e456cfdf", "AMOS,chant,ClickFix,Foxveil,macOS", "0", "c4ffeine"
"2026-10-16 07:45:41", "1969183", "faf572c1c989ca17101d5003bceb8b4796e709b93bf014f642b2a2c4b7b77fb4", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/faf572c1c989ca17101d5003bceb8b4796e709b93bf014f642b2a2c4b7b77fb4", "AMOS,ClickFix,Foxveil,macOS,quill", "0", "c4ffeine"
"2026-10-16 06:36:36", "1969102", "d75ef1c616343bfd99cd2b6597b2102d96797117e40ed8c57b23f52a3ab4dd7e", "sha256_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-16 06:36:35", "1969099", "e71149d889cc558e6328ea7ce3498cd858c26ab282cda9410ccc51f6275f7da6", "sha256_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-16 06:36:34", "1969096", "b64faf0279a3c87f77b8b0803476f74a34c48905d3e897edf7388307667077fc", "sha256_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-16 06:36:32", "1969093", "83d2faf575026b3f75446a6337f004f5d81e66d5e2bfa19c44c6ef369fd1ec1a", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-16 06:36:31", "1969087", "cb1ae1ed0a7b6fd0ed47301c1738bd7233b7142c88e632ec64f0fa92f376b4f5", "sha256_hash", "payload", "py.rn_stealer", "None", "RN Stealer", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-16 06:36:31", "1969090", "e00652b7a92e890c16261c1485e6f6d348d348be1dffb0484cd7c589f5248343", "sha256_hash", "payload", "py.venus_stealer", "None", "Venus Stealer", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-16 06:36:30", "1969084", "c25ead077458ff215c8ef109b2c86e9b8a3c2a63f6d229b721382b035816633e", "sha256_hash", "payload", "win.asyncrat", "None", "AsyncRAT", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-16 06:36:29", "1969081", "27637ce02ac144ce1e7d29919f722f85cb53ad89a8bf1f634ab7d73cac83a0f7", "sha256_hash", "payload", "py.venus_stealer", "None", "Venus Stealer", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-16 06:36:28", "1969078", "e27d133c3b29c1a0c0eca19b56dbb1db2f731db5c7b6dd3e7acacfdf49615cd3", "sha256_hash", "payload", "win.sigloader", "None", "SigLoader", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-16 06:36:27", "1969075", "f25ba62c66bee6e6bb582064ffd048043015f3718a59fa8c56546d7998c420c0", "sha256_hash", "payload", "js.node_rat", "None", "NodeRAT", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-16 06:36:26", "1969072", "8acc511937f2b5585d58d96bcc7eec719430bcee7c5b088499c81e0b75c040a4", "sha256_hash", "payload", "elf.leethozer", "None", "LeetHozer", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-16 06:36:25", "1969069", "cd0db04913047500d062f676d4099aced7ef039c7e12cebaddff6aac41def3ea", "sha256_hash", "payload", "win.ravenstealer", "None", "Raven Stealer", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-16 06:36:24", "1969066", "fb799fbe2729fa88358d32375c15aa41b2de62e981655e60d4f53efb4e4fee73", "sha256_hash", "payload", "win.ravenstealer", "None", "Raven Stealer", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-16 06:36:23", "1969063", "404e448f179f662439bd08b2abbcddcaaf0034d11d786cc878cce6f9ef57b570", "sha256_hash", "payload", "win.ravenstealer", "None", "Raven Stealer", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-16 06:36:22", "1969060", "e5b790c3a237edc2c55f01a7c648d0eaf8e969a1a9223aff605a90a1d42900b7", "sha256_hash", "payload", "win.ravenstealer", "None", "Raven Stealer", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-16 06:36:21", "1969056", "ff681630d707f5903ea3d75c36f2bb87b2156636907268caa2e512032f5e6bf0", "sha256_hash", "payload", "py.venus_stealer", "None", "Venus Stealer", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-16 06:36:20", "1969053", "65bb68bc934757abeece91a377d528e4fb1960e9da5f781ee5776b2f6be18c25", "sha256_hash", "payload", "win.sigloader", "None", "SigLoader", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-16 06:36:19", "1969050", "73cb8ff57d809fe1042ef02ba5571d8ad7ee871cadf01a9bbc609f69f8d407ed", "sha256_hash", "payload", "win.sigloader", "None", "SigLoader", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-16 06:36:18", "1969047", "675971cc1e2c889b2804336626f4e2d1489b7878c15817b57847d1d88347b76c", "sha256_hash", "payload", "win.sigloader", "None", "SigLoader", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-16 06:36:17", "1969044", "0bcf272d8f22fa30d327d7c0233b7eae7d50df1ebd95472aae59aef19c8e23bf", "sha256_hash", "payload", "win.sigloader", "None", "SigLoader", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-16 06:36:16", "1969041", "9f98e35e878b06940f2792ebc45b3f0adc0fb5bfde60f56548a60cfbf71bbe35", "sha256_hash", "payload", "win.meterpreter", "None", "Meterpreter", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-16 06:36:15", "1969038", "052a2258a185f4c858326ff1a5754b2c4c2bf680c12ebf30a3c2b2b9c1af8f68", "sha256_hash", "payload", "win.sigloader", "None", "SigLoader", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-16 06:36:14", "1969035", "069f1429577c2426c7883f392ca6441f1aea464b9b2262ef2fcb25989b701ee0", "sha256_hash", "payload", "win.sigloader", "None", "SigLoader", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-16 06:36:13", "1969032", "d4bb1f9cc14e1a27aa5d4f5ec397247b06cc5b0ae0b8fd4067a2b10f6223e2ef", "sha256_hash", "payload", "win.sigloader", "None", "SigLoader", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-16 06:36:12", "1969029", "7169885e9230836cf829ee86035864806a8720cb644e5a1d7f53f914b330cab2", "sha256_hash", "payload", "win.sigloader", "None", "SigLoader", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-16 06:36:11", "1969026", "ab0c6d4640de59c97bcdf9bab4a6cba7523b7d4e48bf56c729ecba9e0c5dd6d1", "sha256_hash", "payload", "win.salatstealer", "None", "SalatStealer", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-16 06:36:10", "1969023", "bc6af94ef856472d2a5b75de58fc12e9616d37d1b9dba17ffeeda81d77e40b47", "sha256_hash", "payload", "win.sigloader", "None", "SigLoader", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-16 06:36:07", "1969014", "82855f659d8d5b23c68205a954a067c183c8af024f2340e3141aaeaad4b1c4b0", "sha256_hash", "payload", "win.aurastealer", "AURA Stealer,AURASTEAL", "Aura Stealer", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-16 06:36:06", "1969011", "5fe4d4fff5da2c58f4e4450d67f5ab325b78beba7cd294169e9e8af4ef429f6f", "sha256_hash", "payload", "py.stealler", "None", "stealler", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-16 06:36:05", "1969005", "a2b27dee9494b5978815784900f167ed093028f1eba443a7d02b11b66def9483", "sha256_hash", "payload", "win.coinminer", "None", "Coinminer", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-16 06:36:05", "1969008", "b2f356e15402e11fb6292b91a97f7f9a8f15cb323c5d43423b01bee04eef2746", "sha256_hash", "payload", "win.wannacryptor", "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry", "WannaCryptor", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-16 06:36:04", "1969002", "51c23cd7ae3be097ad412657d6e03b4794fbc19853da07f24609fb7148610a5f", "sha256_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-16 06:36:02", "1968999", "b1cc5ad78b72d2f0a94d370e840e24ea38a31690ece3af851da345975da7ca5c", "sha256_hash", "payload", "win.xworm", "None", "XWorm", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-16 06:36:01", "1968996", "e0b224363b0fac2b9a2ff32f397e1b03feb33b987e8cb85bbfdca2678c7973b1", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-16 06:36:00", "1968993", "93b60bb3affff182a38cfd66c956204db0509a72844a8ff69582892e16437646", "sha256_hash", "payload", "win.salatstealer", "None", "SalatStealer", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-16 06:35:59", "1968990", "e096855e3202ad914ea6ff670e1872d813f6104f3c0b4ed878d0fb376a772c5b", "sha256_hash", "payload", "win.salatstealer", "None", "SalatStealer", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-16 06:35:58", "1968987", "d27e33a6766532e8a826517790932a3c90e8c12fc6cbe96d19d398eb0e2f06f5", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-16 06:35:57", "1968984", "a71acdd5b825072e40bc68df78ec0f4e5f7277a7043d8a43c9726669d48d9416", "sha256_hash", "payload", "win.gcleaner", "None", "GCleaner", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-16 06:34:51", "1968962", "a8445594db53755f9e9cd8aff30875811088958ef3fe99865708944455f3580e", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/a8445594db53755f9e9cd8aff30875811088958ef3fe99865708944455f3580e", "AMOS,ClickFix,Foxveil,macOS,willow", "0", "c4ffeine"
"2026-10-16 06:34:50", "1968959", "185a948ef2cb1a0338dbcd9e8fdd268bd5e906cb23ea3af4c9721b2410987d7f", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/185a948ef2cb1a0338dbcd9e8fdd268bd5e906cb23ea3af4c9721b2410987d7f", "AMOS,ClickFix,Foxveil,macOS,quill", "0", "c4ffeine"
"2026-10-16 06:34:47", "1968965", "11767aae97c4226fdbf49fdcb9bb9c1e66b6e0c8454e939cfad5aad7a1591daa", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/11767aae97c4226fdbf49fdcb9bb9c1e66b6e0c8454e939cfad5aad7a1591daa", "AMOS,chant,ClickFix,Foxveil,macOS", "0", "c4ffeine"
"2026-10-16 06:10:57", "1968307", "903e52d33448db05a698c3cc548c6f3ee31fd04e52b92ba7bfe8ea650c2eafa0", "sha256_hash", "payload", "unknown", "None", "Unknown malware", "2026-10-15 19:55:24", "55", "False", "None", "clickfix,file-size-evasion,masquerading,terminalfix,token-impersonation", "0", "MaciekG"
"2026-10-16 06:10:55", "1968376", "10037441f280bd154f782c3fb934dff54847010bc6f9624c2f5b08061bd4429c", "sha256_hash", "payload", "unknown", "None", "Unknown malware", "", "60", "False", "None", "clickfix,dll-sideloading-adjacent,masquerading,terminalfix", "0", "MaciekG"
"2026-10-16 06:10:55", "1968394", "a12b6a5a9895d3d92cf3481abc09751abe3da73fa02c250ff458748eaca13c7d", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/a12b6a5a9895d3d92cf3481abc09751abe3da73fa02c250ff458748eaca13c7d", "AMOS,ClickFix,Foxveil,macOS,quill", "0", "c4ffeine"
"2026-10-16 06:10:54", "1968398", "846b867f59c0dbc7cb2eee1844de6b8313c10ccaa68d4313e99e8cea306379a0", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/846b867f59c0dbc7cb2eee1844de6b8313c10ccaa68d4313e99e8cea306379a0", "AMOS,ClickFix,Foxveil,macOS,willow", "0", "c4ffeine"
"2026-10-16 06:10:54", "1968401", "58bfc66913b3b99705e2f39d6a23778414c940cb2a7503ce8506fc200589a077", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/58bfc66913b3b99705e2f39d6a23778414c940cb2a7503ce8506fc200589a077", "AMOS,chant,ClickFix,Foxveil,macOS", "0", "c4ffeine"
"2026-10-16 06:10:53", "1968452", "260f88bfc0e6e61ccb401cd131a43014461151436efdec2550e9f829510ad411", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/260f88bfc0e6e61ccb401cd131a43014461151436efdec2550e9f829510ad411", "AMOS,ClickFix,Foxveil,macOS,quill", "0", "c4ffeine"
"2026-10-16 06:10:52", "1968456", "5246a714a240a04f968611b42a5021aadd8024313f9dba328b832f7d04cec2e9", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/5246a714a240a04f968611b42a5021aadd8024313f9dba328b832f7d04cec2e9", "AMOS,chant,ClickFix,Foxveil,macOS", "0", "c4ffeine"
"2026-10-16 06:10:51", "1968458", "3045f39842e81bbb3c18e7f3dfb9872928a1ca58bef21800bbb5aa74b75216d8", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/3045f39842e81bbb3c18e7f3dfb9872928a1ca58bef21800bbb5aa74b75216d8", "AMOS,ClickFix,Foxveil,macOS,willow", "0", "c4ffeine"
"2026-10-16 06:10:51", "1968487", "62e9c335a427a6e47d3a207e61dc4c52c57c13de82cd514f691f3f891ec225ef", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/62e9c335a427a6e47d3a207e61dc4c52c57c13de82cd514f691f3f891ec225ef", "AMOS,chant,ClickFix,Foxveil,macOS", "0", "c4ffeine"
"2026-10-16 06:10:50", "1968491", "aa2a4e66e81e492392b4e1c78fff9635fa63fc2d4d7f4c6b6438367ce4fd9aa1", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/aa2a4e66e81e492392b4e1c78fff9635fa63fc2d4d7f4c6b6438367ce4fd9aa1", "AMOS,ClickFix,Foxveil,macOS,willow", "0", "c4ffeine"
"2026-10-16 06:10:45", "1968511", "714d4d3235dd25315c3396e13329342b14fe33ecffd4628d9b5c1481daf72016", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/714d4d3235dd25315c3396e13329342b14fe33ecffd4628d9b5c1481daf72016", "AMOS,ClickFix,Foxveil,macOS,quill", "0", "c4ffeine"
"2026-10-16 06:10:44", "1968621", "e42b8c35db5ab7169327b9185c3e05db4a156e8922b985da61bcbd6223df8aea", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://bazaar.abuse.ch/sample/e42b8c35db5ab7169327b9185c3e05db4a156e8922b985da61bcbd6223df8aea/", "AMOS,ClickFix,Foxveil,macOS,quill", "0", "c4ffeine"
"2026-10-16 06:10:40", "1968625", "329607bf10b6d19006009a561e8e09cc450d0287e84e13980e48b76c94d4ac90", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/329607bf10b6d19006009a561e8e09cc450d0287e84e13980e48b76c94d4ac90", "AMOS,ClickFix,Foxveil,macOS,quill", "0", "c4ffeine"
"2026-10-16 06:10:40", "1968627", "3ae3d11cd46aceee81783fb1204c4ae43459e670a8071f76c8a9a5851287a965", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://bazaar.abuse.ch/sample/3ae3d11cd46aceee81783fb1204c4ae43459e670a8071f76c8a9a5851287a965/", "AMOS,ClickFix,Foxveil,macOS,willow", "0", "c4ffeine"
"2026-10-16 06:10:39", "1968634", "1e8ed19e771e7a9378daf3b3652802143345db8ea4196e560e54f28176ef958a", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://bazaar.abuse.ch/sample/1e8ed19e771e7a9378daf3b3652802143345db8ea4196e560e54f28176ef958a/", "AMOS,chant,ClickFix,Foxveil,macOS", "0", "c4ffeine"
"2026-10-16 06:10:38", "1968677", "1f5c9db09902fc4ed8cb39808b96aa7633c4f158d713709bf971af323543fb1e", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/1f5c9db09902fc4ed8cb39808b96aa7633c4f158d713709bf971af323543fb1e", "AMOS,ClickFix,Foxveil,macOS,willow", "0", "c4ffeine"
"2026-10-16 06:10:38", "1968682", "f2a60b9207d24dc6679c9ec78d63cd3bb4519da12002189a1a517834c6bddc19", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/f2a60b9207d24dc6679c9ec78d63cd3bb4519da12002189a1a517834c6bddc19", "AMOS,ClickFix,Foxveil,macOS,quill", "0", "c4ffeine"
"2026-10-16 06:10:37", "1968683", "961a6bf3f05911b8b73d639de7178baa23cc8d9ce54de4a6604a977bb1532b6f", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/961a6bf3f05911b8b73d639de7178baa23cc8d9ce54de4a6604a977bb1532b6f", "AMOS,chant,ClickFix,Foxveil,macOS", "0", "c4ffeine"
"2026-10-16 06:10:36", "1968775", "606ab3b0ad1b3dc635b001104d5bf7a96d77ed39e2df448fbd74017cf0cf823b", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/606ab3b0ad1b3dc635b001104d5bf7a96d77ed39e2df448fbd74017cf0cf823b", "AMOS,ClickFix,Foxveil,macOS,willow", "0", "c4ffeine"
"2026-10-16 06:10:36", "1968779", "6ee8d6f5c3f2a582f738d047f16608f3ad4dee277f2580da6028afe370b3aa40", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/6ee8d6f5c3f2a582f738d047f16608f3ad4dee277f2580da6028afe370b3aa40", "AMOS,ClickFix,Foxveil,macOS,quill", "0", "c4ffeine"
"2026-10-16 06:10:36", "1968780", "574a6b2e66744dcd85d691de6797c4544c34d48e361b4fb9579b3cc292fe7085", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/574a6b2e66744dcd85d691de6797c4544c34d48e361b4fb9579b3cc292fe7085", "AMOS,chant,ClickFix,Foxveil,macOS", "0", "c4ffeine"
"2026-10-16 06:10:30", "1968852", "bb3718a591589b740b96973e8cd11e5b17519f0ceaf8f126d03da9ed680c296e", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/bb3718a591589b740b96973e8cd11e5b17519f0ceaf8f126d03da9ed680c296e", "AMOS,ClickFix,Foxveil,macOS,quill", "0", "c4ffeine"
"2026-10-16 06:10:29", "1968863", "3a9175dc1911935956c94b3dc4ca13b0ba4a0f2881a57bb6d772e2d88e75b888", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/3a9175dc1911935956c94b3dc4ca13b0ba4a0f2881a57bb6d772e2d88e75b888", "AMOS,ClickFix,Foxveil,macOS,willow", "0", "c4ffeine"
"2026-10-16 06:10:29", "1968865", "688804b19001b11dd2f3c1bdeca399b897ed8015c3024e0f2586ed4f7a125ee1", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/688804b19001b11dd2f3c1bdeca399b897ed8015c3024e0f2586ed4f7a125ee1", "AMOS,chant,ClickFix,Foxveil,macOS", "0", "c4ffeine"
"2026-10-16 04:53:43", "1968880", "19a3b7924c8f764a4fe6fc2c9fff192f7571cd50023fe37f9cc2ab2f3a4fa091", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai", "0", "whack_sh"
"2026-10-16 04:53:42", "1968879", "6b622569745e1074b4564467c3d694d9cf1db09405a03d8d6ee609c35f417e86", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai", "0", "whack_sh"
"2026-10-16 04:53:40", "1968878", "7e1f8efda2aa1e7eb79557ca2275a229a76b55fb98e191d310e5b8e4ad38b954", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai", "0", "whack_sh"
"2026-10-16 04:53:39", "1968877", "8ca1337be559848cd3239f6f0fb35f31be98dddab1c003e6b57722dd3ae28e95", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai", "0", "whack_sh"
"2026-10-16 04:53:38", "1968876", "d3ad28e1f88e8a2d4ad820d5c6ff81605932160197b5831de9d32083a776a40b", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Gafgyt,Mirai", "0", "whack_sh"
"2026-10-16 04:53:37", "1968875", "3240e7ab26be062b3eba73429916b77a9894fffd76af12ac699a4e15676fc384", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai", "0", "whack_sh"
"2026-10-16 04:53:36", "1968874", "9e486485817450a9b516ee93d4b85dfc42be16a629087d0954d63577439b8f56", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai", "0", "whack_sh"
"2026-10-16 04:53:35", "1968873", "f6ddc131bdfd26317d1a7f53086f1a1ed17717a631242832abbdaf0506be74ce", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai", "0", "whack_sh"
"2026-10-16 02:53:45", "1968754", "9662a92247bc031c6f39c8c72853c46b4a22bce6a73d27f3fb8b3b368522f8b0", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai,upx", "0", "whack_sh"
"2026-10-16 02:53:44", "1968753", "63ae61ea6ed10789573a2434003b791b930ba67c4d5011c0433022102b0c6f7a", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai,upx", "0", "whack_sh"
"2026-10-16 02:53:43", "1968752", "a8dd660d3b9533e614ed85aa9e84b4c8028793305779c7c92819a51f508f5f62", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai,upx", "0", "whack_sh"
"2026-10-16 02:53:41", "1968751", "8f367ef5666641bdfac1e6ab117526792cf89570be786b8ddb769838868fa69a", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai", "0", "whack_sh"
"2026-10-16 02:53:40", "1968750", "2b31b7bdafb0d4c08f517882311ff53a597e1b9f09c0473402045dfe636cf5d3", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai,upx", "0", "whack_sh"
"2026-10-16 02:53:39", "1968749", "b1290e0cbc7721e2f33eefb3ed80b9b2d005ab85f29fd89c82b47ba25195b6c4", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai", "0", "whack_sh"
"2026-10-16 02:53:38", "1968748", "29f7706aab236475be7099feb866784cbcb8d9b5c8bdce825082addce5a203cb", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai", "0", "whack_sh"
"2026-10-16 02:53:36", "1968747", "26017b4203c787953af0d7b0b4b6140a3fa339d333878aeb55c76681ac249273", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai", "0", "whack_sh"
"2026-10-16 02:53:35", "1968746", "35b2eb3312c9b29b65fe88a5af1d87407c881e42ee39931e81f1e43050e798ed", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai,upx", "0", "whack_sh"
"2026-10-16 02:53:34", "1968745", "9e26d0fdff3d1b01dea60e235b25cb07307a8142cc615969965d8606ba30cb6f", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai,upx", "0", "whack_sh"
"2026-10-16 00:53:41", "1968648", "f0395d3cbe1ff9313f14c102db0803b1b8ac4aa7cc8eaf3c26123a6aea75890b", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh"
"2026-10-16 00:53:40", "1968647", "55c3a37165d536c7c83af6ed706212924117277c07987c1def6529cbfc19b06d", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh"
"2026-10-16 00:53:39", "1968646", "773370d194d56f896abfe99c8c42284fd4a83bffc5d236d37c5c62b0b983eb94", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh"
"2026-10-16 00:53:38", "1968645", "2538c962c062638c7ab2562195254a605dc34894c341bf41f2e1b1e388d76d14", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh"
"2026-10-16 00:53:37", "1968644", "d82eddb27829270db4991fc5a1f6f03f95f4f0addfb7b8f9df5f166725148466", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "100", "False", "None", "elf,Mirai", "0", "whack_sh"
"2026-10-16 00:53:35", "1968643", "51ef64b51fbc68f3fdffa43e7c0d89fad5a522a53d5c3930d8145bc96cc62067", "sha256_hash", "payload", "win.njrat", "Bladabindi,Lime-Worm", "NjRAT", "2026-10-16 06:36:09", "90", "False", "None", "exe,NjRAT", "0", "whack_sh"
"2026-10-16 00:53:34", "1968642", "98379ccde6fc0517a749bdfb4fa3a384ccc8dbb86f1f4c1ada23a3bf57760d87", "sha256_hash", "payload", "win.asyncrat", "None", "AsyncRAT", "2026-10-16 06:36:08", "90", "False", "None", "AsyncRAT,exe", "0", "whack_sh"
"2026-10-16 00:53:33", "1968641", "99abb19b58002ac9bd71b4d097dbcd63d41cc7e7a21e1e5eadac4b4a75acb4fc", "sha256_hash", "payload", "win.njrat", "Bladabindi,Lime-Worm", "NjRAT", "2026-10-16 06:36:10", "90", "False", "None", "exe,NjRAT", "0", "whack_sh"
"2026-10-16 00:20:51", "1968611", "c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "80", "False", "https://honeylabs.net/lookup/42.227.203.38:54878", "elf,iot", "0", "HoneyLabs"
"2026-10-15 22:53:32", "1968533", "0d8cdcb2d71adf2c3dab3475154b40c4388eb8d54fea4544de0218d94b714513", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai", "0", "whack_sh"
"2026-10-15 19:53:50", "1968374", "6298385d0c668946241e3e2f12ba9713d011f495f6ed77c71ce08852eea446c4", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai", "0", "whack_sh"
"2026-10-15 19:53:49", "1968373", "c9f7807af2d38267e151356ec38db145f6014e100b134989211321e5737c5ca4", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai", "0", "whack_sh"
"2026-10-15 19:53:48", "1968372", "bdeabe98a6ce3900fb755ccdbac02f350fdde5a10248a1e79b4c005ec3df3489", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai", "0", "whack_sh"
"2026-10-15 19:53:47", "1968371", "dac2be3f37562d62d9e85fe7b9a8936e9e6173baaed752ef1088f8a31de7ab65", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai", "0", "whack_sh"
"2026-10-15 19:53:46", "1968370", "50b0f2252201c66c1bb864f643a257a78aa182e0e69192a6d389a7670cfd6f75", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai", "0", "whack_sh"
"2026-10-15 19:53:45", "1968369", "c54b6e820abe50d1e7efb64fe10b868324efb35f396e00cfdee11a9b70eac673", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai,upx", "0", "whack_sh"
"2026-10-15 19:53:44", "1968368", "baa7aec46bed895abfc14e44afa8a2de1ee6890c879ea497b06065b282372f8a", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai", "0", "whack_sh"
"2026-10-15 19:53:43", "1968367", "e22a8fa512acf18ebf1fd4940e0eeedd64f15460713750729c3762230d10546a", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai,upx", "0", "whack_sh"
"2026-10-15 19:53:42", "1968366", "59e6fe2ecfc3b04bb51e134bb639ab326e491f55ca11f01723b82798b9874ee6", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai,upx", "0", "whack_sh"
"2026-10-15 19:53:40", "1968365", "165077d51122078f5e5da01cdb9e1e52ce176790bc9462454549391e16776810", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai,upx", "0", "whack_sh"
"2026-10-15 19:53:39", "1968364", "89cd8921f4642f95da9b6c8339291d1c787333f6151961702f7dc4017f90d77a", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai,upx", "0", "whack_sh"
"2026-10-15 19:53:38", "1968363", "75b204fd3c2fd89692b9afde17263afb681efff8179e13dc8c4b049ccba30017", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai,upx", "0", "whack_sh"
"2026-10-15 19:53:37", "1968362", "916304ca4c50c8c4689e4ac8194608daf3578fe4c7b7b4225f1629f75e54cd24", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai", "0", "whack_sh"
"2026-10-15 19:53:36", "1968361", "ffedd56a8e053aabe3e1fe016e2e3551d620f056c559bf41201e786f0425375a", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai,upx", "0", "whack_sh"
"2026-10-15 19:53:35", "1968360", "e897f0c0bc381f9e0b93af0e689114eb862698e512ef7cfaed97b1a65da5bfbf", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "arc,cowrie,elf,Gafgyt,honeypot,Mirai", "0", "whack_sh"
"2026-10-15 19:53:34", "1968359", "5e715fd68f061f44fdd4b4fb397f336f94291e0c3e5ff546d8156c4e15bd35a3", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai,upx", "0", "whack_sh"
"2026-10-15 19:53:33", "1968358", "1aa306bfc2cbd1578e8c7c4c8aa7fa1142d596897113a1429faddb62cf80b605", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai,upx", "0", "whack_sh"
"2026-10-15 19:53:31", "1968357", "b0b6990c155e756eebd36f49f3ea16b4a272e660deb78d3eee77326b6f76b8d9", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai,upx", "0", "whack_sh"
"2026-10-15 18:37:54", "1967583", "cfa34537cd8bb9849b9368219e5841c705cfd59e93326993f7c9827d34c8b43d", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/cfa34537cd8bb9849b9368219e5841c705cfd59e93326993f7c9827d34c8b43d", "AMOS,chant,ClickFix,Foxveil,macOS", "0", "c4ffeine"
"2026-10-15 18:37:53", "1967584", "a08fa2bb57a0c30c7c141ff36e121c78307098fbf91f3efa53c7d98292c57af0", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/a08fa2bb57a0c30c7c141ff36e121c78307098fbf91f3efa53c7d98292c57af0", "AMOS,ClickFix,Foxveil,macOS,quill", "0", "c4ffeine"
"2026-10-15 18:37:47", "1967613", "09e573b4c53768d60802651a0fe5b81a70d53660b0c2a9d54ce076fe02340a26", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/09e573b4c53768d60802651a0fe5b81a70d53660b0c2a9d54ce076fe02340a26", "AMOS,ClickFix,Foxveil,macOS,quill", "0", "c4ffeine"
"2026-10-15 18:37:46", "1967615", "cc7c3eafec8df3b8de10dbeb577ad135f5a0cee61e1e0241e1a596aea0eddef1", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/cc7c3eafec8df3b8de10dbeb577ad135f5a0cee61e1e0241e1a596aea0eddef1", "AMOS,ClickFix,Foxveil,macOS,willow", "0", "c4ffeine"
"2026-10-15 18:37:46", "1967616", "52c2e8b1226fd66a1e86c9ca7ebfea784137a8d2dbacc4037e0d4d052e900c2e", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/52c2e8b1226fd66a1e86c9ca7ebfea784137a8d2dbacc4037e0d4d052e900c2e", "AMOS,chant,ClickFix,Foxveil,macOS", "0", "c4ffeine"
"2026-10-15 18:37:45", "1967621", "4486c71a06a57cc3f60ab7bb6e0e761d06ba269db9a0ce122dbcc046136d6206", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/4486c71a06a57cc3f60ab7bb6e0e761d06ba269db9a0ce122dbcc046136d6206", "AMOS,chant,ClickFix,Foxveil,macOS", "0", "c4ffeine"
"2026-10-15 18:37:45", "1967628", "6df2777fa6434ab6848a387e85590b6638d1b7e1296419d83733da573ce57784", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/6df2777fa6434ab6848a387e85590b6638d1b7e1296419d83733da573ce57784", "AMOS,ClickFix,Foxveil,macOS,quill", "0", "c4ffeine"
"2026-10-15 18:37:45", "1967631", "a754facc0f267b7a76dbd15468a41847be8561636c8cb1652bcc01c5368ea63f", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/a754facc0f267b7a76dbd15468a41847be8561636c8cb1652bcc01c5368ea63f", "AMOS,chant,ClickFix,Foxveil,macOS", "0", "c4ffeine"
"2026-10-15 18:37:44", "1967635", "628e06c690296367d11a69d357686e39799bc2130937c4b40bc4b3532c52f8c6", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/628e06c690296367d11a69d357686e39799bc2130937c4b40bc4b3532c52f8c6", "AMOS,ClickFix,Foxveil,macOS,quill", "0", "c4ffeine"
"2026-10-15 18:37:43", "1967667", "2854b365ec2dc32311bdbd9eadcf6d0e1d448e61f7ccccc3dbbd25d1abc8246a", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/2854b365ec2dc32311bdbd9eadcf6d0e1d448e61f7ccccc3dbbd25d1abc8246a", "AMOS,ClickFix,Foxveil,macOS,willow", "0", "c4ffeine"
"2026-10-15 18:37:42", "1967669", "01a0cae7eea42524f2f5e1a72aab2762c6ebcce4c3ab0b0f358406604ad606ae", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/01a0cae7eea42524f2f5e1a72aab2762c6ebcce4c3ab0b0f358406604ad606ae", "AMOS,chant,ClickFix,Foxveil,macOS", "0", "c4ffeine"
"2026-10-15 18:37:41", "1967702", "fa37b294832e59b0ce184a8f6685aa7aa99a1628723d269e4d6c801aa17dc472", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/fa37b294832e59b0ce184a8f6685aa7aa99a1628723d269e4d6c801aa17dc472", "AMOS,ClickFix,Foxveil,macOS,quill", "0", "c4ffeine"
"2026-10-15 18:37:40", "1967706", "ac5d2f1bb078fed0e6712fc303d4b3a1f90c2f757f4a3520c9ab5a4bc9a49e78", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/ac5d2f1bb078fed0e6712fc303d4b3a1f90c2f757f4a3520c9ab5a4bc9a49e78", "AMOS,ClickFix,Foxveil,macOS,willow", "0", "c4ffeine"
"2026-10-15 18:37:40", "1967708", "bbd80fedf15cf795fb2bef1db546323f341a00afbe2902bf95b7672a8a4dd574", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/bbd80fedf15cf795fb2bef1db546323f341a00afbe2902bf95b7672a8a4dd574", "AMOS,chant,ClickFix,Foxveil,macOS", "0", "c4ffeine"
"2026-10-15 18:37:39", "1967803", "1728e932ee72f007f031c0a6647c1c109aa86e87e810bad5a90af79a875d6434", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/1728e932ee72f007f031c0a6647c1c109aa86e87e810bad5a90af79a875d6434", "AMOS,ClickFix,Foxveil,macOS,quill", "0", "c4ffeine"
"2026-10-15 18:37:39", "1967812", "3c722bf15f408ae9a8c5e51986642c605364851d5c7c6a70158e8a71ce65470d", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/3c722bf15f408ae9a8c5e51986642c605364851d5c7c6a70158e8a71ce65470d", "AMOS,ClickFix,Foxveil,macOS,willow", "0", "c4ffeine"
"2026-10-15 18:37:39", "1967818", "c2eeb788d76a220e9741fb1608987d0909034477299d44fa55142d068bafd2dc", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/c2eeb788d76a220e9741fb1608987d0909034477299d44fa55142d068bafd2dc", "AMOS,ClickFix,Foxveil,macOS,quill", "0", "c4ffeine"
"2026-10-15 18:37:38", "1967819", "afb31a7b55a98167a75b7b8198bf4be5c98a14bc8bf23b4b8cc9f0020262e053", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/afb31a7b55a98167a75b7b8198bf4be5c98a14bc8bf23b4b8cc9f0020262e053", "AMOS,chant,ClickFix,Foxveil,macOS", "0", "c4ffeine"
"2026-10-15 18:37:35", "1967858", "093740f077302c1b305938b61f18ae29f37a45b6627c027887f6b0449ab6fb88", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/093740f077302c1b305938b61f18ae29f37a45b6627c027887f6b0449ab6fb88", "AMOS,chant,ClickFix,Foxveil,macOS", "0", "c4ffeine"
"2026-10-15 18:37:34", "1967861", "25bad25167b4026b668e1e09fc30249c9bdd034c221b81dd7d3dab15f6cbf3d4", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/25bad25167b4026b668e1e09fc30249c9bdd034c221b81dd7d3dab15f6cbf3d4", "AMOS,ClickFix,Foxveil,macOS,quill", "0", "c4ffeine"
"2026-10-15 18:37:34", "1967863", "24ee5f1039322c34c180ae356bc6adbd6a00984166df6af4a349a72c7aaa1383", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/24ee5f1039322c34c180ae356bc6adbd6a00984166df6af4a349a72c7aaa1383", "AMOS,ClickFix,Foxveil,macOS,willow", "0", "c4ffeine"
"2026-10-15 18:37:32", "1967977", "c36acf564688a6ab3a9b0ef93db1f3594d0f9971c971f5058bea22e750c40b57", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/c36acf564688a6ab3a9b0ef93db1f3594d0f9971c971f5058bea22e750c40b57", "AMOS,ClickFix,Foxveil,macOS,quill", "0", "c4ffeine"
"2026-10-15 18:37:32", "1967985", "369b696d3336f01c2eb63d6a2e0a148f5c71a198ca5d24007b0df18c6e7f9e4a", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/369b696d3336f01c2eb63d6a2e0a148f5c71a198ca5d24007b0df18c6e7f9e4a", "AMOS,ClickFix,Foxveil,macOS,willow", "0", "c4ffeine"
"2026-10-15 18:37:31", "1967987", "40fa4235a99ab6a81cc74b6a1f3c2ab17a3a11451b05628ae11a44f361af75de", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/40fa4235a99ab6a81cc74b6a1f3c2ab17a3a11451b05628ae11a44f361af75de", "AMOS,chant,ClickFix,Foxveil,macOS", "0", "c4ffeine"
"2026-10-15 18:37:28", "1968020", "0f70e7c1e05265fb05461042efc73df55a8d1dd22993011aa1724b65e365453b", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/0f70e7c1e05265fb05461042efc73df55a8d1dd22993011aa1724b65e365453b", "AMOS,chant,ClickFix,Foxveil,macOS", "0", "c4ffeine"
"2026-10-15 18:37:27", "1968021", "703d378499158fea0648ed9bd8d45a5940607b860bb295ede21563f8feeb3b57", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/703d378499158fea0648ed9bd8d45a5940607b860bb295ede21563f8feeb3b57", "AMOS,ClickFix,Foxveil,macOS,quill", "0", "c4ffeine"
"2026-10-15 18:37:27", "1968022", "e6b0de2d1e40e60fe6aa94621e4bf33e567657f13b178da9744c6b04894fea86", "sha256_hash", "payload", "osx.macsync", "None", "MacSync", "", "100", "False", "https://hybrid-analysis.com/sample/e6b0de2d1e40e60fe6aa94621e4bf33e567657f13b178da9744c6b04894fea86", "ClickFix,macOS,MacSync", "0", "c4ffeine"
"2026-10-15 18:37:26", "1968028", "d6e76cdba3b64c8733492964976faf6de9a36bc863cb65fd57865b7e4fd869a0", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/d6e76cdba3b64c8733492964976faf6de9a36bc863cb65fd57865b7e4fd869a0", "AMOS,ClickFix,Foxveil,macOS,quill", "0", "c4ffeine"
"2026-10-15 18:37:25", "1968030", "71106af9f6f6040bb69d12cac6442d9482f360d8018403936ed6a6c3e9f0ee51", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/71106af9f6f6040bb69d12cac6442d9482f360d8018403936ed6a6c3e9f0ee51", "AMOS,ClickFix,Foxveil,macOS,willow", "0", "c4ffeine"
"2026-10-15 18:36:27", "1968207", "617f17f570638c1d636914a644cb40b650a285b2b1dde00840985a4427dc1d46", "sha256_hash", "payload", "win.icexloader", "None", "win.icexloader", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-15 18:36:22", "1968204", "f36e5b52f5fff2806a069f28717d9fedef2a4ec1a91f0d0659c815e801050e7a", "sha256_hash", "payload", "win.shimrat", "None", "Shim RAT", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-15 18:36:21", "1968201", "3b35d3233e08d7c7a43a0bc0a899ce14cd6797949e96af0c6b3c32f690ab4815", "sha256_hash", "payload", "win.shimrat", "None", "Shim RAT", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-15 18:36:20", "1968198", "95fba0964e5b253356c2f56caeab7798a869ffe70eed4aebd619f36d828a40dd", "sha256_hash", "payload", "win.overlord", "None", "Overlord RAT", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-15 18:36:19", "1968195", "a0c47eea0a07d4ac0ac2c68515494f648f002ae6b4eaee6bcf1b2f553dbf390b", "sha256_hash", "payload", "py.blankgrabber", "None", "BlankGrabber", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-15 18:36:18", "1968192", "02d21f64a1b1b710754a7da049cc57f22775bcaa5bfb263ced709b2bc24d32c6", "sha256_hash", "payload", "win.icexloader", "None", "win.icexloader", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-15 18:36:17", "1968189", "fd32ae87b1c15cfc7b8ee0bf5f2d7106c2024211ae6d248e7a819369481a323d", "sha256_hash", "payload", "py.blankgrabber", "None", "BlankGrabber", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-15 18:36:16", "1968186", "71058edd6a2d93d0992a4ce10736a99070e28345dc14c66d7383ea9b5da9923b", "sha256_hash", "payload", "win.ravenstealer", "None", "Raven Stealer", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-15 18:36:15", "1968183", "d82620df6807e1d65461d7a6b3a2e58aafda51b3c50c41ed1c84e8de9111c29e", "sha256_hash", "payload", "win.ravenstealer", "None", "Raven Stealer", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-15 18:36:14", "1968180", "750bfe4f7e55736d9c0489d0462db13375c034f7cdb8e33f1cea6363a014e3df", "sha256_hash", "payload", "win.ravenstealer", "None", "Raven Stealer", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-15 18:36:13", "1968177", "e1cc2db2413b52d2eb32452d55d72ad52b2c1c4fb12ab57478a51a70344e3043", "sha256_hash", "payload", "win.ravenstealer", "None", "Raven Stealer", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-15 18:36:11", "1968174", "3f02b386e3e5048ba3ea0ca195362bddbac7cee3c466292df256a917b83062d0", "sha256_hash", "payload", "win.ravenstealer", "None", "Raven Stealer", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-15 18:36:07", "1968171", "fd50b29196735ec9680a0f9c8b1c6c49e9bfaf6a98614705751620852ab75d8d", "sha256_hash", "payload", "win.asyncrat", "None", "AsyncRAT", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-15 18:36:05", "1968168", "629a33ac1e45aec4bed75114a4ef2d27f330305a1edcd77afc9301680cadfebb", "sha256_hash", "payload", "win.asyncrat", "None", "AsyncRAT", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-15 18:36:04", "1968165", "2b02bf4c5b127e2838522dd60481e99eafd667c383807604648618d9a21d6818", "sha256_hash", "payload", "py.stealler", "None", "stealler", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-15 18:36:03", "1968162", "7f14767fdb38ced9ddc50b55d0d9d23d48aeac103e68c6c9c34c70fe6da18202", "sha256_hash", "payload", "win.ravenstealer", "None", "Raven Stealer", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-15 18:36:02", "1968159", "4f958c91c539101a78cf76056e305152049fe52e5febb80686e6b0e17f5a84d0", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-15 18:36:01", "1968156", "64d4f79fd40347a6d1683cb4d14d21bec6b433069719d3e04cb46fe0e0c09e34", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-15 18:36:00", "1968153", "50a3617137f6266d4d450230a6754ca3aa43ddb183159cd47041e83d54b629ba", "sha256_hash", "payload", "win.formbook", "win.xloader", "Formbook", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-15 18:35:59", "1968150", "7b4cdd349fa9df0ea48b35e374ec5dce9238fc7a30265a6bc65f576f96752fcb", "sha256_hash", "payload", "win.formbook", "win.xloader", "Formbook", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-15 18:35:58", "1968147", "5ab3e835eef27d5927c72320af184d1e49125dcaf61f7188bb4ae67758da909a", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-15 18:35:56", "1968144", "971e3cbbef20c1c3d24df20dc98db532bb46b04ba0132c219dc5999c07bf4069", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-15 18:35:55", "1968141", "bdb41086f3b18563b26594aecff13548ef42978a55218f6baebe0041f78ac3d0", "sha256_hash", "payload", "win.asyncrat", "None", "AsyncRAT", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-15 18:35:54", "1968138", "c1665e2c547eb253841cccfb8a63e8feb9d3a51a17771c4b0459c0615bf795cd", "sha256_hash", "payload", "win.phemedrone_stealer", "Ov3r_Stealer", "Phemedrone Stealer", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-15 18:35:53", "1968132", "407cc5fa9d647173b34df3e31fa637be3e5da40029c3836c9c1fcf4d0eaaec66", "sha256_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-15 18:35:53", "1968135", "09d980d295bc92df536ea2e2d6b37fb8eda7b1ea87a05bd97415c8d6dbe40bd2", "sha256_hash", "payload", "win.stealc", "None", "Stealc", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-15 18:35:52", "1968129", "d05a2053a4e0f1e22debe07c069c8a51e42fd481b1fe39e118feb3346bcf485d", "sha256_hash", "payload", "win.njrat", "Bladabindi,Lime-Worm", "NjRAT", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-15 18:35:51", "1968126", "a92fba7a5d3dbc2d25ddba06d8d348b7fa1ecff0775d70d85da4716504bd91e4", "sha256_hash", "payload", "win.njrat", "Bladabindi,Lime-Worm", "NjRAT", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-15 18:35:50", "1968123", "897694f639569262598ba00851028184fe533edd3d28da8677afd745e283244a", "sha256_hash", "payload", "win.njrat", "Bladabindi,Lime-Worm", "NjRAT", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-15 18:35:49", "1968120", "6f9f663f832a06474913ec6bb0f94e3cca6e0658396a68053ff36abedbb050ba", "sha256_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-15 18:35:48", "1968117", "633700324ad7abdf0fcaee0498e4d3bef9093c51ee4d611e02303e0f8f1a58e2", "sha256_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-15 18:35:47", "1968113", "06af7db1507c685154f7a291c862b0bfe5649c989de4e7acbeff23fd3252e4ec", "sha256_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-15 18:35:46", "1968110", "854a0834a7029c81f91b841116c16fbb196d218d196fe7b63b4f31b8ba17f12e", "sha256_hash", "payload", "win.raton_rat", "None", "RatonRAT", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-15 18:35:45", "1968104", "1d9c00c7e9e917b91a1070249c9278ad033d2c834637a081bf66d0e6533504c0", "sha256_hash", "payload", "win.darktortilla", "None", "DarkTortilla", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-15 18:35:45", "1968107", "b98db2b56ead04aa27ca8fe4a20d46e546baab613f0a843991512dd4e93a2570", "sha256_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-15 18:35:44", "1968101", "c513ce735cf7ed9f27bf151601a13d9e8f943c5b6aa20d2a6d7831cb9ce8e4c1", "sha256_hash", "payload", "win.shimrat", "None", "Shim RAT", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-15 18:35:43", "1968098", "74eed7f4eb2c03328276103558991ba872db23c73b1dd66a97446c80c9e147d5", "sha256_hash", "payload", "win.xworm", "None", "XWorm", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-15 18:35:42", "1968095", "47a9e572a1062abd16b0a0df256ba0c4b6b4660125844ca8ddbf22714f6beb30", "sha256_hash", "payload", "win.rokrat", "DOGCALL", "RokRAT", "2026-10-16 06:36:53", "95", "False", "None", "None", "0", "Grim"
"2026-10-15 18:35:41", "1968092", "a31fdd57ba5d2c6e29d5aa431cf2e63f1f23d32e0a77cd99090736b3fb60576a", "sha256_hash", "payload", "py.poet_rat", "None", "Poet RAT", "2026-10-16 06:36:53", "95", "False", "None", "None", "0", "Grim"
"2026-10-15 18:35:40", "1968089", "61f41806ab4b660e9c2ee60bd2052c83e7a8ca77d5fb2c763e64e2a8de21b5c5", "sha256_hash", "payload", "apk.facestealer", "None", "FaceStealer", "2026-10-16 06:36:52", "95", "False", "None", "None", "0", "Grim"
"2026-10-15 18:35:39", "1968086", "63a9dd2ea552fbb84afdec77884f88cc3dc86c26c257a23c465905f218c5d27e", "sha256_hash", "payload", "osx.orat", "None", "oRAT", "2026-10-16 06:36:51", "95", "False", "None", "None", "0", "Grim"
"2026-10-15 18:35:38", "1968083", "bf282293d902e1c579d3386117fe82adc6cba6d7e30010d7345f2caf778fa9d8", "sha256_hash", "payload", "win.dynamicstealer", "None", "DynamicStealer", "2026-10-16 06:36:50", "95", "False", "None", "None", "0", "Grim"
"2026-10-15 18:35:37", "1968080", "0e1466319663282294106a06bd2234eb2bd7c4cbf89cfbead573a37da711fc2b", "sha256_hash", "payload", "win.aurastealer", "AURA Stealer,AURASTEAL", "Aura Stealer", "2026-10-16 06:36:49", "95", "False", "None", "None", "0", "Grim"
"2026-10-15 18:35:36", "1968077", "caa74155a24da662ebe423ba7d53ff54f3d34f3c405a2c9a9f047d0cc1edb46b", "sha256_hash", "payload", "win.wannacryptor", "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry", "WannaCryptor", "2026-10-16 06:36:48", "95", "False", "None", "None", "0", "Grim"
"2026-10-15 18:35:35", "1968071", "a111ea501acb04ac3bcf83da91e1fd0b0a62a839f8f7069e4647a29eb956252a", "sha256_hash", "payload", "win.formbook", "win.xloader", "Formbook", "2026-10-16 06:36:46", "95", "False", "None", "None", "0", "Grim"
"2026-10-15 18:35:35", "1968074", "8aeff0c7ac9eab60e3eb8038d0a6bcd6c1a3fd6de70faef0721cf6fe2223e92d", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "2026-10-16 06:36:47", "95", "False", "None", "None", "0", "Grim"
"2026-10-15 18:35:34", "1968068", "5ae667a2ffce6864964f906c2ec7049b342a534ebb8e38a8d0640e6656e0de7a", "sha256_hash", "payload", "jar.crossrat", "Trupto", "CrossRAT", "2026-10-16 06:36:45", "95", "False", "None", "None", "0", "Grim"
"2026-10-15 18:35:33", "1968065", "4aae156271039997062de8029d54ab346696d29e92dbd52ddd54a0f800801ec1", "sha256_hash", "payload", "win.guidloader", "None", "GUIDLOADER", "2026-10-16 06:36:45", "95", "False", "None", "None", "0", "Grim"
"2026-10-15 18:35:32", "1968062", "65a9dc5c5c47a3dce3e6cf283ed8836f02f3dc07f45b7bba71be953d7cec05ec", "sha256_hash", "payload", "py.venus_stealer", "None", "Venus Stealer", "2026-10-16 06:36:44", "95", "False", "None", "None", "0", "Grim"
"2026-10-15 18:35:31", "1968059", "ba65072840838f65f3aa886ca87894ebd8b3980e060ef993f49ebb62bbbcdf6b", "sha256_hash", "payload", "win.formbook", "win.xloader", "Formbook", "2026-10-16 06:36:43", "95", "False", "None", "None", "0", "Grim"
"2026-10-15 18:35:30", "1968056", "260f74d23b51205505f5782e1893d2f16055fb9daab8430920718851127bd17f", "sha256_hash", "payload", "win.prometei", "None", "Prometei", "2026-10-16 06:36:42", "95", "False", "None", "None", "0", "Grim"
"2026-10-15 18:35:29", "1968053", "7d12b1ff2026c04fb0ea6520de2a656e19a7949ed471390e2dd72cfa24f0f56c", "sha256_hash", "payload", "win.prometei", "None", "Prometei", "2026-10-16 06:36:41", "95", "False", "None", "None", "0", "Grim"
"2026-10-15 18:35:28", "1968050", "6b68a1f5df0a2e64d8d5092dacf355a35bbab4e7d5d6c193234a05bc5037dcbc", "sha256_hash", "payload", "win.asyncrat", "None", "AsyncRAT", "2026-10-16 06:36:41", "95", "False", "None", "None", "0", "Grim"
"2026-10-15 18:35:27", "1968047", "3e4313662c1ef316bb7095b4f8f9b47c9d0b2b7050ec6d3a1ac4440d43fb2d1b", "sha256_hash", "payload", "win.asyncrat", "None", "AsyncRAT", "2026-10-16 06:36:40", "95", "False", "None", "None", "0", "Grim"
"2026-10-15 18:35:26", "1968044", "2f5b9d79715c6738a1384db2016270de7c1c503284abb4365a338d6a7aaf8b52", "sha256_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "2026-10-16 06:36:39", "95", "False", "None", "None", "0", "Grim"
"2026-10-15 18:35:25", "1968041", "654f33de039da0de1797cddb0e1db8ee9e0aa65db4d4c3881d888893d9987568", "sha256_hash", "payload", "win.amadey", "None", "Amadey", "2026-10-16 06:36:38", "95", "False", "None", "None", "0", "Grim"
"2026-10-15 18:35:24", "1968038", "4baf5e914bb2e9a62f614b0ccbcc15770f5f9443ffd65fb00abbadd296422396", "sha256_hash", "payload", "py.venus_stealer", "None", "Venus Stealer", "2026-10-16 06:36:37", "95", "False", "None", "None", "0", "Grim"
"2026-10-15 18:35:22", "1968035", "c3f6d001005a937d4a642ae5f2ba7acfd4da764f86a0dd636cc1270d1ea4e778", "sha256_hash", "payload", "win.tofsee", "Gheg", "Tofsee", "2026-10-16 06:36:37", "95", "False", "None", "None", "0", "Grim"
"2026-10-15 18:35:21", "1968032", "c0ac6e8d2256d9bddec91edb5e66f2b574af109978072717eb985d8cd17d0fad", "sha256_hash", "payload", "win.ghost_rat", "Farfli,Gh0st RAT,PCRat", "Ghost RAT", "2026-10-16 06:36:33", "95", "False", "None", "None", "0", "Grim"
"2026-10-15 17:53:31", "1967886", "cb1dcd4af97aa8558b0aa85f6cc209e546f595dfeab7967f469456ddbad81cc1", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai", "0", "whack_sh"
"2026-10-15 15:53:30", "1967704", "620b1658e3715d4b7eb9bb46a15381039422f367571d8313c78be1ecd010a533", "sha256_hash", "payload", "win.amadey", "None", "Amadey", "", "90", "False", "None", "317106,Amadey,cred.dll,dll,dropped-by-Amadey,exe,plugin", "0", "whack_sh"
"2026-10-15 13:53:29", "1967609", "081cba4ea90a4e82db7476b29906b546d822ccf4a453bbf234a23c73823b255d", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai", "0", "whack_sh"
"2026-10-15 13:22:57", "1967489", "dab539c8ab305cf62dec76b77f619e3de85af34a544c1582768882028edb3393", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/dab539c8ab305cf62dec76b77f619e3de85af34a544c1582768882028edb3393", "AMOS,chant,ClickFix,Foxveil,macOS", "0", "c4ffeine"
"2026-10-15 12:53:31", "1967550", "fe286eb882d9fcd70e471e35cce570b2862199d377588070abe6b4521d3c8fce", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai", "0", "whack_sh"
"2026-10-15 12:53:30", "1967549", "831653f7c74cc040f33a5fe19ab52db17f49c654c401cbd61ce006750ae5864a", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai", "0", "whack_sh"
"2026-10-15 12:53:29", "1967548", "d744542a42c4720ad36f1127ee5af5f013f23ae5822cdaae2ff03345f2839594", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai", "0", "whack_sh"
"2026-10-15 11:46:19", "1967481", "d36e3c5ddf65aeb9aa3828845d3c0efc66e11c5d536d263049858a40a4d0c129", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/d36e3c5ddf65aeb9aa3828845d3c0efc66e11c5d536d263049858a40a4d0c129", "AMOS,ClickFix,Foxveil,macOS,quill", "0", "c4ffeine"
"2026-10-15 11:46:19", "1967484", "526cd1d38d1b6ba33764512ccc14929039e89efddf61ea17765e00e7c7b0c8c3", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/526cd1d38d1b6ba33764512ccc14929039e89efddf61ea17765e00e7c7b0c8c3", "AMOS,ClickFix,Foxveil,macOS,willow", "0", "c4ffeine"
"2026-10-15 10:48:08", "1967383", "c24dbd490d16285d647731eedb88160ee5d2114365a51e15672e7dda1552ff01", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:08", "1967384", "ebe1bb7cc628d4a65b2c649669334ab91f7da499b81311744715cda19d409c12", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:08", "1967385", "8bdfe0b8da664b798cbe636188f2c0c68552d84332b124692cb41163316e4596", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:08", "1967386", "05902596fc8ff835c251415a7d3d94a9e93cadcbd76d222e126b57a53500190e", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:08", "1967387", "b7ce5c3892af8184e051c3c06ccb9f08cf4e582bad4f0664ac001500a0dc0491", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:08", "1967388", "d0f606f0c209d77a9a899ff582d5d76f76f3de27f858d174ccf3984a5108eb79", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:08", "1967389", "fe48a7a96703982e428f01273597be2e8f98393bd951969e9b9444fe52441ba7", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:08", "1967390", "31c9df894243a9b5e9e14c9de7bb388f2080593ebe4c1b8c8de3195ca71d2c93", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:08", "1967391", "d908fae9425b88166c1432888e8019abd89d7cc7bdf1b8e4361ff2db0942e859", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:08", "1967392", "471a786f6b8f6acf07a3ea13037633fbff4588656a8979354ee02b9b0afd7779", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:08", "1967393", "387a96a33b98f56d93f5f6e751a17fdc6262656141f23b47eb3b6f7e13f61263", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:08", "1967394", "a2714b96bd5fa5ae3dbc70fa7cedbad94576539106cad80d3b50bf5e6f60d11c", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:07", "1967366", "0f9f2cf2c60201d850a7107627ec0d5b7391d2a7983e4b970ff4f32c137e38ba", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:07", "1967367", "5ad5d7b6ec4006cc247d10858fb48ba770f6c72d0dc57d4af3a59b20c0b28ff8", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:07", "1967368", "1377382753671d062983e8a3b356589afe8cada49f7b906a68517358d2d234b1", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:07", "1967369", "d72c72ff6ed7af7d81ca36d2bae7002f69e5cee1956badc8542a794145b6eccc", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:07", "1967370", "753f775bd42ed1f5bfd7ce578cf902483cbabec81db121ff8312454a51937d80", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:07", "1967371", "b971b2acca7c25d40385c824ca915a129a01c0a7db7d5e60d1e8927f017a38e4", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:07", "1967372", "e151f280e00cd55703a13d2b79d6081ff36f5cbae7297e4b4906f532ea2276a4", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:07", "1967373", "eef128144f049e5c9c9e3fe1f534be3aa0bbf24cdd4e06fac2d2c7aa848b9e0f", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:07", "1967374", "843df5f6aac66f192f71818bf031ee2c95c8a980cb736cffc8b77b2b784a6cf1", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:07", "1967375", "01f60a891bed6ebce80a345931e014d2ca07530c1a9da55c1c851f9f8758c7bf", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:07", "1967376", "0151f934d7237e697017fffba06ae010a3643896b9cb5e8d365925da35d64285", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:07", "1967377", "23560b354faa3876e871af6f0573bc2cfda59c6bd4d83b4a33e58182d53e88ec", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:07", "1967378", "94c29e958a3a6ff9d266b484ebf624dcddd3140a2f5165272219393816ead066", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:07", "1967379", "c4b63a7cbc6038a9adbb0363292054c265fbe7306e434a74ac0caa1acd37fb84", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:07", "1967380", "a160706eab595559fe98d347e44b7e5db8700ba401d31073525058fda78e8e14", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:07", "1967381", "ef6b25cbc17c94803a1cd3b05bac747d54fd74db996a94527f205cfd1a9e33a9", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:07", "1967382", "ac3cd1e2f288747903e8173444d010c5af1c09dbbbfd917cfe0053f16761fe66", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:06", "1967348", "82dfc89a1228fcd1037fb6845077673c87c9cba8d776bad9563cdf3014951790", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:06", "1967349", "7d26b458ca42ee33cbea75d3d7d6f4ddcea67971c0eecf5eb617c5943b8cbc11", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:06", "1967350", "85081649f4ef4ff7b1e789ebaba178f7a9ecc95601428b1af1e2a3c8169cba97", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:06", "1967351", "a291c3384de206c81d51825ca4345cc066f72c5631a0def0a68c98dfd7246576", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:06", "1967352", "cd7947a0007f855b53e4e4fad8180d37ab43fb7924dd2d77be59cd971e1a48ff", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:06", "1967353", "32bb1dd4fd58abcda6e2220017f0318d6951f122ee75dc63510b51adadaaf50d", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:06", "1967354", "e45d5fd82ef1337778be59c7606caabf7a8ef8de9036181a3089fc890780f8fb", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:06", "1967355", "213cf996c0f9f1945248272d3517ca159ab1cb314fc56ddb5cfdefe755c1cf57", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:06", "1967356", "41a8ec2c53f53ae4b4c1e89ff87385a2a23b3d4c1853b46b2740311e143bb0f6", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:06", "1967357", "8b9a1916a2e1b9bf16fb701ee898926a6191bb6348708b03df1002c1a72ac286", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:06", "1967358", "b0387a10a02519d768a3d2c1ce6c0364c0b53a3089ebdd5845de01c7215af845", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:06", "1967359", "78e1dc205d6604f5ebbfaf60081ef394d2ea4003f153c21f6a51cb6b469bdc8b", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:06", "1967360", "c098946e624029a7693792b9953f28c020584995fb13bd802aef920ca1c15034", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:06", "1967361", "ef94f6f0eabfc8eee67b276827f1a59454fd715947204918817471ab492dc04e", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:06", "1967362", "eb7ab3f92bc0688510efaa43396279f30269ab035dfcf7940ddcbdfe7d1f86e7", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:06", "1967363", "06ee6b9fbd843b5b2fec796fff40dcfab8a503ac7069686348f0831df628eeeb", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:06", "1967364", "cd15259eb7e0b80adc993290803313a005cb632795232c00077fa90e6315f62a", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:06", "1967365", "79c3f7b350b0a78ad258e0c52944484bae65654db6bba0a787f139cc969339ef", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:05", "1967330", "86c8601966c2e07969dc3ad027a3f4a5efa0493cb0e8a77e2971d2e3a5a3e8cc", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:05", "1967331", "bf7f92b44bf90ad20b0feb24e72d865acd911e1056d0d4134e618e6d43b8d523", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:05", "1967332", "89a66029ead5f3b0b5d17284738c6bf89b7a9244a85ad7702f41dc5f3766a0b5", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:05", "1967333", "b05e40ddbc07225eadb6b7b8e9349f41a59cbbecac5c9ab9b209472cd492fc85", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:05", "1967334", "70f968be35fc7f4449bc79c30b16d4b407f717bf7b3416efd5365bc57324d731", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:05", "1967335", "0dc689e32eb66e6ad154cb00bd2066efb54d25d319cb71796957d0a3700fef98", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:05", "1967336", "d15f089070f324fca8454260343befbded56196a8534c3555f918c938b4487d8", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:05", "1967337", "9593eb2d14bfaa7ed666a422384b677bbe9c70c3a94e3c5f2fa399b9f9428e5a", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:05", "1967338", "2a8f7ce1d3a5f3d94efb9557a11f26c5a5071a9a38fb3f35b0c6260c8665e2be", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:05", "1967339", "6ca5d30fa8d5804cab2144343001393030a0f57bad75331afa69246c9cf7d5ea", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:05", "1967340", "07a164e63644f4e74ed75cb1c842e7bacb37092498ec0a87de916e3341e40a3e", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:05", "1967341", "73e98619a81211c0ab258bd5059333e6228b628d01fe89f7964e54f19f10afd5", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:05", "1967342", "272b7ffeb342800b94fea42a3712a7f36381978fd995a8a91753ee0629c477d9", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:05", "1967343", "83723853c1a453851411bd325b9dbd5f5a28b0d1d8b8ea54ce3eb0995bcdcc8a", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:05", "1967344", "2998fa7c1adfd12b9a20f2053247395d2653f0ce629604d44cd3995376a0b253", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:05", "1967345", "3f02f1d03f9d33ddd1d41ebda66c40498bedf25320a2f9ad1fa824a6f6ad4e71", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:05", "1967346", "b711479c2547cf7e52775081f37c4bce5afbbbf1b02e0872dde7feb7df8a173b", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:05", "1967347", "06ae44e554bf9ec2fcdecf16b3edf66daa1b42bc8315cef7ed35f5d9dcfac248", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:04", "1967313", "05f771e21dfeecd3d7ee1667236396f0fb1f48b900e6f280ca3da40e32c42b01", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:04", "1967314", "12a84c8bd2107977dc69dd64df6c07945c3e132af6272f0d1cb4a7a7151cdd45", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:04", "1967315", "40fd9044b264486805f003cbbb370049277b503580ccc3cf81f7c37464ff8894", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:04", "1967316", "d2de8effd679bcee2d1da489092c9f9c28d4d0cfe727f8a16b25ff0b174fdce9", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:04", "1967317", "789c8c1b201941fb9cd2c6c942839776469bbbbfa23a1b419c8284080cdf529a", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:04", "1967318", "4170359ee547e54090a6788104e4aad68f2ac95c5e03b69206650b8f3cdac8f2", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:04", "1967319", "28e04c4f4e71fd948da42dba755412f51650221422879aa7b322fe54e9bc5a2d", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:04", "1967320", "8e9a98883f59ec58524661aca3d5613f534faf7895a83dfda7771d50146515ec", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:04", "1967321", "cf7c41f44fac25f6e3be5e9888bb69cf7b01f71a8efef6fce60aa40371a8c174", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:04", "1967322", "482128dcdf883833a5fab52cfbe18c2f64dec802f0e71c5fde2dff64e246d2b4", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:04", "1967323", "67631996b1d3f542df180b69edea201541533ed31e0c9b52f35b55d70c02b96c", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:04", "1967324", "1206f4ab494d09f5948c135d8d3c26bdccddcc3caa10d18268ef67e3b78b8db7", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:04", "1967325", "82a4c3af6a3e38db122bad74c613d93a0e63a4ab4a47ba9d1faeaf5675729523", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:04", "1967326", "c4b8570279ddff181ef4bfc0c7d10686c7b1b8e7a362fc7b83390e3c6f88eef3", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:04", "1967327", "b803d4eb425994760ee5d316be738b381e150e70b4e4d6d87abfd8ba38e57297", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:04", "1967328", "da89ecd791870920f1f1f48625c70a5ddc056da8cd02a74e2129a85f19290a29", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:04", "1967329", "7910f3c6bc2b2d4e27ec5253e0eef55025adbde7599e4ff622547305988982c3", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:03", "1967296", "b17e78afaf85946eaa7b0be74623cb789b338b10344909ff63d8a71c4939ea4b", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:03", "1967297", "3f0b3466051e2fce7126883d042b1418427d2373ec6c7506c53e86461cbb4f53", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:03", "1967298", "9060425d73de10aa830050ca2c8eb0c8224aa69e7c02f6bf56904efae2a62539", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:03", "1967299", "5c9c49e5e461d6c75c1f5ed2be82a0b530567dfcb2238881f0fb433b9a3cc789", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:03", "1967300", "8dd46e968762f0a3c4bb8578a0862ab462129e25c261280e0d5c299324b928ad", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:03", "1967301", "54c6bd25d8a66c688ffc9ea08f8bf1dc5604bbb3e4df6d9416ea129874a97675", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:03", "1967302", "8f80dae51628b108f2e632966bcfd3fa464efcd49162b9d27b0ef86cb4adb457", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:03", "1967303", "792ac0dac56e753cddae71d71ee01ade158c8cb70f2aea246af28c91f93cb701", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:03", "1967304", "2167b66cd69d789201bc30da6d5ac975f9f814fd6a2bdd4c265a4d2be49ad6eb", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:03", "1967305", "e18a30d85fe98ee418a8cbc8eeba85319cf503b0cc02ce2d7a65114f4692b29d", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:03", "1967306", "c508334ddc4f0e9b525b2883bbc81cecf051181fbb1e2e149c21dd355bcb7f4c", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:03", "1967307", "4397f9a83c54892f71c3dd6f3ea1dca6bcffdebd669b86cca8205a74646827db", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:03", "1967308", "10778c9afdb6d26dba600468b7d77190e906de7157c71e38371339e443afe093", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:03", "1967309", "eefc9129dbb6137c38eecf9ff648baa7e8ea80ed280c2b53c5e9117b211a1c64", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:03", "1967310", "34f0dd98c987e1b1d065b6f62e9f67210bc01209fbdfc062948c4dea730979c9", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:03", "1967311", "a205730fff89ef53494988d15a8e7b2a29e854eefa06e8b840e4627a5833d85a", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:03", "1967312", "8d7c01a3ee2154e915055ef46176b8b8ba5404f29f1439c80c344359bbd2ae11", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:02", "1967279", "6f546813fc7b8374740d1f2bd63d7a150ae056500cf75b0305c28d9fe32502f5", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:02", "1967280", "194955e1e5cf708d6d1fb42352b36a640a0d616145c1e8baf71ea92bd52694da", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:02", "1967281", "6d59a6444e336d52c5005fac3d84a4d389e82da90894a8e1284cc12365ccbdb8", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:02", "1967282", "0ca4f8d90dad653bd53f1c7629bbb7eea60ffea05354eec6e09f980a3b7f2658", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:02", "1967283", "0f448af676a4ff819f52f666bc7ed48ada0b5f86ad15709ab45af02611b78edc", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:02", "1967284", "9dd8cfb5ef00d732ebe461d4e3205c8a786d2b9641fa80119dce2cd215cf5bae", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:02", "1967285", "5c461490184a972b1f30809a54b1cbf1c139689e7e0b7c94077667cfddc3f426", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:02", "1967286", "e7cb7af4df570dde7cf234743c8bc1ff7fefa7ee7c1300ac310ff051cd759823", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:02", "1967287", "c65c539302c0ea16f4f18776b8bc5c62452c60901af746f870a6d826c336e64a", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:02", "1967288", "c249990a6a8637dc118551100430bd8dbb7021bca483c51d2c6913aedc0b12d3", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:02", "1967289", "b8315f6d899967836f2200165c84e34bba0c65dfefe9dcbd93aa3e11fa2c19b5", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:02", "1967290", "5d0e9e5cffd5d1fc22af3887b870c7c00950821ef28fea57ae101e1eb3234a15", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:02", "1967291", "be596423343607575c6811bfc135424aa4c4a648ae598ebaafb49fa039373a9a", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:02", "1967292", "eac6df2a730f31690616604493aef8246b9908c21729c35e494d7059bf409917", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:02", "1967293", "030624c1c8d47f2944e1ec740d66109ff9f018c81835ed3d594ec3b9e45d595e", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:02", "1967294", "16e6fe3a9594e001971e63784658a8d36d47247666eec85d9e4dfbb3d5be716d", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:02", "1967295", "5779768620b1635721f604efe08b398a72dd70f4c6ba2696ae6c48a7761d48a7", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:01", "1967263", "667baaf3c90948d388d10b2b34b610fa9bd9e6d9697b83dd7b428839f513d689", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:01", "1967264", "fcbca697377059b61a7114bd70e63de66619fd31647111a3c0cac112e1f4dcae", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:01", "1967265", "4995290ea37c51c9391813fbf9a772f0e2e014a4284cbcfc3ba77dc407e14462", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:01", "1967266", "1cec455081f66eaecdf9d9ff916e23f869678641bbe234315d966dd095dc9747", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:01", "1967267", "08fa8cbca06ff60ff6e723be3c7399e80fd2468a9aba62959f6c0d7a3b3bea8f", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:01", "1967268", "ef66e79dd9a7e7c79dfbe9fa70640d0006d53ccfbc222bc181290ec8c61234c8", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:01", "1967269", "018c4b25faaac2cbb10cfd60f57e772b4075b88503b549c04dad7ac80172e7a7", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:01", "1967270", "0ca1b03a4d094a6fb9153cb60a433334634a25cbc9692a19db8b566066421a50", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:01", "1967271", "ce2983b1d889b942336d6998c411f1487801eb0ba9b2941b66edecc23d83cc63", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:01", "1967272", "264d4e2a4eb367cd6c0b78e2eba728352ef35b759aa84d92068da4280cb8fa4b", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:01", "1967273", "89f14a8f3473b994375b40557e40a92ff45d8d4a44759a64ed3fa18b21f3559f", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:01", "1967274", "bd2b2b21cf6d730576018a44a19e47daaf1d47cb08e2ee1ddf54bdb23b44211a", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:01", "1967275", "dce5f2f0059fa56228adebc8d55b826113a9f48fd69771cfb4e402018d750803", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:01", "1967276", "1541bec40cbeb75488b0b2f0f5df4521bf87823750d7396547ec31d1d20874c1", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:01", "1967277", "1a08e72268a585205760e3207998ba70e96a8dfc0965fb736e6fa31f8e96cd0b", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:01", "1967278", "e28883d95280a74b7f28944c4ba1864ec9876aba814519e63473caa1bc306265", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:00", "1967246", "61358f2274f9837cf598227d80fca4bc28125a25a78a03d31b4b1d1e46a9ee40", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:00", "1967247", "6e92a20aaac7981f9472dafe413ca70cf1a3e0650ebdbb806f24e070396f12c2", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:00", "1967248", "2b97545ea29f480294ef0b88ae617fdeff1ba853e897d5cf35c022b73ecbf627", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:00", "1967249", "4df2b7c7310166de3ca4292f2eba4c96aecc1e988f5fab02e955bb536207678c", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:00", "1967250", "43a701ed8e99b00a6e87ce04353f18919e3378ec3d06a321001a375de4d4f230", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:00", "1967251", "39f24d79adc3b9ba97ca4e5c1b66de784d798ad5b97f9335bff298ab39d81867", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:00", "1967252", "27114b920e54345a6314edf5eefa62ecbf59303d8b2c2436006df6605ed7497f", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:00", "1967253", "c7b5a7456194f163fcfcc2ddacda16c72bba6470301979592c9ca7b56d332768", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:00", "1967254", "b5aa3a9627afdcef67a27f0c320261b053301e7be86bda4c8c919b790864d708", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:00", "1967255", "e70ee9050d70e9efbe91562b8dbf98efdbb6fc97ed0ec4eacf987927deb3307a", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:00", "1967256", "6d1fa07137d8cdac94a62b9083fb8afb694b67ca2c747bcfa61ac62e3f0f3a52", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:00", "1967257", "c08b2360086df271976f0ce0de92fae599412df12faa8687fb6ab6d9dc587d64", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:00", "1967258", "2cdb9435d711c324553eb94a2216a2ab5bd01156f3362a58cc728f0c1e812321", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:00", "1967259", "4704c9c3bffb2edb8ffad0a082e87e27aa100bd4d3549fa07610dad98cea38ee", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:00", "1967260", "36d2e1fbed57106311ff1d9f6669d6e9ef0ff061ab5f38fdc185c26a03cd07bf", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:00", "1967261", "4688547f1e5ea532e39bd839fa0324521fefa7c2fde33d1a4a3898ab8b85d7c4", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:48:00", "1967262", "95da1888b0b364b24b5526208e2ce9bd9c0859439b8f3c1ed3af7d7e87f1be86", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:59", "1967228", "f021e541fa62f2cb263125c30c3fc3f4484b76e248baff12eb6e32d5d677568c", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:59", "1967229", "70d3caf95088ff799bc0c4cb864dabd183661790d239ee463513cc8b030a7b62", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:59", "1967230", "20b7afa3aa32d05ad8d4c08fe166a7d0fd14a14552e37cb9998883bfd935e0a2", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:59", "1967231", "a8b14f29973c7ea2ffb468664b5aafea9fa3d3bc9656f683fb57ba28a279dc65", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:59", "1967232", "c6b546c1385703e049a30a38cc7fd860e27dd065fe1a1006b296200447f6bf31", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:59", "1967233", "934cbfe001ad15edda931dd51910d8951e860d2290974046333e2b0befebdcc2", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:59", "1967234", "0a6d5e7ff6bab6e55f9237eb1d92f9cdf38b12de0ef01691c1613f93d4175853", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:59", "1967235", "02cff06902d43cee9f25ac283524616f3775b0a9ab15b616d817acc60fb55ebe", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:59", "1967236", "f0a4a814296c95b3c9df10d6c599e012aa664e9906ddf0451cbf6934f02ca4e5", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:59", "1967237", "bb18ecafff544970648531a1dc384f6fdcfa044fac92271398e931456afbad68", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:59", "1967238", "ac90fb35ffafbac0ad2e4b0b6fbb98cbad73eece503d5a08550e9c11b1159b0f", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:59", "1967239", "a225ec99db143b39d834a47a533d16cb1508ee4c548ea80362ca1fdd4b5b8488", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:59", "1967240", "51d9878eb6c46a7dbda3cdee937d505f36439540fa2ed09fc6e14a9a4b2be51e", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:59", "1967241", "e5b4cc9225d1130b33e9fab894b8c626d18ce1ed6ac55de08f932495862c3960", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:59", "1967242", "e5c8cdbad58bd75899505a9dbba015917df0e8dcea6bc8bcdd0873dc59c4bb99", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:59", "1967243", "ef4101453e88a4fe4a289f7042c00721145472319ca285993580ab3ed7719c1f", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:59", "1967244", "7600897397557f7168b5e71084170475a61ebab884ffcb9e43eda514f4fbe0da", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:59", "1967245", "4593d23308fbc02a0338b56bef5e3cddeb840241f56135ab0356e4528f57d27f", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:58", "1967210", "97e003f4eef2149b3391f6a245226e550f0a09dba4ff2a9cad6eba7b76501a08", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:58", "1967211", "db97af27845e7f1328a27e75612c2896c68ea004a6421e7fee48e1751acc9c97", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:58", "1967212", "601603e341c81c66d875c47e01073ddf694a8d98b473bef5be2f8b43c7ae56fb", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:58", "1967213", "b5c2793d9b5d825b6781d031098c97ddcf8a1a59a27c8187d02e6c0e21ce5020", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:58", "1967214", "3f2ed55dcfdf32e79a43f84c9ca89f15c72dbd594e509c5d12c302d346c4556e", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:58", "1967215", "a28d1687011c0ba35204a0e4972ee3e4f4d13c9bd4bd88e6181a74678b1797b1", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:58", "1967216", "c29cd77489870d4f330f18dc21dddbbde4d26453c3d9d4ab020b14dc4d685142", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:58", "1967217", "a6940f7cd355d7ae914b17853cb68d0a2924158feb04ba7ccd28d8b8e58d2a0e", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:58", "1967218", "93a582a257be561f40ac17624bad2ea06ddfa0a210bb68646ac90c3416587674", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:58", "1967219", "b87330d7c68a920bcec8e553e2f276ff3aeaabc86678d82ec89074898864efb5", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:58", "1967220", "d43b8b95090b60786f29b8f233a5dde2073a83c7857500f391fe620a13a829ed", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:58", "1967221", "a4beae77ec9dbe2fceec4fb409418ea095dfd54d8ff752310a8bb3b6b4a29899", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:58", "1967222", "c4c6ae06db85515b198d9ded3d53377c433cd55c07f8d0ffb020c490baf91ab9", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:58", "1967223", "9d8be7242aaf91c0e8136e4229175f8e73849aff5fefa0fd8f8f7046e13e06b8", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:58", "1967224", "216790d1c38fa5b66d08b9ff0a113dbd1e88a37eff0a6884493fee604756223e", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:58", "1967225", "52aeb51ab9c7ae1559843c3f8e3f4da3b8ab85703b6dd8df93949498dfca355c", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:58", "1967226", "895a627572f77d623d11572c122acd64fb0d5469fb5e4215e92dc7db75340a95", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:58", "1967227", "4c822f564a0d7026aa95a1d352fb89ae413c88c3f08dd03801fd3b5e7e31dfe6", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:57", "1967192", "40d72b666ac3dd47481e086c5b1482207d39c26145026bec1c11cb30f2865fdc", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:57", "1967193", "ec68ad19753c6189d395d68245e07627ce8bc690eb3779fb70bebc4a90dfc027", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:57", "1967194", "625a8afc9462ee22d2f4f50be5c9f0f7dd08baaf38b5a8e4ca3c2b4e381eac3e", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:57", "1967195", "4d75b2cdfc4d146ec313aa3814cd379ae8a2bc6c3f85fcebf73c8ea379e0076e", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:57", "1967196", "750e69766121c8ce5034b0ac076e040091ddbf7347891432dec7fe993aac8d17", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:57", "1967197", "b600e6741993b49cad49bc280ce4cb409ac80b4cf84cc8a36ac545770a30ad4d", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:57", "1967198", "cec69fc15fb6176b9c043d5d07d79a110662bc0e29af3417b3dbb3297f5792d4", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:57", "1967199", "b68bfff3591c121db0f2ad95b0359074a1c658b40368ca7602cf90ca2d3ab481", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:57", "1967200", "f0f8fb7556b41f151fad306952b9198d7f578cb0a36670667a14ab5ceb6f0aca", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:57", "1967201", "d85887ff100789b98a6d8b89d1aff10effd15352c2d6ddb5c1a958cb7b10369a", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:57", "1967202", "5e860178d975274c8a76302d8aa6d1d9cf761ab8eae1f6d3e6a15392fde4ae96", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:57", "1967203", "08a4dfda418bbd0d26b3ad5d5621392d6808b9bc8ffeae02fa211e4c974dc833", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:57", "1967204", "6aa7d52a9bb34902f827706dc8cb40931254c7f5fabaeaf30e49ef2330fde868", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:57", "1967205", "30b3004a332173f8bd8202ca3e4f15f1ba48b21b6160746628da8d461e3ac2f0", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:57", "1967206", "f12e37be89daf7ddc2b9aa9d705e2429ba1b5045bcb5e763efc245258b638906", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:57", "1967207", "345f8d4ec7a168f91c69d37f0bb442e0029f4be8f31d51251cdfb4c8aa88c97e", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:57", "1967208", "8249c8e4b431e940c2a35a33631f3daea7b3be8632c0ea6c23f79cf6b9a0830c", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:57", "1967209", "d507b180e013b66eb4b5e7c80c19f938bfcdb089edfafca3efc08a99bccac09d", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:56", "1967175", "42baf81b545e09f28ddabecad7c87996320b855ef538ade40fe713401e9d6b10", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:56", "1967176", "3064ea83fecaca4a73520c2947989681a8a7d4477c0cf44d870e02423e795e35", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:56", "1967177", "e97769c460f30ada21b1ad757b208220fcf43c29bd888f8943f8920b6769ffab", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:56", "1967178", "fa616d49b284c5a5a58c600caaa5d45109d7a12634ef285a56302b71b09347a0", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:56", "1967179", "1a9f15e973f139e20282ade5356b808273b045cbed1de9cbefe51bf1bd8579ab", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:56", "1967180", "8839a1fbc665d27dcbb9bf715c0a7ad024b15ff4d4d8e180eb8fc1ee875fecf7", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:56", "1967181", "80cb45d9fc6da663eb3bb764e4d82881da2f519e964e9a97faa28d409620155b", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:56", "1967182", "350ee0c8c8e1fefdc3ba4697641c4c2ec8e6076507c1b41cec6d44180de40200", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:56", "1967183", "c324b9d7dd019e82e23066c159af050a484475eee0663ae49f10ad0e0e65cea4", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:56", "1967184", "af9bbe2faae452f095d35c3c82d13cdc39c15216271b7a51f8703d287604853b", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:56", "1967185", "db53bd234e062552f0749adebf26ba518b3d5c223b8d8f5f2260f128e52f4e85", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:56", "1967186", "82b4a542e6d1eba4f3f140f226f31c3b8df9ceae1775f3bad61039b1c42e1c4a", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:56", "1967187", "a6a647a7f158cb091aa48add3046a857f7ad8f253d8c17c9793f7b03bc6d5659", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:56", "1967188", "5dd72b0f1172c7a811efa9cd0e7c6e51c94ce95cea1a60c8212db8f614816e71", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:56", "1967189", "e7f6d1d202a6d75ca22a0ffc93db234584f7711253e7fa936b46200e67102cd0", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:56", "1967190", "bedbb325a21d51ca77c581e6bdf1f19aafa9f2b0a837366eee00313370817a73", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:56", "1967191", "d6199820c84ebbece82eb086402231a4477d040176f4f11e660a207c8f7ec827", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:55", "1967157", "a09dd015806b92244dbffe3bbff92e5ec77438467445511fa26dd4cde73c0622", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:55", "1967158", "a80bb371d339cb6ebd0f03fad2774c04cc39ad02cf2f7902cfd5d4d2a9dc89b1", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:55", "1967159", "cfdd667dc09e0131214c975c0443dcf1500987f7b5b341ced0651290323a31fa", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:55", "1967160", "77c11ff870d32b3f837d7a4b597bca4d8907951f0fc53c32bdde5606e2e06d7d", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:55", "1967161", "c30de60a7ff0603c66afd79b5fb3c50ccc6395d0746b92e5a4a8772d38d88fbe", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:55", "1967162", "9cd88339d46110ce5bfc038741706891e311ffaff52e2d893e3986c32c5f856c", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:55", "1967163", "d1234968df9a5cc02f00b72fffd15cfd740c19a324b625f6aca15fed92c48b66", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:55", "1967164", "7465c4acb82cf4dc48d4886f5dbd042d53f717edfc38d93463483e4143bf02c1", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:55", "1967165", "9c8259acc50b0723b4dd247d83e9cc0f567cd108141f9547080d167dab4f147a", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:55", "1967166", "3bf1cdcfb06c6c4a90d0c6dbe8e1c8071b0a7edb874cf91d6004abde8ef98d02", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:55", "1967167", "b42a0ff499a3ef28036bd1258782e08b198a9785ebdc0abcee2c4996c4f78a9f", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:55", "1967168", "7927af67f96821f65445375319223b5cb1d240283e8034d90bfa0abf07971bd0", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:55", "1967169", "849dd5687b0591c77d0aa573128da48251ec710336079d0bc973614cb008e476", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:55", "1967170", "9e6112bf1457fa811a1bfbe3f87e9d7db3ab7d77a05b726c4d5f043308eb270e", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:55", "1967171", "4ba088beb95ad8cbe84a5994d868e6aa52dbfedbfbf1f94244eae57aa2c1e069", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:55", "1967172", "486a882d4898902cb9dfccb9b62ed8db5983c62b3c294f5d5d53faee1c07d332", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:55", "1967173", "aa044afc440bb1927ccfd2ff07bc6b9e507183fb9e3f82275e23172ec64fb099", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:55", "1967174", "661591cdd0bf9b9e0058987c8fefb1088a076df9d8b2b21a782c00b85798ef27", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:54", "1967145", "71eb50e8a17eedc535430a428f7139c4b99cb3164a5baa5699461d6271b35c61", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:54", "1967146", "0eac0f88d015c72839465d1417222aacc90898eb47ec2a8d8057b6ce72066860", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:54", "1967147", "eb7f5d2ad5beced876a70164350b71cce80678ab5fbfba2da8997d1b86053e29", "sha256_hash", "payload", "win.vshell", "None", "VShell", "2026-10-15 10:49:27", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:54", "1967148", "993c5ad35030d9fee0e340843c8aedc2291e78ce3aa4413e938a87175121f2af", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:54", "1967149", "1d6ebeeb09ef609f547c8291b83ec657c01deaedd637f04330e168af1dc25bb5", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:54", "1967150", "2c12c1dd18959fec5778be31b48a46b8a54d4c03e9c64e91df258502e0527a27", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:54", "1967151", "b73bfa66fe4b50e929f91ee3fd5a94384abf96cd1851647522f000e8d75f08c0", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:54", "1967152", "dc9a998041bf7e6bde9dbc18e08aef5cc6202a7683605d1b6138c8ca9db12bf7", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:54", "1967153", "6f62c0b0617618af01eff5ce51a413073b9906e86dd3c8861e3a4ce220d8e690", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:54", "1967154", "6c0f2f68a0d4343e1e0abb42101d6ca7bcc8b43207db5c3ead5213f7d89ef802", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:54", "1967155", "3389070d2bc1037a231cf832cbb3a6b81545f6876bb4fd8130bac87dbbf5914e", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 10:47:54", "1967156", "0c577e4dac135647e24f916088ba35c555e3f47daaf1cd0ae3942e6f68c31d8b", "sha256_hash", "payload", "win.vshell", "None", "VShell", "", "100", "False", "", "backdoor,elf,vshell,x86-64", "0", "0x3c7"
"2026-10-15 09:55:40", "1967077", "a4702449c7d794ccf46b92053a6b1517739415890e0147efe6aad96c683f4888", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/a4702449c7d794ccf46b92053a6b1517739415890e0147efe6aad96c683f4888", "AMOS,ClickFix,Foxveil,macOS,quill", "0", "c4ffeine"
"2026-10-15 09:55:39", "1967078", "cbf5a4f264d778ae60e835d32df673c4ee2224c88421259a19d7cabbdd1e18a2", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/cbf5a4f264d778ae60e835d32df673c4ee2224c88421259a19d7cabbdd1e18a2", "AMOS,ClickFix,Foxveil,macOS,willow", "0", "c4ffeine"
"2026-10-15 09:55:39", "1967092", "b13de57505edea3858c69eddd66292767f12ac2296876ad075cfc9e34eca3a7c", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/b13de57505edea3858c69eddd66292767f12ac2296876ad075cfc9e34eca3a7c", "AMOS,chant,ClickFix,Foxveil,macOS", "0", "c4ffeine"
"2026-10-15 08:21:17", "1966987", "026cc4f630776e0c9d42905bf3e9b048fda4da68d58c66e4a2e5bb3d8a9d787c", "sha256_hash", "payload", "unknown", "None", "Unknown malware", "", "75", "False", "None", "cowrie,elf,ssh-honeypot", "0", "Portfwd"
"2026-10-15 07:46:10", "1966953", "2e7db0451353ba2f128333ab512f388cbc172f3d2f81766c3a14c7cf153830a3", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/2e7db0451353ba2f128333ab512f388cbc172f3d2f81766c3a14c7cf153830a3", "AMOS,ClickFix,Foxveil,macOS,willow", "0", "c4ffeine"
"2026-10-15 07:46:09", "1966956", "48a562bcbc96eb4523e8615ea05e76ed59301dc3bbbf96d6536a37777eb8958e", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/48a562bcbc96eb4523e8615ea05e76ed59301dc3bbbf96d6536a37777eb8958e", "AMOS,chant,ClickFix,Foxveil,macOS", "0", "c4ffeine"
"2026-10-15 07:34:02", "1966944", "9eb4c83decf7f9b3f31001de6404ec6c7bc214304b372b3686e6e7118cea4dad", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/9eb4c83decf7f9b3f31001de6404ec6c7bc214304b372b3686e6e7118cea4dad", "AMOS,chant,ClickFix,Foxveil,macOS", "0", "c4ffeine"
"2026-10-15 07:34:02", "1966945", "e6ce5525512e01f9b3a6a3a659cb1ffb578c50ec63096d6cf5a75e194421b4dc", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/e6ce5525512e01f9b3a6a3a659cb1ffb578c50ec63096d6cf5a75e194421b4dc", "AMOS,ClickFix,Foxveil,macOS,quill", "0", "c4ffeine"
"2026-10-15 07:34:01", "1966946", "12d5649d59cdd8034def4a74f3db6a2dc24c80a59ca3505a71843d284332a6e9", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/12d5649d59cdd8034def4a74f3db6a2dc24c80a59ca3505a71843d284332a6e9", "AMOS,ClickFix,Foxveil,macOS,quill", "0", "c4ffeine"
"2026-10-15 07:34:01", "1966947", "fdc7fdbc7a64f030002b16436cc2fec5694392a8da77751156a8c28039474c0f", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/fdc7fdbc7a64f030002b16436cc2fec5694392a8da77751156a8c28039474c0f", "AMOS,ClickFix,Foxveil,macOS,quill", "0", "c4ffeine"
"2026-10-15 07:09:36", "1966432", "37e6cd883240a67eb5f6e88e681978563e2ea6371beb9096d362d39b1a736df4", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/37e6cd883240a67eb5f6e88e681978563e2ea6371beb9096d362d39b1a736df4", "AMOS,ClickFix,Foxveil,macOS,quill", "0", "c4ffeine"
"2026-10-15 07:09:36", "1966435", "778be86551e061288e0f3dbf1237f6b067155170f08a884bea463b8415fcb170", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/778be86551e061288e0f3dbf1237f6b067155170f08a884bea463b8415fcb170", "AMOS,ClickFix,Foxveil,macOS,willow", "0", "c4ffeine"
"2026-10-15 07:09:36", "1966436", "e11db3bf8c3a66af944fdba35762148b825a704c4792008e93a80395e47c1632", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/e11db3bf8c3a66af944fdba35762148b825a704c4792008e93a80395e47c1632", "AMOS,chant,ClickFix,Foxveil,macOS", "0", "c4ffeine"
"2026-10-15 07:09:35", "1966441", "57a671a61a6fbebe17b09d9baa5712d3b0af8232fd807697183c6b1fb67286a4", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/57a671a61a6fbebe17b09d9baa5712d3b0af8232fd807697183c6b1fb67286a4", "AMOS,ClickFix,Foxveil,macOS,quill", "0", "c4ffeine"
"2026-10-15 07:09:35", "1966443", "d34df68e192d8d688a49ac68c6fe60e7a75f18e012e8671dadc45cc90b832377", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/d34df68e192d8d688a49ac68c6fe60e7a75f18e012e8671dadc45cc90b832377", "AMOS,ClickFix,Foxveil,macOS,willow", "0", "c4ffeine"
"2026-10-15 07:09:35", "1966447", "6363fea32a30affca2ebbbcd28fe60f5f6a4122231a80b280eda6f9523be931a", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/6363fea32a30affca2ebbbcd28fe60f5f6a4122231a80b280eda6f9523be931a", "AMOS,chant,ClickFix,Foxveil,macOS", "0", "c4ffeine"
"2026-10-15 07:09:34", "1966449", "f3d8ed915b2a53a35e52bd1ec39c21deeaa831ae0a969221bb7bab492938ff60", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/f3d8ed915b2a53a35e52bd1ec39c21deeaa831ae0a969221bb7bab492938ff60", "AMOS,ClickFix,Foxveil,macOS,quill", "0", "c4ffeine"
"2026-10-15 07:09:34", "1966453", "09eb8bbdddc17ce5be1c176dcdac2b812414fa3691ceb5fa81e7ef6e20a20f6e", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/09eb8bbdddc17ce5be1c176dcdac2b812414fa3691ceb5fa81e7ef6e20a20f6e", "AMOS,ClickFix,Foxveil,macOS,willow", "0", "c4ffeine"
"2026-10-15 07:09:33", "1966457", "94fa6a971ad5f47af054b81752d471b920981b3ee4874a3823062417e7b36a9d", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/94fa6a971ad5f47af054b81752d471b920981b3ee4874a3823062417e7b36a9d", "AMOS,chant,ClickFix,Foxveil,macOS", "0", "c4ffeine"
"2026-10-15 07:09:33", "1966462", "f3b1c6f4350d34063cd7b8ab8b255cd40ae6aebf4963aff71fcb3f96c3300000", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/f3b1c6f4350d34063cd7b8ab8b255cd40ae6aebf4963aff71fcb3f96c3300000", "AMOS,ClickFix,Foxveil,macOS,quill", "0", "c4ffeine"
"2026-10-15 07:09:33", "1966464", "153ba36354b6be51e389dc81643f6c5799c6a317ef115b0a56343042845e9ef2", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://bazaar.abuse.ch/sample/153ba36354b6be51e389dc81643f6c5799c6a317ef115b0a56343042845e9ef2/", "AMOS,ClickFix,Foxveil,macOS,quill", "0", "c4ffeine"
"2026-10-15 07:09:32", "1966468", "5c5f5243923df0f7d0df186aea5e57a0afe61974d3b5661581658b041fc25985", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://bazaar.abuse.ch/sample/5c5f5243923df0f7d0df186aea5e57a0afe61974d3b5661581658b041fc25985/", "AMOS,ClickFix,Foxveil,macOS,willow", "0", "c4ffeine"
"2026-10-15 07:09:32", "1966473", "3b38f182ae0012adbda7d6f396fa9c0265d0c8f6825ee13314e74397c21259f5", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://bazaar.abuse.ch/sample/3b38f182ae0012adbda7d6f396fa9c0265d0c8f6825ee13314e74397c21259f5/", "AMOS,chant,ClickFix,Foxveil,macOS", "0", "c4ffeine"
"2026-10-15 07:09:31", "1966516", "bd057e7560e1eea69be473005de73c6c97be545d81caabb9723bcd84a66d44f2", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/bd057e7560e1eea69be473005de73c6c97be545d81caabb9723bcd84a66d44f2", "AMOS,ClickFix,Foxveil,macOS,quill", "0", "c4ffeine"
"2026-10-15 07:09:31", "1966521", "7bc3a8a1f1c7e8da9036bf834d1c73f9b813ca928341c9a2eaa290d13f3e42a4", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/7bc3a8a1f1c7e8da9036bf834d1c73f9b813ca928341c9a2eaa290d13f3e42a4", "AMOS,ClickFix,Foxveil,macOS,willow", "0", "c4ffeine"
"2026-10-15 07:09:31", "1966527", "732589bd83261216a5c8029882f6819f785993af19e4189e6aebcec6cd807dd9", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/732589bd83261216a5c8029882f6819f785993af19e4189e6aebcec6cd807dd9", "AMOS,chant,ClickFix,Foxveil,macOS", "0", "c4ffeine"
"2026-10-15 07:09:30", "1966546", "35b1308baa0c0a79f8431aca3988c4389c0e0f9fa3ecd4243295cd1707f53683", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/35b1308baa0c0a79f8431aca3988c4389c0e0f9fa3ecd4243295cd1707f53683", "AMOS,ClickFix,Foxveil,macOS,quill", "0", "c4ffeine"
"2026-10-15 07:09:30", "1966554", "eb5a4df6986f8534413178add3444a5fe58af16e8f500ab122b3096eb24646de", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/eb5a4df6986f8534413178add3444a5fe58af16e8f500ab122b3096eb24646de", "AMOS,chant,ClickFix,Foxveil,macOS", "0", "c4ffeine"
"2026-10-15 07:09:29", "1966551", "1de24789010bcf294a1fa3c8a982d924ba5d212ada16a30dc8e16532293886c9", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/1de24789010bcf294a1fa3c8a982d924ba5d212ada16a30dc8e16532293886c9", "AMOS,ClickFix,Foxveil,macOS,willow", "0", "c4ffeine"
"2026-10-15 07:09:29", "1966559", "a9cd105e5cdf8b3cafb0fe9ffb886ab7becd7dbafa7c4cf0ce214d2d5e5686c8", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/a9cd105e5cdf8b3cafb0fe9ffb886ab7becd7dbafa7c4cf0ce214d2d5e5686c8", "AMOS,ClickFix,Foxveil,macOS,quill", "0", "c4ffeine"
"2026-10-15 07:09:28", "1966594", "81c6588ff7720335ac09719e6230d1a8b885b8d10245c1601613352d861c0e44", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/81c6588ff7720335ac09719e6230d1a8b885b8d10245c1601613352d861c0e44", "AMOS,ClickFix,Foxveil,macOS,quill", "0", "c4ffeine"
"2026-10-15 07:09:28", "1966599", "21c98c84b8be10a6907353d9a3f508219eeaab9359fe008da967efee27a36735", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/21c98c84b8be10a6907353d9a3f508219eeaab9359fe008da967efee27a36735", "AMOS,ClickFix,Foxveil,macOS,willow", "0", "c4ffeine"
"2026-10-15 07:09:27", "1966604", "421eca40073d7c1e542825a8bdaeabf252d8499cb69b9f5591427bf9ee619865", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/421eca40073d7c1e542825a8bdaeabf252d8499cb69b9f5591427bf9ee619865", "AMOS,chant,ClickFix,Foxveil,macOS", "0", "c4ffeine"
"2026-10-15 07:06:35", "1966818", "34455bc291e4769278f81010c7563c3aadac66eed2aba8156e0afd307a7a11a9", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/34455bc291e4769278f81010c7563c3aadac66eed2aba8156e0afd307a7a11a9", "AMOS,ClickFix,Foxveil,macOS,quill", "0", "c4ffeine"
"2026-10-15 07:06:35", "1966821", "cfe24f9b882b88b7205f6f380872fa0a8496a37426fa048da1187326525e5a01", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/cfe24f9b882b88b7205f6f380872fa0a8496a37426fa048da1187326525e5a01", "AMOS,ClickFix,Foxveil,macOS,willow", "0", "c4ffeine"
"2026-10-15 07:06:34", "1966827", "15d7c75f777f4ea7800122bb8e5cb6bcd3ac8d23e1eddbf1076462443cbec990", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/15d7c75f777f4ea7800122bb8e5cb6bcd3ac8d23e1eddbf1076462443cbec990", "AMOS,chant,ClickFix,Foxveil,macOS", "0", "c4ffeine"
"2026-10-15 07:06:34", "1966842", "25ea334b75beede8dcab4c4460313c3013c35e55c16cd066231d80ecfe4c0653", "sha256_hash", "payload", "win.cloudeye", "GuLoader,vbdropper", "CloudEyE", "", "85", "False", "https://blackfish-defended.com/research/zenith-kit/", "CLOUDHAZE", "0", "Darkfibr"
"2026-10-15 04:53:33", "1966787", "9cd6656e9d40aa6c49c0fa7918837e807676d91c99727f9ad710d99c85b5b5c6", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai", "0", "whack_sh"
"2026-10-15 04:53:32", "1966786", "dba647b6f6842806da86f9edb2d0c60546c5c4f64b0710b3bf3f6e510d6c5f9a", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai", "0", "whack_sh"
"2026-10-15 04:53:31", "1966785", "b71cbfda344f7445e07ecc03e5b7c3b21b72f0dbe2cc326751bd1e0af69c9b26", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai", "0", "whack_sh"
"2026-10-15 04:53:30", "1966784", "5c6b57a72800f32a871971d6979b39ecf802beccf96915bf79e174c983df835a", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Gafgyt,Mirai", "0", "whack_sh"
"2026-10-15 04:53:29", "1966783", "4ec0c8d1d1d24ef725f9337683eecfd98402142ed043f5d857fb8b92eb39df3f", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai", "0", "whack_sh"
"2026-10-15 04:53:28", "1966782", "ebd354c3b542255eaec564e84833cf33cd2a9d54edc08b4c77052c43551ec470", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai", "0", "whack_sh"
"2026-10-15 04:53:27", "1966781", "6e2c6c590459044f14284fd8fef7fbd4979620078820e3aa0c72d80b06799a10", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai", "0", "whack_sh"
"2026-10-15 04:53:26", "1966780", "f31684778fa8dd70d2a70b6ac64ccd343d37089ff7c681c006829e36b582a094", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai", "0", "whack_sh"
"2026-10-15 03:53:25", "1966568", "1fb0b0a0efd6dac97031183a16a3c1ffb7dbf4a77912280d741cd6fca29c47c5", "sha256_hash", "payload", "win.agent_tesla", "AgenTesla,AgentTesla,Negasteal", "Agent Tesla", "", "100", "False", "None", "AgentTesla,ps1", "0", "whack_sh"
"2026-10-15 00:53:24", "1966403", "e05e7370ae270f112c1e99addae6454d97f39cef3518009e779ddd6c36d1c0ef", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai", "0", "whack_sh"
"2026-10-15 00:52:49", "1965974", "7bf96c55c8b19514de16261a63a079e0ea0f136e0aeaba83a7da79c3ee0b965e", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/7bf96c55c8b19514de16261a63a079e0ea0f136e0aeaba83a7da79c3ee0b965e", "AMOS,ClickFix,Foxveil,macOS,quill", "0", "c4ffeine"
"2026-10-15 00:52:47", "1965977", "09e12a9e689710a0afbbac671a047cf2056285e7555e8dcbf7496693f5651cb8", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/09e12a9e689710a0afbbac671a047cf2056285e7555e8dcbf7496693f5651cb8", "AMOS,ClickFix,Foxveil,macOS,willow", "0", "c4ffeine"
"2026-10-15 00:52:46", "1965986", "a77493bbb1c5e2ded3aa4f8cb7e40084d80f57e5bbe10ccb05bf78ea5371eb6a", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/a77493bbb1c5e2ded3aa4f8cb7e40084d80f57e5bbe10ccb05bf78ea5371eb6a", "AMOS,chant,ClickFix,Foxveil,macOS", "0", "c4ffeine"
"2026-10-15 00:52:43", "1966021", "499cb7ae6c385c77d3eb663394e552626621ecac74d86c8dc392f4098886927d", "sha256_hash", "payload", "osx.macsync", "None", "MacSync", "", "100", "False", "https://hybrid-analysis.com/sample/499cb7ae6c385c77d3eb663394e552626621ecac74d86c8dc392f4098886927d", "ClickFix,macOS,MacSync", "0", "c4ffeine"
"2026-10-15 00:46:23", "1966395", "ae6de2a72582e210675a13014018fbe0081311f6eaf4c3b8150cd084467900b3", "sha256_hash", "payload", "win.formbook", "win.xloader", "Formbook", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-15 00:46:22", "1966392", "9ca054500391ec34c4e8aefb113549979921266bfb794a56ce83db130d158a27", "sha256_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-15 00:46:14", "1966387", "85a356d710a0fa447fad01340d3c5e1b7f394bff44e1f2fa0c11c798817c123e", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-15 00:46:13", "1966384", "c75989b27e6cd6186efe0a110a9eec5dad42e294c494028f019d38e63a091f98", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-15 00:46:10", "1966381", "6245b55a44e72245eca0ddd75fb6295656df911879c54890f3b9382fdfd22913", "sha256_hash", "payload", "py.venus_stealer", "None", "Venus Stealer", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-15 00:45:25", "1966378", "9e12a215b0ac52a82e71103a133e2068991bb1efd441f52a170c61778ffd4856", "sha256_hash", "payload", "win.gcleaner", "None", "GCleaner", "2026-10-15 18:36:08", "95", "False", "None", "None", "0", "Grim"
"2026-10-15 00:20:42", "1966359", "24071a221b4e75ff66b21a0f4848ec846ee0ef60c3b0a7a7891923085cd81272", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "80", "False", "https://honeylabs.net/lookup/176.65.139.40:80", "elf,iot", "0", "HoneyLabs"
"2026-10-14 23:26:05", "1966311", "a924dc51efcc327e23837f61af68d2f793d36a36183c3cedb3987efca8382583", "sha256_hash", "payload", "win.krakenkeylogger", "None", "KrakenKeylogger", "", "95", "False", "None", "None", "0", "Grim"
"2026-10-14 23:26:04", "1966305", "ab3d42f5dc68cfd3507849160e1b5f90589c49f1bc8aea1226a1dea6e2824c05", "sha256_hash", "payload", "win.agent_tesla", "AgenTesla,AgentTesla,Negasteal", "Agent Tesla", "2026-10-15 00:46:09", "95", "False", "None", "None", "0", "Grim"
"2026-10-14 23:26:04", "1966308", "a995a81f862dc9994a8021fecfc55a7f8261974f50793e7bd8a73dab5e6b33a9", "sha256_hash", "payload", "win.phantom_stealer", "None", "Phantom Stealer", "2026-10-15 00:46:10", "95", "False", "None", "None", "0", "Grim"
"2026-10-14 23:26:03", "1966302", "ac111fca83240a2e695627b21c15c74051b15380e443c07be3e1bad702d12619", "sha256_hash", "payload", "win.agent_tesla", "AgenTesla,AgentTesla,Negasteal", "Agent Tesla", "2026-10-15 00:46:08", "95", "False", "None", "None", "0", "Grim"
"2026-10-14 23:26:02", "1966299", "afdba17da37dc958f8f336a97787453b2f6c6427eca73b1fe2612765272365c3", "sha256_hash", "payload", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-15 00:46:07", "95", "False", "None", "None", "0", "Grim"
"2026-10-14 23:26:01", "1966296", "b01615298c09ce4b58772668a5c77faa6d95fee84659a8b598dbe1b5a0a5f78f", "sha256_hash", "payload", "win.asyncrat", "None", "AsyncRAT", "2026-10-15 00:46:06", "95", "False", "None", "None", "0", "Grim"
"2026-10-14 23:26:00", "1966293", "b059899fbc3393df19a209fa6c7faa35de15b2886c51572828f7f1e1d1088e87", "sha256_hash", "payload", "win.asyncrat", "None", "AsyncRAT", "2026-10-15 00:46:05", "95", "False", "None", "None", "0", "Grim"
"2026-10-14 23:25:59", "1966290", "b0fda1418abaf986ef56b80c4fd3c082421ee88bda907764132ddf7e68d7271e", "sha256_hash", "payload", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-15 00:46:04", "95", "False", "None", "None", "0", "Grim"
"2026-10-14 23:25:58", "1966287", "b3772f86707a0e4026ba512a23bc867e33e7b102b4d5c9c4ac287ec710b7384f", "sha256_hash", "payload", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-15 00:46:04", "95", "False", "None", "None", "0", "Grim"
"2026-10-14 23:25:57", "1966281", "b793cc108fc28c791ec625eef1abcf816fea99f339f6412f9d024f18ce0bd2d6", "sha256_hash", "payload", "jar.crossrat", "Trupto", "CrossRAT", "2026-10-15 00:46:02", "95", "False", "None", "None", "0", "Grim"
"2026-10-14 23:25:57", "1966284", "b5383a8f23a7d8297ff39a311c45e75e1215542116f516dad07a041ea131bb49", "sha256_hash", "payload", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-15 00:46:03", "95", "False", "None", "None", "0", "Grim"
"2026-10-14 23:25:56", "1966278", "bb316d4bdce71669f74dc8befd97d8300981a7a51374235d1894d7de7a46d991", "sha256_hash", "payload", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-15 00:46:01", "95", "False", "None", "None", "0", "Grim"
"2026-10-14 23:25:55", "1966275", "bf792c9bffc98f54c084d5934dbf6c7488fab61c861d3ec4fa51c6445a924f1b", "sha256_hash", "payload", "jar.crossrat", "Trupto", "CrossRAT", "2026-10-15 00:46:00", "95", "False", "None", "None", "0", "Grim"
"2026-10-14 23:25:54", "1966272", "c053108c5b25c38bc6d29569d2876396f4e744cad3d867abf4e566b3e4c3c384", "sha256_hash", "payload", "win.formbook", "win.xloader", "Formbook", "2026-10-15 00:46:00", "95", "False", "None", "None", "0", "Grim"
"2026-10-14 23:25:53", "1966269", "c0bf4b3795ac1bd8c9f0874c35308955b48861d6320145a86d8460dcd064f270", "sha256_hash", "payload", "win.formbook", "win.xloader", "Formbook", "2026-10-15 00:45:59", "95", "False", "None", "None", "0", "Grim"
"2026-10-14 23:25:52", "1966263", "c70dcdf06ea84d43a6b204965f22e5a014205f92674f154b26c82fdbdab6f189", "sha256_hash", "payload", "win.formbook", "win.xloader", "Formbook", "2026-10-15 00:45:57", "95", "False", "None", "None", "0", "Grim"
"2026-10-14 23:25:52", "1966266", "c520275b04c1fbdabdac631aaf4141cd3fd8bc485aa9cfaed7c65e7ccac12c14", "sha256_hash", "payload", "win.xworm", "None", "XWorm", "2026-10-15 00:45:58", "95", "False", "None", "None", "0", "Grim"
"2026-10-14 23:25:51", "1966260", "d152849586f62ed6efadc9072e9e9d462142520283dcbd6fb2ad5969536c7cc7", "sha256_hash", "payload", "jar.crossrat", "Trupto", "CrossRAT", "2026-10-15 00:45:57", "95", "False", "None", "None", "0", "Grim"
"2026-10-14 23:25:50", "1966257", "d218db9942218730594893bc74b20b83d4b78631c5500cf52633699447cffbf2", "sha256_hash", "payload", "win.agent_tesla", "AgenTesla,AgentTesla,Negasteal", "Agent Tesla", "2026-10-15 00:45:56", "95", "False", "None", "None", "0", "Grim"
"2026-10-14 23:25:49", "1966254", "d28343fff34a5ebc030fb7e1d967acc0df11645e651935b53578787b4786a8fa", "sha256_hash", "payload", "win.formbook", "win.xloader", "Formbook", "2026-10-15 00:45:55", "95", "False", "None", "None", "0", "Grim"
"2026-10-14 23:25:48", "1966247", "d86753e540f7ec56ae0e03335558af87e536c03bdd7d93511a5521ee28605341", "sha256_hash", "payload", "win.agent_tesla", "AgenTesla,AgentTesla,Negasteal", "Agent Tesla", "2026-10-15 00:45:53", "95", "False", "None", "None", "0", "Grim"
"2026-10-14 23:25:48", "1966251", "d5331e2c9e5d866d4515c825d6eb69de927810f8547fdc9dfb0aa545785a36b6", "sha256_hash", "payload", "win.formbook", "win.xloader", "Formbook", "2026-10-15 00:45:54", "95", "False", "None", "None", "0", "Grim"
"2026-10-14 23:25:47", "1966244", "dad922a34e36f47ab37eb432187d4046bf7955b440a03b01572b23667a903b8a", "sha256_hash", "payload", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-15 00:45:53", "95", "False", "None", "None", "0", "Grim"
"2026-10-14 23:25:46", "1966241", "dd5993de9315b3b1585cc8bb912d1e76a5c33477e3677ec9edb08776e3d2b62a", "sha256_hash", "payload", "win.phantom_stealer", "None", "Phantom Stealer", "2026-10-15 00:45:52", "95", "False", "None", "None", "0", "Grim"
"2026-10-14 23:25:45", "1966238", "dd86e3595d51a03ab956f5ba4dcf1709b6aa3211c739f61232a5ff284d21a51e", "sha256_hash", "payload", "win.formbook", "win.xloader", "Formbook", "2026-10-15 00:45:51", "95", "False", "None", "None", "0", "Grim"
"2026-10-14 23:25:44", "1966235", "dd8d215e47ea0460fa07f74bfe4b50d83a13952e84f3f02d69fc36afd624e4d7", "sha256_hash", "payload", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-15 00:45:50", "95", "False", "None", "None", "0", "Grim"
"2026-10-14 23:25:43", "1966229", "e13ed2a8812eac03651272dfd4ac6a0431305ac845210907bea692dc59105526", "sha256_hash", "payload", "win.njrat", "Bladabindi,Lime-Worm", "NjRAT", "2026-10-15 00:45:49", "95", "False", "None", "None", "0", "Grim"
"2026-10-14 23:25:43", "1966232", "e13e1d805c67de591f734d825629743d31dcfc77cb67f89237474675208817de", "sha256_hash", "payload", "win.formbook", "win.xloader", "Formbook", "2026-10-15 00:45:49", "95", "False", "None", "None", "0", "Grim"
"2026-10-14 23:25:42", "1966226", "e357b50c1c476180923e06378e54a7995e7966dbd633c3fe6edea1432c425833", "sha256_hash", "payload", "win.agent_tesla", "AgenTesla,AgentTesla,Negasteal", "Agent Tesla", "2026-10-15 00:45:48", "95", "False", "None", "None", "0", "Grim"
"2026-10-14 23:25:41", "1966223", "e7a8b3df8b07fb6b0262ad835e0c42933339067bf450edd3f4bfae9d3d9fd42a", "sha256_hash", "payload", "win.quasar_rat", "CinaRAT,QuasarRAT,Yggdrasil", "Quasar RAT", "2026-10-15 00:45:47", "95", "False", "None", "None", "0", "Grim"
"2026-10-14 23:25:40", "1966217", "ec6f5ef217f7aea3b6fc183b0fc1a741c1b95e232e773a20a6af4cebae4ce0d2", "sha256_hash", "payload", "win.njrat", "Bladabindi,Lime-Worm", "NjRAT", "2026-10-15 00:45:45", "95", "False", "None", "None", "0", "Grim"
"2026-10-14 23:25:40", "1966220", "ec340fcd3a19f99978cfd326a00108ce04d9c295ef61723dfe12c46fc8be21b9", "sha256_hash", "payload", "win.krakenkeylogger", "None", "KrakenKeylogger", "2026-10-15 00:45:46", "95", "False", "None", "None", "0", "Grim"
"2026-10-14 23:25:39", "1966214", "ee173fe306d7834864d41b0d02327027a736c2f8517a6831da52b1b30e9a0d72", "sha256_hash", "payload", "win.formbook", "win.xloader", "Formbook", "2026-10-15 00:45:45", "95", "False", "None", "None", "0", "Grim"
"2026-10-14 23:25:38", "1966211", "ef67dbacd2e262465001f6d3319b74d0f7a9bf2001f67951c8983d752b3af990", "sha256_hash", "payload", "win.formbook", "win.xloader", "Formbook", "2026-10-15 18:36:40", "95", "False", "None", "None", "0", "Grim"
"2026-10-14 23:25:37", "1966208", "ef731669a765d81e3afae2c4f04cb729dd28c30a8fd60fa800ea6e10d2732011", "sha256_hash", "payload", "win.agent_tesla", "AgenTesla,AgentTesla,Negasteal", "Agent Tesla", "2026-10-15 18:36:39", "95", "False", "None", "None", "0", "Grim"
"2026-10-14 23:25:36", "1966205", "f03b875c2d39e0761b6dcd95e17ec093ed9719d9a08065a513c60898f6f0eb0d", "sha256_hash", "payload", "win.agent_tesla", "AgenTesla,AgentTesla,Negasteal", "Agent Tesla", "2026-10-15 18:36:38", "95", "False", "None", "None", "0", "Grim"
"2026-10-14 23:25:35", "1966199", "f69d066111143c7ffa990c326634540cc195c12a89377763571709c763b98854", "sha256_hash", "payload", "jar.crossrat", "Trupto", "CrossRAT", "2026-10-15 18:36:36", "95", "False", "None", "None", "0", "Grim"
"2026-10-14 23:25:35", "1966202", "f5b83f8a1394e025adad0de20e351321020d7d24b98ceafc9222b71c6a6f48cc", "sha256_hash", "payload", "win.darkcloud", "None", "DarkCloud Stealer", "2026-10-15 18:36:37", "95", "False", "None", "None", "0", "Grim"
"2026-10-14 23:25:34", "1966196", "f6cc3424f720b692b860d3220a252fde363cc1b4be8cf6d6a422533f52446a1e", "sha256_hash", "payload", "win.formbook", "win.xloader", "Formbook", "2026-10-15 18:36:35", "95", "False", "None", "None", "0", "Grim"
"2026-10-14 23:25:33", "1966193", "f758a30ca04e94482c125c4bae5036ea25a37f35bfee8848ebb8cf63a8151f26", "sha256_hash", "payload", "win.darkcloud", "None", "DarkCloud Stealer", "2026-10-15 18:36:34", "95", "False", "None", "None", "0", "Grim"
"2026-10-14 23:25:32", "1966190", "f85524b8c3d011caaee3a6bab77dbaf1c0e26b71244f0fc9c0a8e37176115eab", "sha256_hash", "payload", "win.formbook", "win.xloader", "Formbook", "2026-10-15 18:36:34", "95", "False", "None", "None", "0", "Grim"
"2026-10-14 23:25:31", "1966187", "f8fb4cb45e9e573bc6e0ad13ed90a36a0f363054ebca9d53fa5582207bdc6265", "sha256_hash", "payload", "py.stealler", "None", "stealler", "2026-10-15 18:36:33", "95", "False", "None", "None", "0", "Grim"
"2026-10-14 23:25:30", "1966184", "ffd698d6e36dfb0b82e578e553a01c385784a8641a2b8dc5a0d651f43c2c7c8f", "sha256_hash", "payload", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-15 18:36:32", "95", "False", "None", "None", "0", "Grim"
"2026-10-14 23:25:29", "1966181", "f0491050040abce4313c2e255426506e69436b6a67bb7d2f6ae31634d02e64c1", "sha256_hash", "payload", "py.venus_stealer", "None", "Venus Stealer", "2026-10-15 18:36:31", "95", "False", "None", "None", "0", "Grim"
"2026-10-14 23:25:28", "1966178", "772acf12410d3e9a9baade6e9a4089dc56ac8ad063e818cefc05d009cddedb14", "sha256_hash", "payload", "py.venus_stealer", "None", "Venus Stealer", "2026-10-15 18:36:30", "95", "False", "None", "None", "0", "Grim"
"2026-10-14 23:25:27", "1966175", "ddf17dbf5744c80c47251b34bb7dbb5c47fbcf200380fa1178b8a21a6c043ef6", "sha256_hash", "payload", "win.wannacryptor", "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry", "WannaCryptor", "2026-10-15 18:36:29", "95", "False", "None", "None", "0", "Grim"
"2026-10-14 23:25:26", "1966172", "4884f9e63b6d4a864a99e558e4f00ea612bfc9f7ff9aec65b1a29416b09d7ec6", "sha256_hash", "payload", "win.formbook", "win.xloader", "Formbook", "2026-10-15 18:36:28", "95", "False", "None", "None", "0", "Grim"
"2026-10-14 23:25:25", "1966169", "c47105df593edaaf52d58af292856865b50c7b75d127a916afd4b69502b039ca", "sha256_hash", "payload", "py.venus_stealer", "None", "Venus Stealer", "2026-10-15 18:36:28", "95", "False", "None", "None", "0", "Grim"
"2026-10-14 23:25:24", "1966166", "c66f94f6f054c6ca06e6561aed88fe54d1ea76bfeb8b5cd8a97c71590f08b063", "sha256_hash", "payload", "win.darktortilla", "None", "DarkTortilla", "2026-10-15 18:36:26", "95", "False", "None", "None", "0", "Grim"
"2026-10-14 23:25:22", "1966163", "08b33500f347d31f5bebd70147c2a7be6ee7fd43ed486c2e881a86ced5e1fb28", "sha256_hash", "payload", "py.stealler", "None", "stealler", "2026-10-15 18:36:25", "95", "False", "None", "None", "0", "Grim"
"2026-10-14 23:25:21", "1966160", "2fe60b18bb97ad7ea8bc8f746be851205e59ed68cd2244784ef0d052758e4346", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "2026-10-15 18:36:25", "95", "False", "None", "None", "0", "Grim"
"2026-10-14 23:25:20", "1966157", "db1efeca6fcd1bf26d50bba988122491e6adf7036d82819a7e3199931e7d7f3f", "sha256_hash", "payload", "win.salatstealer", "None", "SalatStealer", "2026-10-15 18:36:24", "95", "False", "None", "None", "0", "Grim"
"2026-10-14 23:25:19", "1966154", "4e230ff6159610f283e270729614b7bd4d0c619371ebde07c0cc9a6b712ae30e", "sha256_hash", "payload", "py.venus_stealer", "None", "Venus Stealer", "2026-10-15 18:36:23", "95", "False", "None", "None", "0", "Grim"
"2026-10-14 23:25:18", "1966151", "63c4d41b7f2aef9ff2ea16451ed2e5a1c16f0997651f2d023621e9e7ad014a92", "sha256_hash", "payload", "py.blankgrabber", "None", "BlankGrabber", "2026-10-15 18:36:12", "95", "False", "None", "None", "0", "Grim"
"2026-10-14 23:25:17", "1966148", "976aff8d066d00667f9ebeea846c87fb0f7a6d86aaca725ae06242a6b43ef6d9", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "2026-10-15 18:36:10", "95", "False", "None", "None", "0", "Grim"
"2026-10-14 23:25:16", "1966145", "9230a60ab7f69d305a099648d0de8766b2b808df7670b00fc79eaec8eb2eb77b", "sha256_hash", "payload", "py.venus_stealer", "None", "Venus Stealer", "2026-10-15 18:36:09", "95", "False", "None", "None", "0", "Grim"
"2026-10-14 22:53:43", "1966112", "645787c5c824a7bfdf2af27a9043db20f1a0d139c28fc55d613f083d720f5707", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai", "0", "whack_sh"
"2026-10-14 22:53:42", "1966111", "ea8cd9401645ad87160e713669c3c95e7f8c819516bce3284b66eb2411478c22", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai", "0", "whack_sh"
"2026-10-14 22:53:41", "1966110", "0696c8248cbabc4903f8af1784113d6abf0f07da4ab63bf8e1f01905e64822be", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Gafgyt,Mirai", "0", "whack_sh"
"2026-10-14 22:53:40", "1966109", "361644a8cf12e03362e70d49756655e77ac3e0fa60cf0ed06db6b8316370c7c0", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Gafgyt,Mirai", "0", "whack_sh"
"2026-10-14 22:53:39", "1966108", "e80a844331873eeb234ee346b87e08f7382d5d4f447a09a21ef3a36cfa65d9ef", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai", "0", "whack_sh"
"2026-10-14 22:53:38", "1966107", "8ec6460f4ed87ed848146816e0685d370977a56ca5404ce1efadb3848e17e269", "sha256_hash", "payload", "elf.bashlite", "gayfgt,Gafgyt,qbot,torlus,lizkebab", "Bashlite", "", "90", "False", "None", "Bashlite,elf,Gafgyt", "0", "whack_sh"
"2026-10-14 22:53:37", "1966106", "ef59833a3a01ae7f7b8369d4ed6d43a2c96a88c081f687c35563d869035c6a61", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Gafgyt,Mirai", "0", "whack_sh"
"2026-10-14 22:53:36", "1966105", "b6d0c1a67695dc38db3bf9cbe6b8e8becaaccff0c8619c0df60de57269547a66", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Gafgyt,Mirai", "0", "whack_sh"
"2026-10-14 22:53:34", "1966103", "d18632440bba55c0cc63e43ee0146b3c30fd94c541df504e8c62637196a4ab75", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Gafgyt,Mirai", "0", "whack_sh"
"2026-10-14 22:53:34", "1966104", "eae62f409bfdeb4cd44998348efc4a523765cb85614a9c6dab99dcbe3293f0a0", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Gafgyt,Mirai", "0", "whack_sh"
"2026-10-14 22:53:33", "1966102", "d5308b8de73a1c1e9f199950af4986256a635cff9de9afdd3a5a30881986293c", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Gafgyt,Mirai", "0", "whack_sh"
"2026-10-14 22:53:32", "1966101", "e63e4e17e5c30b244534c4ecf453367fc7485a3838987d1520d351365a6c284d", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai", "0", "whack_sh"
"2026-10-14 22:53:31", "1966100", "ed869ce6ed49d83b1dc8070d2149a5ec736962521a823ca2657568bcc55f1096", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai", "0", "whack_sh"
"2026-10-14 22:53:30", "1966099", "23d5db7fd6c1471a69cfc04e6773f7b2790f3b19da37cb241c0ef6021ead3e73", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai", "0", "whack_sh"
"2026-10-14 22:53:29", "1966098", "5119d8aaa35dffc9752c377a3ecd8104e1eacade88d94f7fe452717cd7a14f29", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Gafgyt,Mirai", "0", "whack_sh"
"2026-10-14 22:53:27", "1966097", "478053ea93052dd3f1477cf497443c0cb1b0e75361ba3927b929b707c18f35e2", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Gafgyt,Mirai", "0", "whack_sh"
"2026-10-14 22:53:26", "1966096", "72dd3ed3b04293d5aa0a9fc02826ce552089c9f335318bb60042395c4aace862", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai", "0", "whack_sh"
"2026-10-14 22:53:25", "1966095", "3e99c7b61a3bac1b612947191d3cbee3d673da0fc4e62cf7905039d0680b2f4c", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Gafgyt,Mirai", "0", "whack_sh"
"2026-10-14 22:53:24", "1966094", "41a6de73798578cddc879c47ebb0d0c3e083b3aed8e558b3850f8a58e178fd7b", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai", "0", "whack_sh"
"2026-10-14 19:53:25", "1965920", "d80279288b0bcb2a41573361b92ffa56261569018f4f36a99afa40191acc1e0a", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai", "0", "whack_sh"
"2026-10-14 19:53:24", "1965919", "00b8c81a2b43524469dd3fa7a121e8c8701e7355ae5440bf108a54daac958fff", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai", "0", "whack_sh"
"2026-10-14 19:53:22", "1965918", "1b40941c18e456f93a1bbce6c440fae0b3c281cd56a527680f93cc088288e50c", "sha256_hash", "payload", "elf.bashlite", "gayfgt,Gafgyt,qbot,torlus,lizkebab", "Bashlite", "", "90", "False", "None", "Bashlite,elf,Gafgyt,Mirai", "0", "whack_sh"
"2026-10-14 18:53:30", "1965850", "b1e2cc1be2f386d4ad171b7cb0df9eb9c881e5b5945224a38fd021e8e8de8378", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai", "0", "whack_sh"
"2026-10-14 18:53:29", "1965849", "f2b142128ec6ea6b017ec15cace0f6f1a4428a7ac9c93899cda06a0201f29df1", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai", "0", "whack_sh"
"2026-10-14 18:53:28", "1965848", "814c29acd868baf644d710643c42cf93e596f21f7eaf61f4a4dd9e7fb2f2e685", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai", "0", "whack_sh"
"2026-10-14 18:53:27", "1965847", "3298756bf54b2d83776e621d6395ebad87064a6c695314eac2eaa52f2dae5463", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai", "0", "whack_sh"
"2026-10-14 18:53:26", "1965846", "3af2e84897a3d0af2275541629144d471c28fc8f78f837d5d5bea70862d3d9ed", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai", "0", "whack_sh"
"2026-10-14 18:53:25", "1965845", "252156d9c2b892e176aab43351277cc7ebaf07f6d3e97d5ce50011c760139bb4", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai", "0", "whack_sh"
"2026-10-14 18:53:23", "1965844", "ff6556ff06e466d1d377bbe6a1efa6dcfc84fa0f23dd8e2ff1014fd15e5e2a6b", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai", "0", "whack_sh"
"2026-10-14 18:53:22", "1965843", "af22e18ac7f1dcd06e7e6d3c3f4ebf1d8add848f8e172e96d226a65431004806", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai", "0", "whack_sh"
"2026-10-14 18:34:22", "1965819", "1eb66cf083f9d36b561989a45737d12f92bb0765d286e1147431f221a27ab755", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/1eb66cf083f9d36b561989a45737d12f92bb0765d286e1147431f221a27ab755", "AMOS,chant,ClickFix,Foxveil,macOS", "0", "c4ffeine"
"2026-10-14 18:34:22", "1965824", "7997b84c10941d97069dd9dff12fb3b6678564c4356e7f749c7179071d59ee11", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/7997b84c10941d97069dd9dff12fb3b6678564c4356e7f749c7179071d59ee11", "AMOS,ClickFix,Foxveil,macOS,quill", "0", "c4ffeine"
"2026-10-14 18:23:26", "1965813", "c58e8b009dca8e25d8f6ca11af383c569063e3a94423d36881affbba920c5242", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/c58e8b009dca8e25d8f6ca11af383c569063e3a94423d36881affbba920c5242", "AMOS,ClickFix,Foxveil,macOS,quill", "0", "c4ffeine"
"2026-10-14 18:23:25", "1965815", "3f6ec620fe8d14b56041aa1f133c8517e49ddc3056bbbbd384a72a9591be5e92", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/3f6ec620fe8d14b56041aa1f133c8517e49ddc3056bbbbd384a72a9591be5e92", "AMOS,ClickFix,Foxveil,macOS,willow", "0", "c4ffeine"
"2026-10-14 17:53:22", "1965788", "43ebe5ab6c946afcaa5e8095c8ef83ff34e8c2297e1b63136e1f51543b486eff", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai", "0", "whack_sh"
"2026-10-14 17:41:04", "1965745", "82ab1202a5941b9d2947e99b2b03bc469e2a97f590c6a4efea819da20a2d8124", "sha256_hash", "payload", "unknown", "None", "Unknown malware", "", "100", "False", "https://blog.efespain.com/capitulo-29/", "elf,shem,x86_64", "0", "eFeSpain"
"2026-10-14 17:41:02", "1965746", "674107dcf1a876489123240add215cbb92649c2bbb321780057822232891ac10", "sha256_hash", "payload", "unknown", "None", "Unknown malware", "", "100", "False", "https://blog.efespain.com/capitulo-29/", "elf,shem,x86_64", "0", "eFeSpain"
"2026-10-14 17:41:02", "1965747", "ef7466d1507430fc0e0f99c29d7184ee726e68934895bfdc37ad855c0c488b91", "sha256_hash", "payload", "unknown", "None", "Unknown malware", "", "100", "False", "https://blog.efespain.com/capitulo-29/", "arm64,elf,shem", "0", "eFeSpain"
"2026-10-14 17:41:02", "1965748", "74af9d637530df497444e47bfc12e4aba66a084546d413d1e0b54d7282c2a777", "sha256_hash", "payload", "unknown", "None", "Unknown malware", "", "100", "False", "https://blog.efespain.com/capitulo-29/", "armv7,elf,shem", "0", "eFeSpain"
"2026-10-14 17:41:01", "1965749", "fe12480efddd9603004a4165265e57192242a79144b124a936bfe95e66de2cb4", "sha256_hash", "payload", "unknown", "None", "Unknown malware", "", "100", "False", "https://blog.efespain.com/capitulo-29/", "elf,mipsel,shem", "0", "eFeSpain"
"2026-10-14 16:12:22", "1965624", "db189ab138d838f20f1795768413d7e50657201c172617039425b75a4573c96a", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://bazaar.abuse.ch/sample/db189ab138d838f20f1795768413d7e50657201c172617039425b75a4573c96a/", "AMOS,ClickFix,Foxveil,macOS,willow", "0", "c4ffeine"
"2026-10-14 16:12:22", "1965641", "894ae89f56f352652cdb1f9ec23ac1c31f26ea648326bfd23c871636ff66ded7", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://bazaar.abuse.ch/sample/894ae89f56f352652cdb1f9ec23ac1c31f26ea648326bfd23c871636ff66ded7/", "AMOS,chant,ClickFix,Foxveil,macOS", "0", "c4ffeine"
"2026-10-14 15:53:21", "1965646", "67c422abb60636c4358992373e26296af434ca831b15b049c153a78f3b7bfc05", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai", "0", "whack_sh"
"2026-10-14 15:38:08", "1965604", "b2e10cc59414674ef02ebd9822754cc366081c350825846f2e61af5b0650681d", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/b2e10cc59414674ef02ebd9822754cc366081c350825846f2e61af5b0650681d", "AMOS,ClickFix,Foxveil,macOS,quill", "0", "c4ffeine"
"2026-10-14 13:53:24", "1965495", "ce198f1a6613760407d8035588a5b197cad5fdb5d8b887f5b9ac62b8d8b133e9", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai", "0", "whack_sh"
"2026-10-14 13:53:23", "1965494", "7f54053361738ebabcb0981f39a342a32682f954544b4a36a7724f26599b8dd1", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai", "0", "whack_sh"
"2026-10-14 13:53:21", "1965493", "98801cd9d690e060fc4a3fdd02fcd07d60097293980cb4f60f47b5e15170fc69", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai", "0", "whack_sh"
"2026-10-14 13:53:20", "1965492", "36403e6154f969731ea2b2310f1b947f35c302f3e1e22527990c396a680d1328", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "", "90", "False", "None", "elf,Mirai", "0", "whack_sh"
"2026-10-14 13:42:50", "1965469", "6ee79dabec97ffc6dbbb3ec7115b8c16977551aca5cb90ccec77a580ea2e3ac9", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/6ee79dabec97ffc6dbbb3ec7115b8c16977551aca5cb90ccec77a580ea2e3ac9", "AMOS,ClickFix,Foxveil,macOS,quill", "0", "c4ffeine"
"2026-10-14 13:42:50", "1965473", "2734b04648223dec4058fa5371cb41c75ef3d2f1f1bb6f838f50758cfdd406ca", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/2734b04648223dec4058fa5371cb41c75ef3d2f1f1bb6f838f50758cfdd406ca", "AMOS,ClickFix,Foxveil,macOS,quill", "0", "c4ffeine"
"2026-10-14 13:42:49", "1965476", "49e3cc11c904d158978479ad40b785d5d79845b0fc43b09122d3d6488c1dc300", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/49e3cc11c904d158978479ad40b785d5d79845b0fc43b09122d3d6488c1dc300", "AMOS,ClickFix,Foxveil,macOS,quill", "0", "c4ffeine"
"2026-10-14 13:06:12", "1965430", "aeab2a46685337814afd5c7c3a1b95697de2ea63438099d6c397b83011b5001a", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/aeab2a46685337814afd5c7c3a1b95697de2ea63438099d6c397b83011b5001a", "AMOS,ClickFix,Foxveil,macOS,quill", "0", "c4ffeine"
"2026-10-14 11:36:37", "1965287", "63c973360d81debdfae4dbbe551f23bd1263e63da056aa0f6b0f373984112e5a", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/63c973360d81debdfae4dbbe551f23bd1263e63da056aa0f6b0f373984112e5a", "AMOS,ClickFix,Foxveil,macOS,quill", "0", "c4ffeine"
"2026-10-14 11:36:36", "1965302", "956b3514f38e62f398f2b62fb7f6a11199e127ed5a1517211285056e62d2e3a6", "sha256_hash", "payload", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "100", "False", "https://www.virustotal.com/gui/file/956b3514f38e62f398f2b62fb7f6a11199e127ed5a1517211285056e62d2e3a6", "AMOS,ClickFix,Foxveil,macOS,quill", "0", "c4ffeine"
"2026-10-14 06:53:17", "1965085", "8b5eba6961642074384f1fbaa1f936cfbc3a5426df129ca85354243bfde048bb", "sha256_hash", "payload", "py.blankgrabber", "None", "BlankGrabber", "2026-10-15 00:46:16", "90", "False", "None", "BlankGrabber,BlankStealer,exe", "0", "whack_sh"
"2026-10-13 22:40:32", "1964364", "adb8c2a61d8e539016e06a43c1a6b051978021660e9f3245d1107fe9d29af078", "sha256_hash", "payload", "win.formbook", "win.xloader", "Formbook", "2026-10-15 00:46:39", "95", "False", "None", "None", "0", "Grim"
"2026-10-13 22:40:31", "1964361", "9022ae6065442bb7819c28dc3f06674bcc38a9e2effd896609433a9d1cd81ec9", "sha256_hash", "payload", "win.wannacryptor", "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry", "WannaCryptor", "2026-10-15 00:46:38", "95", "False", "None", "None", "0", "Grim"
"2026-10-13 22:40:30", "1964358", "5c62a78d342e98c2b1b6722433c766441523ef04d9659b7f00286d9f3283166b", "sha256_hash", "payload", "win.formbook", "win.xloader", "Formbook", "2026-10-15 00:46:37", "95", "False", "None", "None", "0", "Grim"
"2026-10-13 22:40:29", "1964355", "abc19d78d94158d057220187860ce7781187c9a74667e34689b46637f86684d7", "sha256_hash", "payload", "win.asyncrat", "None", "AsyncRAT", "2026-10-15 00:46:36", "95", "False", "None", "None", "0", "Grim"
"2026-10-13 22:40:28", "1964349", "0b3c09f4cc67e07536c9c77900edf5905e81d1747931c5983e84ce233f35c164", "sha256_hash", "payload", "win.coinminer", "None", "Coinminer", "2026-10-15 00:46:34", "95", "False", "None", "None", "0", "Grim"
"2026-10-13 22:40:28", "1964352", "f19e2443bd21957be3f77fdd66d25609346888235b2cd1840509fd1d04803287", "sha256_hash", "payload", "elf.leethozer", "None", "LeetHozer", "2026-10-15 00:46:35", "95", "False", "None", "None", "0", "Grim"
"2026-10-13 22:40:26", "1964343", "cb6b346c740f7b6938177c87f7a35a884983b374d7b98cb276dc0fd8ba43fa3c", "sha256_hash", "payload", "win.coinminer", "None", "Coinminer", "2026-10-15 00:46:33", "95", "False", "None", "None", "0", "Grim"
"2026-10-13 22:40:26", "1964346", "a01cd39585cb423a9e7aeda460e1da0c79a908136f0eabb8f2a1aa137eaa5a9a", "sha256_hash", "payload", "win.gcleaner", "None", "GCleaner", "2026-10-15 00:46:34", "95", "False", "None", "None", "0", "Grim"
"2026-10-13 22:40:25", "1964340", "cdd73b09c6ebb602b7939fb55bcb663ff93fb844cf7b291e5ed635f9fc69db61", "sha256_hash", "payload", "win.quasar_rat", "CinaRAT,QuasarRAT,Yggdrasil", "Quasar RAT", "2026-10-15 00:46:32", "95", "False", "None", "None", "0", "Grim"
"2026-10-13 22:40:24", "1964337", "e608ce49206c3973e473a71e4c8d1800b86b6e375e7e97dda9c840e5f822bdb2", "sha256_hash", "payload", "py.venus_stealer", "None", "Venus Stealer", "2026-10-15 00:46:31", "95", "False", "None", "None", "0", "Grim"
"2026-10-13 22:40:23", "1964334", "7847bf6d597f0a7a606d5e991039bf8f78e9c54ce9c3698197f1fc7a228b38ae", "sha256_hash", "payload", "win.coinminer", "None", "Coinminer", "2026-10-15 00:46:30", "95", "False", "None", "None", "0", "Grim"
"2026-10-13 22:40:22", "1964331", "644d71c5da2522e7250869d5d03213d28ad50337c98464e49010c39eb234b4c1", "sha256_hash", "payload", "win.coinminer", "None", "Coinminer", "2026-10-15 00:46:29", "95", "False", "None", "None", "0", "Grim"
"2026-10-13 22:40:21", "1964328", "275700b41f499d80822ed756aea03fe2b83317b5cba4d04d01413d01e50df66d", "sha256_hash", "payload", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-15 00:46:28", "95", "False", "None", "None", "0", "Grim"
"2026-10-13 22:40:20", "1964322", "36afc2379e6f48ca1147b1a487cd217e5b4816f96c5510991bb12d3eb3dc3613", "sha256_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "2026-10-15 00:46:26", "95", "False", "None", "None", "0", "Grim"
"2026-10-13 22:40:20", "1964325", "5821fb9adca72031ad3e3f24ccb8c9c5227172ce6d879c7a476ee703a5bf8037", "sha256_hash", "payload", "py.venus_stealer", "None", "Venus Stealer", "2026-10-15 00:46:27", "95", "False", "None", "None", "0", "Grim"
"2026-10-13 22:40:19", "1964319", "6a077b972bec1a62e58bc58c56bd2311f25cf17a0b1ae0eb61a44ee2af11a883", "sha256_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "2026-10-15 00:46:26", "95", "False", "None", "None", "0", "Grim"
"2026-10-13 22:40:18", "1964316", "c1dd42c5d06153184430f7b1843200d21308e78ce9403c99f7b18c8682acabca", "sha256_hash", "payload", "win.coinminer", "None", "Coinminer", "2026-10-15 00:46:25", "95", "False", "None", "None", "0", "Grim"
"2026-10-13 22:40:17", "1964310", "d2142d46a60aa8688695e707569a1ef5ae15cbbb431e5c692c4b7a2831e7259a", "sha256_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "2026-10-15 00:46:21", "95", "False", "None", "None", "0", "Grim"
"2026-10-13 22:40:17", "1964313", "6e5b142108800f95fad877e1b1dd2cbfb261365f7966176a5ffca16fa5290e08", "sha256_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "2026-10-15 00:46:24", "95", "False", "None", "None", "0", "Grim"
"2026-10-13 22:40:16", "1964307", "1a9a6cef63b3fd86c2465e0bc21398842e9931b661a63e6496a5ed70591aaa21", "sha256_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "2026-10-15 00:46:20", "95", "False", "None", "None", "0", "Grim"
"2026-10-13 22:40:15", "1964304", "bcb226ad5cf776ae7d3f6c572c9dc7f7d074d0d801adbf54153cc87f41d06db5", "sha256_hash", "payload", "win.coinminer", "None", "Coinminer", "2026-10-15 00:46:19", "95", "False", "None", "None", "0", "Grim"
"2026-10-13 22:40:14", "1964301", "9d85071bd8c7cc52bf5ce1811398e0cc28b06a7d5a0d6fce5c7debb48a04b53d", "sha256_hash", "payload", "win.salatstealer", "None", "SalatStealer", "2026-10-15 00:46:18", "95", "False", "None", "None", "0", "Grim"
"2026-10-13 22:40:13", "1964295", "286980c82cfaf652c3c609e2c5495f7a5ff9ce30a6a41ff6f0738cc62202e6c0", "sha256_hash", "payload", "win.salatstealer", "None", "SalatStealer", "2026-10-15 00:46:17", "95", "False", "None", "None", "0", "Grim"
"2026-10-13 22:40:13", "1964298", "b96d0720f038aad81f51dedac184fce95c8ecbf07299b54b98ac51568a51a016", "sha256_hash", "payload", "win.salatstealer", "None", "SalatStealer", "2026-10-15 00:46:17", "95", "False", "None", "None", "0", "Grim"
"2026-10-13 22:40:12", "1964292", "2b3a8ea9a4ba052577e81316826118ad809618450198aeea483989292b663e69", "sha256_hash", "payload", "win.tinymet", "TiniMet", "TinyMet", "2026-10-15 00:46:15", "95", "False", "None", "None", "0", "Grim"
"2026-10-13 22:40:11", "1964289", "14ac2e6f011fa59ac58a539c852d70cd1257f9987676969b8ad26ff621ca1fac", "sha256_hash", "payload", "win.salatstealer", "None", "SalatStealer", "2026-10-15 00:46:12", "95", "False", "None", "None", "0", "Grim"
"2026-10-13 22:40:10", "1964286", "e8af4e957dc045e60dc05044cb4ece18557f4c6df6fb86aaa9ad07e12d4878ff", "sha256_hash", "payload", "win.salatstealer", "None", "SalatStealer", "2026-10-15 00:46:11", "95", "False", "None", "None", "0", "Grim"
"2026-10-05 23:46:35", "1953764", "37dd737a342729c7b8c4e6f28140f2ff977a433793482b6bd488efd56a20812e", "sha256_hash", "payload", "elf.mirai", "Katana", "Mirai", "2026-10-14 17:08:15", "90", "False", "None", "elf,Mirai", "0", "whack_sh"
"2025-04-03 04:52:06", "1480347", "be000b0dbf3e8430af3837368751ee1337ffe696d1935d7865eae1684141ff6b", "sha256_hash", "payload", "win.lumma", "LummaC2 Stealer", "Lumma Stealer", "2026-10-15 14:53:29", "50", "False", "https://github.com/TheRavenFile/IOC/blob/main/Lumma%20Stealer", "infostealer,lumma,lummastealer,stealer", "0", "TheRavenFile"
# Number of entries: 663