MalwareBazaar Database

You are browsing the malware sample database of MalwareBazaar. If you would like to contribute malware samples to the corpus, you can do so through either using the web upload or the API.


541

Submissions (past 24 hours)

Smoke Loader

Most seen malware family (past 24 hours)

568'483

Malware samples in corpus


Using the form below, you can search for malware samples by a hash (MD5, SHA256, SHA1), imphash, tlsh hash, ClamAV signature, tag or malware family.

Browse Database


Search syntax is as follow: keyword:search_term

Following is a list of accepted keywords along with an example search_term

  • md5:1b109efade90ace7d953507adb1f1563 ( run)
  • sha256:11b16ba733f2f4f10ac58021eecaf5668551a73e2a1acfae99745c50bfccbb44 ( run)
  • signature:CobaltStrike ( run)
  • tag:TA505 ( run)
  • file_type:rtf ( run)
  • user:malware_traffic ( run)
  • clamav:SecuriteInfo.com.Artemis1FBB04F6EAF7.17086.UNOFFICIAL ( run)
  • yara:win_asyncrat_j1 ( run)
  • serial_number:51CD5393514F7ACE2B407C3DBFB09D8D ( run)
  • issuer_cn:Sectigo RSA Code Signing CA ( run)
  • imphash:756fdea446bc618b4804509775306c0d ( run)
  • tlsh:8DD484F440EF10A2F25F852936ADBE9401B2B1C7DBDA5E08137DE5311BBDA633A0564D ( run)
  • telfhash:52d0a7c198b4972c99e60578ed5c5bb29106216620070b20cf10a5d4d83b440f40db59 ( run)
  • gimphash:b43f35a8610180bcb184238555a0858a6c160a2d872566e7e9633221308b34fd ( run)
  • dhash_icon:f8dcbeffbffecee8 ( run)

Date (UTC)SHA256 hashTypeSignatureTagsReporterDL
2022-09-25 04:09be332eb4543ab814514a685bc6448ea764f5bf0d729bf3f89a4f01bfa0967c97Word file docAdwindAdwind doc siparis-listesi @JAMESWT_MHT
2022-09-23 15:46b0fcf47b5ecc249e0e8cafd089892fb156aadbbfdc1aaaf4e695f11d598a12a4Word file doc doc @SecuriteInfoCom
2022-09-23 13:0568a817608fe617b6da71fa248b48281cb3899c76d129eb390baa871141a773e1Word file docAdwindAdwind doc @adrian__luca
2022-09-21 12:11fd2e3b5351b5e39e960710d5a14a658759b3d1c3b52c3b63f43056b86647de13unknown @SecuriteInfoCom
2022-09-20 11:40d8ab152fc343d67857859adb61b2415508bcb55c9c79344e3dd4eed134307fc9Word file doc doc @SecuriteInfoCom
2022-09-20 10:187866aa8771bf9fe93f062e05dbb2f14bfe7c01c34415ef4baa9bed5cc75aa909Word file docAdwindAdwind doc @SecuriteInfoCom
2022-09-20 10:185af15c2c4024ff3b8ce851ec963bd45f3708fb03948fc3cbb249f62d663ee9afJava file jar jar @SecuriteInfoCom
2022-09-16 12:27bfbcd4cc4172bb7685b8bfeeabf7ebad9a001e958fc0c95e8e7cdf3b23f5a6e5Word file docAdwindAdwind doc @adrian__luca
2022-09-15 11:04035d59d40fed8d87d58e85dc599fe341167da0ea7aa6bf07fad9e71ba98070e4Word file docAdwindAdwind doc docx Anonymous
2022-09-15 08:176849de17a031d0443d8ea45da241796343dd9f80bd22d86dcf004b10fc7338f0Word file docAdwindAdwind doc @adrian__luca
2022-09-14 11:44d80fb486ac5ecde32137098e7c6965ad8c5f46eabb55cd7fbc502237973af32fWord file docAdwindAdwind doc docx Anonymous
2022-09-14 10:09978ef2598a67ed3fd18cf7f79a716fa34750f69057626826cab906d3114faa17Word file docAdwindAdwind doc @adrian__luca
2022-09-14 10:0179ffb409ed6230c57e62cc03dee44611825ab5dd50ec7d3b3a53e10e2529ebafWord file docAdwindAdwind doc @adrian__luca
2022-09-13 14:30622ba00d105e39cd4fb63978c0dccebca17b0a05708a07e1157cd3cd1bd1cacaWord file docAdwindAdwind doc docx Anonymous
2022-09-12 11:437859fd95c60a0d76fa99eb42277501b20f76a377c1395b504acff5dd22533027Word file docAdwindAdwind doc @adrian__luca
2022-09-01 02:30dd11f6bc61b6451aa645e0f1b9efc09411433bb94a1dc6503e97bf85c196c340Word file doc doc @SecuriteInfoCom
2022-08-22 14:4584262cac91a2f98584a15c71b4147abcf837581dd6833831e125c06e93e9f56dWord file doc doc @SecuriteInfoCom
2022-08-19 14:2006c65c7c0bea1a42fb25ba59da3cb81b0746e7065a307aa4f5a21e8ab06610b6Word file docAdwindAdwind doc @ankit_anubhav
2022-08-18 12:54e1f97c157f054b7fad11e7f06737a835dcb894da72c777b22342cd7622d1ff8eWord file docAdwindAdwind doc docx Anonymous
2022-08-17 11:05122661866914db6f67347ba163d75480e968eb4e1a936ef77f8658b1c70a36e5Word file docAdwindAdwind doc @pr0xylife
2022-08-16 12:094480f3dae5c50c2a6d994b11fdf4ffb5c90dbf9208270b57cb0bf0cdb74170d3Word file docAdwindAdwind doc @lowmal3
2022-08-15 12:259f7ef8d16861b56b9f600237e4a883ba0e4b73f25be2a51e8c4ea3aba3740f47Word file doc doc @lowmal3
2022-08-15 11:34454e907ad4d0746c66051e7c02dd1c1827ab96d086e3e7b9e2cdb091f7722b32Word file doc doc @lowmal3
2022-08-12 02:300355a43eda3d4d5f71b22bcb34f8273658dc53c012b5a5afc30d74d8fe4c9299Word file doc doc @SecuriteInfoCom
2022-08-11 14:11d0ca583d06fdfdad5f5db73ecb88e0036736b8cebfee66e117a8edf7d52c22e5Word file docAdwindAdwind doc docx Anonymous
2022-08-10 12:44ae15d92f716a409a83ca57197333ed2e690a8d8427b6693a581f4100f7f77546Word file doc doc docx Anonymous
2022-08-09 14:5057f4db8fa8e01aa93e37c5c9f89a35f13eb8fcef16b8413b9c51d54a79146b66unknown Kimsuky @sysopfb
2022-08-09 13:51d073902b673d9243ec93d615a42ae11e048c4913ca9b2163bc578d1224cdb84eWord file doc doc @lowmal3
2022-08-09 08:5403265b3f9c94dc5e6bcb827c70638b786ac3023f91a3669978552318af5ebca5Word file doc doc geo TUR @adrian__luca
2022-08-09 08:28844ebca8f7ddb670546010281644aed3f385ddec657e16c8cc67e1ac2bee507bWord file doc doc @lowmal3
2022-08-08 13:17a435e282c8e8778c6f8d693c284ffc7f539dd0f4e1570a5836b76bf8a2ef78fdWord file doc doc docx Anonymous
2022-08-08 06:2616ea9412ac0f734ddf9656a4f028dcbbb0ad052dabb57708f98567da64819e7fWord file doc doc @lowmal3
2022-08-06 00:148cc655d313bd34af55ce92eb0ce5667b174f4de9d4841ff71359e8333b63cf4eWord file doc doc @SecuriteInfoCom
2022-08-06 00:1406d0dc4ac96ed7b5864e5579dc26f2293bea997279af68f714ad7349079de0c6unknown @SecuriteInfoCom
2022-08-06 00:142386084b54b517dff1092496d4d4e5b558cf2ea50d51944bb8ac1f13fa1bbc05Word file doc doc @SecuriteInfoCom
2022-08-06 00:141e93da86133631f8ceb8381d96b6f67ad18dd38a1f5b658aa94f4dd3c1478842Word file doc doc @SecuriteInfoCom
2022-08-06 00:1425fdc6b2fde162b2dc67589f1737ef83508f1b125d748ccd8f5d7f72faf3c156Word file doc doc @SecuriteInfoCom
2022-08-05 13:31c26c99eeb30da221f74dd0951f4b8de0207e5801b64cd8d2a1abf1f906668096Word file docAdwindAdwind doc geo TUR @lowmal3
2022-08-05 12:103a0d915cf32e53b3d79b94917673b08f7dc7a9fd332662797d3dbcdd151444a0Word file doc doc docx Anonymous
2022-08-05 06:4573bf20af21a2f6b15e3c701dc2235cd55d573922f98a92a8e487eeca2474daddWord file doc doc @lowmal3
2022-08-02 12:35449c2d0f66cb4c9acaa508adfb09ad62512f46a64d5491ef508f00313fd4f89eWord file doc doc docx Anonymous
2022-08-01 06:2224abe021a80f26a695e141437e1aa2d7d6bc41ed95ede191902d69a091ff6298Word file doc doc @lowmal3
2022-07-29 07:38487c26a50dee2b2e822de9a4d3cc3450366a6c423cefa5e6e90c87594863e4d3Word file doc doc @lowmal3
2022-07-28 10:431c6f7cf9de690b1c97b36804621f5638d896cda70ca881a6fb1cd7fd00aae27eWord file doc doc @SecuriteInfoCom
2022-07-28 10:4333f3b3fc8b7a6a4c14ae37b4523eae843f10106601ad24c1581f1a3bbe91cdf8Word file doc doc @SecuriteInfoCom
2022-07-28 09:511003382a8adab71ecc80613f53f8f82f68944584ce76cc22705df680632ae1baWord file doc doc @SecuriteInfoCom
2022-07-27 13:45b04c5e2faebb16f06088fafe8d1b29748c4d221062e8e57df78f9a822c537318Word file doc doc Anonymous
2022-07-27 11:17169cb700a4d8d467e715fee7d9d50d58a4c4218fc3fd865ab4e999178501a13eWord file doc doc Anonymous
2022-07-27 06:06043bee93df0c94b17f2c52747b3fc0507dfa84c5808a0e9cf34f3ef95ec1b608Word file doc doc @lowmal3
2022-07-27 05:552838f552f0bf64ff546d31528d0dab1020f34e34e7382989bbbf0e7af2401477Word file doc doc Anonymous
2022-07-13 08:06e0807d204fa98ca83f73a7d02a1767994d15f2b0ed8536e00005d1ba9013f659unknown @SecuriteInfoCom
2022-07-05 09:061754bc8d6b04b89533b44e3ab94b0cf41897a948b6ea3e7c1292d4cd0da71e1fWord file doc doc @lowmal3
2022-07-04 12:50cb9cc7841fdd46b14f48ac6f26836e7b38912b2c7a00d378837a8b92f55bdabaExcel file xlsx xlsx @SecuriteInfoCom
2022-07-04 10:17e3e3fbfd7c1f7f33b3236f90b04ecca44be563500161901455956dc3806afafcWord file doc doc @lowmal3
2022-07-04 10:08563f31ac3a81be4eefa375175476e2744aafe396f0ee79690f8dca9f7279e5c9Word file doc doc @lowmal3
2022-07-04 10:06627cb7160a9656b9f2919d3bd596147c6f042805f044adb3dde6f3b5838907aeWord file doc doc @lowmal3
2022-07-04 06:2171ba916a7f35fe661cb6affc183f1ce83ee068dbc9a123663f93acf7b5a4263eWord file docAstraLockerAstraLocker AstraLocker 2.0 doc @JAMESWT_MHT
2022-07-01 08:53134bf3eee1df913ce48e2d80e60d9a0929930a20b43e48d188eb900597aa14e4Word file doc doc @adrian__luca
2022-06-17 12:25ea1fc94f7c60196a723a5656ea203c5eb023a1b42a347ab6916dabfbe6dbe330Word file doc doc @adrian__luca
2022-06-14 11:269c657520ef5426e4bb861bf280216297d299dd418bac2f950abbf889399c1239Word file doc @SecuriteInfoCom
2022-06-13 11:0209e1c3385a3e324905b6dffa7a87aa28a13bae3bb9d5a22e418a15cfcf220b8aWord file doc @SecuriteInfoCom
2022-06-13 07:44ccf1e1dd90fe6751b6e768956988cfbbe3ba5d04d19a02a7cc99b5d55abd6f88Word file doc doc Anonymous
2022-06-10 09:5054f6c4c3c26e607d32b405f79043fa5bf33dadda9e0e2ec3650aecdcc4df1d03Word file doc @SecuriteInfoCom
2022-06-06 11:42d4f6d17fee89fee0c817eaa80098606ea149a11fc41230ec233e193f4f7be8beWord file doc doc @adrian__luca
2022-06-02 06:32df971908fd24027648d7418b9ac1d57e72a413abb96e369f060aa8e0545f2d9dWord file doc @SecuriteInfoCom
2022-05-20 05:13ff1df7212e5646877e83767fbbc9eba9abebb1d715fac5d00cdbc0698de5c899Word file docAveMariaRATAveMariaRAT doc @abuse_ch
2022-04-28 12:34728cea7506dedca015927017f91c641e1d93029c6446fabfc862546bbe5525abWord file docArkeiStealerArkeiStealer doc @FORMALITYDE
2022-04-21 08:42ce1bcd227947173147be480be0993880e6594e35dd75e72fbef8f72ff5271d8aWord file docSnakeKeyloggerdoc SnakeKeylogger @adrian__luca
2022-04-19 05:348f592cd78f79653437c9c372d66b20769692f147cf120e9d82d3b5c5bf408530Word file docSnakeKeyloggerdoc SnakeKeylogger @lowmal3
2022-04-11 14:0624b5d61f12654f2f727c44cac296f135e47e4df287ab71a5bc992b9f3f76a4e9unknownAstraLockerAstraLocker Ransomware @JAMESWT_MHT
2022-04-11 14:0560167b6a14b7da2257cb6cbdc7f1ebcb4bdfa16c76cc9a7539c9b8d36478d127Word file docAstraLockerAstraLocker AstraLocker 2.0 doc Ransomware @JAMESWT_MHT
2022-04-09 17:477ff9891f4cfe841233b1e0669c83de4938ce68ffae43afab51d0015c20515f7bWord file doc doc maldoc @ArkbirdDevil
2022-04-01 10:423ae9278821900919783c2f327586d49c0bdd394e820c72c46d0f83a849d309f7unknown @0xrb
2022-03-17 20:419ede291b890cbfd8ba296f0e9c0ba1fecee07a2db8886218d3b5afa1ab855dbaWord file docx docx @SecuriteInfoCom
2022-03-17 20:4125d8bf8c0f0202b88b768ce6d9ac1da61b1168f839718bfa709e5b807d6a4acbWord file docx docx @SecuriteInfoCom
2022-02-16 23:10992df82cf31a91acd034411bb43a1ec127fa15d613b108287384882807f81764Word file doc doc Lorec53 maldoc @ArkbirdDevil
2022-01-15 08:201d3afc7afcabda756a933e32bab62f00239cbd952d739dc0c5df3c31fb23adeaWord file docAgentTeslaAgentTesla doc docx @cocaman
2021-12-29 12:186f8b7d8fa7d6c9121e6510b03c1490d4ff61b1e2e9660fe8f1c7ee7886221a47unknown @SecuriteInfoCom
2021-11-24 07:598bf91ee9796419a5aeea1f27ecf8f10b0c8fcac3ab335e51c3e284ccc0527d2dWord file docHancitordoc Hancitor Anonymous
2021-11-09 10:05317398e617675f2fe503edb40ed10c8cbd2642d1d5c157108e9426067fe007f6Word file doc doc @adrian__luca
2021-11-09 10:02a61e84c84a04da94ab4321aedd54e9aa87d1c58ef16167fa0fd2ce12798dd3e0Word file doc doc @adrian__luca
2021-11-04 11:27be03005a47b6229c2a4fd08922107ae8a369493c8571f6254bf4372257624b8aWord file doc doc @lowmal3
2021-11-02 22:431e2da72e82ca01f50c14d2806735d1540cb335096d2215d2a0dfd9bfcc9f269bWord file doc doc Anonymous
2021-11-02 07:04e31af2802b761ea10e2133bb52ecac110ef691d616989eaecc95b9a8ff0eaed6Word file doc doc @lowmal3
2021-10-28 10:472311c7cc164dd8395ecc706d5a8d42132bb9c9a6d889cb8d680e4260089c84ffWord file doc doc @lowmal3
2021-10-27 15:31cef98b5dd1d1d3c5c81b57a92f7e4b025d7810eabe3e83d3929787b6342d012aWord file doc doc @info_sec_ca
2021-10-27 08:577322921e28c9c513936609869b0f2e2bef04c52f44ab6e1e1fa20c219d0bb2e0Word file doc doc @lowmal3
2021-10-26 12:42abeb9ed173946d7a7e6662eacb5341b62b14fd32a4ad0604ab8614f1810a8788Word file doc doc docx @info_sec_ca
2021-10-21 21:532bbc2dd5e5bf5ab22b736c2e3e958425c47b25005543ec19ef2a14a725105252Word file doc doc Anonymous
2021-10-20 12:0074526a4d66ecfcc5463c486344870179112308875f76b133766e19fc546de2f0Word file doc doc @lowmal3
2021-10-19 10:13b47fd51389538222a45377b86c2c26d39b7603da970251802ba2d6fa2963417eWord file doc doc @lowmal3
2021-08-22 10:11c977b861b887a09979d4e1ef03d5f975f297882c30be38aba59251f1b46c2aa8Word file doc CobaltStrike doc maldoc sansisc @DSTLabs
2021-08-20 11:3873969152c8f24282f45900d73080334fbe498c96c60b15d72a72ebe0560e7e05Word file docGuLoaderdoc GuLoader @cocaman
2021-08-20 11:3829d68e2c435b92c09ae5d6739626efb907565569e6faf27dc2f26753b05f22ea zipGuLoaderGuLoader zip @cocaman
2021-08-11 05:52dc4c74f801b2e92747732fddc486c75a162972ca9fe48dafae80aaad797f206eWord file doc doc @lowmal3
2021-07-22 13:42166e48faaaae49f2d925c49d0febf96f0c9c8acd7457c1b542a60227b9068e4cExcel file xlsHancitorChanitor Hancitor xls @JAMESWT_MHT
2021-07-16 19:3537a2d1c69a388af46ea5e80ea41532b072af4eb46ec2d94a2f8111d56629ab85Word file doc doc Anonymous
2021-07-15 06:11844686768046be747157c2c54f023df742ef0b02094c23e591e9ee032af1ec63Word file docHancitorChanitor doc DocuSign Hancitor @JAMESWT_MHT
2021-07-15 06:11fac2502e3a9ccc4565efa470d71a39afb525efa0b6f3e57a91af3ff823b75a83Word file docFickerStealerChanitor doc DocuSign FickerStealer Hancitor @JAMESWT_MHT
2021-07-13 06:246f600943261122305689f3ce2487663209f05cdd7133f9bae75df43fc388af0eWord file docHancitordoc DocuSign Hancitor @JAMESWT_MHT
2021-07-13 06:241a07c88393b85d293ca2364b046b922bde131875e1faf95d29dbd4aae73464b1Word file docHancitordoc DocuSign Hancitor @JAMESWT_MHT
2021-07-13 06:2475d455a87a15ca9301130c2d97aa48ce9b77d185eb6acdc52416505e1e727260Word file docHancitordoc DocuSign Hancitor @JAMESWT_MHT
2021-07-13 06:24219e602944f23099eb8336026150ab5f776831159ff27f0284e040d4d3f14153Word file docHancitordoc DocuSign Hancitor @JAMESWT_MHT
2021-07-13 06:2355c57b195ac6b3e52622b588290291305498276447c57fb6fb2fc88309defcd0Word file docHancitordoc DocuSign Hancitor @JAMESWT_MHT
2021-07-13 06:2312377dd743d90e08d8f01e7913ef6f4dd7c327d656e5fffec5afdd4dc6f4179bWord file docHancitordoc DocuSign Hancitor @JAMESWT_MHT
2021-07-13 06:23a63b14427599f2b4cef5b5cc496c9c5b70064e93bf160adc1e15677233335a8bWord file docHancitordoc DocuSign Hancitor @JAMESWT_MHT
2021-07-13 06:239604e090dbb7548fc00b7cd4473e86e3b40c2f195d66f8d9442fe005eb19d1f5Word file docHancitordoc DocuSign Hancitor @JAMESWT_MHT
2021-07-13 06:23cddb898c44ed4e0fb37264a6cbcffb00324d583a5c9322d8ab9099c7b10aa720Word file docHancitordoc DocuSign Hancitor @JAMESWT_MHT
2021-07-13 06:233eef7ef5066a5effb87a04c895cc37727dc01ccfc5e8b09ce96281d9f483bcb2Word file docHancitordoc DocuSign Hancitor @JAMESWT_MHT
2021-07-12 22:293ce1b2cc72f6c38a2651fbbdc9ff8a48ab6d8209eb4eff1f8869f4f67d65d391Word file docHancitorChanitor doc Hancitor macros MAN1 Moskalvzapoe TA511 @malware_traffic
2021-07-12 22:2992d61bfb563722fc32a78ba7aabfb98cf984004309ca32c09667de4d10592a13Word file docHancitorChanitor doc Hancitor macros MAN1 Moskalvzapoe TA511 @malware_traffic
2021-07-12 22:29b79e96afa72d526d19cc7f01a12ba48fd7d56b24f7f7521e4e01964b891834f4Word file docFickerStealerChanitor doc FickerStealer Hancitor macros MAN1 Moskalvzapoe TA511 @malware_traffic
2021-07-12 22:296c23b78efd34d5f7207287ba8364147b04559c711c7f32f15814c374aabf3d4bWord file docHancitorChanitor doc Hancitor macros MAN1 Moskalvzapoe TA511 @malware_traffic
2021-07-12 22:2837965d058a349b0f619051664bb9c703dea11f097a0f37ad4a9d924cb1e76101Word file docHancitorChanitor doc Hancitor macros MAN1 Moskalvzapoe TA511 @malware_traffic
2021-07-12 22:27ba50aec821d7d7ce4b89d46118bc403e4b1d1fbf1988bec8c1a916f2bfc971f0Word file docHancitorChanitor doc Hancitor macros MAN1 Moskalvzapoe TA511 TA511` @malware_traffic
2021-07-09 01:05b4d402b4ab3b5a5568f35562955d5d05357a589ccda55fde5a2c166ef5f15699Word file docHancitordoc Hancitor macros MAN1 Moskalvzapoe TA511 @malware_traffic
2021-07-07 03:55877d5a80877f51ef34f8ca86e5cd0d20a52a515dccc945a040fe1d89c5986c84Word file docHancitordoc Hancitor @JAMESWT_MHT
2021-07-06 19:42efb609d20da350260b06bde4f21813eb6d6fc7f71a675bb5b0609b6aebe44df7Word file docxHancitorapplication/msword docx Hancitor Anonymous
2021-07-06 17:356fd21392a247d3f5cc83de50e1006010c438b609158ac5e7b6408627fdd4aa0bWord file docxHancitorapplication/msword docx Hancitor Anonymous
2021-07-06 16:514a68e284c206b9feb5a81d2235a338195db6982c439d088d357fdfb69630f15bWord file docxHancitorapplication/msword docx Hancitor Anonymous
2021-07-06 15:48b55284924181f69bf59527ac2b7a5397c35652c799c037a3e94d492d412f8c9cWord file docHancitorChanitor doc Hancitor macros MAN1 Moskalvzapoe TA511 @malware_traffic
2021-07-05 12:3318236bab1f6789ee8728b712647385baa79403cafa235214530acc32be3314adWord file doc doc @info_sec_ca
2021-07-01 16:136de957c6676bdc847586662208a81e09971fbe1257a7557348d67621e63a8e5fWord file docFickerStealerChanitor doc FickerStealer Hancitor macros MAN1 Moskalvzapoe TA511 @malware_traffic
2021-06-25 05:589e94c305f6d7a7af5ba3555ef5c3e9d98d66fe5c9b639f41c8fc044e65091ae9Word file docxHancitorapplication/msword docx Hancitor Anonymous
2021-06-25 04:19445c89cd435e8ceefd417b4d8819e91d46049b8530350154b7e68ca351fcdb43Word file docxHancitorapplication/msword docx Hancitor Anonymous
2021-06-25 02:4548de6fd1bc6f5b47e4c61d3af2434e153a6b0d55636798311e4a9eafe2db3588Word file docxHancitorapplication/msword docx Hancitor Anonymous
2021-06-25 01:12577743f3ecc1e38fb9d0d81b7190a49c51f17534c60fc7648cf6a8c754fa80c9Word file docxHancitorapplication/msword docx Hancitor Anonymous
2021-06-24 23:3814a58beb592bd357e373e99ad1c07ee497271419d742bdd35e35b5ab41ea8eaaWord file docxHancitorapplication/msword docx Hancitor Anonymous
2021-06-24 22:04b52ba95b8603c0aa7b11f3aca7fc261c3a8a32ecf69908bff07fd76cf9f562a2Word file docxHancitorapplication/msword docx Hancitor Anonymous
2021-06-24 20:3140bd6e708107d21e1211cfb6c418e997c1c718f2d5d288a3e328132e1e5159aaWord file docxHancitorapplication/msword docx Hancitor Anonymous
2021-06-24 18:576a6facc88e849e96e4b3804c2bc3eac424e3792358fc8467398955463b708a5bWord file docxHancitorapplication/msword docx Hancitor Anonymous
2021-06-24 17:181073f34d5c510fe0421dbac2e8b7c3c1b79fb498fc6c009febf446c82563fd08Word file docxHancitorapplication/msword docx Hancitor Anonymous
2021-06-24 08:16799d1962acdfe2e9d2975ce6d0e9eb93fef44da5e15fec525950e027fb4a7faeWord file docxHancitorapplication/msword docx Hancitor Anonymous
2021-06-24 05:09f28a5799a09b0c08a171c850e770d0ad4d81b5b70ed589ddea12a7c616405301Word file docxHancitorapplication/msword docx Hancitor Anonymous
2021-06-24 04:373f9d3925f753bb61c894317e1d84452fdaf135caa6431b8d41f5f6e5cc3f25b3Word file docxHancitorapplication/msword docx Hancitor Anonymous
2021-06-23 21:010a6614754166b5110120b24f6782afe731d935328b806e4fb009557a9a23c431Word file docxHancitorapplication/msword docx Hancitor Anonymous
2021-06-23 19:13a6bd19943dd9083e7a2f67c9302c32cbc5640d245d84176c43e9369cd6c34a11Word file docxHancitorapplication/msword docx Hancitor Anonymous
2021-06-23 17:5629f264a49e3bdc0f16cf04918cd24b563305c615fb624dd329bacc8ac6376d18Word file docxHancitorapplication/msword docx Hancitor Anonymous
2021-06-23 17:52723372257e3bef1a6b3f6994e5d4571edb54474840c814640ff5c3d506dc8260Word file docxHancitorapplication/msword docx Hancitor Anonymous
2021-06-23 17:366fef0d0319a8d97cc7f34082992e983ccdbb1b6a96f22545ea57525e71894bd6Word file docxHancitorapplication/msword docx Hancitor Anonymous
2021-06-23 17:152c0936d98c5fe69db0c8e45d2626d23caade71079317f09f35a03035965b37f9Word file docxHancitorapplication/msword docx Hancitor Anonymous
2021-06-23 16:4322e8fa80727e11d90bf28de6a605013dba40c7800873ab1641ecb52f2084ea3bWord file docxHancitorapplication/msword docx Hancitor Anonymous
2021-06-23 15:42a1846e364d9d841dcf39fe645629f9aded8cfcf07bf7bdf4a6b9915c29212999Word file docxHancitorapplication/msword docx Hancitor Anonymous
2021-06-23 14:406ccc74e8bc64ebc728513fc429d5e1d7a4496db498cbdda63474d98907da4bb5Word file docxHancitorapplication/msword docx Hancitor Anonymous
2021-06-23 06:4278427158e62358fe9bb00d17f26e45a25b77d6233379fbe9dff022408dbb7306Word file docxHancitorapplication/msword docx Hancitor Anonymous
2021-06-23 04:39bef59b6a7986d6039c056e93f5d44590d28c62b8881449d086477649966bcfb5Word file docxHancitorapplication/msword docx Hancitor Anonymous
2021-06-23 03:379f4ebc35761fdb9d710a32f2fc2ab88f9ff6190d96b52c6d2ebea94c6191ef0dWord file docxHancitorapplication/msword docx Hancitor Anonymous
2021-06-23 00:3171f093b607c71fdafc9c02a8aae82441c500845e5ad46a00f51d10834c5dcbb7Word file docxHancitorapplication/msword docx Hancitor Anonymous
2021-06-22 23:290cace90257252e99fcbf4f7256d6b51371346547f8c92be7d625a40af8cefb59Word file docxHancitorapplication/msword docx Hancitor Anonymous
2021-06-22 22:28aab201681afa12602340db03d09b75a6642db8d26a4fb2cdec7da6aa01f26984Word file docxHancitorapplication/msword docx Hancitor Anonymous
2021-06-22 21:269df29d54fb6a2a763fcd41dee7bb3de2d6116e66f2926e0c8eb4c2ff814fe662Word file docxHancitorapplication/msword docx Hancitor Anonymous
2021-06-22 20:22022c2addc545339966e20b7112c202eaf0435687edf59e275b0366b0069771b2Word file docxHancitorapplication/msword docx Hancitor Anonymous
2021-06-22 20:15109575d32a24bb8ddc76103046e9dd8f30becc7e21131ed0cc6c504a6e360e63Word file docxHancitorapplication/msword docx Hancitor Anonymous
2021-06-22 14:36c61e31881c37b5c71a0e8df7aa456773b23b0e951676c4960944392322eabf7cWord file docFickerStealerdoc FickerStealer Hancitor @ffforward
2021-06-16 16:387952fe215ddf17bdcd41de3433f78f7cab2d4c1313fc8f31cbfbb6fd60605508Word file docHancitordoc Hancitor @JAMESWT_MHT
2021-06-16 14:26696417ed1765a36267ad83d28bf8038d8e56615485db555edd09fe5e84d59547Word file docHancitordoc Hancitor @ffforward
2021-06-14 06:41588fbe37d57d2ae7d360403a2613e273b4f0339762c0bde74f246a6c4541ce5dWord file docAdwindAdwind doc @lowmal3
2021-06-14 06:0381f496ce09537b213e9425943def2e819fde1edef785424e7411723fe4a4c2b6Word file docAdwindAdwind doc @lowmal3
2021-05-31 13:481e7ef51ebf377662ac146590ecff7b38708d733d25d2074016c55cd60ad3f9f2Word file docAdwindAdwind doc @lowmal3
2021-05-31 08:24246ccf3e392c48c1fb908160e5264eb98e7b79f811e7fe2b06bb19bf18f7636dWord file docAdwindAdwind backdoor doc java malware ole @theDark3d
2021-05-28 13:21e48e6a31b1d275dbb78c11beac6c73824cacfe651551ba6e45eac3d1bd172986Word file docAdwindAdwind doc @info_sec_ca
2021-05-24 14:03dcfd0195dac36cc1d0747a6b40293e07ca1d174047f5267bee474afc4d565fb7Word file docAdwindAdwind RAT @Libranalysis
2021-05-22 15:01825ebffe89d3dd3ca0d3800c4331ca8c84d07341436ea72e72544835e3761759Word file docAdwindAdwind @Libranalysis
2021-05-18 10:3687eecafd6f81d9e5ac2e39c570ac20ee9400f55fc82415c7d8eaa8605f7e0eadWord file doc @lowmal3
2021-05-17 13:265a94cd6659c9bf6e78a582f340e46f6a2e70a5b283fadd888ccf77d4dec3bef4Word file docAdwindAdwind docx @info_sec_ca
2021-05-11 14:04ce9f8f34fe76be875d29460fad6dc202f1199214b4fb992409dfc96e9c135892Word file docAdwindAdwind @Libranalysis
2021-05-11 14:0179b658a1e069004182b8bb55eb1c18078e491e6d2449853278b53f7d81be860dWord file docAdwindAdwind @lowmal3
2021-04-29 13:01869057252cb67652a89248a497806609871fa551b4dac8112d6f12da9773bc81Word file doc doc @abuse_ch
2021-04-29 13:00c246066ba672ea9e8e0879f3f163c06b65ae73ab034261027712b51b1142d026Word file doc doc @abuse_ch
2021-03-29 06:32669912a8dc5b8ef36bc288090ce279a649587e64ae2a64f100f8ea0ec47a6ded zip @lowmal3
2021-03-26 12:21c871048da67fb794b94816780b63a647fafe86aea4b3135f73844b883f65f38eWord file doc docx @info_sec_ca
2021-03-24 15:38ae71e509c2e0fabce80afd4b37d9c1d839fa2e391400ab2cc613a269205b88fbWord file doc @JAMESWT_MHT
2021-03-23 15:02bb84d4b99efcacdf946e8a7b6ee776a1b3f5b82a06cc5f1eabad8978cb31f0dcWord file doc doc @lowmal3
2021-03-15 08:21d5ceee49106dad836447e15b43e2a84f502db07f4c0c6e7d9179292379f8d1c5Word file doc @lowmal3
2021-03-09 11:30af648e77730fcf3afd385bd82362be3b099b5b30c9a38815b106939336252a5bWord file doc @lowmal3
2021-03-03 14:22a0893ef888cc2ad1d39f0b6ccb0b80f1793c425178123eec13ea5f2c39220167Word file doc @lowmal3
2021-03-01 11:4245ce43fde8de8f388bc19cbb0811b2d7a2313da6eaa1305eb2932fdb7ba4696cWord file doc docx Embedded-JAR Loader TUR @ffforward
2021-02-25 01:3164cdfec0be049dd92388b1e5d8a5ef130907c8ea6a2a1f61564fd865892d24e8Word file docx apt LazyScripter @c3rb3ru5d3d53c
2021-02-25 01:3187b1b71337ae7bc237d677fd6559ea6432facb27252fcefcac24bb6132ae8ac8Word file docx apt LazyScripter @c3rb3ru5d3d53c
2021-02-25 01:3151a631cf0940341f2682a84993b782e2c015ff2181a4c8894e38617643c6a4caWord file docx apt LazyScripter @c3rb3ru5d3d53c
2021-02-25 00:19f46200110df685967fe3521360be461b1204f8f39a2aa785c4885fe3f142082bWord file docx apt LazyScripter @ArkbirdDevil
2021-02-25 00:19eadae73398980c346cf5783b2f1119cc8af3619ce405f32b943b56013c27d597Word file docx apt LazyScripter @ArkbirdDevil
2021-02-25 00:18c3379e83cd3e8763f80010176905f147fcc126b5e7ad9faa585d5520386bd659Word file docx apt LazyScripter @ArkbirdDevil
2021-02-25 00:17905ef0ae8f5173b917a4f39063346825f4b23ae75cb4b3190300cb064bd002b9Word file docx apt LazyScripter @ArkbirdDevil
2021-02-25 00:067099cdd24bb1eb0dbe3ab1bc1995e3e5cf577b2d232e088d948c8ff749b73795Word file doc apt LazyScripter @ArkbirdDevil
2021-02-25 00:04785c2845af631f33fda47b5a0fe5ccb338389b15e028e1ae7fa418d991e2c38fWord file docx apt LazyScripter @ArkbirdDevil
2021-02-25 00:032d845bd6662e7449f4db7a922e67c665df70cd045af48e2cb3d689a5d0004b2fWord file docx apt LazyScripter @ArkbirdDevil
2021-02-24 20:426c130d31f65ef198e4664efaa2db3b89bd3cf2ce91a88442a67a9942b97d0015Word file doc Cryptolocker docx Office 2007 Office 2010 Anonymous
2021-02-22 11:31104338f5fa5266be9f6041166d259395c25f68e403000510ff5b510f4a956f85Word file doc @lowmal3
2021-02-17 06:4758cda590b2173736d919bc666b5f08bafd8e33d3516d045070c765106a741dacunknownKimsukyKimsuky Thallium @ShadowChasing1
2021-02-16 11:28dbbe2d9d2fb32cccf3b02b656f6377c9b2760149dad84aa291b8ef2fa468d72fWord file doc @lowmal3
2021-02-10 06:44b3cb09a5bbc607b52cffc46f969d342e30ca8e69984bf54f3057a5298c2e124dWord file doc @lowmal3
2021-02-03 10:239c82b334892995a7ca4aa43813251239363f3e649c135203b252f024e6acd2ecWord file doc @lowmal3
2021-01-27 10:170a78e8b4519fb59cfc3b25a6b62fe0cee2311296a2839eb9360ba44f86206555Word file doc @lowmal3
2021-01-19 07:245264b4a39b7f8a3d83a80059032540d9d066255f5094b60c459a79b35bf6226eWord file doc @lowmal3
2021-01-14 08:3769275397c8f8bdc2b2f24c960375d9301a472a70b5f48f3ef4d72e2958e05a87Word file doc @lowmal3
2021-01-05 06:34ea5ed9d62aa2b0f12842c0022366d354cdf3c8f951620afa32a89d37d9953944Word file doc @lowmal3
2020-12-30 07:16029922594c267d73669217c093a4c547d1f68ba99b16d149786dd26e1ce9c73cWord file doc @lowmal3
2020-12-29 06:415a1b9e27b5ee947da763ee55d57a0d0efb2615691578f70e04405dbc0827132cWord file doc @lowmal3
2020-12-28 07:109af8a32eb92962546dfa3c6b52b578ad0ab6330728ac1bab989a7e9e452e78eeWord file doc @lowmal3
2020-12-28 07:07db5af353dd553d39566d4f43115cece2840677af2aa291a412152848988517c4Word file doc @lowmal3
2020-12-28 07:063d3282aedac4a337a36917b4930bc3d4bfdd36235a4af4d71ce600376822e090Word file doc @lowmal3
2020-12-24 09:53ba6cc16770dc67c1af1a3e103c3fd19a854193e7cd1fecbb11ca11c2c47cdf04Word file doc doc @abuse_ch
2020-12-23 07:1858ea34b6ce3bac3917f274af84a99c3d22db73c20fe9589718e39792591281d1Word file doc @lowmal3
2020-12-22 14:589c37fe8fa22a2b027c1c503aa2f033124d62477cfc25ae04fec57318eb4e20bcWord file doc @lowmal3
2020-12-11 06:410fabf6678522ecdae223fd6bae747ca2bd574082e4638e113c6b160f9da72be3Word file doc @lowmal3
2020-11-30 07:4995750d3b1152845b82a552019761c408c4ce49369b1485ab46ef06c038455d7fWord file doc @lowmal3
2020-10-28 08:125e7ddcc8aa2977cceac204ed424e05270874e2b0da94eb5b056e968126fc9902Excel file xlsAsyncRATAsyncRAT xls @abuse_ch
2020-10-28 08:120382b5119ec9a6eea3dfd171bbd459c1c3a6588b1af3ad628239ca21f22a818c zipAsyncRATAsyncRAT zip @abuse_ch
2020-10-27 01:49852efeac79800dbb00896def3b39d0c15673dd627ca345d486a2c1c04c9853d5unknown jar malware trojan @theDark3d
2020-10-27 01:0959c45270d6700f712d625357442e40203dad60a01da25f3bb1d80f5de66963e5Word file doc doc java malware trojan @theDark3d
2020-09-17 18:269f40fd5596a5d9f195017a5cae09799af8755f1436b8b9edbed768ccaa5dba67 zip maldoc sansisc vba word @xme
2020-09-17 18:2340ae709cb1d6335c3a41863d2dca21bfa7bd493ebb3d7ddd72da4e09b09b2988unknown ole2 Python sansisc @xme
2020-08-25 19:36d1c58a2f2f82f2096f7686a9e708efea85f37fedd8ea830a1c5ef43b2793fd20unknown @SecuriteInfoCom
2020-08-25 19:36d707780ec360dabfa69d764eed2d0143ae0306d506e519bd733ab95cf66c3ea1unknown @SecuriteInfoCom
2020-08-17 09:3313da495af25bee6db8ebc38f9e54aad8e1e812e9e133ad8b42dd8ddaa2394f29Excel file xlsmAgentTeslaAgentTesla Hostwinds xlsm @abuse_ch
2020-08-16 10:59266c2d4ea4ece176a83038a325c515163472aaa76bc8345ccaa49957fc66cf4dWord file docAdwindAdwind doc Evasion trojan @theDark3d
2020-08-11 08:29692e6a111ca10fb9eec4acbb5e6aa5b92eb906bde598dcff9eb9bec979e43152Word file docMassLoggerMassLogger @FORMALITYDE
2020-08-05 12:2089df99036fa243e882a11796e9650c52dea6332c7a6cfa9fd04b0efddd92cba6Word file docKutakiKutaki @JAMESWT_MHT
2020-07-30 05:18e84d3186f2467eff5ee1520509c5a7be3d96875b6af404b98a2b132663dad839Word file docMassLoggerdocx MassLogger @cocaman
2020-07-08 16:38229346faf2435484d1bd5a9a61d48e1d556d09f77df5d26295f07f42bdc61d33Word file doc doc java trojan @theDark3d
2020-05-18 12:39090d12d9014e4d8aec7cb49026cc1b4bb3d9d0da6f19feb89232dac1ee9e9c73Word file doc doc @cocaman
2020-05-12 04:42501ac08ebac646517b00d3234dfe58837b460bd5f045822d9fb5999f00979bfeWord file doc COVID-19 doc @cocaman
2020-04-27 23:0205b56c3455a5616745dfb45a396e8202fdb6f078afda4b72c3a157837c25b481Word file doc @c_APT_ure