Index

afd6e5ff646e9a3838f03882c44bd77fce6230a61b77d57de7bf8228f410febd.bin Aug 29

afd6e5ff646e9a3838f03882c44bd77fce6230a61b77d57de7bf8228f410febd ✓ O₂(As₂C)H(Os)Md₂(PtSi₃)

92% obfuscator/garbleexecution/windows-loader

69d551dbb178fdb81d98c1e903486924cbf5ffe19ae1525b5e3414d6c5f100d7.bin Aug 29

69d551dbb178fdb81d98c1e903486924cbf5ffe19ae1525b5e3414d6c5f100d7 ✓ O₂(As₂C)H(Os)Md₂(PtSi₃)

64% Obfuscated Go binary, self-signed

c064b634f2b3111b777e1509a12c5fc1c70d6c994fe770b9096c0e8aadfe42b8.bin Aug 29

c064b634f2b3111b777e1509a12c5fc1c70d6c994fe770b9096c0e8aadfe42b8 ✓ O₂(As₂C)H(Os)Md₂(PtSi₃)

64% Obfuscated Go binary, self-signed

21e2e91a3cb4b600f75aea71d05bba1f42b183289f8b11d97b67bd03f192fc9f.bin Aug 29

21e2e91a3cb4b600f75aea71d05bba1f42b183289f8b11d97b67bd03f192fc9f ✓ O₂(As₂C)H(Os)Md₂(PtSi₃)

92% obfuscator/garbleexecution/windows-loader

05237158fac1473ab923e95da92bbe5d74ba3208bb1e47d5c21850155d9db316.bin Aug 29

05237158fac1473ab923e95da92bbe5d74ba3208bb1e47d5c21850155d9db316 ✓ O₂(As₂C)H(Os)Md₂(PtSi₃)

64% Obfuscated Go binary, self-signed

file Aug 25

fba00f02ac5abe5b9f7185d74ba753aa12984517fd79ce70a17ffd0ab3fa9adb ✓ O₂(As₂C)H(Os)Md₂(PtSi₃)

92% obfuscator/garbleexecution/windows-loader

QuickFetch.exe Aug 24 windows

f5b850be90148056aa4dcc36802479a73a2966a07e7e66562feeee013ed70de5 ✓ O₂(As₂C)H(Os)Md₂(PtSi₃)

64% Obfuscated Go binary, self-signed

file Aug 24 windows

e0052883762cdd3cec6ab5ebbdc0f34eb3a718d67b1a55b2717d9ae6b28944e8 ✓ O₂(As₂C)H(Os)Md₂(PtSi₃)

64% Obfuscated Go PE, self-signed

4ff863b60d5d5d4fb86764e6b6bb25677d2a3086c33fc.exe Aug 24 windows

4ff863b60d5d5d4fb86764e6b6bb25677d2a3086c33fccc3f09e707937b8d4a9 ✓ O₂(As₂C)H(Os)Md₂(PtSi₃)

92% obfuscator/garbleexecution/windows-loader

Download_Movie_Maker_2.6_For_Windows_7.exe Aug 24 windows

482fa07dd6635918997e856854b64285e1a631f873cee83b9c7f92c78cb4caca ✓ O₂(As₂C)H(Os)Md₂(PtSi₃)

97% Obfuscated Go dropper, C2, self-signed

7418da8244ca828455bf41fd20be45449600ee428e1b9.exe Aug 24 windows

7418da8244ca828455bf41fd20be45449600ee428e1b9926d17f8230cd759429 ✓ O₂(As₂C)H(Os)Md₂(PtSi₃)

64% obfuscated Go, self-signed, C2 indicators

f1bb5a6451b387570a4fdaf71996bbebcf931e142123a.exe Aug 24 windows

f1bb5a6451b387570a4fdaf71996bbebcf931e142123ac7f673bd0b37049c26c ✓ O₂(As₂C)H(Os)Md₂(PtSi₃)

64% obfuscated Go, self-signed, C2 indicators

574227733.exe Aug 24 windows

fd1844f7cd6512dfdeeec1bdfc801bfc3c6b6225c16a83e2e36360289c74ff52 ✓ O₂(As₂C)H(Os)Md₂(PtSi₃)

64% obfuscated Go, self-signed, C2 indicators

𝗦𝗘𝗧𝗨𝗣.exe Aug 24 windows

79a4f6619793991c126900993a4ab516983a61ca6dddeee9f8eb4bdd3a434c5a ✓ O₂(As₂C)H(Os)Md₂(PtSi₃)

64% Obfuscated Go binary, self-signed

c6a80e0d75a2b2fd8ec7aa445d322546a30e1d9f82516672828b612cf53e1c24 Aug 23

c6a80e0d75a2b2fd8ec7aa445d322546a30e1d9f82516672828b612cf53e1c24 ✓ O₂(As₂C)H(Os)Md₂(PtSi₃)

92% obfuscator/garbleexecution/windows-loader

file.exe Aug 23 windows

21768f84350ec5f530bd1ebf6058c8840c55b0513eaca927b623500c81f834e2 ✓ O₂(As₂C)H(Os)Md₂(PtSi₃)

64% Obfuscated Go binary, self-signed

2026-08-22_4d5ecca69a506cac11c3b226439ad138_frostygoop_hive_luca-stealer_salatstealer_sliver Aug 23

178fd830163f46b127955422415f10d5f5a337212940ecfbb16f715b8ab2a711 ✓ O₂(As₂C)H(Os)Md₂(PtSi₃)

97% Named stealer, obfuscated Go, C2

6ded9017cd432164a43b918aad495ca55bba80a5c0785db7f416276fbf85a135.bin Aug 23 windows

6ded9017cd432164a43b918aad495ca55bba80a5c0785db7f416276fbf85a135 ✓ O₂(As₂C)H(Os)Md₂(PtSi₃)

97% obfuscated Go malware, C2, self-signed

Download_Movie_Maker_2.6_For_Windows_7.exe Aug 23 windows

0bb70961853f4ce36650d296b7e945e0dda5a9ac2964e7a217cc35bbfbb1f253 ✓ O₂(As₂C)H(Os)Md₂(PtSi₃)

97% Obfuscated Go dropper, self-signed

file Aug 22 windows

812c30f4f6781d4ae521e5b36e43189e6ee3d7e4227282b84788d896016a94a9 ✓ O₂(As₂C)H(Os)Md₂(PtSi₃)

64% obfuscated Go, self-signed, C2 hints

file.exe Aug 22 windows

9065570359e5725bf1d4827b3b6af0875a9278971872719d60300cdbb1f6c0f2 ✓ O₂(As₂C)H(Os)Md₂(PtSi₃)

64% Obfuscated Go binary, self-signed

file Aug 22 windows

835377ec29f786c2b3ea6bc234da33cd685248390be64d39b276177f543e134f ✓ O₂(As₂C)H(Os)Md₂(PtSi₃)

97% Obfuscated Go loader with direct syscalls

b4ebdf938bd45a11dc5d139bee18e7692e5c98c7511af.exe Aug 21 windows

b4ebdf938bd45a11dc5d139bee18e7692e5c98c7511af9026558ef7d281d8c33 ✓ O₂(As₂C)H(Os)Md₂(PtSi₃)

92% obfuscator/garbleexecution/windows-loader

f4b330adc3e1cb5d4ba6f1c506d0e4d6821b83d9b033f6e0f21cfdb94c35d2c2.bin Aug 21 windows

f4b330adc3e1cb5d4ba6f1c506d0e4d6821b83d9b033f6e0f21cfdb94c35d2c2 ✓ O₂(As₂C)H(Os)Md₂(PtSi₃)

92% obfuscator/garbleexecution/windows-loader

file Aug 21 windows

8abd6a3d21097d75fc4970cb1c202c7b30bc709cf2446a94a298e3020578942a ✓ O₂(As₂C)H(Os)Md₂(PtSi₃)

92% obfuscator/garbleexecution/windows-loader

Mod Menu.exe Aug 21 windows

519751300d88a185b17b1d0acec286a80547bea621efbceff5237d55a961cbaf ✓ O₂(As₂C)H(Os)Md₂(PtSi₃)

92% obfuscator/garbleexecution/windows-loader

2026-08-20_da94af85b7215a36d7b1809a96198b24_frostygoop_hive_luca-stealer_salatstealer_sliver Aug 21

4dee28916b8fcc7008bcbd4a271258d050275cea5bae35072d4bf484a076e0b3 ✓ O₂(As₂C)H(Os)Md₂(PtSi₃)

92% obfuscator/garbleexecution/windows-loader

2026-08-21_a42a46526ce54df566825374ed7cbd6b_frostygoop_hive_luca-stealer_salatstealer_sliver Aug 21

0205d8db256ba60f9731880f37f44935a45d84d0d74ca4c68e7b11f98109e296 ✓ O₂(As₂C)H(Os)Md₂(PtSi₃)

92% obfuscator/garbleexecution/windows-loader

90261947ce26f5ec40129b1a2d17f52a3f2624f2280133a3cf251d97473447d1.bin Aug 14 windows

90261947ce26f5ec40129b1a2d17f52a3f2624f2280133a3cf251d97473447d1 ✓ O₂(As₂C)H(Os)Md₂(PtSi₃)

97% obfuscated Go loader, abused cert

580b441e2961739fd26e54e0a0ea08351cb10a51839519fc722cfa39ecd0c954.bin Aug 14 windows

580b441e2961739fd26e54e0a0ea08351cb10a51839519fc722cfa39ecd0c954 ✓ O₂(As₂C)H(Os)Md₂(PtSi₃)

97% obfuscated Go malware, self-signed cert

71aa9766db343fa5de8e83e8d8eef912df3f7396116cd7ceef34631dd46ea2ad.bin Aug 14 windows

71aa9766db343fa5de8e83e8d8eef912df3f7396116cd7ceef34631dd46ea2ad ✓ O₂(As₂C)H(Os)Md₂(PtSi₃)

97% obfuscated Go loader, direct syscalls

c4f172470b766f99f20bf7b4571f3b674d18b7709ca40ddcad6084fad695b15e.bin Aug 14 windows

c4f172470b766f99f20bf7b4571f3b674d18b7709ca40ddcad6084fad695b15e ✓ O₂(As₂C)H(Os)Md₂(PtSi₃)

97% obfuscated Go, self-signed, C2 indicators

b31fd00605f8ebe87e7e3244db6a20c1f94d777da1d51cbb6beb43e1596139ff.bin Aug 14 windows

b31fd00605f8ebe87e7e3244db6a20c1f94d777da1d51cbb6beb43e1596139ff ✓ O₂(As₂C)H(Os)Md₂(PtSi₃)

97% obfuscated Go loader, abused cert

bf1e307ac3c2d2a7e9c5b30b181d196888b1c2f3a01e5bc508e5f39e71c0275c.bin Aug 14 windows

bf1e307ac3c2d2a7e9c5b30b181d196888b1c2f3a01e5bc508e5f39e71c0275c ✓ O₂(As₂C)H(Os)Md₂(PtSi₃)

92% obfuscator/garbleexecution/windows-loader

06ce22ab9a6477a1cf0b0961767dad0d6cb8e44990a81c50673bba8e30a9726c.bin Aug 14 windows

06ce22ab9a6477a1cf0b0961767dad0d6cb8e44990a81c50673bba8e30a9726c ✓ O₂(As₂C)H(Os)Md₂(PtSi₃)

92% obfuscator/garbleexecution/windows-loader

c5efbad0aecc1f3070f43ec0a222d5683ddbe2c894772f0d1e174c3af7cfe24c.bin Aug 14 windows

c5efbad0aecc1f3070f43ec0a222d5683ddbe2c894772f0d1e174c3af7cfe24c ✓ O₂(As₂C)H(Os)Md₂(PtSi₃)

97% obfuscated Go C2 dropper

Mod Menu.exe Aug 9 windows

65ed83b82384a69e0a7cbfb649f994f82c0625eb97ae6db30ad7cb1406b3bc5d ✓ O₂(As₂C)H(Os)Md₂(PtSi₃)

97% obfuscated Go loader, abused cert

QuickFetch.exe Aug 9 windows

661cd950e95e26d00a28099a554f12e6f937774cd14f129777267d95762e4071 ✓ O₂(As₂C)H(Os)Md₂(PtSi₃)

97% Obfuscated Go C2 dropper

R6.exe Aug 8 windows

6f737981ac722be8ae1c05a295667d050abe1b45dd946e1dbf4c46467c517c5f ✓ O₂(As₂C)H(Os)Md₂(PtSi₃)

97% obfuscated Go loader, direct syscalls

zalupa.exe Aug 8 windows

5cdff90b374249d95723e930e445b44e9c909a28e2cb639c2dbe85233b09129f ✓ O₂(As₂C)H(Os)Md₂(PtSi₃)

97% obfuscated Go loader, abused cert

2af59df51773ab85d855e54abf3832ee.exe Aug 7 windows

7e1e424f3c184c3c037235494158be38a9e7b15e0bd4a97c7f854ab03a1f09ed ✓ O₂(As₂C)H(Os)Md₂(PtSi₃)

97% obfuscated Go malware, self-signed cert

QuickFetch.exe Aug 5 windows

847d8f4998d22fde37eb76f99b6d91012c42965b741fe2cec453ca5876cdf147 ✓ O₂(As₂C)H(Os)Md₂(PtSi₃)

97% obfuscated Go loader with direct syscalls

file Aug 5 windows

af3ef660ee97d62ccc7d0685b66be395ae0304a2daad6796b04520fa018233ec ✓ O₂(As₂C)H(Os)Md₂(PtSi₃)

97% obfuscated Go malware with C2

QuickFetch.exe Aug 3 windows

b6bc2fb4af89149d91c946ac7f7898b2831f2466545d2777b32a6edf0cc34b7f ✓ O₂(As₂C)H(Os)Md₂(PtSi₃)

97% obfuscated Go loader, direct syscalls

QuickFetch.exe Aug 3 windows

129917ed452c3eb6c19552d38ab4d2b4a741c35d8da76dd9b0313b868ef54c08 ✓ O₂(As₂C)H(Os)Md₂(PtSi₃)

97% obfuscated Go loader, abused cert

file Aug 2 windows

9c0c712eb0969125e49ae2b43154bac9efa4617445de55696cb2bbad70fad02c ✓ O₂(As₂C)H(Os)Md₂(PtSi₃)

97% obfuscated Go loader, direct syscalls

file Aug 2 windows

6230782e1c843f6ccc0727a26c039dfd0965cddd6fc6cbf19bbeff0639cb33cb ✓ O₂(As₂C)H(Os)Md₂(PtSi₃)

97% obfuscated Go loader, abused cert

file Aug 1 windows

9a227c008092640c375b8eee5e43557f2cdb9dfe6a8cf55050cb3c4353df2e87 ✓ O₂(As₂C)H(Os)Md₂(PtSi₃)

97% obfuscated Go loader, abused cert

QuickFetch.exe Aug 1 windows

e6d68f489e840cfd04b764b40adf3d41820d0c9d979d7af21edddc8295aaf1e2 ✓ O₂(As₂C)H(Os)Md₂(PtSi₃)

97% obfuscated Go loader, abused cert

file Jul 31 windows

fa77709baf5d398b0477271d75bf1f3b43e74f025a33f99e5fce4efc3bdd2dc5 ✓ O₂(As₂C)H(Os)Md₂(PtSi₃)

97% Go loader with obfuscation and direct syscalls

file Jul 31 windows

fdab9767c681ea284a20a1d39634cc3fc14c1e8a399eec963f7f67716ede3e17 ✓ O₂(As₂C)H(Os)Md₂(PtSi₃)

97% Go loader, opaque syscalls, abused cert

bhatta.exe Jul 28 windows

56cc93be915c0d59943d0bf3c91dc1956b0af95939b812679197d3607829713f ✓ O₂(As₂C)H(Os)Md₂(PtSi₃)

97% Go loader with obfuscation and abused cert

beb.exe Jul 28 windows

c431caed57d9d7699aa519790582595c96224c0f00bee914f8c4ee2252495e23 ✓ O₂(As₂C)H(Os)Md₂(PtSi₃)

97% Go loader with abused TLS cert