Files named kn.exe

60.248.11.103 · kn.exe

/func/

Taiwan · Data Communication Business Group

Yara php_backdoor_php From Florian Roth by Neo23x0 Yara BRG + customization by Stefan -dfate- Molls

Download archived sample
The password is "infected"

SHA1: 8c8b35f8e86e9a141c29ad9fedb47b470f8ee9e4
SHA256: 76a9006dc6758d474f18fe8691f9e41fa47b757eecee7c3602524ab7a9a013ef
application/x-msdownload
27.87MB
2024-04-09 08:22:34 +0000 UTC
60.248.11.103 · kn.exe

/func/

Taiwan · Data Communication Business Group

Yara php_backdoor_php From Florian Roth by Neo23x0 Yara BRG + customization by Stefan -dfate- Molls

Download archived sample
The password is "infected"

SHA1: 59019e10672e83a4daabf0f9c85245a3f9ad4b8e
SHA256: cdfb1cf30830ce2c08e1f8d1542aa1bbe7adaebd984f8b0569247a7646b19323
application/x-msdownload
27.87MB
2024-04-09 08:22:34 +0000 UTC
60.248.11.103 · kn.exe

/func/

Taiwan · Data Communication Business Group

Yara php_backdoor_php From Florian Roth by Neo23x0 Yara BRG + customization by Stefan -dfate- Molls

Download archived sample
The password is "infected"

SHA1: 0c44360f0e2fa813fc230cce5988412dea18e48d
SHA256: ec92038b3b88541db0a2ea04013ec7602e790838050d796ec8d67151c4263e06
application/x-msdownload
27.87MB
2024-04-09 08:22:34 +0000 UTC
60.248.11.103 · kn.exe

/func/

Taiwan · Data Communication Business Group

SHA1: 9fd7f8f6827c0ff5502c6eaeed63f9c5166c02c7
SHA256: 95dc35212d869ebf95a11a317c148063d0a03539285df736423ac3051f1d3fd8
application/x-msdownload
27.87MB
2024-04-09 08:22:34 +0000 UTC