File Search Engine
  • Search
  • Syntax
  • Fields
  • API
  • evilserver.xyz · not_malware.exe

    /

    · CLOUDFLARENET

    Yara Win32_Ransomware_DarkSide From ReversingLabs by ReversingLabs
    Download archived sample
    The password is "infected"

    SHA1: c511ae4d80aaa281c610190aa13630de61ca714c
    SHA256: 0a0c225f0e5ee941a79f2b7701f1285e4975a2859eb4d025d96d9e366e81abb9
    application/x-msdos-program
    56.50KB
    2021-04-20 22:38:45 +0000 UTC

  • evilserver.xyz · invoice.pdf.exe

    /

    · CLOUDFLARENET

    Yara EXE_extension_cloaking From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 9efe7c2f9ff9659c8b16b8ea037458463bd02f14
    SHA256: d173fdd600b0577f376067d758da1ccfa63daba40f5f9cbd1e0c14c13df739e4
    application/x-msdos-program
    302.50KB
    2023-07-14 20:25:32 +0000 UTC

  • evilserver.xyz · invoice.pdf

    /

    · CLOUDFLARENET

    SHA1: 846cfec17f0462def08d77f9730a6316d93a3a96
    SHA256: bd0d72b1c9e667d3dcd496334981305d9704885776791069ca84b6a1a3274ba5
    application/pdf
    41.55KB
    2023-07-14 18:21:41 +0000 UTC

  • evilserver.xyz · README.txt

    /

    · CLOUDFLARENET

    SHA1: a7e1ac5a2e53b51fa48424779ca85936cfa6159d
    SHA256: 860219d5bc56432220030488db1705745ffe57bbc777de171186f76f23748791
    text/plain
    56.00B
    2023-07-14 18:02:55 +0000 UTC

  • evilserver.xyz · not_malware.exe

    /

    · CLOUDFLARENET

    Yara Win32_Ransomware_DarkSide From ReversingLabs by ReversingLabs
    Download archived sample
    The password is "infected"

    SHA1: c511ae4d80aaa281c610190aa13630de61ca714c
    SHA256: 0a0c225f0e5ee941a79f2b7701f1285e4975a2859eb4d025d96d9e366e81abb9
    application/x-msdos-program
    56.50KB
    2021-04-20 22:38:45 +0000 UTC

  • evilserver.xyz · invoice.pdf.exe

    /

    · CLOUDFLARENET

    Yara EXE_extension_cloaking From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 9efe7c2f9ff9659c8b16b8ea037458463bd02f14
    SHA256: d173fdd600b0577f376067d758da1ccfa63daba40f5f9cbd1e0c14c13df739e4
    application/x-msdos-program
    302.50KB
    2023-07-14 20:25:32 +0000 UTC

  • evilserver.xyz · invoice.pdf

    /

    · CLOUDFLARENET

    SHA1: 846cfec17f0462def08d77f9730a6316d93a3a96
    SHA256: bd0d72b1c9e667d3dcd496334981305d9704885776791069ca84b6a1a3274ba5
    application/pdf
    41.55KB
    2023-07-14 18:21:41 +0000 UTC

  • evilserver.xyz · README.txt

    /

    · CLOUDFLARENET

    SHA1: a7e1ac5a2e53b51fa48424779ca85936cfa6159d
    SHA256: 860219d5bc56432220030488db1705745ffe57bbc777de171186f76f23748791
    text/plain
    56.00B
    2023-07-14 18:02:55 +0000 UTC

  • evilserver.xyz · not_malware.exe

    /

    · CLOUDFLARENET

    Yara Win32_Ransomware_DarkSide From ReversingLabs by ReversingLabs
    Download archived sample
    The password is "infected"

    SHA1: c511ae4d80aaa281c610190aa13630de61ca714c
    SHA256: 0a0c225f0e5ee941a79f2b7701f1285e4975a2859eb4d025d96d9e366e81abb9
    application/x-msdos-program
    56.50KB
    2021-04-20 22:38:45 +0000 UTC

  • evilserver.xyz · invoice.pdf.exe

    /

    · CLOUDFLARENET

    Yara EXE_extension_cloaking From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 9efe7c2f9ff9659c8b16b8ea037458463bd02f14
    SHA256: d173fdd600b0577f376067d758da1ccfa63daba40f5f9cbd1e0c14c13df739e4
    application/x-msdos-program
    302.50KB
    2023-07-14 20:25:32 +0000 UTC

  • evilserver.xyz · invoice.pdf

    /

    · CLOUDFLARENET

    SHA1: 846cfec17f0462def08d77f9730a6316d93a3a96
    SHA256: bd0d72b1c9e667d3dcd496334981305d9704885776791069ca84b6a1a3274ba5
    application/pdf
    41.55KB
    2023-07-14 18:21:41 +0000 UTC

  • evilserver.xyz · README.txt

    /

    · CLOUDFLARENET

    SHA1: a7e1ac5a2e53b51fa48424779ca85936cfa6159d
    SHA256: 860219d5bc56432220030488db1705745ffe57bbc777de171186f76f23748791
    text/plain
    56.00B
    2023-07-14 18:02:55 +0000 UTC

  • evilserver.xyz · not_malware.exe

    /

    · CLOUDFLARENET

    Yara Win32_Ransomware_DarkSide From ReversingLabs by ReversingLabs
    Download archived sample
    The password is "infected"

    SHA1: c511ae4d80aaa281c610190aa13630de61ca714c
    SHA256: 0a0c225f0e5ee941a79f2b7701f1285e4975a2859eb4d025d96d9e366e81abb9
    application/x-msdos-program
    56.50KB
    2021-04-20 22:38:45 +0000 UTC

  • evilserver.xyz · invoice.pdf.exe

    /

    · CLOUDFLARENET

    Yara EXE_extension_cloaking From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 9efe7c2f9ff9659c8b16b8ea037458463bd02f14
    SHA256: d173fdd600b0577f376067d758da1ccfa63daba40f5f9cbd1e0c14c13df739e4
    application/x-msdos-program
    302.50KB
    2023-07-14 20:25:32 +0000 UTC

  • evilserver.xyz · invoice.pdf

    /

    · CLOUDFLARENET

    SHA1: 846cfec17f0462def08d77f9730a6316d93a3a96
    SHA256: bd0d72b1c9e667d3dcd496334981305d9704885776791069ca84b6a1a3274ba5
    application/pdf
    41.55KB
    2023-07-14 18:21:41 +0000 UTC

  • evilserver.xyz · README.txt

    /

    · CLOUDFLARENET

    SHA1: a7e1ac5a2e53b51fa48424779ca85936cfa6159d
    SHA256: 860219d5bc56432220030488db1705745ffe57bbc777de171186f76f23748791
    text/plain
    56.00B
    2023-07-14 18:02:55 +0000 UTC

  • evilserver.xyz · not_malware.exe

    /

    · CLOUDFLARENET

    Yara Win32_Ransomware_DarkSide From ReversingLabs by ReversingLabs
    Download archived sample
    The password is "infected"

    SHA1: c511ae4d80aaa281c610190aa13630de61ca714c
    SHA256: 0a0c225f0e5ee941a79f2b7701f1285e4975a2859eb4d025d96d9e366e81abb9
    application/x-msdos-program
    56.50KB
    2021-04-20 22:38:45 +0000 UTC

  • evilserver.xyz · not_malware.exe

    /

    · CLOUDFLARENET

    Yara Win32_Ransomware_DarkSide From ReversingLabs by ReversingLabs
    Download archived sample
    The password is "infected"

    SHA1: c511ae4d80aaa281c610190aa13630de61ca714c
    SHA256: 0a0c225f0e5ee941a79f2b7701f1285e4975a2859eb4d025d96d9e366e81abb9
    application/x-msdos-program
    56.50KB
    2021-04-20 22:38:45 +0000 UTC

  • evilserver.xyz · invoice.pdf.exe

    /

    · CLOUDFLARENET

    Yara EXE_extension_cloaking From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 9efe7c2f9ff9659c8b16b8ea037458463bd02f14
    SHA256: d173fdd600b0577f376067d758da1ccfa63daba40f5f9cbd1e0c14c13df739e4
    application/x-msdos-program
    302.50KB
    2023-07-14 20:25:32 +0000 UTC

  • evilserver.xyz · invoice.pdf.exe

    /

    · CLOUDFLARENET

    Yara EXE_extension_cloaking From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 9efe7c2f9ff9659c8b16b8ea037458463bd02f14
    SHA256: d173fdd600b0577f376067d758da1ccfa63daba40f5f9cbd1e0c14c13df739e4
    application/x-msdos-program
    302.50KB
    2023-07-14 20:25:32 +0000 UTC