File Search Engine
  • Search
  • Syntax
  • Fields
  • API
  • yy.q2s5.my · OpenMinis-1.13.1-hanli-liveness.apk

    /

    Hong Kong · I LAYER LIMITED

    Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)
    Yara Disable_Defender From AbuseCH by iam-py-test
    Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)
    Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 1a9aa632552c4c4cfd1d79600408a7c36b167e07
    SHA256: 0394910b57fd8eb22032672630caed79e69c281d148c34f83787d4f9197c3580
    application/octet-stream
    38.66MB
    2026-09-19 00:03:26 +0000 UTC

  • yy.q2s5.my · OpenMinis-1.13-hanli-arm64.apk

    /

    Hong Kong · I LAYER LIMITED

    Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)
    Yara Disable_Defender From AbuseCH by iam-py-test
    Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)
    Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 63a64817ef57486781050366b685ecf19302649b
    SHA256: fc74b9d19dea9f7b5a58cbd22def0132cce3aaffa8c8b35e8321f4fb212f3f65
    application/octet-stream
    38.65MB
    2026-09-18 19:36:30 +0000 UTC

  • yy.q2s5.my · CNC-1.13.1-arm64.apk

    /

    Hong Kong · I LAYER LIMITED

    Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)
    Yara Disable_Defender From AbuseCH by iam-py-test
    Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)
    Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 1ddf39e91d032d83853d5b381dae40e88d0c4d17
    SHA256: e99ce4d82b39ad5293aa4b112d1f342d3fe9333468d43a7ab29257adee45188b
    application/octet-stream
    38.11MB
    2026-09-19 01:10:31 +0000 UTC

  • dan.umlsy.top · OpenMinis-1.13.1-hanli-liveness.apk

    /

    Hong Kong · I LAYER LIMITED

    Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)
    Yara Disable_Defender From AbuseCH by iam-py-test
    Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)
    Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 1a9aa632552c4c4cfd1d79600408a7c36b167e07
    SHA256: 0394910b57fd8eb22032672630caed79e69c281d148c34f83787d4f9197c3580
    application/octet-stream
    38.66MB
    2026-09-19 00:03:26 +0000 UTC

  • dan.umlsy.top · OpenMinis-1.13-hanli-arm64.apk

    /

    Hong Kong · I LAYER LIMITED

    Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)
    Yara Disable_Defender From AbuseCH by iam-py-test
    Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)
    Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 63a64817ef57486781050366b685ecf19302649b
    SHA256: fc74b9d19dea9f7b5a58cbd22def0132cce3aaffa8c8b35e8321f4fb212f3f65
    application/octet-stream
    38.65MB
    2026-09-18 19:36:30 +0000 UTC

  • dan.umlsy.top · CNC-1.13.1-arm64.apk

    /

    Hong Kong · I LAYER LIMITED

    Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)
    Yara Disable_Defender From AbuseCH by iam-py-test
    Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)
    Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 1ddf39e91d032d83853d5b381dae40e88d0c4d17
    SHA256: e99ce4d82b39ad5293aa4b112d1f342d3fe9333468d43a7ab29257adee45188b
    application/octet-stream
    38.11MB
    2026-09-19 01:10:31 +0000 UTC

  • 118.190.147.168 · kylin.exe

    /

    China · Hangzhou Alibaba Advertising Co.,Ltd.

    Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 957a936557aa4afeab054e9bcb5a16979d80b387
    SHA256: 33b13d9ec994b948aad838178a373571f55727a263fc1b49dd19c0929ffe93ad
    application/x-msdownload
    66.26MB
    2026-06-18 09:01:40 +0000 UTC

  • gentoo.uib.no · modsecurity-crs-4.25.0.tar.gz

    /distfiles/5b/

    Norway · Kunnskapssektorens Tjenesteleverandor

    Yara lamashell_php From Florian Roth by Neo23x0 Yara BRG + customization by Stefan -dfate- Molls
    Yara STNC_php_php From Florian Roth by Neo23x0 Yara BRG + customization by Stefan -dfate- Molls
    Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)
    Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)
    Yara WebShell_ru24_post_sh From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 9cc14629abe5784173db60263613a409d4da2657
    SHA256: 89772237c36e9ef8475ad3981fff1df08a449dd9ccd2fedef42c4f691f00d33e
    application/x-gzip
    574.30KB
    2026-04-29 00:52:30 +0000 UTC

  • gentoo.uib.no · modsecurity-crs-4.25.1.tar.gz

    /distfiles/4c/

    Norway · Kunnskapssektorens Tjenesteleverandor

    Yara lamashell_php From Florian Roth by Neo23x0 Yara BRG + customization by Stefan -dfate- Molls
    Yara STNC_php_php From Florian Roth by Neo23x0 Yara BRG + customization by Stefan -dfate- Molls
    Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)
    Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)
    Yara WebShell_ru24_post_sh From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: da78c81d51c56165e23b83eac294399c080020f6
    SHA256: 0539e66e7627fe71c160a644d8fb7ab6e450d53c9de208be5f95a35c70e1a154
    application/x-gzip
    586.51KB
    2026-07-10 02:52:31 +0000 UTC

  • caixa-connector.altabox.net · localhost_access_log.2026-01-25.txt.gz

    /tomcat9/

    Germany · Hetzner Online GmbH

    Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 659f4d05bd9ff4cc06bd9e40dc35f7aa8748bea7
    SHA256: af47a805faa703a6b4f70335b506bb19714abb2f3ebd87790a8f105ea90ffcbc
    application/x-gzip
    2.31KB
    2026-01-25 22:50:48 +0000 UTC

  • caixa-connector.altabox.net · localhost_access_log.2023-09-04.txt.gz

    /tomcat9/

    Germany · Hetzner Online GmbH

    Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: fb5437971c4ebc4a27beac6947039d5227c8216a
    SHA256: 390a237d5ecf4f4bdecd8626a196e1aea4ef4bde636c7e2bbe7da8f0776df45d
    application/x-gzip
    1.77KB
    2023-09-04 21:53:08 +0000 UTC

  • caixa-connector.altabox.net · localhost_access_log.2026-01-25.txt.gz

    /tomcat9/

    Germany · Hetzner Online GmbH

    Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 659f4d05bd9ff4cc06bd9e40dc35f7aa8748bea7
    SHA256: af47a805faa703a6b4f70335b506bb19714abb2f3ebd87790a8f105ea90ffcbc
    application/x-gzip
    2.31KB
    2026-01-25 22:50:48 +0000 UTC

  • caixa-connector.altabox.net · localhost_access_log.2023-09-04.txt.gz

    /tomcat9/

    Germany · Hetzner Online GmbH

    Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: fb5437971c4ebc4a27beac6947039d5227c8216a
    SHA256: 390a237d5ecf4f4bdecd8626a196e1aea4ef4bde636c7e2bbe7da8f0776df45d
    application/x-gzip
    1.77KB
    2023-09-04 21:53:08 +0000 UTC

  • 118.190.147.168 · kylin.exe

    /

    China · Hangzhou Alibaba Advertising Co.,Ltd.

    Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 66bf5c6a86eaca3a13ef6511ef668e5d9a200590
    SHA256: bb644b9791c2beac1f24945f9704709c272fc1ab06cbe95c5a9d3bede0069f39
    application/x-msdownload
    66.26MB
    2026-06-18 09:01:40 +0000 UTC

  • caixa-connector.altabox.net · localhost_access_log.2026-01-25.txt.gz

    /tomcat9/

    Germany · Hetzner Online GmbH

    Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 659f4d05bd9ff4cc06bd9e40dc35f7aa8748bea7
    SHA256: af47a805faa703a6b4f70335b506bb19714abb2f3ebd87790a8f105ea90ffcbc
    application/x-gzip
    2.31KB
    2026-01-25 22:50:48 +0000 UTC

  • caixa-connector.altabox.net · localhost_access_log.2026-01-25.txt.gz

    /tomcat9/

    Germany · Hetzner Online GmbH

    Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 659f4d05bd9ff4cc06bd9e40dc35f7aa8748bea7
    SHA256: af47a805faa703a6b4f70335b506bb19714abb2f3ebd87790a8f105ea90ffcbc
    application/x-gzip
    2.31KB
    2026-01-25 22:50:48 +0000 UTC

  • caixa-connector.altabox.net · localhost_access_log.2023-09-04.txt.gz

    /tomcat9/

    Germany · Hetzner Online GmbH

    Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: fb5437971c4ebc4a27beac6947039d5227c8216a
    SHA256: 390a237d5ecf4f4bdecd8626a196e1aea4ef4bde636c7e2bbe7da8f0776df45d
    application/x-gzip
    1.77KB
    2023-09-04 21:53:08 +0000 UTC

  • caixa-connector.altabox.net · localhost_access_log.2023-09-04.txt.gz

    /tomcat9/

    Germany · Hetzner Online GmbH

    Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: fb5437971c4ebc4a27beac6947039d5227c8216a
    SHA256: 390a237d5ecf4f4bdecd8626a196e1aea4ef4bde636c7e2bbe7da8f0776df45d
    application/x-gzip
    1.77KB
    2023-09-04 21:53:08 +0000 UTC

  • dan.umlsy.top · OpenMinis-1.13.1-hanli-liveness.apk

    /

    Hong Kong · cognetcloud INC

    Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)
    Yara Disable_Defender From AbuseCH by iam-py-test
    Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)
    Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 60ff8e47684e5b7ad8bf3007573ae89ebdc2222f
    SHA256: 74a7fd28086c61920d4f3349c3d3fe0c9de3b6d62f269bba34c9e7ae6f36bbd4
    application/octet-stream
    38.66MB
    2026-09-19 00:03:26 +0000 UTC

  • dan.umlsy.top · OpenMinis-1.13-hanli-arm64.apk

    /

    Hong Kong · cognetcloud INC

    Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)
    Yara Disable_Defender From AbuseCH by iam-py-test
    Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)
    Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: f2fa51d9fb00c3255aa809549771d7441d2ede80
    SHA256: e88671143830d8831e3c2f13594ee81deeefb47ceed3b1e892a7db4aced03674
    application/octet-stream
    38.65MB
    2026-09-18 19:36:30 +0000 UTC