200.73.116.133 · x.ps1

/

Chile · PowerHost Telecom SPA

Yara HKTL_Nishang_PS1_Invoke_PowerShellTcpOneLine From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

www.db.sector404.me · payload.ps1

/

United States · STEADFAST

Yara HKTL_Nishang_PS1_Invoke_PowerShellTcpOneLine From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

db.sector404.me · payload.ps1

/

United States · STEADFAST

Yara HKTL_Nishang_PS1_Invoke_PowerShellTcpOneLine From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

db.sector404.me · payload.ps1

/

United States · STEADFAST

Yara HKTL_Nishang_PS1_Invoke_PowerShellTcpOneLine From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

www.db.sector404.me · payload.ps1

/

United States · STEADFAST

Yara HKTL_Nishang_PS1_Invoke_PowerShellTcpOneLine From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

apt-mirror.firehawk-systems.com · nishang_0.7.6+git20210724.414ee11.orig.tar.gz

/kali.download/kali/pool/main/n/nishang/

Australia · Aussie Broadband

Yara SUSP_PowerShell_IEX_Download_Combo From Florian Roth by Florian Roth (Nextron Systems)

Yara PS_AMSI_Bypass From Florian Roth by Florian Roth (Nextron Systems)

Yara Empire_PowerShell_Framework_Gen1 From Florian Roth by Florian Roth (Nextron Systems)

Yara Empire_Invoke_Mimikatz_Gen From Florian Roth by Florian Roth (Nextron Systems)

Yara Invoke_mimikittenz From Florian Roth by Florian Roth (Nextron Systems)

Yara SUSP_Netsh_PortProxy_Command From Florian Roth by Florian Roth (Nextron Systems)

Yara HKTL_Nishang_PS1_Invoke_PowerShellTcpOneLine From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

apt-mirror.firehawk-systems.com · nishang_0.7.6+git20210724.414ee11.orig.tar.gz

/kali.download/kali/pool/main/n/nishang/

Australia · Aussie Broadband

Yara SUSP_PowerShell_IEX_Download_Combo From Florian Roth by Florian Roth (Nextron Systems)

Yara PS_AMSI_Bypass From Florian Roth by Florian Roth (Nextron Systems)

Yara Empire_PowerShell_Framework_Gen1 From Florian Roth by Florian Roth (Nextron Systems)

Yara Empire_Invoke_Mimikatz_Gen From Florian Roth by Florian Roth (Nextron Systems)

Yara Invoke_mimikittenz From Florian Roth by Florian Roth (Nextron Systems)

Yara SUSP_Netsh_PortProxy_Command From Florian Roth by Florian Roth (Nextron Systems)

Yara HKTL_Nishang_PS1_Invoke_PowerShellTcpOneLine From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

200.73.116.133 · x.ps1

/

Chile · PowerHost Telecom SPA

Yara HKTL_Nishang_PS1_Invoke_PowerShellTcpOneLine From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

db.sector404.me · payload.ps1

/

United States · STEADFAST

Yara HKTL_Nishang_PS1_Invoke_PowerShellTcpOneLine From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

www.db.sector404.me · payload.ps1

/

United States · STEADFAST

Yara HKTL_Nishang_PS1_Invoke_PowerShellTcpOneLine From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

www.db.sector404.me · payload.ps1

/

United States · STEADFAST

Yara HKTL_Nishang_PS1_Invoke_PowerShellTcpOneLine From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

db.sector404.me · payload.ps1

/

United States · STEADFAST

Yara HKTL_Nishang_PS1_Invoke_PowerShellTcpOneLine From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"