File search engine

www.launcher.huyenthoaiss6.com · Parcer_MiniUpd.exe

Vietnam · CMC Telecom Infrastructure Company

Yara INDICATOR_EXE_Packed_ConfuserEx From AlienVault by ditekSHen

Download archived sample

The password is "infected"

SHA1: a4145a85421d4194177f3992f305752ab7cb204f
SHA256: e3d1fe45392a312bdc2afbe86a60ed29cdfc2e261cc8722c7be07099588076c6
application/x-msdownload
212.00KB
2026-09-13 03:58:36 +0000 UTC

www.petros.inoveh.com.br · PDV 3.25.04.04.zip

/Backup_FC/ArquivosVersao/

Brazil · Universo Online S.A.

Yara INDICATOR_EXE_Packed_ConfuserEx From AlienVault by ditekSHen

Yara AgentTesla_DIFF_Common_Strings_01 From AbuseCH by schmidtsz

SHA1: ba92c99b0936e903a10f42d4c990a1e6d7241dfe
SHA256: ab73fd4800b9a8137c2ac41a9ecc5ced6e9e367bb619c42e274288a55bf2f9d2
application/zip
218.58MB
2026-01-14 19:21:09 +0000 UTC

petros.inoveh.com.br · PDV 3.25.03.24.zip

/Backup_FC/ArquivosVersao/

Brazil · Universo Online S.A.

Yara INDICATOR_EXE_Packed_ConfuserEx From AlienVault by ditekSHen

Yara AgentTesla_DIFF_Common_Strings_01 From AbuseCH by schmidtsz

SHA1: 67cef756535241e770ad5f7b264a6cd79a8f5c2e
SHA256: 2187e69c9f608d32e60f98652a1a3beda52e2cc6d8312775c6c17b7c69866f83
application/zip
218.58MB
2026-01-07 18:07:41 +0000 UTC

www.petros.inoveh.com.br · PDV 3.25.03.24.zip

/Backup_FC/ArquivosVersao/

Brazil · Universo Online S.A.

Yara INDICATOR_EXE_Packed_ConfuserEx From AlienVault by ditekSHen

Yara AgentTesla_DIFF_Common_Strings_01 From AbuseCH by schmidtsz

SHA1: f9e978bb912a94f82764c907dcc87f1f4de321a3
SHA256: bd1d1e24fa0deac905fc3494adac6ab7ea01e0bca5cd9d0e095ba453d92a9d4e
application/zip
218.58MB
2026-01-07 18:07:41 +0000 UTC

www.petros.inoveh.com.br · PDV 3.25.03.24.zip

/Backup_FC/ArquivosVersao/

Brazil · Universo Online S.A.

Yara INDICATOR_EXE_Packed_ConfuserEx From AlienVault by ditekSHen

Yara AgentTesla_DIFF_Common_Strings_01 From AbuseCH by schmidtsz

SHA1: 05a7eb4fc6bb7f3cf184297aa0443459110b343e
SHA256: 03782b4a18b8bf778735814e0954736fd61d3b69e1a3250be56ba5d2be6cd035
application/zip
218.58MB
2026-01-07 18:07:41 +0000 UTC

mail.reveantivirus.com · Malware Samples.zip

/reveantivirus.com/linux/Builds/Abhishek_Samples/

United States · IO INC

Yara INDICATOR_EXE_Packed_Dotfuscator From AlienVault by ditekSHen

Yara INDICATOR_EXE_Packed_UPolyX From AlienVault by ditekSHen

Yara SUSP_XORed_MSDOS_Stub_Message From Florian Roth by Florian Roth

Yara INDICATOR_EXE_Packed_ConfuserEx From AlienVault by ditekSHen

Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Yara detect_Redline_Stealer From AbuseCH by Varp0s

Yara Disable_Defender From AbuseCH by iam-py-test

Yara INDICATOR_EXE_Packed_RLPack From AlienVault by ditekSHen

Yara Win32_Ransomware_WannaCry From ReversingLabs by ReversingLabs

Yara INDICATOR_EXE_Packed_SmartAssembly From AlienVault by ditekSHen

Yara Nanocore_RAT_Gen_2 From Florian Roth by Florian Roth (Nextron Systems)

Yara IronTiger_Gh0stRAT_variant From Florian Roth by Cyber Safety Solutions, Trend Micro

Yara INDICATOR_EXE_DotNET_Encrypted From AlienVault by ditekSHen

Yara INDICATOR_EXE_Packed_VMProtect From AlienVault by ditekSHen

Yara INDICATOR_EXE_Packed_AgileDotNet From AlienVault by ditekSHen

Yara SUSP_NET_NAME_ConfuserEx From Florian Roth by Arnim Rupp

Yara IMPLANT_4_v7 From Florian Roth by US CERT

Yara INDICATOR_EXE_Packed_MPress From AlienVault by ditekSHen

Yara INDICATOR_EXE_Packed_Goliath From AlienVault by ditekSHen

Yara Typical_Malware_String_Transforms From Florian Roth by Florian Roth (Nextron Systems)

Yara INDICATOR_EXE_Packed_aPLib From AlienVault by ditekSHen

Yara Win32_Ransomware_CryptoJoker From ReversingLabs by ReversingLabs

Yara SUSP_XORed_Mozilla From Florian Roth by Florian Roth (Nextron Systems)

SHA1: 25723bcf7b71640744b171137b9c0e0f4e6928cc
SHA256: 8f43cb46c9f22dce26ec5483c8060252b409faf31bef1f813d90c33515d0191e
application/zip
1.29GB
2018-06-21 08:03:32 +0000 UTC

mail.reveantivirus.com · Malware Samples.zip

/reveantivirus.com/linux/Builds/Abhishek_Samples/

United States · IO INC

Yara INDICATOR_EXE_Packed_Dotfuscator From AlienVault by ditekSHen

Yara INDICATOR_EXE_Packed_UPolyX From AlienVault by ditekSHen

Yara SUSP_XORed_MSDOS_Stub_Message From Florian Roth by Florian Roth

Yara INDICATOR_EXE_Packed_ConfuserEx From AlienVault by ditekSHen

Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Yara detect_Redline_Stealer From AbuseCH by Varp0s

Yara Disable_Defender From AbuseCH by iam-py-test

Yara INDICATOR_EXE_Packed_RLPack From AlienVault by ditekSHen

Yara Win32_Ransomware_WannaCry From ReversingLabs by ReversingLabs

Yara INDICATOR_EXE_Packed_SmartAssembly From AlienVault by ditekSHen

Yara Nanocore_RAT_Gen_2 From Florian Roth by Florian Roth (Nextron Systems)

Yara IronTiger_Gh0stRAT_variant From Florian Roth by Cyber Safety Solutions, Trend Micro

Yara INDICATOR_EXE_DotNET_Encrypted From AlienVault by ditekSHen

Yara INDICATOR_EXE_Packed_VMProtect From AlienVault by ditekSHen

SHA1: 8be1d57801c0275982f72a435461f19099c7231e
SHA256: 89d1a88c9e0fbc8ad4de2d9bc5c864e0e013c4a59c048bb6d984a56d2b3e1846
application/zip
1.29GB
2018-06-21 08:03:32 +0000 UTC

www.cloud.gdata.com.mx · Formato Pago.pdf.zip

/sample/

France · Host Europe GmbH

Yara INDICATOR_EXE_Packed_ConfuserEx From AlienVault by ditekSHen

Download archived sample

The password is "infected"

SHA1: 54b9cb62305b9b1a47edde5df6d063c13f476a5c
SHA256: c13fe7e490ac1ae62c24e6c53fbef5c0522de005eda2a1c6062d736986d5e724
application/zip
15.63MB
2026-03-19 04:40:32 +0000 UTC

files.boostednw.com · CobraRTP_Utility.zip

/BoostedNW/MotronicRT/

· Cloudflare, Inc.

Yara INDICATOR_EXE_Packed_ConfuserEx From AlienVault by ditekSHen

Download archived sample

The password is "infected"

SHA1: 81b83510c8dca60a17f63943a0988e94a9f3279d
SHA256: 62f32618559af6e02be48fa41c0eaf462d6b2b1e62e6922d0d65a6f4ade0326b
application/zip
2.76MB
2023-11-13 06:51:36 +0000 UTC

update.thienha.top · THIENHA_FULL.zip

/

Vietnam · EZ TECHNOLOGY COMPANY LIMITED

Yara INDICATOR_EXE_Packed_ConfuserEx From AlienVault by ditekSHen

SHA1: d6673d5a3f3fc36a4e9c9ef8cbe87312adf23988
SHA256: da15b3c90dd20f3cbb6e47f1dca810ffb2a21de5010f524c2dddf86c027b720c
application/zip
838.39MB
2026-09-29 18:31:55 +0000 UTC

update.thienha.top · update.zip

//update/

Vietnam · EZ TECHNOLOGY COMPANY LIMITED

Yara INDICATOR_EXE_Packed_ConfuserEx From AlienVault by ditekSHen

Download archived sample

The password is "infected"

SHA1: 304ff06f3d0de0f48abb76e122e019c173b61d5e
SHA256: 2ac06e04867350733dce441779f164b200b79bc902d70058fda912c1d9b6e994
application/zip
9.01MB
2026-10-08 16:45:19 +0000 UTC

phuochung94.com · NVCleanstall_1.19.0.exe

/

Indonesia · Hostinger International Limited

Yara INDICATOR_EXE_Packed_ConfuserEx From AlienVault by ditekSHen

Download archived sample

The password is "infected"

SHA1: 36c5a84f88c13c94a998904aeb14a2faa76830fa
SHA256: 9dd36ef956af927cf41fa441f91b329a7973e13965e4e7d70e6fa9c1df1cade6
application/x-executable
3.81MB
2025-04-25 13:46:36 +0000 UTC

phuochung94.com · NVCleanstall_1.19.0.exe

//QUICKSTART/

Indonesia · Hostinger International Limited

Yara INDICATOR_EXE_Packed_ConfuserEx From AlienVault by ditekSHen

Download archived sample

The password is "infected"

SHA1: 36c5a84f88c13c94a998904aeb14a2faa76830fa
SHA256: 9dd36ef956af927cf41fa441f91b329a7973e13965e4e7d70e6fa9c1df1cade6
application/x-executable
3.81MB
2025-04-25 13:46:36 +0000 UTC

cdn.mnogodobar.net · LethalCompany.zip

/games/

Croatia · Telemach Hrvatska d.o.o.

Yara detect_Redline_Stealer From AbuseCH by Varp0s

Yara INDICATOR_EXE_Packed_ConfuserEx From AlienVault by ditekSHen

SHA1: ff5ffcd8a2c5215877b59a9b0eec67e6fe387c6d
SHA256: ad5ee99a9ea432fd36d18aba4e38c97137f371ad235e2689467ca3c8545d3f14
application/zip
419.70MB
2023-11-22 16:37:55 +0000 UTC

www.launcher.muviet2003.vip · Parcer_MiniUpd.exe

//update/

Vietnam · CMC Telecom Infrastructure Company

Yara INDICATOR_EXE_Packed_ConfuserEx From AlienVault by ditekSHen

Download archived sample

The password is "infected"

SHA1: a4145a85421d4194177f3992f305752ab7cb204f
SHA256: e3d1fe45392a312bdc2afbe86a60ed29cdfc2e261cc8722c7be07099588076c6
application/x-msdownload
212.00KB
2026-10-09 03:40:09 +0000 UTC

www.launcher.muviet2003.vip · Parcer_MiniUpd.exe

//update/

Vietnam · CMC Telecom Infrastructure Company

Yara INDICATOR_EXE_Packed_ConfuserEx From AlienVault by ditekSHen

Download archived sample

The password is "infected"

SHA1: a4145a85421d4194177f3992f305752ab7cb204f
SHA256: e3d1fe45392a312bdc2afbe86a60ed29cdfc2e261cc8722c7be07099588076c6
application/x-msdownload
212.00KB
2026-10-09 03:40:09 +0000 UTC

launcher.muviet2003.vip · Parcer_MiniUpd.exe

//update/

Vietnam · CMC Telecom Infrastructure Company

Yara INDICATOR_EXE_Packed_ConfuserEx From AlienVault by ditekSHen

Download archived sample

The password is "infected"

SHA1: a4145a85421d4194177f3992f305752ab7cb204f
SHA256: e3d1fe45392a312bdc2afbe86a60ed29cdfc2e261cc8722c7be07099588076c6
application/x-msdownload
212.00KB
2026-10-09 03:40:09 +0000 UTC

files.teamorange.hu · Lethal Company.zip

/szoftver/

Hungary · Czimer Kft

Yara INDICATOR_EXE_Packed_ConfuserEx From AlienVault by ditekSHen

SHA1: 0d0b8a03e918f873f0ee53c4303ba694d83844ae
SHA256: 3b1bc5f33f5a56ef27cd770610dd1875ca81697eb1468d9c9675892d5a940d4e
application/zip
432.34MB
2024-04-14 18:43:29 +0000 UTC

72.21.26.166 · Malware Samples.zip

/reveantivirus.com/linux/Builds/Abhishek_Samples/

United States · IO INC

Yara INDICATOR_EXE_Packed_Dotfuscator From AlienVault by ditekSHen

Yara INDICATOR_EXE_Packed_UPolyX From AlienVault by ditekSHen

Yara SUSP_XORed_MSDOS_Stub_Message From Florian Roth by Florian Roth

Yara INDICATOR_EXE_Packed_ConfuserEx From AlienVault by ditekSHen

Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Yara detect_Redline_Stealer From AbuseCH by Varp0s

Yara Disable_Defender From AbuseCH by iam-py-test

Yara INDICATOR_EXE_Packed_RLPack From AlienVault by ditekSHen

Yara Win32_Ransomware_WannaCry From ReversingLabs by ReversingLabs

Yara INDICATOR_EXE_Packed_SmartAssembly From AlienVault by ditekSHen

Yara Nanocore_RAT_Gen_2 From Florian Roth by Florian Roth (Nextron Systems)

Yara IronTiger_Gh0stRAT_variant From Florian Roth by Cyber Safety Solutions, Trend Micro

Yara INDICATOR_EXE_DotNET_Encrypted From AlienVault by ditekSHen

Yara INDICATOR_EXE_Packed_VMProtect From AlienVault by ditekSHen

Yara INDICATOR_EXE_Packed_AgileDotNet From AlienVault by ditekSHen

Yara SUSP_NET_NAME_ConfuserEx From Florian Roth by Arnim Rupp

Yara IMPLANT_4_v7 From Florian Roth by US CERT

Yara INDICATOR_EXE_Packed_MPress From AlienVault by ditekSHen

Yara INDICATOR_EXE_Packed_Goliath From AlienVault by ditekSHen

Yara Typical_Malware_String_Transforms From Florian Roth by Florian Roth (Nextron Systems)

Yara INDICATOR_EXE_Packed_aPLib From AlienVault by ditekSHen

SHA1: 766adfac9d0e8df036eb59e95742b3d41d2b3a56
SHA256: c92f8d253077903e0c28633272203518e57abcb42eb558c9f42a095b244be39b
application/zip
1.29GB
2018-06-21 08:03:32 +0000 UTC

147.139.136.66 · AgentTesla.exe.zip

/230425/

Indonesia · Alibaba (US) Technology Co., Ltd.

Yara INDICATOR_EXE_Packed_ConfuserEx From AlienVault by ditekSHen

Download archived sample

The password is "infected"

SHA1: 6e7ed37faebc8b7610c4525eba4c95336a8eee92
SHA256: 2851574c438a0870faa7ff5950b30969d73a129352c53adbab15c4324518d2d2
application/zip
3.83MB
2025-04-23 12:54:27 +0000 UTC