5.45.102.182 · virussign.com_20250823_LimitedFree.zip

/samples/virussign/

Germany · netcup GmbH

Yara INDICATOR_EXE_Packed_eXPressor From AlienVault by ditekSHen

Yara INDICATOR_EXE_Packed_ConfuserEx From AlienVault by ditekSHen

Download archived sample

The password is "infected"

5.45.102.182 · virussign.com_20250525_LimitedFree.zip

/samples/virussign/

Germany · netcup GmbH

Yara INDICATOR_EXE_Packed_MPress From AlienVault by ditekSHen

Yara INDICATOR_EXE_Packed_VMProtect From AlienVault by ditekSHen

Yara INDICATOR_EXE_Packed_UPolyX From AlienVault by ditekSHen

Yara INDICATOR_EXE_Packed_ASPack From AlienVault by ditekSHen

Yara Unspecified_Malware_Oct16_A From Florian Roth by Florian Roth (Nextron Systems)

Yara INDICATOR_EXE_Packed_eXPressor From AlienVault by ditekSHen

Yara Disable_Defender From AbuseCH by iam-py-test

Yara APT_NK_Methodology_Artificial_UserAgent_IE_Win7 From Florian Roth by Steve Miller aka @stvemillertime

Yara Win32_PUA_Domaiq From ReversingLabs by ReversingLabs

Yara SUSP_XORed_MSDOS_Stub_Message From Florian Roth by Florian Roth

Download archived sample

The password is "infected"

5.45.102.182 · virussign.com_20250525_LimitedFree.zip

/samples/virussign/

Germany · netcup GmbH

Yara INDICATOR_EXE_Packed_MPress From AlienVault by ditekSHen

Yara INDICATOR_EXE_Packed_VMProtect From AlienVault by ditekSHen

Yara INDICATOR_EXE_Packed_UPolyX From AlienVault by ditekSHen

Yara INDICATOR_EXE_Packed_ASPack From AlienVault by ditekSHen

Yara Unspecified_Malware_Oct16_A From Florian Roth by Florian Roth (Nextron Systems)

Yara INDICATOR_EXE_Packed_eXPressor From AlienVault by ditekSHen

Yara Disable_Defender From AbuseCH by iam-py-test

Yara APT_NK_Methodology_Artificial_UserAgent_IE_Win7 From Florian Roth by Steve Miller aka @stvemillertime

Yara Win32_PUA_Domaiq From ReversingLabs by ReversingLabs

Yara SUSP_XORed_MSDOS_Stub_Message From Florian Roth by Florian Roth

Download archived sample

The password is "infected"

pypi.hadiko.de · workbench-0.3.2.tar.gz

/packages/0c/4e/6d3ad2534e60fad14d8f837c2c1a3f1657f2b4aff8a589b3519c2a448dc3/

Germany · Universitaet Stuttgart

Yara INDICATOR_EXE_Packed_SimplePolyEngine From AlienVault by ditekSHen

Yara INDICATOR_EXE_Packed_eXPressor From AlienVault by ditekSHen

Yara INDICATOR_EXE_Packed_RLPack From AlienVault by ditekSHen

Yara RAT_Ap0calypse From Florian Roth by Kevin Breen <kevin@techanarchy.net>

Yara RAT_DarkRAT From Florian Roth by Kevin Breen <kevin@techanarchy.net>

Download archived sample

The password is "infected"

119.6.110.83 · tftpd64_v4.64.zip

/

China · CHINA UNICOM China169 Backbone

Yara INDICATOR_EXE_Packed_eXPressor From AlienVault by ditekSHen

Download archived sample

The password is "infected"