pypi.corp.tevian.ru · assemblyline-4.0.1.dev110.tar.gz

/packages/00/29/9560769f2e27bd91adf16817a05b0301c1523851555794f26175fd4d1cd8/

Russia · PVimpelCom

Yara Mimikatz_Memory_Rule_1 From Florian Roth by Florian Roth

Yara Disable_Defender From AbuseCH by iam-py-test

Download archived sample

The password is "infected"

pypi.corp.tevian.ru · assemblyline-4.0.0.dev189.tar.gz

/packages/00/0e/39118d4f8d1529b8059449180beceb5e1d97b9a01c1fc49e598fcc9ded8a/

Russia · PVimpelCom

Yara Mimikatz_Memory_Rule_1 From Florian Roth by Florian Roth

Yara Disable_Defender From AbuseCH by iam-py-test

Download archived sample

The password is "infected"

dllcodacker.ir · TheFatRat.zip

//tools/

Iran · NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)

Yara Suspicious_PowerShell_WebDownload_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara SUSP_PowerShell_IEX_Download_Combo From Florian Roth by Florian Roth (Nextron Systems)

Yara Cobaltbaltstrike_Payload_Encoded From Florian Roth by Avast Threat Intel Team

Yara Empire_PowerShell_Framework_Gen4 From Florian Roth by Florian Roth (Nextron Systems)

Yara SUSP_shellpop_Bash From Florian Roth by Tobias Michalski

Yara Empire_PowerShell_Framework_Gen1 From Florian Roth by Florian Roth (Nextron Systems)

Yara APT_APT29_Win_FlipFlop_LDR From Florian Roth by threatintel@volexity.com

Yara CobaltStrike_Unmodifed_Beacon From Florian Roth by yara@s3c.za.net

Yara Empire_Invoke_MetasploitPayload From Florian Roth by Florian Roth (Nextron Systems)

Yara Empire_Invoke_ShellcodeMSIL From Florian Roth by Florian Roth (Nextron Systems)

Yara Empire_Invoke_DllInjection From Florian Roth by Florian Roth (Nextron Systems)

Yara Empire_Install_SSP From Florian Roth by Florian Roth (Nextron Systems)

Yara Empire_Get_SecurityPackages From Florian Roth by Florian Roth (Nextron Systems)

Yara Mimikatz_Memory_Rule_1 From Florian Roth by Florian Roth

Yara Empire_Invoke_Portscan_Gen From Florian Roth by Florian Roth (Nextron Systems)

Yara Empire_Invoke_SMBAutoBrute From Florian Roth by Florian Roth (Nextron Systems)

Yara Invoke_SMBExec_Invoke_WMIExec_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara TA17_293A_malware_1 From Florian Roth by US-CERT Code Analysis Team (modified by Florian Roth)

Yara Empire_Invoke_SSHCommand From Florian Roth by Florian Roth (Nextron Systems)

Yara Empire_Invoke_PsExec From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Yara Empire_Get_GPPPassword From Florian Roth by Florian Roth (Nextron Systems)

Yara p0wnedPotato From Florian Roth by Florian Roth (Nextron Systems)

Yara NTLM_Dump_Output From Florian Roth by Florian Roth (Nextron Systems)

Yara Empire_dumpCredStore From Florian Roth by Florian Roth (Nextron Systems)

Yara HKTL_PS1_PowerCat_Mar21 From Florian Roth by Florian Roth (Nextron Systems)

Yara Empire_KeePassConfig From Florian Roth by Florian Roth (Nextron Systems)

Yara Empire_Get_Keystrokes From Florian Roth by Florian Roth (Nextron Systems)

Yara Empire_Out_Minidump From Florian Roth by Florian Roth (Nextron Systems)

Yara Empire_Exploit_JBoss From Florian Roth by Florian Roth (Nextron Systems)

Yara Empire_Exploit_Jenkins From Florian Roth by Florian Roth (Nextron Systems)

Yara Empire_Invoke_PostExfil From Florian Roth by Florian Roth (Nextron Systems)

Yara Empire_Invoke_EgressCheck From Florian Roth by Florian Roth (Nextron Systems)

Yara HKTL_NET_GUID_UnmanagedPowerShell From Florian Roth by Arnim Rupp (https://github.com/ruppde)

Yara SUSP_NET_NAME_ConfuserEx From Florian Roth by Arnim Rupp

Yara Disable_Defender From AbuseCH by iam-py-test

Yara mimikatz From Florian Roth by Benjamin DELPY (gentilkiwi)

pypi.hadiko.de · assemblyline-4.3.1.dev85.tar.gz

/packages/0a/5d/5105f65ad571ff6a48368a650e4ac5789f72b38b692f0277374f25bf0913/

Germany · Universitaet Stuttgart

Yara Mimikatz_Memory_Rule_1 From Florian Roth by Florian Roth

Yara Disable_Defender From AbuseCH by iam-py-test

Download archived sample

The password is "infected"

pypi.hadiko.de · assemblyline-4.3.1.6.tar.gz

/packages/0a/3c/c9425c6be418ff3852949bf2c632b35c42c657d4d4123f590f710222664b/

Germany · Universitaet Stuttgart

Yara Mimikatz_Memory_Rule_1 From Florian Roth by Florian Roth

Yara Disable_Defender From AbuseCH by iam-py-test

Download archived sample

The password is "infected"

pypi.hadiko.de · assemblyline-4.0.1.dev70.tar.gz

/packages/0a/3b/95b4cc93d335b0419a448aa00c52326031b6659171bab939554c85a58946/

Germany · Universitaet Stuttgart

Yara Mimikatz_Memory_Rule_1 From Florian Roth by Florian Roth

Yara Disable_Defender From AbuseCH by iam-py-test

Download archived sample

The password is "infected"

pypi.hadiko.de · assemblyline-4.3.2.dev8.tar.gz

/packages/0a/1b/17353576737c197073e4091bfa3aed193a06aecc46ad62d75d3e62c0a0a0/

Germany · Universitaet Stuttgart

Yara Mimikatz_Memory_Rule_1 From Florian Roth by Florian Roth

Yara Disable_Defender From AbuseCH by iam-py-test

Download archived sample

The password is "infected"

parrot.elhacker.net · payloadsallthethings_2.1.orig.tar.gz

/pool/main/p/payloadsallthethings/

Spain · Adamo Telecom Iberia S.A.

Yara SUSP_PowerShell_Caret_Obfuscation_2 From Florian Roth by Florian Roth (Nextron Systems)

Yara Mimikatz_Memory_Rule_1 From Florian Roth by Florian Roth

Yara SUSP_Netsh_PortProxy_Command From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara SUSP_EXPL_POC_VMWare_Workspace_ONE_CVE_2022_22954_Apr22 From Florian Roth by Florian Roth

Yara WEBSHELL_PHP_Generic From Florian Roth by Arnim Rupp (https://github.com/ruppde)

Download archived sample

The password is "infected"

parrot.elhacker.net · koadic_0~git20210412.orig.tar.gz

/pool/main/k/koadic/

Spain · Adamo Telecom Iberia S.A.

Yara Mimikatz_Memory_Rule_1 From Florian Roth by Florian Roth

Yara ReflectiveLoader From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Yara mimikatz From Florian Roth by Benjamin DELPY (gentilkiwi)

Yara HKTL_Keyword_InjectDLL From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

pypi.hadiko.de · assemblyline-4.4.1.dev32.tar.gz

/packages/0b/50/7e5ff949f25545e6abc8c0e163a2a37b3025fcb8265d7ef72164cc407528/

Germany · Universitaet Stuttgart

Yara Mimikatz_Memory_Rule_1 From Florian Roth by Florian Roth

Yara Disable_Defender From AbuseCH by iam-py-test

Download archived sample

The password is "infected"

pypi.hadiko.de · assemblyline-4.0.1.dev2.tar.gz

/packages/0a/62/720418cce11c4fd04a8b5afc54b90a63084691f9d541ec9c2c898f4d9ef1/

Germany · Universitaet Stuttgart

Yara Mimikatz_Memory_Rule_1 From Florian Roth by Florian Roth

Yara Disable_Defender From AbuseCH by iam-py-test

Download archived sample

The password is "infected"

pypi.hadiko.de · assemblyline-4.0.0.36.tar.gz

/packages/0a/7f/c92a91c66ace6c1d999034f5ce5557822cb21fd22e068971bca7d2cce4ef/

Germany · Universitaet Stuttgart

Yara Mimikatz_Memory_Rule_1 From Florian Roth by Florian Roth

Yara Disable_Defender From AbuseCH by iam-py-test

Download archived sample

The password is "infected"

pypi.hadiko.de · assemblyline-4.4.1.dev32.tar.gz

/packages/0b/50/7e5ff949f25545e6abc8c0e163a2a37b3025fcb8265d7ef72164cc407528/

Germany · Universitaet Stuttgart

Yara Mimikatz_Memory_Rule_1 From Florian Roth by Florian Roth

Yara Disable_Defender From AbuseCH by iam-py-test

Download archived sample

The password is "infected"

pypi.hadiko.de · assemblyline-4.3.1.dev40.tar.gz

/packages/0b/30/f9aaf828fbad4e63cff1242fa16c61127e974a0b472a75c278c5d914b292/

Germany · Universitaet Stuttgart

Yara Mimikatz_Memory_Rule_1 From Florian Roth by Florian Roth

Yara Disable_Defender From AbuseCH by iam-py-test

Download archived sample

The password is "infected"

pypi.hadiko.de · assemblyline-4.0.1.dev2.tar.gz

/packages/0a/62/720418cce11c4fd04a8b5afc54b90a63084691f9d541ec9c2c898f4d9ef1/

Germany · Universitaet Stuttgart

Yara Mimikatz_Memory_Rule_1 From Florian Roth by Florian Roth

Yara Disable_Defender From AbuseCH by iam-py-test

Download archived sample

The password is "infected"

pypi.hadiko.de · assemblyline-4.0.0.dev191.tar.gz

/packages/0b/08/bce02f018a07a02f7526169a1440432507a2309f49687e6995e24783970b/

Germany · Universitaet Stuttgart

Yara Mimikatz_Memory_Rule_1 From Florian Roth by Florian Roth

Yara Disable_Defender From AbuseCH by iam-py-test

Download archived sample

The password is "infected"

pypi.hadiko.de · assemblyline-4.2.1.dev189.tar.gz

/packages/0b/01/22bd46bbe030459ed2238792ae1c6f81ff3ba781b225843270faf3b4880c/

Germany · Universitaet Stuttgart

Yara Mimikatz_Memory_Rule_1 From Florian Roth by Florian Roth

Yara Disable_Defender From AbuseCH by iam-py-test

Download archived sample

The password is "infected"

pypi.hadiko.de · assemblyline-4.4.1.dev231.tar.gz

/packages/0b/01/1cf2f4f17118d31212ea82451e6a1a6ab33852501788489451931b47971b/

Germany · Universitaet Stuttgart

Yara Mimikatz_Memory_Rule_1 From Florian Roth by Florian Roth

Yara Disable_Defender From AbuseCH by iam-py-test

Download archived sample

The password is "infected"

pypi.hadiko.de · assemblyline-4.1.0.30.tar.gz

/packages/0a/ec/259c01839c28553be04aaa3a3b4e9d65aa1ed85d154341fa8d49464a1991/

Germany · Universitaet Stuttgart

Yara Mimikatz_Memory_Rule_1 From Florian Roth by Florian Roth

Yara Disable_Defender From AbuseCH by iam-py-test

Download archived sample

The password is "infected"

pypi.hadiko.de · assemblyline-4.0.0.36.tar.gz

/packages/0a/7f/c92a91c66ace6c1d999034f5ce5557822cb21fd22e068971bca7d2cce4ef/

Germany · Universitaet Stuttgart

Yara Mimikatz_Memory_Rule_1 From Florian Roth by Florian Roth

Yara Disable_Defender From AbuseCH by iam-py-test

Download archived sample

The password is "infected"