File search engine

rpms.southbridge.ru · vault_1.13.2_linux_amd64.zip

/other/

Russia · JSC Selectel

Yara RAT_JavaDropper From Florian Roth by Kevin Breen <kevin@techanarchy.net> (slightly modified by Florian Roth to improve performance)

Download archived sample
The password is "infected"

SHA1: e7b129dbc181683d77fb096a475980cd21391d8b
SHA256: 0335cc986b52b4fcb8bf986ab732b35c4ff986147d24bedfab913199cc0d1263
application/zip
46.21MB
2023-06-07 15:59:32 +0000 UTC
rpms.southbridge.ru · vault_1.13.2_linux_amd64.zip

/other/

Russia · JSC Selectel

Yara RAT_JavaDropper From Florian Roth by Kevin Breen <kevin@techanarchy.net> (slightly modified by Florian Roth to improve performance)

Download archived sample
The password is "infected"

SHA1: 73f8ffe124bea22154c260d5e254e5f85ef42cec
SHA256: f7930279de8381de7c532164b4a4408895d9606c0d24e2e9d2f9acb5dfe99b3c
application/zip
46.21MB
2023-06-07 15:59:32 +0000 UTC
mirror.as59645.net · vault-1.10.7-r0.apk

/alpine/v3.16/community/aarch64/

Germany · Tobias Fiebig

Yara RAT_JavaDropper From Florian Roth by Kevin Breen <kevin@techanarchy.net> (slightly modified by Florian Roth to improve performance)

Download archived sample
The password is "infected"

SHA1: 4099f5d3ebe76014aa4b77e446680b7208f13b9b
SHA256: 4777db69cd335d949a538761172aeb7ebf489a4180b6056d7982f283a6a885cc
application/octet-stream
31.73MB
2022-10-14 11:49:43 +0000 UTC
mirror01.dus01.as59645.net · vault-1.10.7-r0.apk

/alpine/v3.16/community/aarch64/

Germany · Tobias Fiebig

Yara RAT_JavaDropper From Florian Roth by Kevin Breen <kevin@techanarchy.net> (slightly modified by Florian Roth to improve performance)

Download archived sample
The password is "infected"

SHA1: 4099f5d3ebe76014aa4b77e446680b7208f13b9b
SHA256: 4777db69cd335d949a538761172aeb7ebf489a4180b6056d7982f283a6a885cc
application/octet-stream
31.73MB
2022-10-14 11:49:43 +0000 UTC
mirror.aperture-labs.org · vault-1.10.7-r0.apk

/alpine/v3.16/community/aarch64/

Germany · Tobias Fiebig

Yara RAT_JavaDropper From Florian Roth by Kevin Breen <kevin@techanarchy.net> (slightly modified by Florian Roth to improve performance)

Download archived sample
The password is "infected"

SHA1: 4099f5d3ebe76014aa4b77e446680b7208f13b9b
SHA256: 4777db69cd335d949a538761172aeb7ebf489a4180b6056d7982f283a6a885cc
application/octet-stream
31.73MB
2022-10-14 11:49:43 +0000 UTC
rpms.southbridge.ru · vault_1.13.2_linux_amd64.zip

/other/

Russia · JSC Selectel

Yara RAT_JavaDropper From Florian Roth by Kevin Breen <kevin@techanarchy.net> (slightly modified by Florian Roth to improve performance)

Download archived sample
The password is "infected"

SHA1: 73f8ffe124bea22154c260d5e254e5f85ef42cec
SHA256: f7930279de8381de7c532164b4a4408895d9606c0d24e2e9d2f9acb5dfe99b3c
application/zip
46.21MB
2023-06-07 15:59:32 +0000 UTC
rpms.southbridge.ru · vault_1.13.2_linux_amd64.zip

/other/

Russia · JSC Selectel

Yara RAT_JavaDropper From Florian Roth by Kevin Breen <kevin@techanarchy.net> (slightly modified by Florian Roth to improve performance)

Download archived sample
The password is "infected"

SHA1: 73f8ffe124bea22154c260d5e254e5f85ef42cec
SHA256: f7930279de8381de7c532164b4a4408895d9606c0d24e2e9d2f9acb5dfe99b3c
application/zip
46.21MB
2023-06-07 15:59:32 +0000 UTC
mirror.as59645.net · vault-1.10.7-r0.apk

/alpine/v3.16/community/aarch64/

Germany · Tobias Fiebig

Yara RAT_JavaDropper From Florian Roth by Kevin Breen <kevin@techanarchy.net> (slightly modified by Florian Roth to improve performance)

Download archived sample
The password is "infected"

SHA1: 4099f5d3ebe76014aa4b77e446680b7208f13b9b
SHA256: 4777db69cd335d949a538761172aeb7ebf489a4180b6056d7982f283a6a885cc
application/octet-stream
31.73MB
2022-10-14 11:49:43 +0000 UTC
mirror01.dus01.as59645.net · vault-1.10.7-r0.apk

/alpine/v3.16/community/aarch64/

Germany · Tobias Fiebig

Yara RAT_JavaDropper From Florian Roth by Kevin Breen <kevin@techanarchy.net> (slightly modified by Florian Roth to improve performance)

Download archived sample
The password is "infected"

SHA1: 4099f5d3ebe76014aa4b77e446680b7208f13b9b
SHA256: 4777db69cd335d949a538761172aeb7ebf489a4180b6056d7982f283a6a885cc
application/octet-stream
31.73MB
2022-10-14 11:49:43 +0000 UTC
mirror.aperture-labs.org · vault-1.10.7-r0.apk

/alpine/v3.16/community/aarch64/

Germany · Tobias Fiebig

Yara RAT_JavaDropper From Florian Roth by Kevin Breen <kevin@techanarchy.net> (slightly modified by Florian Roth to improve performance)

Download archived sample
The password is "infected"

SHA1: 4099f5d3ebe76014aa4b77e446680b7208f13b9b
SHA256: 4777db69cd335d949a538761172aeb7ebf489a4180b6056d7982f283a6a885cc
application/octet-stream
31.73MB
2022-10-14 11:49:43 +0000 UTC
rpms-proxy-02.southbridge.ru · vault_1.13.2_linux_amd64.zip

/other/

Finland · Hetzner Online GmbH

Yara RAT_JavaDropper From Florian Roth by Kevin Breen <kevin@techanarchy.net> (slightly modified by Florian Roth to improve performance)

Download archived sample
The password is "infected"

SHA1: 73f8ffe124bea22154c260d5e254e5f85ef42cec
SHA256: f7930279de8381de7c532164b4a4408895d9606c0d24e2e9d2f9acb5dfe99b3c
application/zip
46.21MB
2023-06-07 15:59:32 +0000 UTC
92.222.177.110 · 2026-09-07.zip

/backup_db_xtribe/

France · OVH SAS

Yara RAT_JavaDropper From Florian Roth by Kevin Breen <kevin@techanarchy.net> (slightly modified by Florian Roth to improve performance)

Download archived sample
The password is "infected"

SHA1: 8b2e2da770befa0089f769ad81f24dadacbed5ad
SHA256: f44ddb8cdea1f5dfd0ed655520d4e3de9bed53900774f896244dabebbad3dca8
application/zip
17.17MB
2026-09-07 01:00:17 +0000 UTC
20.2.68.63 · oneid-app_oneid-combined-old-service_v3.5.0-48c4fa67-20260929215419-amd64.zip

/images/oneid/

Hong Kong · Microsoft Corporation

Yara RAT_JavaDropper From Florian Roth by Kevin Breen <kevin@techanarchy.net> (slightly modified by Florian Roth to improve performance)

SHA1: 8f3b7a2bfb69f2d340c83db8ac149528e211066e
SHA256: c51bed1f05ed15c1833f49b93ea4a88555f942f0c723f39357d70bc26b92fb55
application/zip
147.87MB
2026-09-30 14:22:59 +0000 UTC
rpms-proxy-03.southbridge.ru · vault_1.13.2_linux_amd64.zip

/other/

Germany · Leaseweb Deutschland GmbH

Yara RAT_JavaDropper From Florian Roth by Kevin Breen <kevin@techanarchy.net> (slightly modified by Florian Roth to improve performance)

Download archived sample
The password is "infected"

SHA1: 73f8ffe124bea22154c260d5e254e5f85ef42cec
SHA256: f7930279de8381de7c532164b4a4408895d9606c0d24e2e9d2f9acb5dfe99b3c
application/zip
46.21MB
2023-06-07 15:59:32 +0000 UTC
rpms-proxy-02.southbridge.ru · vault_1.13.2_linux_amd64.zip

/other/

Finland · Hetzner Online GmbH

Yara RAT_JavaDropper From Florian Roth by Kevin Breen <kevin@techanarchy.net> (slightly modified by Florian Roth to improve performance)

Download archived sample
The password is "infected"

SHA1: 73f8ffe124bea22154c260d5e254e5f85ef42cec
SHA256: f7930279de8381de7c532164b4a4408895d9606c0d24e2e9d2f9acb5dfe99b3c
application/zip
46.21MB
2023-06-07 15:59:32 +0000 UTC
rpms-proxy-02.southbridge.ru · vault_1.13.2_linux_amd64.zip

/other/

Finland · Hetzner Online GmbH

Yara RAT_JavaDropper From Florian Roth by Kevin Breen <kevin@techanarchy.net> (slightly modified by Florian Roth to improve performance)

Download archived sample
The password is "infected"

SHA1: 73f8ffe124bea22154c260d5e254e5f85ef42cec
SHA256: f7930279de8381de7c532164b4a4408895d9606c0d24e2e9d2f9acb5dfe99b3c
application/zip
46.21MB
2023-06-07 15:59:32 +0000 UTC
nwfm.ru · vault_all.zip

/

Russia · SkyNet Ltd.

Yara RAT_JavaDropper From Florian Roth by Kevin Breen <kevin@techanarchy.net> (slightly modified by Florian Roth to improve performance)

SHA1: 565c35c8424e84ece398b7cd37b097b7b89fc4dc
SHA256: 04eff61cf6c6c3881b3e20536299b8a38cfa7451e5c0013a32b0a2907c9b6e17
application/zip
308.92MB
2026-03-03 07:50:16 +0000 UTC
rpms-proxy-03.southbridge.ru · vault_1.13.2_linux_amd64.zip

/other/

Germany · Leaseweb Deutschland GmbH

Yara RAT_JavaDropper From Florian Roth by Kevin Breen <kevin@techanarchy.net> (slightly modified by Florian Roth to improve performance)

Download archived sample
The password is "infected"

SHA1: 73f8ffe124bea22154c260d5e254e5f85ef42cec
SHA256: f7930279de8381de7c532164b4a4408895d9606c0d24e2e9d2f9acb5dfe99b3c
application/zip
46.21MB
2023-06-07 15:59:32 +0000 UTC
rpms-proxy-02.southbridge.ru · vault_1.13.2_linux_amd64.zip

/other/

Finland · Hetzner Online GmbH

Yara RAT_JavaDropper From Florian Roth by Kevin Breen <kevin@techanarchy.net> (slightly modified by Florian Roth to improve performance)

Download archived sample
The password is "infected"

SHA1: 73f8ffe124bea22154c260d5e254e5f85ef42cec
SHA256: f7930279de8381de7c532164b4a4408895d9606c0d24e2e9d2f9acb5dfe99b3c
application/zip
46.21MB
2023-06-07 15:59:32 +0000 UTC
rpms.southbridge.ru · vault_1.13.2_linux_amd64.zip

/other/

Russia · JSC Selectel

Yara RAT_JavaDropper From Florian Roth by Kevin Breen <kevin@techanarchy.net> (slightly modified by Florian Roth to improve performance)

Download archived sample
The password is "infected"

SHA1: 73f8ffe124bea22154c260d5e254e5f85ef42cec
SHA256: f7930279de8381de7c532164b4a4408895d9606c0d24e2e9d2f9acb5dfe99b3c
application/zip
46.21MB
2023-06-07 15:59:32 +0000 UTC