files.aikoyori.xyz · 考试！ (the two chinese character!).zip

/games/china_games/

· CLOUDFLARENET

Yara SUSP_XORed_MSDOS_Stub_Message From Florian Roth by Florian Roth

Yara ReflectiveLoader From Florian Roth by Florian Roth (Nextron Systems)

releases.gotraffic.fr · crackmapexec_windows.exe

/OffensivePythonPipeline/binaries/

Austria · Hohl IT e.U.

Yara ReflectiveLoader From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

apt-mirror.firehawk-systems.com · koadic_0~git20210412.orig.tar.gz

/kali.download/kali/pool/main/k/koadic/

Australia · Aussie Broadband

Yara Mimikatz_Memory_Rule_1 From Florian Roth by Florian Roth

Yara ReflectiveLoader From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Yara mimikatz From Florian Roth by Benjamin DELPY (gentilkiwi)

Yara HKTL_Keyword_InjectDLL From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

apt-mirror.firehawk-systems.com · ibombshell_0~git20201107.orig.tar.gz

/kali.download/kali/pool/main/i/ibombshell/

Australia · Aussie Broadband

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara ReflectiveLoader From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

apt-mirror.firehawk-systems.com · koadic_0~git20210412.orig.tar.gz

/kali.download/kali/pool/main/k/koadic/

Australia · Aussie Broadband

Yara Mimikatz_Memory_Rule_1 From Florian Roth by Florian Roth

Yara ReflectiveLoader From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Yara mimikatz From Florian Roth by Benjamin DELPY (gentilkiwi)

Yara HKTL_Keyword_InjectDLL From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

apt-mirror.firehawk-systems.com · ibombshell_0~git20201107.orig.tar.gz

/kali.download/kali/pool/main/i/ibombshell/

Australia · Aussie Broadband

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara ReflectiveLoader From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

140.83.50.60 · 884039ab697c811a11dc4e3cc03bea9c3fb7e8dbfe0b0722318ce9cc456e4a82.exe.exe

/cry/

Japan · ORACLE-BMC-31898

Yara ReflectiveLoader From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

140.83.50.60 · 509c5bf724b0d3bc60cdc93c1b0f1e6710cf23edb2293d670cb8bdeaa5ac7e6f.exe.exe

/cry/

Japan · ORACLE-BMC-31898

Yara ReflectiveLoader From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

140.83.50.60 · 2e96b64287a0b741837c9f8179e8e1596d0f854d66108b38e4b84cc71c02e6c3.exe.exe

/cry/

Japan · ORACLE-BMC-31898

Yara ReflectiveLoader From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

www.db.sector404.me · cobaltstrike_release.zip

/

United States · STEADFAST

Yara Mimikatz_Memory_Rule_1 From Florian Roth by Florian Roth

Yara CobaltStrike_Resources_Artifact32_v3_14_to_v4_x From Florian Roth by gssincla@google.com

Yara Cobaltbaltstrike_RAW_Payload_TCP_Reverse_x64 From Florian Roth by Avast Threat Intel Team

Yara CobaltStrike_Resources_Artifact64_v3_14_to_v4_x From Florian Roth by gssincla@google.com

Yara CobaltStrike_Resources_Template_Sct_v3_3_to_v4_x From Florian Roth by gssincla@google.com

Yara CobaltStrike_Resources_Template_x64_Ps1_v3_0_to_v4_x_excluding_3_12_3_13 From Florian Roth by gssincla@google.com

Yara Cobaltbaltstrike_RAW_Payload_TCP_Reverse_x86 From Florian Roth by Avast Threat Intel Team

Yara Msfpayloads_msf_6 From Florian Roth by Florian Roth (Nextron Systems)

Yara Cobaltbaltstrike_RAW_Payload_http_stager_x64 From Florian Roth by Avast Threat Intel Team

Yara CobaltStrike_Resources_Covertvpn_Dll_v2_1_to_v4_x From Florian Roth by gssincla@google.com

Yara CobaltStrike_Resources_Template_x86_Vba_v3_8_to_v4_x From Florian Roth by gssincla@google.com

Yara HKTL_CobaltStrike_Beacon_Strings From Florian Roth by Elastic

Yara CobaltStrike_Resources_Command_Ps1_v2_5_to_v3_7_and_Resources_Compress_Ps1_v3_8_to_v4_x From Florian Roth by gssincla@google.com

Yara Cobaltbaltstrike_RAW_Payload_https_stager_x64 From Florian Roth by Avast Threat Intel Team

Yara Cobaltbaltstrike_RAW_Payload_dns_stager_x86 From Florian Roth by Avast Threat Intel Team

Yara CobaltStrike_Resources_Template_Py_v3_3_to_v4_x From Florian Roth by gssincla@google.com

Yara Cobaltbaltstrike_RAW_Payload_TCP_Bind_x86 From Florian Roth by Avast Threat Intel Team

Yara Cobaltbaltstrike_RAW_Payload_http_stager_x86 From Florian Roth by Avast Threat Intel Team

Yara Cobaltbaltstrike_RAW_Payload_https_stager_x86 From Florian Roth by Avast Threat Intel Team

Yara Cobaltbaltstrike_RAW_Payload_smb_stager_x86 From Florian Roth by Avast Threat Intel Team

Yara CobaltStrike_Resources__Template_Vbs_v3_3_to_v4_x From Florian Roth by gssincla@google.com

Yara Cobaltbaltstrike_RAW_Payload_TCP_Bind_x64 From Florian Roth by Avast Threat Intel Team

Yara SUSP_PowerShell_IEX_Download_Combo From Florian Roth by Florian Roth (Nextron Systems)

Yara HKTL_NoPowerShell From Florian Roth by Florian Roth (Nextron Systems)

Yara INDICATOR_EXE_Packed_Dotfuscator From AlienVault by ditekSHen

Yara ReflectiveLoader From Florian Roth by Florian Roth (Nextron Systems)

Yara CobaltStrike_Resources_Elevate_X64_Dll_v3_0_to_v3_14_and_Sleeve_Elevate_X64_Dll_v4_x From Florian Roth by gssincla@google.com

Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen

Yara ps1_toolkit_PowerUp From Florian Roth by Florian Roth (Nextron Systems)

Yara Empire_PowerShell_Framework_Gen4 From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Yara Invoke_mimikittenz From Florian Roth by Florian Roth (Nextron Systems)

Yara Empire_KeePassConfig From Florian Roth by Florian Roth (Nextron Systems)

Yara HackTool_MSIL_SAFETYKATZ_4 From Florian Roth by FireEye

Yara HackTool_MSIL_SEATBELT_1 From Florian Roth by FireEye

Yara Disable_Defender From AbuseCH by iam-py-test

Yara WiltedTulip_WindowsTask From Florian Roth by Florian Roth (Nextron Systems)

Yara NTLM_Dump_Output From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

db.sector404.me · cobaltstrike_release.zip

/

United States · STEADFAST

Yara Mimikatz_Memory_Rule_1 From Florian Roth by Florian Roth

Yara CobaltStrike_Resources_Artifact32_v3_14_to_v4_x From Florian Roth by gssincla@google.com

Yara Cobaltbaltstrike_RAW_Payload_TCP_Reverse_x64 From Florian Roth by Avast Threat Intel Team

Yara CobaltStrike_Resources_Artifact64_v3_14_to_v4_x From Florian Roth by gssincla@google.com

Yara CobaltStrike_Resources_Template_Sct_v3_3_to_v4_x From Florian Roth by gssincla@google.com

Yara CobaltStrike_Resources_Template_x64_Ps1_v3_0_to_v4_x_excluding_3_12_3_13 From Florian Roth by gssincla@google.com

Yara Cobaltbaltstrike_RAW_Payload_TCP_Reverse_x86 From Florian Roth by Avast Threat Intel Team

Yara Msfpayloads_msf_6 From Florian Roth by Florian Roth (Nextron Systems)

Yara Cobaltbaltstrike_RAW_Payload_http_stager_x64 From Florian Roth by Avast Threat Intel Team

Yara CobaltStrike_Resources_Covertvpn_Dll_v2_1_to_v4_x From Florian Roth by gssincla@google.com

Yara CobaltStrike_Resources_Template_x86_Vba_v3_8_to_v4_x From Florian Roth by gssincla@google.com

Yara HKTL_CobaltStrike_Beacon_Strings From Florian Roth by Elastic

Yara CobaltStrike_Resources_Command_Ps1_v2_5_to_v3_7_and_Resources_Compress_Ps1_v3_8_to_v4_x From Florian Roth by gssincla@google.com

Yara Cobaltbaltstrike_RAW_Payload_https_stager_x64 From Florian Roth by Avast Threat Intel Team

Yara Cobaltbaltstrike_RAW_Payload_dns_stager_x86 From Florian Roth by Avast Threat Intel Team

Yara CobaltStrike_Resources_Template_Py_v3_3_to_v4_x From Florian Roth by gssincla@google.com

Yara Cobaltbaltstrike_RAW_Payload_TCP_Bind_x86 From Florian Roth by Avast Threat Intel Team

Yara Cobaltbaltstrike_RAW_Payload_http_stager_x86 From Florian Roth by Avast Threat Intel Team

Yara Cobaltbaltstrike_RAW_Payload_https_stager_x86 From Florian Roth by Avast Threat Intel Team

Yara Cobaltbaltstrike_RAW_Payload_smb_stager_x86 From Florian Roth by Avast Threat Intel Team

Yara CobaltStrike_Resources__Template_Vbs_v3_3_to_v4_x From Florian Roth by gssincla@google.com

Yara Cobaltbaltstrike_RAW_Payload_TCP_Bind_x64 From Florian Roth by Avast Threat Intel Team

Yara SUSP_PowerShell_IEX_Download_Combo From Florian Roth by Florian Roth (Nextron Systems)

Yara HKTL_NoPowerShell From Florian Roth by Florian Roth (Nextron Systems)

Yara INDICATOR_EXE_Packed_Dotfuscator From AlienVault by ditekSHen

Yara ReflectiveLoader From Florian Roth by Florian Roth (Nextron Systems)

Yara CobaltStrike_Resources_Elevate_X64_Dll_v3_0_to_v3_14_and_Sleeve_Elevate_X64_Dll_v4_x From Florian Roth by gssincla@google.com

Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen

Yara ps1_toolkit_PowerUp From Florian Roth by Florian Roth (Nextron Systems)

Yara Empire_PowerShell_Framework_Gen4 From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Yara Invoke_mimikittenz From Florian Roth by Florian Roth (Nextron Systems)

Yara Empire_KeePassConfig From Florian Roth by Florian Roth (Nextron Systems)

Yara HackTool_MSIL_SAFETYKATZ_4 From Florian Roth by FireEye

Yara HackTool_MSIL_SEATBELT_1 From Florian Roth by FireEye

Yara Disable_Defender From AbuseCH by iam-py-test

Yara WiltedTulip_WindowsTask From Florian Roth by Florian Roth (Nextron Systems)

Yara NTLM_Dump_Output From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

free.hands.com · koadic_0~git20210412.orig.tar.gz

/kali/pool/main/k/koadic/

United Kingdom · Iomart Cloud Services Limited

Yara Mimikatz_Memory_Rule_1 From Florian Roth by Florian Roth

Yara ReflectiveLoader From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Yara mimikatz From Florian Roth by Benjamin DELPY (gentilkiwi)

Yara HKTL_Keyword_InjectDLL From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

debian.hands.com · koadic_0~git20210412.orig.tar.gz

/kali/pool/main/k/koadic/

United Kingdom · Iomart Cloud Services Limited

Yara Mimikatz_Memory_Rule_1 From Florian Roth by Florian Roth

Yara ReflectiveLoader From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Yara mimikatz From Florian Roth by Benjamin DELPY (gentilkiwi)

Yara HKTL_Keyword_InjectDLL From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

debian.hands.com · koadic_0~git20210412.orig.tar.gz

/kali/pool/main/k/koadic/

United Kingdom · Iomart Cloud Services Limited

Yara Mimikatz_Memory_Rule_1 From Florian Roth by Florian Roth

Yara ReflectiveLoader From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Yara mimikatz From Florian Roth by Benjamin DELPY (gentilkiwi)

Yara HKTL_Keyword_InjectDLL From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

free.hands.com · koadic_0~git20210412.orig.tar.gz

/kali/pool/main/k/koadic/

United Kingdom · Iomart Cloud Services Limited

Yara Mimikatz_Memory_Rule_1 From Florian Roth by Florian Roth

Yara ReflectiveLoader From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Yara mimikatz From Florian Roth by Benjamin DELPY (gentilkiwi)

Yara HKTL_Keyword_InjectDLL From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

ftp.hands.com · koadic_0~git20210412.orig.tar.gz

/kali/pool/main/k/koadic/

United Kingdom · Iomart Cloud Services Limited

Yara Mimikatz_Memory_Rule_1 From Florian Roth by Florian Roth

Yara ReflectiveLoader From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Yara mimikatz From Florian Roth by Benjamin DELPY (gentilkiwi)

Yara HKTL_Keyword_InjectDLL From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

ftp.hands.com · koadic_0~git20210412.orig.tar.gz

/kali/pool/main/k/koadic/

United Kingdom · Iomart Cloud Services Limited

Yara Mimikatz_Memory_Rule_1 From Florian Roth by Florian Roth

Yara ReflectiveLoader From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Yara mimikatz From Florian Roth by Benjamin DELPY (gentilkiwi)

Yara HKTL_Keyword_InjectDLL From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

free.hands.com · ibombshell_0~git20210528.orig.tar.gz

/kali/pool/main/i/ibombshell/

United Kingdom · Iomart Cloud Services Limited

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara ReflectiveLoader From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

free.hands.com · ibombshell_0~git20201107.orig.tar.gz

/kali/pool/main/i/ibombshell/

United Kingdom · Iomart Cloud Services Limited

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara ReflectiveLoader From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

debian.hands.com · ibombshell_0~git20210528.orig.tar.gz

/kali/pool/main/i/ibombshell/

United Kingdom · Iomart Cloud Services Limited

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara ReflectiveLoader From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"