pypi.corp.tevian.ru · pyx_core-1.28.0.tar.gz

/packages/00/7b/22ae118e38e9829515b76d5e30659dc082830d829069c54768a0084ccccc/

·

Yara SUSP_Netsh_PortProxy_Command From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

pypi.corp.tevian.ru · machineconfig-8.34.tar.gz

/packages/00/24/1ed291352bcb002e1f98e7d26b7d18d3d4f79bee24dc1fdd10ebcc772249/

·

Yara SUSP_Netsh_PortProxy_Command From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

61.238.115.92 · netsh端口转发管理工具.zip

/3软件和工具/

Hong Kong · HK Broadband Network Ltd.

Yara SUSP_Netsh_PortProxy_Command From Florian Roth by Florian Roth (Nextron Systems)

Yara INDICATOR_EXE_Packed_RLPack From AlienVault by ditekSHen

Download archived sample

The password is "infected"

download.wxcount.com · Bridge-To-Kubernetes.tar.gz

/github.com/Azure/

China · China Telecom Group

Yara SUSP_Netsh_PortProxy_Command From Florian Roth by Florian Roth (Nextron Systems)

Yara p0wnedPotato From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

parrot.elhacker.net · payloadsallthethings_2.1.orig.tar.gz

/pool/main/p/payloadsallthethings/

Spain · Adamo Telecom Iberia S.A.

Yara SUSP_PowerShell_Caret_Obfuscation_2 From Florian Roth by Florian Roth (Nextron Systems)

Yara Mimikatz_Memory_Rule_1 From Florian Roth by Florian Roth

Yara SUSP_Netsh_PortProxy_Command From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara SUSP_EXPL_POC_VMWare_Workspace_ONE_CVE_2022_22954_Apr22 From Florian Roth by Florian Roth

Yara WEBSHELL_PHP_Generic From Florian Roth by Arnim Rupp (https://github.com/ruppde)

Download archived sample

The password is "infected"

de.freedif.org · nishang_0.7.6+git20210724.414ee11.orig.tar.gz

/kali/pool/main/n/nishang/

Singapore · MyRepublic Ltd.

Yara SUSP_PowerShell_IEX_Download_Combo From Florian Roth by Florian Roth (Nextron Systems)

Yara PS_AMSI_Bypass From Florian Roth by Florian Roth (Nextron Systems)

Yara Empire_PowerShell_Framework_Gen1 From Florian Roth by Florian Roth (Nextron Systems)

Yara Empire_Invoke_Mimikatz_Gen From Florian Roth by Florian Roth (Nextron Systems)

Yara Invoke_mimikittenz From Florian Roth by Florian Roth (Nextron Systems)

Yara SUSP_Netsh_PortProxy_Command From Florian Roth by Florian Roth (Nextron Systems)

Yara HKTL_Nishang_PS1_Invoke_PowerShellTcpOneLine From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

apt-mirror.firehawk-systems.com · nishang_0.7.6+git20210724.414ee11.orig.tar.gz

/kali.download/kali/pool/main/n/nishang/

Australia · Aussie Broadband

Yara SUSP_PowerShell_IEX_Download_Combo From Florian Roth by Florian Roth (Nextron Systems)

Yara PS_AMSI_Bypass From Florian Roth by Florian Roth (Nextron Systems)

Yara Empire_PowerShell_Framework_Gen1 From Florian Roth by Florian Roth (Nextron Systems)

Yara Empire_Invoke_Mimikatz_Gen From Florian Roth by Florian Roth (Nextron Systems)

Yara Invoke_mimikittenz From Florian Roth by Florian Roth (Nextron Systems)

Yara SUSP_Netsh_PortProxy_Command From Florian Roth by Florian Roth (Nextron Systems)

Yara HKTL_Nishang_PS1_Invoke_PowerShellTcpOneLine From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

apt-mirror.firehawk-systems.com · nishang_0.7.6+git20210724.414ee11.orig.tar.gz

/kali.download/kali/pool/main/n/nishang/

Australia · Aussie Broadband

Yara SUSP_PowerShell_IEX_Download_Combo From Florian Roth by Florian Roth (Nextron Systems)

Yara PS_AMSI_Bypass From Florian Roth by Florian Roth (Nextron Systems)

Yara Empire_PowerShell_Framework_Gen1 From Florian Roth by Florian Roth (Nextron Systems)

Yara Empire_Invoke_Mimikatz_Gen From Florian Roth by Florian Roth (Nextron Systems)

Yara Invoke_mimikittenz From Florian Roth by Florian Roth (Nextron Systems)

Yara SUSP_Netsh_PortProxy_Command From Florian Roth by Florian Roth (Nextron Systems)

Yara HKTL_Nishang_PS1_Invoke_PowerShellTcpOneLine From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

185.25.60.133 · autoLombApps_1.1.3.exe

/autoLombard/

Russia · Optibit LLC

Yara SUSP_Netsh_PortProxy_Command From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"