qq.370495.com · btv内置源6.1.9.apk

/btv/

Singapore · ACE

Yara SUSP_XORed_Mozilla From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

168168.best · ysc6.2.0.apk

/

· Cloudflare, Inc.

Yara SUSP_XORed_Mozilla From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

168168.best · ysc6.2.0.apk

/

· Cloudflare, Inc.

Yara SUSP_XORed_Mozilla From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

168168.best · ysc6.2.0.apk

/

· Cloudflare, Inc.

Yara SUSP_XORed_Mozilla From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

168168.best · ysc6.2.0.apk

/

· Cloudflare, Inc.

Yara SUSP_XORed_Mozilla From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

qq.370495.com · btv内置源6.1.9.apk

/btv/

Singapore · ACE

Yara SUSP_XORed_Mozilla From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

mail.reveantivirus.com · Malware Samples.zip

/reveantivirus.com/linux/Builds/Abhishek_Samples/

United States · IO INC

Yara INDICATOR_EXE_Packed_Dotfuscator From AlienVault by ditekSHen

Yara INDICATOR_EXE_Packed_UPolyX From AlienVault by ditekSHen

Yara SUSP_XORed_MSDOS_Stub_Message From Florian Roth by Florian Roth

Yara INDICATOR_EXE_Packed_ConfuserEx From AlienVault by ditekSHen

Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Yara detect_Redline_Stealer From AbuseCH by Varp0s

Yara Disable_Defender From AbuseCH by iam-py-test

Yara INDICATOR_EXE_Packed_RLPack From AlienVault by ditekSHen

Yara Win32_Ransomware_WannaCry From ReversingLabs by ReversingLabs

Yara INDICATOR_EXE_Packed_SmartAssembly From AlienVault by ditekSHen

Yara Nanocore_RAT_Gen_2 From Florian Roth by Florian Roth (Nextron Systems)

Yara IronTiger_Gh0stRAT_variant From Florian Roth by Cyber Safety Solutions, Trend Micro

Yara INDICATOR_EXE_DotNET_Encrypted From AlienVault by ditekSHen

Yara INDICATOR_EXE_Packed_VMProtect From AlienVault by ditekSHen

Yara INDICATOR_EXE_Packed_AgileDotNet From AlienVault by ditekSHen

Yara SUSP_NET_NAME_ConfuserEx From Florian Roth by Arnim Rupp

Yara IMPLANT_4_v7 From Florian Roth by US CERT

Yara INDICATOR_EXE_Packed_MPress From AlienVault by ditekSHen

Yara INDICATOR_EXE_Packed_Goliath From AlienVault by ditekSHen

Yara Typical_Malware_String_Transforms From Florian Roth by Florian Roth (Nextron Systems)

Yara INDICATOR_EXE_Packed_aPLib From AlienVault by ditekSHen

Yara Win32_Ransomware_CryptoJoker From ReversingLabs by ReversingLabs

Yara SUSP_XORed_Mozilla From Florian Roth by Florian Roth (Nextron Systems)

Yara Cloaked_RAR_File From Florian Roth by Florian Roth (Nextron Systems)

Yara Office_as_MHTML From Florian Roth by Florian Roth (Nextron Systems)

Yara EXE_extension_cloaking From Florian Roth by Florian Roth (Nextron Systems)

Yara SUSP_Base64_Encoded_Hex_Encoded_Code From Florian Roth by Florian Roth (Nextron Systems)

Yara FeliksPack3___PHP_Shells_ssh From Florian Roth by Florian Roth (Nextron Systems)

Yara connectback2_pl From Florian Roth by Neo23x0 Yara BRG + customization by Stefan -dfate- Molls

mail.reveantivirus.com · Malware Samples.zip

/reveantivirus.com/linux/Builds/Abhishek_Samples/

United States · IO INC

Yara INDICATOR_EXE_Packed_Dotfuscator From AlienVault by ditekSHen

Yara INDICATOR_EXE_Packed_UPolyX From AlienVault by ditekSHen

Yara SUSP_XORed_MSDOS_Stub_Message From Florian Roth by Florian Roth

Yara INDICATOR_EXE_Packed_ConfuserEx From AlienVault by ditekSHen

Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Yara detect_Redline_Stealer From AbuseCH by Varp0s

Yara Disable_Defender From AbuseCH by iam-py-test

Yara INDICATOR_EXE_Packed_RLPack From AlienVault by ditekSHen

Yara Win32_Ransomware_WannaCry From ReversingLabs by ReversingLabs

Yara INDICATOR_EXE_Packed_SmartAssembly From AlienVault by ditekSHen

Yara Nanocore_RAT_Gen_2 From Florian Roth by Florian Roth (Nextron Systems)

Yara IronTiger_Gh0stRAT_variant From Florian Roth by Cyber Safety Solutions, Trend Micro

Yara INDICATOR_EXE_DotNET_Encrypted From AlienVault by ditekSHen

Yara INDICATOR_EXE_Packed_VMProtect From AlienVault by ditekSHen

Yara INDICATOR_EXE_Packed_AgileDotNet From AlienVault by ditekSHen

Yara SUSP_NET_NAME_ConfuserEx From Florian Roth by Arnim Rupp

Yara IMPLANT_4_v7 From Florian Roth by US CERT

Yara INDICATOR_EXE_Packed_MPress From AlienVault by ditekSHen

Yara INDICATOR_EXE_Packed_Goliath From AlienVault by ditekSHen

Yara Typical_Malware_String_Transforms From Florian Roth by Florian Roth (Nextron Systems)

Yara INDICATOR_EXE_Packed_aPLib From AlienVault by ditekSHen

Yara Win32_Ransomware_CryptoJoker From ReversingLabs by ReversingLabs

Yara SUSP_XORed_Mozilla From Florian Roth by Florian Roth (Nextron Systems)

Yara Cloaked_RAR_File From Florian Roth by Florian Roth (Nextron Systems)

Yara Office_as_MHTML From Florian Roth by Florian Roth (Nextron Systems)

Yara EXE_extension_cloaking From Florian Roth by Florian Roth (Nextron Systems)

Yara SUSP_Base64_Encoded_Hex_Encoded_Code From Florian Roth by Florian Roth (Nextron Systems)

Yara FeliksPack3___PHP_Shells_ssh From Florian Roth by Florian Roth (Nextron Systems)

Yara connectback2_pl From Florian Roth by Neo23x0 Yara BRG + customization by Stefan -dfate- Molls

ftp.agstm.ro · AVG AntiVirus_v6.44.3_mod_apkdone.apk

/android/

Romania · Digi Romania S.A.

Yara SUSP_XORed_Mozilla From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

ftp.agstm.ro · AVG AntiVirus_v6.44.3_mod_apkdone.apk

/android/

Romania · Digi Romania S.A.

Yara SUSP_XORed_Mozilla From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

51.195.47.11 · xbvstr.sig.gz

/aviraupdate/x_vdf/

Germany · OVH SAS

Yara SUSP_XORed_Mozilla From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

51.195.47.11 · xbvpe.sig.gz

/aviraupdate/x_vdf/

Germany · OVH SAS

Yara SUSP_XORed_Mozilla From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"