File Search Engine
  • Search
  • Syntax
  • Fields
  • API
  • misc.lassi.io · community-scheme-wiki-2021-05-22.tar.gz

    /2021/

    United States · AS-COLOCROSSING

    Yara WebShell_b374k_mini_shell_php_php From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 9de53a909f7dac391627e8b370206f1ffa849772
    SHA256: 738756795696534ef49613c60a1e67262db9c84fb958df236ae34df5e326ef32
    application/octet-stream
    7.55MB
    2021-05-23 06:24:13 +0000 UTC

  • misc.lassi.io · community-scheme-wiki-2021-05-22.tar.gz

    /2021/

    United States · AS-COLOCROSSING

    Yara WebShell_b374k_mini_shell_php_php From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 9de53a909f7dac391627e8b370206f1ffa849772
    SHA256: 738756795696534ef49613c60a1e67262db9c84fb958df236ae34df5e326ef32
    application/octet-stream
    7.55MB
    2021-05-23 06:24:13 +0000 UTC

  • ar.kosbit.com.br · ar.kosbit.com.br.zip

    /

    Canada · GTCOMM

    Yara WebShell_b374k_mini_shell_php_php From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 609fdfe3a7bcef1028bca4aa494006250d64afd6
    SHA256: f8b0a2b7624efc9411824f070e6b83f9fde3a1381e236354e5dc75d4d147aafc
    application/zip
    82.40MB
    2025-08-20 12:51:14 +0000 UTC

  • indiaaccess.co.in · backup_user-data_2010110632.zip

    /Plesk_backup/clients/aqergukr/domains/journospy.com/

    United States · HOPONE-GLOBAL

    Yara WebShell_b374k_mini_shell_php_php From Florian Roth by Florian Roth (Nextron Systems)

    SHA1: 0e46b4f56d12f3b2abebb0050e90787ff9394153
    SHA256: 95581c3273640e5f767fac8da5e44c867b689109a4aad98e07dc203f49ed049c
    application/zip
    231.41MB
    2020-10-12 12:17:01 +0000 UTC

  • misc.lassi.io · community-scheme-wiki-2021-05-22.tar.gz

    /2021/

    United States · AS-COLOCROSSING

    Yara WebShell_b374k_mini_shell_php_php From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 9de53a909f7dac391627e8b370206f1ffa849772
    SHA256: 738756795696534ef49613c60a1e67262db9c84fb958df236ae34df5e326ef32
    application/octet-stream
    7.55MB
    2021-05-23 06:24:13 +0000 UTC

  • indiaaccess.co.in · backup_user-data_2010110632.zip

    /Plesk_backup/clients/aqergukr/domains/journospy.com/

    United States · HOPONE-GLOBAL

    Yara WebShell_b374k_mini_shell_php_php From Florian Roth by Florian Roth (Nextron Systems)

    SHA1: aec88d8ef54215dccd952cc4aee63ac13c2fc964
    SHA256: 8479f348bcb4e60c586fc0935fe333bbd21a489d8c2a5f8a4f54490053b77dc6
    application/zip
    231.41MB
    2020-10-12 12:17:01 +0000 UTC

  • indiaaccess.co.in · backup_user-data_2010110632.zip

    /Plesk_backup/clients/aqergukr/domains/journospy.com/

    United States · HOPONE-GLOBAL

    Yara WebShell_b374k_mini_shell_php_php From Florian Roth by Florian Roth (Nextron Systems)

    SHA1: ac034a2f72f8d2e6f4c389c7490a3493168757e9
    SHA256: ffdc097344e556837ea8b610a7e6a1377222cc2f296f059f88d5979635982196
    application/zip
    231.41MB
    2020-10-12 12:17:01 +0000 UTC

  • indiaaccess.co.in · backup_user-data_2010110632.zip

    /Plesk_backup/clients/aqergukr/domains/journospy.com/

    United States · HOPONE-GLOBAL

    Yara WebShell_b374k_mini_shell_php_php From Florian Roth by Florian Roth (Nextron Systems)

    SHA1: f52efe6643a06a0e7bfd716daaa5c5b7da834296
    SHA256: 7f4ec57ee6ca317ea0887888287f528a9a8ecc64594daf403831b950593f00c7
    application/zip
    231.41MB
    2020-10-12 12:17:01 +0000 UTC

  • indiaaccess.co.in · backup_user-data_2010110632.zip

    /Plesk_backup/clients/aqergukr/domains/journospy.com/

    United States · HOPONE-GLOBAL

    Yara WebShell_b374k_mini_shell_php_php From Florian Roth by Florian Roth (Nextron Systems)

    SHA1: f52efe6643a06a0e7bfd716daaa5c5b7da834296
    SHA256: 7f4ec57ee6ca317ea0887888287f528a9a8ecc64594daf403831b950593f00c7
    application/zip
    231.41MB
    2020-10-12 12:17:01 +0000 UTC

  • qrmenu-konakkafe.wematek.com · qrmenu-konakkafe.wematek.com.zip

    /

    · CLOUDFLARENET

    Yara M_Hunting_PHP_Caffeine_Obfuscation_1 From AlienVault by adrian.mccabe
    Yara WebShell_b374k_mini_shell_php_php From Florian Roth by Florian Roth (Nextron Systems)
    Yara PHP_Webshell_1_Feb17 From Florian Roth by Florian Roth (Nextron Systems)
    Yara webshell_PHP_r57142 From Florian Roth by Florian Roth (Nextron Systems)

    SHA1: 2ac60bcaf4bfbb32832e387cbe526fe04e1dba5c
    SHA256: f727ee38efdadca7205fbfe6cfa9c223251b19762c7a56f03dc38bbb41438398
    application/zip
    153.16MB
    2025-01-01 23:19:53 +0000 UTC

  • indiaaccess.co.in · backup_user-data_2010110632.zip

    /Plesk_backup/clients/karanganatra/domains/blitzeventz.com/

    United States · HOPONE-GLOBAL

    Yara INDICATOR_EXE_Packed_Dotfuscator From AlienVault by ditekSHen
    Yara WebShell_b374k_mini_shell_php_php From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: d96d810676ee67422a18bf1cb96b2472363b0ff3
    SHA256: 0d7f438ce32d35b5c9ed7f15ef7b5f6528c9ebbf3986bf43aa1c04f4ea949182
    application/zip
    93.53MB
    2020-10-12 15:41:50 +0000 UTC

  • indiaaccess.co.in · backup_user-data_2010110632.zip

    /Plesk_backup/clients/aqergukr/domains/journospy.com/

    United States · HOPONE-GLOBAL

    Yara WebShell_b374k_mini_shell_php_php From Florian Roth by Florian Roth (Nextron Systems)

    SHA1: f52efe6643a06a0e7bfd716daaa5c5b7da834296
    SHA256: 7f4ec57ee6ca317ea0887888287f528a9a8ecc64594daf403831b950593f00c7
    application/zip
    231.41MB
    2020-10-12 12:17:01 +0000 UTC

  • indiaaccess.co.in · backup_user-data_2010110632.zip

    /Plesk_backup/clients/karanganatra/domains/blitzeventz.com/

    United States · HOPONE-GLOBAL

    Yara INDICATOR_EXE_Packed_Dotfuscator From AlienVault by ditekSHen
    Yara WebShell_b374k_mini_shell_php_php From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: d96d810676ee67422a18bf1cb96b2472363b0ff3
    SHA256: 0d7f438ce32d35b5c9ed7f15ef7b5f6528c9ebbf3986bf43aa1c04f4ea949182
    application/zip
    93.53MB
    2020-10-12 15:41:50 +0000 UTC

  • irsadl.ir · bkphk.tar.gz

    /

    Germany · Hetzner Online GmbH

    Yara WebShell_b374k_mini_shell_php_php From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 03126768c508a6f57811542766c1bd2165f7b308
    SHA256: 5dd9a526e41749c860102107e1a16cbc46dc4e4ee7944be1ea3a6ececd6333c5
    application/x-gzip
    56.44KB
    2023-04-15 04:41:51 +0000 UTC

  • irsadl.ir · bkhk1.tar.gz

    /

    Germany · Hetzner Online GmbH

    Yara WebShell_b374k_mini_shell_php_php From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 14879995d8890133a3915b77e25a1ff4cad215d4
    SHA256: caef499cf2c0f49fb02e20e51fa49569a12714f563643492d5a4ece6adf3083d
    application/x-gzip
    56.44KB
    2023-04-15 04:41:51 +0000 UTC

  • irsadl.ir · bkphk.tar.gz

    /

    Germany · Hetzner Online GmbH

    Yara WebShell_b374k_mini_shell_php_php From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 03126768c508a6f57811542766c1bd2165f7b308
    SHA256: 5dd9a526e41749c860102107e1a16cbc46dc4e4ee7944be1ea3a6ececd6333c5
    application/x-gzip
    56.44KB
    2023-04-15 04:41:51 +0000 UTC

  • irsadl.ir · bkhk1.tar.gz

    /

    Germany · Hetzner Online GmbH

    Yara WebShell_b374k_mini_shell_php_php From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 14879995d8890133a3915b77e25a1ff4cad215d4
    SHA256: caef499cf2c0f49fb02e20e51fa49569a12714f563643492d5a4ece6adf3083d
    application/x-gzip
    56.44KB
    2023-04-15 04:41:51 +0000 UTC

  • misc.lassi.io · community-scheme-wiki-2021-05-22.tar.gz

    /2021/

    Finland · Hetzner Online GmbH

    Yara WebShell_b374k_mini_shell_php_php From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 9de53a909f7dac391627e8b370206f1ffa849772
    SHA256: 738756795696534ef49613c60a1e67262db9c84fb958df236ae34df5e326ef32
    application/octet-stream
    7.55MB
    2021-05-23 06:24:13 +0000 UTC

  • misc.lassi.io · community-scheme-wiki-2021-05-22.tar.gz

    /2021/

    Finland · Hetzner Online GmbH

    Yara WebShell_b374k_mini_shell_php_php From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 9de53a909f7dac391627e8b370206f1ffa849772
    SHA256: 738756795696534ef49613c60a1e67262db9c84fb958df236ae34df5e326ef32
    application/octet-stream
    7.55MB
    2021-05-23 06:24:13 +0000 UTC