allthethings.ddns.net · virussign.com_20250609_LimitedFree.zip

/samples/virussign/

Germany · netcup GmbH

Yara PUP_InstallRex_AntiFWb From Florian Roth by Florian Roth (Nextron Systems)

Yara Win32_PUA_Domaiq From ReversingLabs by ReversingLabs

Yara INDICATOR_EXE_DotNET_Encrypted From AlienVault by ditekSHen

Yara INDICATOR_EXE_Packed_UPolyX From AlienVault by ditekSHen

Yara Win32_Buzus_Softpulse From Florian Roth by Florian Roth (Nextron Systems)

Yara Unspecified_Malware_Oct16_A From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

allthethings.ddns.net · virussign.com_20250614_LimitedFree.zip

/samples/virussign/

Germany · netcup GmbH

Yara PUP_InstallRex_AntiFWb From Florian Roth by Florian Roth (Nextron Systems)

Yara Win32_PUA_Domaiq From ReversingLabs by ReversingLabs

Yara Win32_Buzus_Softpulse From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Download archived sample

The password is "infected"

allthethings.ddns.net · virussign.com_20250601_LimitedFree.zip

/samples/virussign/

Germany · netcup GmbH

Yara Win32_PUA_Domaiq From ReversingLabs by ReversingLabs

Yara PUP_InstallRex_AntiFWb From Florian Roth by Florian Roth (Nextron Systems)

Yara INDICATOR_EXE_Packed_SmartAssembly From AlienVault by ditekSHen

Yara SUSP_Imphash_Mar23_2 From Florian Roth by Arnim Rupp (https://github.com/ruppde)

Yara Win32_Buzus_Softpulse From Florian Roth by Florian Roth (Nextron Systems)

Yara INDICATOR_EXE_Packed_ASPack From AlienVault by ditekSHen

Download archived sample

The password is "infected"

allthethings.ddns.net · virussign.com_20250609_LimitedFree.zip

/samples/virussign/

Germany · netcup GmbH

Yara PUP_InstallRex_AntiFWb From Florian Roth by Florian Roth (Nextron Systems)

Yara Win32_PUA_Domaiq From ReversingLabs by ReversingLabs

Yara INDICATOR_EXE_DotNET_Encrypted From AlienVault by ditekSHen

Yara INDICATOR_EXE_Packed_UPolyX From AlienVault by ditekSHen

Yara Win32_Buzus_Softpulse From Florian Roth by Florian Roth (Nextron Systems)

Yara Unspecified_Malware_Oct16_A From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

allthethings.ddns.net · virussign.com_20250601_LimitedFree.zip

/samples/virussign/

Germany · netcup GmbH

Yara Win32_PUA_Domaiq From ReversingLabs by ReversingLabs

Yara PUP_InstallRex_AntiFWb From Florian Roth by Florian Roth (Nextron Systems)

Yara INDICATOR_EXE_Packed_SmartAssembly From AlienVault by ditekSHen

Yara SUSP_Imphash_Mar23_2 From Florian Roth by Arnim Rupp (https://github.com/ruppde)

Yara Win32_Buzus_Softpulse From Florian Roth by Florian Roth (Nextron Systems)

Yara INDICATOR_EXE_Packed_ASPack From AlienVault by ditekSHen

Download archived sample

The password is "infected"

5.45.102.182 · virussign.com_20250614_LimitedFree.zip

/samples/virussign/

Germany · netcup GmbH

Yara PUP_InstallRex_AntiFWb From Florian Roth by Florian Roth (Nextron Systems)

Yara Win32_PUA_Domaiq From ReversingLabs by ReversingLabs

Yara Win32_Buzus_Softpulse From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Download archived sample

The password is "infected"

5.45.102.182 · virussign.com_20250609_LimitedFree.zip

/samples/virussign/

Germany · netcup GmbH

Yara PUP_InstallRex_AntiFWb From Florian Roth by Florian Roth (Nextron Systems)

Yara Win32_PUA_Domaiq From ReversingLabs by ReversingLabs

Yara INDICATOR_EXE_DotNET_Encrypted From AlienVault by ditekSHen

Yara INDICATOR_EXE_Packed_UPolyX From AlienVault by ditekSHen

Yara Win32_Buzus_Softpulse From Florian Roth by Florian Roth (Nextron Systems)

Yara Unspecified_Malware_Oct16_A From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

5.45.102.182 · virussign.com_20250601_LimitedFree.zip

/samples/virussign/

Germany · netcup GmbH

Yara Win32_PUA_Domaiq From ReversingLabs by ReversingLabs

Yara PUP_InstallRex_AntiFWb From Florian Roth by Florian Roth (Nextron Systems)

Yara INDICATOR_EXE_Packed_SmartAssembly From AlienVault by ditekSHen

Yara SUSP_Imphash_Mar23_2 From Florian Roth by Arnim Rupp (https://github.com/ruppde)

Yara Win32_Buzus_Softpulse From Florian Roth by Florian Roth (Nextron Systems)

Yara INDICATOR_EXE_Packed_ASPack From AlienVault by ditekSHen

Download archived sample

The password is "infected"

5.45.102.182 · virussign.com_20250527_LimitedFree.zip

/samples/virussign/

Germany · netcup GmbH

Yara SUSP_XORed_MSDOS_Stub_Message From Florian Roth by Florian Roth

Yara Win32_Buzus_Softpulse From Florian Roth by Florian Roth (Nextron Systems)

Yara INDICATOR_EXE_Packed_UPolyX From AlienVault by ditekSHen

Yara INDICATOR_EXE_Packed_ASPack From AlienVault by ditekSHen

Yara SUSP_XORed_Mozilla From Florian Roth by Florian Roth (Nextron Systems)

Yara Unspecified_Malware_Oct16_A From Florian Roth by Florian Roth (Nextron Systems)

Yara Backdoor_Redosdru_Jun17 From Florian Roth by Florian Roth (Nextron Systems)

Yara SUSP_Imphash_Mar23_2 From Florian Roth by Arnim Rupp (https://github.com/ruppde)

Yara PUP_InstallRex_AntiFWb From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

5.45.102.182 · virussign.com_20250524_LimitedFree.zip

/samples/virussign/

Germany · netcup GmbH

Yara Win32_PUA_Domaiq From ReversingLabs by ReversingLabs

Yara Unspecified_Malware_Oct16_A From Florian Roth by Florian Roth (Nextron Systems)

Yara INDICATOR_EXE_Packed_ASPack From AlienVault by ditekSHen

Yara PUP_InstallRex_AntiFWb From Florian Roth by Florian Roth (Nextron Systems)

Yara Win32_Buzus_Softpulse From Florian Roth by Florian Roth (Nextron Systems)

Yara INDICATOR_EXE_Packed_SmartAssembly From AlienVault by ditekSHen

Yara INDICATOR_EXE_Packed_VMProtect From AlienVault by ditekSHen

Yara Disable_Defender From AbuseCH by iam-py-test

Download archived sample

The password is "infected"

5.45.102.182 · virussign.com_20250614_LimitedFree.zip

/samples/virussign/

Germany · netcup GmbH

Yara PUP_InstallRex_AntiFWb From Florian Roth by Florian Roth (Nextron Systems)

Yara Win32_PUA_Domaiq From ReversingLabs by ReversingLabs

Yara Win32_Buzus_Softpulse From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Download archived sample

The password is "infected"

5.45.102.182 · virussign.com_20250609_LimitedFree.zip

/samples/virussign/

Germany · netcup GmbH

Yara PUP_InstallRex_AntiFWb From Florian Roth by Florian Roth (Nextron Systems)

Yara Win32_PUA_Domaiq From ReversingLabs by ReversingLabs

Yara INDICATOR_EXE_DotNET_Encrypted From AlienVault by ditekSHen

Yara INDICATOR_EXE_Packed_UPolyX From AlienVault by ditekSHen

Yara Win32_Buzus_Softpulse From Florian Roth by Florian Roth (Nextron Systems)

Yara Unspecified_Malware_Oct16_A From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

5.45.102.182 · virussign.com_20250601_LimitedFree.zip

/samples/virussign/

Germany · netcup GmbH

Yara Win32_PUA_Domaiq From ReversingLabs by ReversingLabs

Yara PUP_InstallRex_AntiFWb From Florian Roth by Florian Roth (Nextron Systems)

Yara INDICATOR_EXE_Packed_SmartAssembly From AlienVault by ditekSHen

Yara SUSP_Imphash_Mar23_2 From Florian Roth by Arnim Rupp (https://github.com/ruppde)

Yara Win32_Buzus_Softpulse From Florian Roth by Florian Roth (Nextron Systems)

Yara INDICATOR_EXE_Packed_ASPack From AlienVault by ditekSHen

Download archived sample

The password is "infected"

5.45.102.182 · virussign.com_20250527_LimitedFree.zip

/samples/virussign/

Germany · netcup GmbH

Yara SUSP_XORed_MSDOS_Stub_Message From Florian Roth by Florian Roth

Yara Win32_Buzus_Softpulse From Florian Roth by Florian Roth (Nextron Systems)

Yara INDICATOR_EXE_Packed_UPolyX From AlienVault by ditekSHen

Yara INDICATOR_EXE_Packed_ASPack From AlienVault by ditekSHen

Yara SUSP_XORed_Mozilla From Florian Roth by Florian Roth (Nextron Systems)

Yara Unspecified_Malware_Oct16_A From Florian Roth by Florian Roth (Nextron Systems)

Yara Backdoor_Redosdru_Jun17 From Florian Roth by Florian Roth (Nextron Systems)

Yara SUSP_Imphash_Mar23_2 From Florian Roth by Arnim Rupp (https://github.com/ruppde)

Yara PUP_InstallRex_AntiFWb From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

5.45.102.182 · virussign.com_20250524_LimitedFree.zip

/samples/virussign/

Germany · netcup GmbH

Yara Win32_PUA_Domaiq From ReversingLabs by ReversingLabs

Yara Unspecified_Malware_Oct16_A From Florian Roth by Florian Roth (Nextron Systems)

Yara INDICATOR_EXE_Packed_ASPack From AlienVault by ditekSHen

Yara PUP_InstallRex_AntiFWb From Florian Roth by Florian Roth (Nextron Systems)

Yara Win32_Buzus_Softpulse From Florian Roth by Florian Roth (Nextron Systems)

Yara INDICATOR_EXE_Packed_SmartAssembly From AlienVault by ditekSHen

Yara INDICATOR_EXE_Packed_VMProtect From AlienVault by ditekSHen

Yara Disable_Defender From AbuseCH by iam-py-test

Download archived sample

The password is "infected"