box.misaelabanto.com · androlea.ps1

/

France · Contabo GmbH

Yara power_pe_injection From Florian Roth by Benjamin DELPY (gentilkiwi)

Download archived sample

The password is "infected"

mirror.damiencoop.be · snort3-community-rules.zip

/

Germany · WIIT AG

Yara power_pe_injection From Florian Roth by Benjamin DELPY (gentilkiwi)

Yara Cobaltbaltstrike_Payload_Encoded From Florian Roth by Avast Threat Intel Team

Yara WEBSHELL_ASPX_reGeorgTunnel From Florian Roth by threatintel@volexity.com

Yara ironshell_php From Florian Roth by Neo23x0 Yara BRG + customization by Stefan -dfate- Molls

Download archived sample

The password is "infected"

pypi.corp.tevian.ru · capesolo-0.4.11.tar.gz

/packages/00/9f/0db316e5456dd811fcd3a2aa4d1282ed639aa02af2b0f0a69173fd9d70c1/

Russia · PVimpelCom

Yara Disable_Defender From AbuseCH by iam-py-test

Yara HKTL_CobaltStrike_Beacon_Strings From Florian Roth by Elastic

Yara RAT_adWind From Florian Roth by Kevin Breen <kevin@techanarchy.net>

Yara RAT_Adzok From Florian Roth by Kevin Breen <kevin@techanarchy.net>

Yara RAT_Ap0calypse From Florian Roth by Kevin Breen <kevin@techanarchy.net>

Yara RAT_BlackShades From Florian Roth by Brian Wallace (@botnet_hunter)

Yara RAT_BlueBanana From Florian Roth by Kevin Breen <kevin@techanarchy.net>

Yara RAT_Bozok From Florian Roth by Kevin Breen <kevin@techanarchy.net>

Yara RAT_ClientMesh From Florian Roth by Kevin Breen <kevin@techanarchy.net> (slightly modified by Florian Roth to improve performance)

Yara RAT_DarkComet From Florian Roth by Kevin Breen <kevin@techanarchy.net>

Yara RAT_DarkRAT From Florian Roth by Kevin Breen <kevin@techanarchy.net>

Yara APT_MAL_Sandworm_Exaramel_Task_Names From Florian Roth by FR/ANSSI/SDO

Yara MAL_HawkEye_Keylogger_Gen_Dec18 From Florian Roth by Florian Roth (Nextron Systems)

Yara RAT_JavaDropper From Florian Roth by Kevin Breen <kevin@techanarchy.net> (slightly modified by Florian Roth to improve performance)

Yara RAT_LostDoor From Florian Roth by Kevin Breen <kevin@techanarchy.net>

Yara power_pe_injection From Florian Roth by Benjamin DELPY (gentilkiwi)

Yara RAT_Paradox From Florian Roth by Kevin Breen <kevin@techanarchy.net>

Yara RAT_QRat From Florian Roth by Kevin Breen @KevTheHermit

Yara RAT_ShadowTech From Florian Roth by Kevin Breen <kevin@techanarchy.net>

Yara RAT_Sub7Nation From Florian Roth by Kevin Breen <kevin@techanarchy.net> (slightly modified by Florian Roth to improve performance)

Yara RAT_unrecom From Florian Roth by Kevin Breen <kevin@techanarchy.net>

Yara RAT_Vertex From Florian Roth by Kevin Breen <kevin@techanarchy.net>

Yara WindowsCredentialEditor From Florian Roth

Download archived sample

The password is "infected"

93.115.21.186 · mimikatz_trunk.zip

/

The Netherlands · MVPS LTD

Yara power_pe_injection From Florian Roth by Benjamin DELPY (gentilkiwi)

Yara mimikatz From Florian Roth by Benjamin DELPY (gentilkiwi)

Yara HackTool_Producers From Florian Roth

Download archived sample

The password is "infected"

93.115.21.186 · mimikatz_master.zip

/

The Netherlands · MVPS LTD

Yara power_pe_injection From Florian Roth by Benjamin DELPY (gentilkiwi)

Download archived sample

The password is "infected"

93.115.21.186 · mimikatz.zip

/

The Netherlands · MVPS LTD

Yara power_pe_injection From Florian Roth by Benjamin DELPY (gentilkiwi)

Yara mimikatz From Florian Roth by Benjamin DELPY (gentilkiwi)

Yara HackTool_Producers From Florian Roth

Download archived sample

The password is "infected"

box.misaelabanto.com · androlea.ps1

/

France · Contabo GmbH

Yara power_pe_injection From Florian Roth by Benjamin DELPY (gentilkiwi)

Download archived sample

The password is "infected"

pypi.corp.tevian.ru · capesolo-0.4.11.tar.gz

/packages/00/9f/0db316e5456dd811fcd3a2aa4d1282ed639aa02af2b0f0a69173fd9d70c1/

Russia · PVimpelCom

Yara Disable_Defender From AbuseCH by iam-py-test

Yara HKTL_CobaltStrike_Beacon_Strings From Florian Roth by Elastic

Yara RAT_adWind From Florian Roth by Kevin Breen <kevin@techanarchy.net>

Yara RAT_Adzok From Florian Roth by Kevin Breen <kevin@techanarchy.net>

Yara RAT_Ap0calypse From Florian Roth by Kevin Breen <kevin@techanarchy.net>

Yara RAT_BlackShades From Florian Roth by Brian Wallace (@botnet_hunter)

Yara RAT_BlueBanana From Florian Roth by Kevin Breen <kevin@techanarchy.net>

Yara RAT_Bozok From Florian Roth by Kevin Breen <kevin@techanarchy.net>

Yara RAT_ClientMesh From Florian Roth by Kevin Breen <kevin@techanarchy.net> (slightly modified by Florian Roth to improve performance)

Yara RAT_DarkComet From Florian Roth by Kevin Breen <kevin@techanarchy.net>

Yara RAT_DarkRAT From Florian Roth by Kevin Breen <kevin@techanarchy.net>

Yara APT_MAL_Sandworm_Exaramel_Task_Names From Florian Roth by FR/ANSSI/SDO

Yara MAL_HawkEye_Keylogger_Gen_Dec18 From Florian Roth by Florian Roth (Nextron Systems)

Yara RAT_JavaDropper From Florian Roth by Kevin Breen <kevin@techanarchy.net> (slightly modified by Florian Roth to improve performance)

Yara RAT_LostDoor From Florian Roth by Kevin Breen <kevin@techanarchy.net>

Yara power_pe_injection From Florian Roth by Benjamin DELPY (gentilkiwi)

Yara RAT_Paradox From Florian Roth by Kevin Breen <kevin@techanarchy.net>

Yara RAT_QRat From Florian Roth by Kevin Breen @KevTheHermit

Yara RAT_ShadowTech From Florian Roth by Kevin Breen <kevin@techanarchy.net>

Yara RAT_Sub7Nation From Florian Roth by Kevin Breen <kevin@techanarchy.net> (slightly modified by Florian Roth to improve performance)

Yara RAT_unrecom From Florian Roth by Kevin Breen <kevin@techanarchy.net>

Yara RAT_Vertex From Florian Roth by Kevin Breen <kevin@techanarchy.net>

Yara WindowsCredentialEditor From Florian Roth

Download archived sample

The password is "infected"

box.misaelabanto.com · androlea.ps1

/

France · Contabo GmbH

Yara power_pe_injection From Florian Roth by Benjamin DELPY (gentilkiwi)

Download archived sample

The password is "infected"

box.misaelabanto.com · androlea.ps1

/

Germany · Contabo GmbH

Yara power_pe_injection From Florian Roth by Benjamin DELPY (gentilkiwi)

Download archived sample

The password is "infected"