173.212.235.110 · phpbackdoor.zip

/Maintaining Acces/WebBackdoor/

Germany · Contabo GmbH

Yara FeliksPack3___PHP_Shells_ssh From Florian Roth by Florian Roth (Nextron Systems)

Yara WebShell_b374k_php From Florian Roth by Florian Roth (Nextron Systems)

Yara webshell_c99_c99shell_c99_w4cking_Shell_xxx From Florian Roth by Florian Roth (Nextron Systems)

Yara webshell_Mysql_interface_v1_0 From Florian Roth by Florian Roth (Nextron Systems)

Yara webshell_r57shell_r57shell127_SnIpEr_SA_Shell_EgY_SpIdEr_ShElL_V2_r57_xxx From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

173.212.235.110 · phpbackdoor.zip

/Maintaining Acces/WebBackdoor/

Germany · Contabo GmbH

Yara FeliksPack3___PHP_Shells_ssh From Florian Roth by Florian Roth (Nextron Systems)

Yara WebShell_b374k_php From Florian Roth by Florian Roth (Nextron Systems)

Yara webshell_c99_c99shell_c99_w4cking_Shell_xxx From Florian Roth by Florian Roth (Nextron Systems)

Yara webshell_Mysql_interface_v1_0 From Florian Roth by Florian Roth (Nextron Systems)

Yara webshell_r57shell_r57shell127_SnIpEr_SA_Shell_EgY_SpIdEr_ShElL_V2_r57_xxx From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

43.138.39.212 · AWD.zip

/

China · Shenzhen Tencent Computer Systems Company Limited

Yara Ajax_PHP_Command_Shell_php From Florian Roth by Neo23x0 Yara BRG + customization by Stefan -dfate- Molls

Yara webshell_PHP_r57142 From Florian Roth by Florian Roth (Nextron Systems)

Yara webshell_c99_Shell_ci_Biz_was_here_c100_v_xxx From Florian Roth by Florian Roth (Nextron Systems)

Yara aspfile1 From Florian Roth by Florian Roth (Nextron Systems)

Yara webshell_r57shell_r57shell127_SnIpEr_SA_Shell_EgY_SpIdEr_ShElL_V2_r57_xxx From Florian Roth by Florian Roth (Nextron Systems)

Yara webshell_SimAttacker_Vrsion_1_0_0_priv8_4_My_friend From Florian Roth by Florian Roth (Nextron Systems)

Yara WebShell__CrystalShell_v_1_sosyete_stres From Florian Roth by Florian Roth (Nextron Systems)

Yara webshell_caidao_shell_ice_2 From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

43.138.39.212 · AWD.zip

/

China · Shenzhen Tencent Computer Systems Company Limited

Yara Ajax_PHP_Command_Shell_php From Florian Roth by Neo23x0 Yara BRG + customization by Stefan -dfate- Molls

Yara webshell_PHP_r57142 From Florian Roth by Florian Roth (Nextron Systems)

Yara webshell_c99_Shell_ci_Biz_was_here_c100_v_xxx From Florian Roth by Florian Roth (Nextron Systems)

Yara aspfile1 From Florian Roth by Florian Roth (Nextron Systems)

Yara webshell_r57shell_r57shell127_SnIpEr_SA_Shell_EgY_SpIdEr_ShElL_V2_r57_xxx From Florian Roth by Florian Roth (Nextron Systems)

Yara webshell_SimAttacker_Vrsion_1_0_0_priv8_4_My_friend From Florian Roth by Florian Roth (Nextron Systems)

Yara WebShell__CrystalShell_v_1_sosyete_stres From Florian Roth by Florian Roth (Nextron Systems)

Yara webshell_caidao_shell_ice_2 From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

173.212.235.110 · phpbackdoor.zip

/Maintaining Acces/WebBackdoor/

Germany · Contabo GmbH

Yara FeliksPack3___PHP_Shells_ssh From Florian Roth by Florian Roth (Nextron Systems)

Yara WebShell_b374k_php From Florian Roth by Florian Roth (Nextron Systems)

Yara webshell_c99_c99shell_c99_w4cking_Shell_xxx From Florian Roth by Florian Roth (Nextron Systems)

Yara webshell_Mysql_interface_v1_0 From Florian Roth by Florian Roth (Nextron Systems)

Yara webshell_r57shell_r57shell127_SnIpEr_SA_Shell_EgY_SpIdEr_ShElL_V2_r57_xxx From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"