5.45.102.182 · virussign.com_20250525_LimitedFree.zip

/samples/virussign/

Germany · netcup GmbH

Yara INDICATOR_EXE_Packed_MPress From AlienVault by ditekSHen

Yara INDICATOR_EXE_Packed_VMProtect From AlienVault by ditekSHen

Yara INDICATOR_EXE_Packed_UPolyX From AlienVault by ditekSHen

Yara INDICATOR_EXE_Packed_ASPack From AlienVault by ditekSHen

Yara Unspecified_Malware_Oct16_A From Florian Roth by Florian Roth (Nextron Systems)

Yara INDICATOR_EXE_Packed_eXPressor From AlienVault by ditekSHen

Yara Disable_Defender From AbuseCH by iam-py-test

Yara APT_NK_Methodology_Artificial_UserAgent_IE_Win7 From Florian Roth by Steve Miller aka @stvemillertime

Yara Win32_PUA_Domaiq From ReversingLabs by ReversingLabs

Yara SUSP_XORed_MSDOS_Stub_Message From Florian Roth by Florian Roth

Download archived sample

The password is "infected"

5.45.102.182 · virussign.com_20250525_LimitedFree.zip

/samples/virussign/

Germany · netcup GmbH

Yara INDICATOR_EXE_Packed_MPress From AlienVault by ditekSHen

Yara INDICATOR_EXE_Packed_VMProtect From AlienVault by ditekSHen

Yara INDICATOR_EXE_Packed_UPolyX From AlienVault by ditekSHen

Yara INDICATOR_EXE_Packed_ASPack From AlienVault by ditekSHen

Yara Unspecified_Malware_Oct16_A From Florian Roth by Florian Roth (Nextron Systems)

Yara INDICATOR_EXE_Packed_eXPressor From AlienVault by ditekSHen

Yara Disable_Defender From AbuseCH by iam-py-test

Yara APT_NK_Methodology_Artificial_UserAgent_IE_Win7 From Florian Roth by Steve Miller aka @stvemillertime

Yara Win32_PUA_Domaiq From ReversingLabs by ReversingLabs

Yara SUSP_XORed_MSDOS_Stub_Message From Florian Roth by Florian Roth

Download archived sample

The password is "infected"