Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    The-MALWARE-Repo-master.zip

  • Size

    121.3MB

  • MD5

    be2f06e08241e418152c6ce91176085b

  • SHA1

    145e7527506be10c6f25e7b3c231ccc38f044bee

  • SHA256

    c738c78fd727e661119899099f61ada68dd59df7c9b66c0810f4549a906a6c8f

  • SHA512

    cd86644e1875ee4b48c6c233a45e5a0516e1a8515b6b86973c8dfcc53a0caf74cbfab6ebb819f61c109310153aeed112cb0fa7dee0e04317613dc5f26f5a7a23

  • SSDEEP

    3145728:wNl3aFs1C4SA2hlHf9Rfi5xuT+FAiilgJcPdlwCzCLfH:wNl3aFW2h9/fiqaiiilpwCzCL/

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

Geforce

C2

startitit2-23969.portmap.host:1604

Mutex

b9584a316aeb9ca9b31edd4db18381f5

Attributes
  • reg_key

    b9584a316aeb9ca9b31edd4db18381f5

  • splitter

    Y262SUCZ4UJJ

Extracted

Family

remcos

Version

1.7 Pro

Botnet

Host

C2

nickman12-46565.portmap.io:46565

nickman12-46565.portmap.io:1735

Attributes
  • audio_folder

    audio

  • audio_path

    %AppData%

  • audio_record_time

    5

  • connect_delay

    0

  • connect_interval

    5

  • copy_file

    Userdata.exe

  • copy_folder

    Userdata

  • delete_file

    true

  • hide_file

    true

  • hide_keylog_file

    true

  • install_flag

    true

  • install_path

    %WinDir%\System32

  • keylog_crypt

    true

  • keylog_file

    logs.dat

  • keylog_flag

    false

  • keylog_folder

    remcos

  • keylog_path

    %WinDir%\System32

  • mouse_option

    false

  • mutex

    remcos_vcexssuhap

  • screenshot_crypt

    false

  • screenshot_flag

    false

  • screenshot_folder

    Screens

  • screenshot_path

    %AppData%

  • screenshot_time

    1

  • startup_value

    remcos

  • take_screenshot_option

    false

  • take_screenshot_time

    5

Extracted

Family

revengerat

Botnet

Guest

C2

0.tcp.ngrok.io:19521

Mutex

RV_MUTEX

Signatures

  • Darkcomet family
  • Detects MyDoom family 1 IoCs
  • ModiLoader First Stage 1 IoCs
  • Modiloader family
  • Mydoom family
  • Njrat family
  • Remcos family
  • RevengeRat Executable 1 IoCs
  • Revengerat family
  • Office macro that triggers on suspicious action 3 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 2 IoCs

    Office document equipped with macros.

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • UPX packed file 7 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 97 IoCs

    Checks for missing Authenticode signature.

Files

  • The-MALWARE-Repo-master.zip
    .zip
  • The-MALWARE-Repo-master/Banking-Malware/DanaBot.exe
    .exe windows:5 windows x86 arch:x86

    55b878ec00e988ff206a170cf34b525e


    Headers

    Imports

    Exports

    Sections

  • The-MALWARE-Repo-master/Banking-Malware/Dridex/Dridex.JhiSharp.dll.9d75ff0e9447ceb89c90cca24a1dbec1
    .exe windows:5 windows x86 arch:x86

    8a6c92048eaa4c1652aa6f5807c98199


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Banking-Malware/Dridex/DridexDroppedVBS.925da3a10f7dde802c8d87047b14fda6
    .exe windows:5 windows x86 arch:x86

    b10a33e794d5d2de180070d9dcc93422


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Banking-Malware/Dridex/DridexLoader.bin.exe.c26203af4b3e9c81a9e634178b603601
    .exe windows:5 windows x86 arch:x86

    5ffc0457395f73c8894dad0221957a8e


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Banking-Malware/Dridex/Trojan.Dridex.A. dbf96ab40b728c12951d317642fbd9da
    .exe windows:4 windows x86 arch:x86

    33259202a22c25d002be697749eb957e


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Banking-Malware/Dridex/Trojan.Dridex.A.6164228ed2cc0eceba9ce1828d87d827
    .exe windows:5 windows x86 arch:x86

    33c644f9a2df0250eacdf63aa0ff8cca


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Banking-Malware/Dridex/Trojan.Dridex.A.97a26d9e3598fea2e1715c6c77b645c2
    .dll windows:5 windows x64 arch:x64

    817b343ed7ed0348e413bb1c3610278d


    Headers

    Imports

    Exports

    Sections

  • The-MALWARE-Repo-master/Banking-Malware/Emotet.zip
    .zip
  • [email protected]
    .docm .doc office2007

    ThisDocument

    S9zlQCC

    EELFLr

    TrS1jk

    BdOW1qt

    Uq3XXQaF

    EIBYN39s

    V9sPZLU

    pGv5GKCO

    zacGkX9

  • The-MALWARE-Repo-master/Banking-Malware/Zloader.xlsm
    .xlsm office2007
  • The-MALWARE-Repo-master/Botnets/FritzFrog/001eb377f0452060012124cb214f658754c7488ccb82e23ec56b2f45a636c859
    .elf linux x64
  • The-MALWARE-Repo-master/Botnets/FritzFrog/041bc20ca8ac3161098cbc976e67e3c0f1b672ad36ecbe22fd21cbd53bcaa742
    .elf linux x64
  • The-MALWARE-Repo-master/Botnets/FritzFrog/0ab8836efcaa62c7daac314e0b7ab1679319b2901578fd9e95ec3476b4c1a732
    .elf linux x64
  • The-MALWARE-Repo-master/Botnets/FritzFrog/103b8404dc64c9a44511675981a09fd01395ee837452d114f1350c295357c046
    .elf linux x64
  • The-MALWARE-Repo-master/Botnets/FritzFrog/2378e76aba1ad6e0c937fb39989217bf0de616fdad4726c0f4233bf5414cde86
    .elf linux x64
  • The-MALWARE-Repo-master/Botnets/FritzFrog/30c150419000d27dafcd5d00702411b2b23b0f5d7e4d0cc729a7d63b2e460a01
    .elf linux x64
  • The-MALWARE-Repo-master/Botnets/FritzFrog/3205603282a636979a55aa1e1be518cd3adcbbe491745d996ceb4b5a4dece0c5
    .elf linux x64
  • The-MALWARE-Repo-master/Botnets/FritzFrog/453468b86856665f2cc0e0e71668c0b6aac8b14326c623995ba5963f22257619
    .elf linux x64
  • The-MALWARE-Repo-master/Botnets/FritzFrog/5fb29fb0136978b9ccf60750af09cec74a257a0ca9c47159ca74dbba21fbcc59
    .elf linux x64
  • The-MALWARE-Repo-master/Botnets/FritzFrog/6fe6808b9cfe654f526108ec61cb5211bb6601d28e192cadf06102073b54f69c
    .elf linux x64
  • The-MALWARE-Repo-master/Botnets/FritzFrog/7745b070943e910e8807e3521ac7b7a01401d131bf6c18a63433f8177ed539a6
    .elf linux x64
  • The-MALWARE-Repo-master/Botnets/FritzFrog/7f18e5b5b7645a80a0d44adf3fecdafcbf937bfe30a4cfb965a1421e034996dd
    .elf linux x64
  • The-MALWARE-Repo-master/Botnets/FritzFrog/90b61cc77bb2d726219fd00ae2d0ecdf6f0fe7078529e87b7ec8e603008232d5
    .elf linux x64
  • The-MALWARE-Repo-master/Botnets/FritzFrog/9384b9e39334479194aacb53cb25ace289b6afe2e41bdc8619b2d2cae966b948
    .elf linux x64
  • The-MALWARE-Repo-master/Botnets/FritzFrog/985ffee662969825146d1b465d068ea4f5f01990d13827511415fd497cf9db86
    .elf linux x64
  • The-MALWARE-Repo-master/Botnets/FritzFrog/d1e82d4a37959a9e6b661e31b8c8c6d2813c93ac92508a2771b2491b04ea2485
    .elf linux x64
  • The-MALWARE-Repo-master/Email-Worm/Amus.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • The-MALWARE-Repo-master/Email-Worm/Anap.a.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • The-MALWARE-Repo-master/Email-Worm/Axam.a.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • The-MALWARE-Repo-master/Email-Worm/Brontok.exe
    .exe windows:4 windows x86 arch:x86

    87bed5a7cba00c7e1f4015f1bdae2183


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Email-Worm/BubbleBoy.html
    .html .vbs polyglot
  • The-MALWARE-Repo-master/Email-Worm/Bugsoft.exe
    .exe windows:4 windows x86 arch:x86

    c1d24f2dee28c26ad20efbfa66d0d726


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Email-Worm/Duksten.exe
    .exe windows:4 windows x86 arch:x86

    b82faf9237e7230cc2fbb2f1421d49bf


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Email-Worm/Emin.js
    .js
  • The-MALWARE-Repo-master/Email-Worm/Funsoul.exe
    .exe windows:4 windows x86 arch:x86

    7e088f48d6fe44919b9fd479c903f565


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Email-Worm/Gruel.a.exe
    .exe windows:4 windows x86 arch:x86

    5c7433b2a8bfdbd866a519f5ce78aa7b


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Email-Worm/Happy99.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • The-MALWARE-Repo-master/Email-Worm/ILOVEYOU.vbs
    .vbs
  • The-MALWARE-Repo-master/Email-Worm/Jer.html
    .vbs
  • The-MALWARE-Repo-master/Email-Worm/Kiray.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • The-MALWARE-Repo-master/Email-Worm/Klez.e.exe
    .exe windows:4 windows x86 arch:x86

    bb8a672644c54cc80e980f3e174cf92c


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Email-Worm/Lacon.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • The-MALWARE-Repo-master/Email-Worm/Lentin/Lentin.c.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • The-MALWARE-Repo-master/Email-Worm/Lentin/Lentin.d.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • The-MALWARE-Repo-master/Email-Worm/Magistr.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • The-MALWARE-Repo-master/Email-Worm/Maldal.a.exe
    .exe windows:4 windows x86 arch:x86

    894499b0c1732ab37b759498faae29f0


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Email-Worm/Mari.exe
    .exe windows:4 windows x86 arch:x86

    a8e4f0d33f3923214d437634054c49d4


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Email-Worm/MeltingScreen.exe
    .exe windows:4 windows x86 arch:x86

    f90f100c81647f834881cf7cd9e90bd4


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Email-Worm/Merkur.exe
    .exe windows:4 windows x86 arch:x86

    4bd626f0fb8783b032a014d7ac172308


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Email-Worm/MsWorld.exe
    .exe windows:4 windows x86 arch:x86

    ce3cbbc1ba1365b2d3ecb9bef12f75b8


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Email-Worm/MyDoom.A.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • The-MALWARE-Repo-master/Email-Worm/MyPics.a.exe
    .exe windows:4 windows x86 arch:x86

    a629f7d0ee066a263e62530ec4b91a16


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Email-Worm/NakedWife.exe
    .exe windows:4 windows x86 arch:x86

    ef6ce2f3d3b25e70f65cfafcb2c7b01e


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Email-Worm/NewLove.vbs
    .vbs
  • The-MALWARE-Repo-master/Email-Worm/Nyxem.E.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • The-MALWARE-Repo-master/Email-Worm/Pikachu.exe
    .exe windows:4 windows x86 arch:x86

    cf991f1d207b1a6b956f57f38b2aaa2f


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Email-Worm/Pleh.vbs
    .vbs
  • The-MALWARE-Repo-master/Email-Worm/Prolin.exe
    .exe windows:4 windows x86 arch:x86

    b08f58ddcb14d10ef626790a3370327a


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Email-Worm/Quamo.exe
    .exe windows:4 windows x86 arch:x86

    c3520ffe4db9de8477f08791726150fa


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Email-Worm/San.html
  • The-MALWARE-Repo-master/Email-Worm/Scare.hta
    .html .vbs polyglot
  • The-MALWARE-Repo-master/Email-Worm/Silver/Silver.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • The-MALWARE-Repo-master/Email-Worm/Trood.a.exe
    .exe windows:1 windows x86 arch:x86

    ad3ae4b62b30da87ef6c4e1607fc331b


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Email-Worm/White.a.exe
    .exe windows:4 windows x86 arch:x86

    ff441998bbcbf92dd625ab527152cc7a


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Email-Worm/Winevar.exe
    .exe windows:4 windows x86 arch:x86

    82e832e5393272a459a250927a9159b2


    Code Sign

    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Email-Worm/Xanax.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • The-MALWARE-Repo-master/Email-Worm/Yarner.a.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • The-MALWARE-Repo-master/Email-Worm/ZippedFiles.a.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • The-MALWARE-Repo-master/Pony/metrofax.doc
    .doc windows office2003

    ThisDocument

    Module1

  • The-MALWARE-Repo-master/RAT/Adwind.exe
    .jar
  • The-MALWARE-Repo-master/RAT/Blackkomet.exe
    .exe windows:4 windows x86 arch:x86

    3b163548c984476f39d30c2f21df2b6c


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/RAT/CobaltStrike.doc
    .docm .doc office2007
  • The-MALWARE-Repo-master/RAT/CrimsonRAT.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/RAT/NJRat.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/RAT/NetWire.doc
    .doc windows office2003

    ThisDocument

    HauteGaronne

  • The-MALWARE-Repo-master/RAT/NetWire.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • The-MALWARE-Repo-master/RAT/Remcos.exe
    .exe windows:4 windows x86 arch:x86

    d3a62971944197f0701c7049a9c739d1


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/RAT/RevengeRAT.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/RAT/VanToM-Rat.bat
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/RAT/WarzoneRAT.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Ransomware/$uckyLocker.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Ransomware/7ev3n.exe
    .exe windows:6 windows x86 arch:x86

    008aca28b7c001acc5e0ab32fabaad84


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Ransomware/Annabelle.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • The-MALWARE-Repo-master/Ransomware/BadRabbit.exe
    .exe windows:5 windows x86 arch:x86

    e3bda9df66f1f9b2b9b7b068518f2af1


    Code Sign

    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Ransomware/Birele.exe
    .exe windows:10 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:10 windows x86 arch:x86


    Headers

    Sections

  • The-MALWARE-Repo-master/Ransomware/Cerber5.exe
    .exe windows:5 windows x86 arch:x86

    604de9c4534997ea4f32f86753fab871


    Code Sign

    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Ransomware/CoronaVirus.exe
    .exe windows:5 windows x86 arch:x86

    d761cb0531b62176dc524988b5963190


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Ransomware/CryptoLocker.exe
    .exe windows:5 windows x86 arch:x86

    7e8ad4139efc6cbcf31df3bc4b291dd8


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Ransomware/CryptoWall.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • The-MALWARE-Repo-master/Ransomware/DeriaLock.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Ransomware/Dharma.exe
    .exe windows:5 windows x86 arch:x86

    ae9f6a32bb8b03dce37903edbc855ba1


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Ransomware/Fantom.exe
    .exe windows:5 windows x86 arch:x86

    bf5a4aa99e5b160f8521cadd6bfe73b8


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Ransomware/GandCrab.exe
    .exe windows:5 windows x86 arch:x86

    c2cfbc92b2194678c2499ed455f524c4


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Ransomware/GoldenEye/GoldenEye.exe
    .exe windows:5 windows x86 arch:x86

    eadbe699c9f56194b9bbdf2dd7631233


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Ransomware/GoldenEye/GoldenEye.js
    .js
  • The-MALWARE-Repo-master/Ransomware/InfinityCrypt.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Ransomware/Krotten.exe
    .exe windows:4 windows x86 arch:x86

    79fd079e9d3e0619831be2cf92afa94a


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Ransomware/Locky.AZ.exe
    .dll windows:5 windows x86 arch:x86

    69161fad7896fa3f6cbd1db55bbf9f44


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Ransomware/NoMoreRansom.exe
    .exe windows:5 windows x86 arch:x86

    f4aae2cc8a2971ab9714645e85b7edb6


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Ransomware/NotPetya.exe
    .exe windows:5 windows x86 arch:x86

    ab8fd60b3da01515e6706e8d122c633f


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Ransomware/PetrWrap
    .exe windows:5 windows x86 arch:x86

    90cfb770dd8b0646a46fc541c93185a2


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Ransomware/Petya.A.exe
    .exe windows:5 windows x86 arch:x86

    1a63922d5931d1bb8ca5188313f78eaa


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Ransomware/PolyRansom.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • The-MALWARE-Repo-master/Ransomware/PowerPoint.exe
    .exe windows:4 windows x86 arch:x86

    91b2790c505bbe69e215e722d884b1b4


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Ransomware/RedBoot.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • The-MALWARE-Repo-master/Ransomware/RedEye.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Ransomware/Rensenware.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Ransomware/Rokku.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • The-MALWARE-Repo-master/Ransomware/Satana.exe
    .exe windows:5 windows x86 arch:x86

    a3bc0305643e7601d6deca72652f4ab5


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Ransomware/Seftad.exe
    .exe windows:5 windows x86 arch:x86

    45f43067991f331f7e6d9d92f382f3ef


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Ransomware/SporaRansomware.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • The-MALWARE-Repo-master/Ransomware/UIWIX.exe
    .dll windows:5 windows x86 arch:x86

    1743a5b9816a58c2129527a62802cc12


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Ransomware/ViraLock.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • The-MALWARE-Repo-master/Ransomware/WannaCry.exe
    .exe windows:4 windows x86 arch:x86

    e858a14f217810d78466806d95d7fceb


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Ransomware/WannaCrypt0r.exe
    .exe windows:4 windows x86 arch:x86

    68f013d7437aa653a8a98a05807afeb1


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Ransomware/WinlockerVB6Blacksod.exe
    .exe windows:5 windows x86 arch:x86

    fdc840a7a99c43c34a60188ec8cc1596


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Ransomware/Xyeta.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • The-MALWARE-Repo-master/Ransomware/satan.exe
    .exe windows:5 windows x86 arch:x86

    65e9607e6f28a7852bb41a6e2e439a92


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Spyware/AgentTesla.exe
    .exe windows:4 windows x86 arch:x86

    7eae418c7423834ffc3d79b4300bd6fb


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Spyware/HawkEye.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Spyware/Kakwa.doc
    .doc windows office2003

    ThisDocument

    qpnyeziw

  • The-MALWARE-Repo-master/Spyware/The Worst Of All!!!!!!/BonziBUDDY!!!!!!.txt
  • The-MALWARE-Repo-master/Spyware/butterflyondesktop.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • The-MALWARE-Repo-master/Virus/Floxif/Floxif.exe
    .exe windows:5 windows x86 arch:x86

    1e8d1e12f2998c7db1084028a8a4301b


    Code Sign

    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Virus/Gnil/Gnil.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • The-MALWARE-Repo-master/Virus/Mabezat/Mabezat.exe
    .exe windows:5 windows x86 arch:x86

    e1d4718531a779a8d41d1fd888af078f


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Virus/MadMan.exe
  • The-MALWARE-Repo-master/Virus/Melissa.doc
    .doc windows office2003

    Melissa

  • The-MALWARE-Repo-master/Virus/Walker.com
  • The-MALWARE-Repo-master/Virus/WinNuke.98.exe
    .exe windows:4 windows x86 arch:x86

    e85cb1c4db79eee3be998741daba934f


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Virus/Xpaj/xpaj.exe
    .exe windows:5 windows x86 arch:x86

    09d0478591d4f788cb3e5ea416c25237


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Virus/Xpaj/xpajB.exe
    .exe windows:5 windows x86 arch:x86

    1dca2dbd3757a754f369f518971d3efd


    Headers

    Imports

    Sections