Resubmissions

22/07/2025, 18:32

250722-w6yhmseq41

24/06/2025, 09:27

250624-let12a1sbz

24/06/2025, 09:26

250624-lep23s1sbw

22/06/2025, 19:13

250622-xw6lyacj5110

19/06/2025, 04:32

250619-e53yasbk2110

19/06/2025, 03:50

250619-eed69agm4v10

18/06/2025, 14:07

250618-rfbhzael31

18/06/2025, 13:13

250618-qf8m2aam4y10

18/06/2025, 12:23

250618-pkfx5sgp4s10

General

  • Target
    Toxic.7z
  • Size 301.4MB
  • Sample250722-w6yhmseq41
  • SHA256 0245cdb76d5aad7c457fa837b65262ab63fd2c1bd9ab885497166d3f378013f2
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • blackcat

Credentials
  • Username

    CREDITONE\Administrator

  • Password

    K3ny@2009

Credentials
  • Username

    CREDITONE\bexec

  • Password

    CloneD1sk4Song$%

Credentials
  • Username

    CREDITONE\KLarry

  • Password

    Kl..2021

Credentials
  • Username

    CREDITONE\BKuhl

  • Password

    Gromit2021!

Credentials
  • Username

    CREDITONE\rlopez

  • Password

    Victoria7856!

Credentials
  • Username

    CREDITONE\EJaramilla

  • Password

    1LoveVeros4

Credentials
  • Username

    .\Administrator

  • Password

    $fiji12$

Attributes
  • enable_network_discovery

    true

  • enable_self_propagation

    true

  • enable_set_wallpaper

    true

  • extension

    7954i9r

  • note_file_name

    RECOVER-${EXTENSION}-FILES.txt

  • note_full_text

    >> Introduction Important files on your system was ENCRYPTED and now they have have "${EXTENSION}" extension. In order to recover your files you need to follow instructions below. >> Sensitive Data Sensitive data on your system was DOWNLOADED and it will be PUBLISHED if you refuse to cooperate. Data includes: - Employees personal data, CVs, DL, SSN. - Complete network map including credentials for local and remote services. - Financial information including clients data, bills, budgets, annual reports, bank statements. - Complete datagrams/schemas/drawings for manufacturing in solidworks format - And more... Private preview is published here: http://alphvmmm27o3abo3r2mlmjrpdmzle3rykajqc5xsj7j7ejksbpsa36ad.onion/336eb50d-ebf8-436b-937d-ec075de46e7f/419ef3f950d9f346cf86db56db453539dcd51567ea871728e78dbc9918c7efeb >> CAUTION DO NOT MODIFY FILES YOURSELF. DO NOT USE THIRD PARTY SOFTWARE TO RESTORE YOUR DATA. YOU MAY DAMAGE YOUR FILES, IT WILL RESULT IN PERMANENT DATA LOSS. YOUR DATA IS STRONGLY ENCRYPTED, YOU CAN NOT DECRYPT IT WITHOUT CIPHER KEY. >> Recovery procedure Follow these simple steps to get in touch and recover your data: 1) Download and install Tor Browser from: https://torproject.org/ 2) Navigate to: http://sty5r4hhb5oihbq2mwevrofdiqbgesi66rvxr5sr573xgvtuvr4cs5yd.onion/?access-key=${ACCESS_KEY}

rsa_pubkey.plain

Extracted

Family
  • darkcomet

Botnet
  • Guest1111

C2
  • 193.242.166.48:1605

Mutex
  • DC_MUTEX-2QRLPN3

Attributes
  • InstallPath

    Windupdt\winupdate.exe

  • gencode

    Rb5l52XcV9no

  • install

    true

  • offline_keylogger

    false

  • password

    313131

  • persistence

    true

  • reg_key

    winupdater

rc4.plain

Extracted

Family
  • redline

Botnet
  • LIM

C2
  • 195.3.223.120:25539

Extracted

Family
  • njrat

Version
  • 0.7d

Botnet
  • Geforce

C2
  • startitit2-23969.portmap.host:1604

Mutex
  • b9584a316aeb9ca9b31edd4db18381f5

Attributes
  • reg_key

    b9584a316aeb9ca9b31edd4db18381f5

  • splitter

    Y262SUCZ4UJJ

Extracted

Family
  • remcos

Version
  • 1.7 Pro

Botnet
  • Host

C2
  • nickman12-46565.portmap.io:46565

  • nickman12-46565.portmap.io:1735

Attributes
  • audio_folder

    audio

  • audio_path

    %AppData%

  • audio_record_time

    5

  • connect_delay

    0

  • connect_interval

    5

  • copy_file

    Userdata.exe

  • copy_folder

    Userdata

  • delete_file

    true

  • hide_file

    true

  • hide_keylog_file

    true

  • install_flag

    true

  • install_path

    %WinDir%\System32

  • keylog_crypt

    true

  • keylog_file

    logs.dat

  • keylog_flag

    false

  • keylog_folder

    remcos

  • keylog_path

    %WinDir%\System32

  • mouse_option

    false

  • mutex

    remcos_vcexssuhap

  • screenshot_crypt

    false

  • screenshot_flag

    false

  • screenshot_folder

    Screens

  • screenshot_path

    %AppData%

  • screenshot_time

    1

  • startup_value

    remcos

  • take_screenshot_option

    false

  • take_screenshot_time

    5

Extracted

Family
  • revengerat

Botnet
  • Guest

C2
  • 0.tcp.ngrok.io:19521

Mutex
  • RV_MUTEX

Extracted

Family
  • agenttesla

C2
  • http://193.56.29.110/divine/inc/4e9eb8fc30c033.php

Extracted

Family
  • aurora

C2
  • 94.142.138.22:8081

Signatures

  • AgentTesla payload 1 IoCs
  • Agenttesla family
  • Aurora family
  • Blackcat family
  • Contains code to disable Windows Defender 3 IoCs

    A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

  • Darkcomet family
  • Detect HermeticWiper 1 IoCs

    Detect HermeticWiper Payload.

  • Detect Neshta payload 1 IoCs
  • Hermeticwiper family
  • Mimikatz family
  • ModiLoader First Stage 1 IoCs
  • Modiloader family
  • Neshta family
  • Njrat family
  • RedLine payload 1 IoCs
  • Redline family
  • Remcos family
  • RevengeRat Executable 1 IoCs
  • Revengerat family
  • SectopRAT payload 1 IoCs
  • Sectoprat family
  • Thanos executable 3 IoCs
  • Thanos family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • Zebrocy Go Variant 1 IoCs
  • Zebrocy family
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Suspicious Office macro 2 IoCs

    Office document equipped with macros.

  • ASPack v2.12-2.42 5 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • Office macro that triggers on suspicious action 2 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • ConfuserEx .NET packer 6 IoCs

    Detects ConfuserEx .NET packer.

  • SmartAssembly .NET packer 2 IoCs

    Detects SmartAssembly .NET packer.

  • UPX packed file 28 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 327 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 15 IoCs

File Explorer

  • Toxic.7z
    .7z 301.4MB
  • Toxic/$uckyLocker.exe
    .exe 414KB
  • Toxic/000.exe
    .exe 6.7MB
  • Toxic/027cc450ef5f8c5f653329641ec1fed9.exe
    .dll 353KB
  • Toxic/0283c0f02307adc4ee46c0382df4b5d7b4eb80114fbaf5cb7fe5412f027d165e.exe
    .exe 5.4MB
  • Toxic/03641e5632673615f23b2a8325d7355c4499a40f47b6ae094606a73c56e24ad0.exe
    .exe 596KB
  • Toxic/0d7d4dc173c88c4f72c8f9f419ae8473d044f4b3e8f32e4a0f34fe4bbc698776.exe
    .exe 37KB
  • Toxic/1002.exe
    .exe 251KB
  • Toxic/1003.exe
    .exe 255KB
  • Toxic/119.exe
    .exe 24KB
  • Toxic/131.exe
    .exe 2.3MB
  • Toxic/15c069fcb2407bfeb791823dfb849f30df28ec00c8b4e2b27bcde99007cb618c.exe
    .exe 404KB
  • Toxic/1E5C2A9C10D6719CE9017DBDC74F141C.exe
    .exe 1.0MB
  • Toxic/21.exe
    .exe 54KB
  • Toxic/26b4699a7b9eeb16e76305d843d4ab05e94d43f3201436927e13b3ebafa90739.exe
    .exe 225KB
  • Toxic/2c10b2ec0b995b88c27d141d6f7b14d6b8177c52818687e4ff8e6ecf53adf5bf.exe
    .exe 114KB
  • Toxic/31eb1de7e840a342fd468e558e5ab627bcb4c542a8fe01aec4d5ba01d539a0fc.exe
    .exe 1.2MB
  • Toxic/323CANON.EXE
    .exe 300KB
  • Toxic/36dcd40aee6a42b8733ec3390501502824f570a23640c2c78a788805164f77ce.exe
    .exe 74KB
  • Toxic/374ef83de2b254c4970b830bb93a1dd79955945d24b824a0b35636e14355fe05.exe
    .exe 456KB
  • Toxic/3_4.exe
    .exe 59KB
  • Toxic/4a8b7cfb2e33aa079ba51166591c7a210ad8b3c7c7f242fccf8cb2e71e8e40d5.exe
    .exe 622KB
  • Toxic/58bfb9fa8889550d13f42473956dc2a7ec4f3abb18fd3faeaa38089d513c171f.exe
    .exe 82KB
  • Toxic/5a765351046fea1490d20f25.exe
    .exe 377KB
  • Toxic/5d40615701c48a122e44f831e7c8643d07765629a83b15d090587f469c77693d.exe
    .exe 91KB
  • Toxic/5d491ea5705e90c817cf0f5211c9edbcd5291fe8bd4cc69cdb58e8d0e6b6d1fe.exe
    .exe 416KB
  • Toxic/6674ffe375f8ab54cfa2a276e4a39b414cf327e0b00733c215749e8a94385c63.exe
    .exe 782KB
  • Toxic/6B97B3CD2FCFB4B74985143230441463_Gadget.exe_
    .exe 25KB
  • Toxic/731adcf2d7fb61a8335e23dbee2436249e5d5753977ec465754c6b699e9bf161.exe
    .exe 2.9MB
  • Toxic/7601bb7c75658a2e6d3ea40258d34f70c26351a99c8730f37220286d7fd48e81.exe
    .exe 3.6MB
  • Toxic/798_abroad.exe
    .exe 1.6MB
  • Toxic/7ZipSetup.exe
    .exe 158KB
  • Toxic/7ev3n.exe
    .exe 315KB
  • Toxic/7z.exe
    .exe 2.3MB
  • Toxic/8c213b3707b0b042d769fdf543c6e8bd7c127cea6a9bc989eaf241a1505d1ed9.exe
    .sys 27KB
  • Toxic/9b3c6fd39b2809e388255c5651953251920c5c7d5e77da1070ab3c127e8bdc11.exe
    .exe 397KB
  • Toxic/9bd32162e0a50f8661fd19e3b26ff65868ab5ea636916bd54c244b0148bd9c1b.exe
    .exe 136KB
  • Toxic/ABLD.BAT
    336B
  • Toxic/ALPHALocker.exe
    .exe 307KB
  • Toxic/Adobe, Acrobat PDF Writer 3.exe
    .exe 1.1MB
  • Toxic/AdwereCleaner.exe
    .exe 190KB
  • Toxic/Adwind.exe
    .jar 5KB
  • Toxic/AgentTesla.exe
    .exe 2.8MB
  • Toxic/Alerta.exe
    .exe 111KB
  • Toxic/Amus.exe
    .exe 50KB
  • Toxic/AnViPC2009.exe
    .exe 1.2MB
  • Toxic/Ana.exe
    .exe 2.1MB
  • Toxic/Anap.a.exe
    .exe 16KB
  • Toxic/AndroRat Binder_Patched.exe
    .exe 562KB
  • Toxic/Annabelle.exe
    .exe 15.9MB
  • Toxic/Antefrigus.exe
    .exe 298KB
  • Toxic/Antivirus.exe
    .exe 2.0MB
  • Toxic/Antivirus2010.exe
    .exe 775KB
  • Toxic/AntivirusPlatinum.exe
    .exe 739KB
  • Toxic/AntivirusPro2017.exe
    .exe 816KB
  • Toxic/ArcticBomb.exe
    .exe .ps1 125KB
  • Toxic/ArdamaxKeylogger_E33AF9E602CBB7AC3634C2608150DD18
    .exe 783KB
  • Toxic/Avoid.exe
    .exe 248KB
  • Toxic/Axam.a.exe
    .exe 11KB
  • Toxic/Azorult.exe
    .exe 10.0MB
  • Toxic/BOTBINARY.EXE
    .exe 76KB
  • Toxic/Backdoor.Win32.Tyupkin.h.exe
    .exe 120KB
  • Toxic/BadRabbit.exe
    .exe 431KB
  • Toxic/Bezilom.exe
    .exe 28KB
  • Toxic/Birele.exe
    .exe 116KB
  • Toxic/Blackkomet.exe
    .exe 756KB
  • Toxic/Blaster.A.exe
    .exe 6KB
  • Toxic/Blaster.E.exe
    .exe 6KB
  • Toxic/BlueScreen.exe
    .exe 9KB
  • Toxic/Bolbi.vbs
    .vbs 46KB
  • Toxic/Bonzify.exe
    .exe 6.4MB
  • Toxic/BossDaMajor.exe
    .exe 1.9MB
  • Toxic/Brontok.exe
    .exe 106KB
  • Toxic/BubbleBoy.html
    .html .vbs 12KB
  • Toxic/Bugsoft.exe
    .exe 32KB
  • Toxic/Build.exe
    .exe 392KB
  • Toxic/Bumerang.exe
    .exe 26KB
  • Toxic/Carewmr.vbs
    .vbs 3KB
  • Toxic/Cerber5.exe
    .exe 313KB
  • Toxic/ChilledWindows.exe
    .exe 4.4MB
  • Toxic/ClassicShell.exe
    .exe 6.8MB
  • Toxic/CleanThis.exe
    .exe 618KB
  • Toxic/ClientUpdate.exe (x86).bin
    .exe 324KB
  • Toxic/CobaltStrike.doc
    .docm .doc 86KB
  • Toxic/CodeRed.a.exe
    3KB
  • Toxic/ColorBug.exe
    .exe 53KB
  • Toxic/CookieClickerHack.exe
    .exe 68KB
  • Toxic/CoronaVirus.exe
    .exe 1.0MB
  • Toxic/CrazyNCS.exe
    .exe 122KB
  • Toxic/CretClient.exe
    .exe 628KB
  • Toxic/CrimsonRAT.exe
    .exe 84KB
  • Toxic/CryptoLocker.exe
    .exe 338KB
  • Toxic/CryptoWall.exe
    .exe 132KB
  • Toxic/Curfun.exe
    .exe 138KB
  • Toxic/DComExploit.exe
    .exe 36KB
  • Toxic/DROP_B~1.BAT
    2KB
  • Toxic/DUMP_00A10000-00A1D000.exe
    .exe 52KB
  • Toxic/DanaBot.exe
    .exe 2.7MB
  • Toxic/DeriaLock.exe
    .exe 484KB
  • Toxic/DesktopBoom.exe
    .exe 1.1MB
  • Toxic/DesktopPuzzle.exe
    .exe 239KB
  • Toxic/Dharma.exe
    .exe 11.5MB
  • Toxic/Document-772976_829712.scr
    .exe 241KB
  • Toxic/DridexLoader.bin.exe
    .exe 212KB
  • Toxic/DudleyTrojan.bat
    176B
  • Toxic/Duksten.exe
    .exe 9KB
  • Toxic/Dustman.exe
    .exe 258KB
  • Toxic/Emotet.zip
    .zip 102KB
  • Toxic/EternalRocks.exe
    .exe 5.0MB
  • Toxic/F897A65B.exe
    .exe 77KB
  • Toxic/FFProInstall.exe
    .exe 455KB
  • Toxic/FIX_NIMDA.exe
    .exe 40KB
  • Toxic/FLASH829.EXE
    .exe 22KB
  • Toxic/Fagot.a.exe
    .exe 373KB
  • Toxic/Fake Intel (1).exe
    .exe 1.2MB
  • Toxic/FakeAdwCleaner.exe
    .exe 190KB
  • Toxic/Fantom.exe
    .exe 261KB
  • Toxic/FinalPayload.exe
    .exe 280KB
  • Toxic/FlashKiller.exe
    .exe 4KB
  • Toxic/Flasher.exe
    .exe 246KB
  • Toxic/Floxif.exe
    .exe 532KB
  • Toxic/Frankenstein.doc
    .docx .doc 493KB
  • Toxic/FreeYoutubeDownloader.exe
    .exe 396KB
  • Toxic/Funsoul.exe
    .exe 44KB
  • Toxic/GREEN.EXE
    75KB
  • Toxic/GandCrab.exe
    .exe 291KB
  • Toxic/Gas.exe
    .exe 18KB
  • Toxic/Gnil.exe
    .exe 73KB
  • Toxic/GoldenEye.exe
    .exe 254KB
  • Toxic/GrayFish_9B1CA66AAB784DC5F1DFE635D8F8A904.exe
    .exe 560KB
  • Toxic/Gruel.a.exe
    .exe 100KB
  • Toxic/HDSetup.exe
    .exe 416KB
  • Toxic/HMBlocker.exe
    .exe 48KB
  • Toxic/Happy99.exe
    .exe 9KB
  • Toxic/HappyAntivirus.exe
    .exe 1.9MB
  • Toxic/HawkEye.exe
    .exe 232KB
  • Toxic/HeadTail.vbs
    .vbs 33KB
  • Toxic/Heap41A.exe
    .exe 451KB
  • Toxic/Hells.exe
    .exe 91KB
  • Toxic/HiddenTear.exe
    .exe 208KB
  • Toxic/Hitler.exe
    .exe 83KB
  • Toxic/HorrorTrojan 4 Installer.exe
    .exe 3.0MB
  • Toxic/HorrorTrojan 5.exe
    .exe 13.2MB
  • Toxic/HorrorTrojan.exe
    .exe 2.2MB
  • Toxic/HorrorTrojan123.exe
    .exe 8.4MB
  • Toxic/HorrorTrojan6.exe
    .exe 6.2MB
  • Toxic/Hydra.exe
    .exe 43KB
  • Toxic/I-WORM~1.VBS
    .vbs 2KB
  • Toxic/ILOVEYOU.vbs
    .vbs 10KB
  • Toxic/IconDance.exe
    .exe 301KB
  • Toxic/Illerka.C.exe
    .exe 378KB
  • Toxic/Implosions.exe
    .exe 95KB
  • Toxic/InfinityCrypt.exe
    .exe 211KB
  • Toxic/InstallBC201401.exe
    .exe 12.8MB
  • Toxic/Install_LiveManagerPlayer.exe.vir
    .exe 4.5MB
  • Toxic/InternetSecurityGuard.exe
    .exe 6.1MB
  • Toxic/Jer.html
    .vbs 4KB
  • Toxic/Jigsaw.exe
    .exe 283KB
  • Toxic/Kakwa.doc
    .doc 72KB
  • Toxic/Kiray.exe
    .exe 13KB
  • Toxic/Klez.e.exe
    .exe 86KB
  • Toxic/Kobalc.exe
    .exe 185KB
  • Toxic/Krotten.exe
    .exe 53KB
  • Toxic/L0Lz.bat
    .bat .vbs 6KB
  • Toxic/LPS2019.exe
    .exe 1.1MB
  • Toxic/Lacon.exe
    .exe 12KB
  • Toxic/Launcher.exe
    .exe 197KB
  • Toxic/Lentin.c.exe
    .exe 1.2MB
  • Toxic/Lentin.d.exe
    .exe 26KB
  • Toxic/Locky.AZ.exe
    .dll 181KB
  • Toxic/Lokibot.exe
    .exe 300KB
  • Toxic/LoveYou.exe
    .exe 22KB
  • Toxic/Loveware.bat
    .bat .vbs 27KB
  • Toxic/MEMZ.exe
    .exe 14KB
  • Toxic/Mabezat.exe
    .exe 141KB
  • Toxic/MadMan.exe
    2KB
  • Toxic/Magistr.exe
    .exe 107KB
  • Toxic/Maldal.a.exe
    .exe 80KB
  • Toxic/Mantas.exe
    .exe 40KB
  • Toxic/Mari.exe
    .exe 44KB
  • Toxic/MatrixRansomware.exe
    .exe 1.2MB
  • Toxic/Maze.exe
    .exe 736KB
  • Toxic/Melissa.doc
    .doc 40KB
  • Toxic/Melting.exe
    .exe 12KB
  • Toxic/MeltingScreen.exe
    .exe 17KB
  • Toxic/Merkur.exe
    .exe 44KB
  • Toxic/MiniConfigBuilder.exe
    .exe 13KB
  • Toxic/MistInfected_newest.exe
    .exe 22KB
  • Toxic/MistInstaller.exe
    .exe 83KB
  • Toxic/MistInstallerRC.exe
    .exe 83KB
  • Toxic/MrsMajor2.0.exe
    .exe 25.6MB
  • Toxic/MrsMajor3.0.exe
    .exe 381KB
  • Toxic/MsWorld.exe
    .exe 128KB
  • Toxic/MyDoom.A.exe
    .exe 22KB
  • Toxic/MyPics.a.exe
    .exe 33KB
  • Toxic/NETFramework (copy 1).exe
    .exe 1.4MB
  • Toxic/NETFramework.exe
    .exe 1.4MB
  • Toxic/NJRat.exe
    .exe 31KB
  • Toxic/Nadlote.exe
    .exe 240KB
  • Toxic/NakedWife.exe
    .exe 72KB
  • Toxic/NavaShield.exe
    .exe 9.7MB
  • Toxic/NetWire.doc
    .doc 7.3MB
  • Toxic/NetWire.exe
    .exe 1.2MB
  • Toxic/Netflix mail access checker v2023.exe
    .exe 2.1MB
  • Toxic/Netres.a.exe
    .exe 372KB
  • Toxic/NewLove.vbs
    .vbs 7KB
  • Toxic/NoEscape.exe
    .exe 666KB
  • Toxic/NoMoreRansom.exe
    .exe 1.4MB
  • Toxic/Nople.exe
    .exe 50KB
  • Toxic/Nostart.exe
    .exe 233KB
  • Toxic/NotPetya.exe
    .exe 390KB
  • Toxic/Nyxem.E.exe
    .exe 128KB
  • Toxic/Opaserv.l.exe
    .exe 28KB
  • Toxic/PCDefender v2.msi
    .msi .vbs 860KB
  • Toxic/PCDefender.exe
    .exe 878KB
  • Toxic/PCOptimizerPro.exe
    .exe 3.6MB
  • Toxic/PCToaster.exe
    .exe 411KB
  • Toxic/PDFXCview.exe
    .exe 421KB
  • Toxic/POT_A_~2.BAT
    659B
  • Toxic/PetrWrap
    .exe 473KB
  • Toxic/Petya.A.exe
    .exe 225KB
  • Toxic/Pikachu.exe
    .exe 32KB
  • Toxic/Pleh.vbs
    .vbs 3KB
  • Toxic/PolyRansom.exe
    .exe 220KB
  • Toxic/Popup.exe
    .exe 373KB
  • Toxic/Potao_FakeTrueCryptextracted.exe
    .exe 3.0MB
  • Toxic/PowerPoint.exe
    .exe 136KB
  • Toxic/Prolin.exe
    .exe 36KB
  • Toxic/Q300972I.EXE
    .exe 237KB
  • Toxic/Q30097~1.EXE
    .exe 231KB
  • Toxic/Quamo.exe
    .exe 56KB
  • Toxic/REvil.exe
    .exe 85KB
  • Toxic/Rahack.exe
    .exe 86KB
  • Toxic/Ransom (17.06.05) .exe
    .exe 77KB
  • Toxic/Ransom.Xdata.exe
    .exe 251KB
  • Toxic/Ransomware.Unnamed_0.exe
    .exe 902KB
  • Toxic/RedBoot.exe
    .exe 1.2MB
  • Toxic/RedEye.exe
    .exe 10.6MB
  • Toxic/RegistrySmart.exe
    .exe 1.0MB
  • Toxic/Remcos.exe
    .exe 92KB
  • Toxic/Rensenware.exe
    .exe 96KB
  • Toxic/RevengeRAT.exe
    .exe 4.0MB
  • Toxic/Rokku.exe
    .exe 666KB
  • Toxic/SCHDPL32.exe
    .exe 162KB
  • Toxic/SDK320.msi
    .msi 457KB
  • Toxic/SE2011.exe
    .exe 2.4MB
  • Toxic/SKULL_~1.BAT
    .bat .vbs 475B
  • Toxic/Sample1.exe
    .exe 91KB
  • Toxic/Sample2.exe
    .exe 82KB
  • Toxic/Sample3.exe
    .exe 100KB
  • Toxic/Sample4.exe
    .exe 87KB
  • Toxic/San.html
    4KB
  • Toxic/Sasser.A.exe
    .exe 104KB
  • Toxic/Sasser.B.exe
    .exe 104KB
  • Toxic/Satana.exe
    .exe 49KB
  • Toxic/Scare.hta
    .html .vbs 6KB
  • Toxic/ScreenScrew.exe
    .exe 111KB
  • Toxic/SecurityCentral.exe
    .exe 904KB
  • Toxic/SecurityDefender.exe
    .exe 1.4MB
  • Toxic/SecurityDefener2015.exe
    .exe 1.2MB
  • Toxic/SecurityScanner.exe
    .exe 2.2MB
  • Toxic/Seftad.exe
    .exe 48KB
  • Toxic/Sevgi.a.exe
    .exe 203KB
  • Toxic/ShellLocker.exe
    .exe 679KB
  • Toxic/Silver.exe
    .exe 38KB
  • Toxic/SmartDefragmenter.exe
    .exe 438KB
  • Toxic/Snake.exe
    .exe 3.7MB
  • Toxic/Spark (copy 1).exe
    .exe 495KB
  • Toxic/Spark.exe
    .exe 495KB
  • Toxic/SporaRansomware.exe
    .exe 24KB
  • Toxic/SpySheriff.exe
    .exe 48KB
  • Toxic/SuperDeath2.exe
    .exe 7.3MB
  • Toxic/TOKYO_1258.EXE
    736B
  • Toxic/TaskILL.exe
    .exe 31KB
  • Toxic/TeslaCrypt-1.exe
    .exe 257KB
  • Toxic/Time.exe
    .exe 111KB
  • Toxic/Trololo.exe
    .exe 3.0MB
  • Toxic/Trood.a.exe
    .exe 10KB
  • Toxic/UIWIX.exe
    .dll 211KB
  • Toxic/UpdateCheck.exe
    .exe 8KB
  • Toxic/VAV2008.exe
    .exe 770KB
  • Toxic/VBS.LoveLetter.txt.vbs
    .vbs 9KB
  • Toxic/VanToM-Rat.bat
    .exe 183KB
  • Toxic/Vcffipzmnipbxzdl.exe
    .exe 827KB
  • Toxic/VeryFun.exe
    .exe 3.0MB
  • Toxic/ViraLock.exe
    .exe 194KB
  • Toxic/Vista.exe
    .exe 1.9MB
  • Toxic/Vobus.exe
    .exe 384KB
  • Toxic/W32.Elkern.4926.exe
    .exe 388KB
  • Toxic/[email protected]
    .exe 104KB
  • Toxic/Walker.com
    4KB
  • Toxic/WannaCry.exe
    .exe 224KB
  • Toxic/WannaCrypt0r.exe
    .exe 3.4MB
  • Toxic/WarzoneRAT.exe
    .exe 321KB
  • Toxic/White.a.exe
    .exe 40KB
  • Toxic/Whiter.a.exe
    .exe 56KB
  • Toxic/Win32.AgentTesla.exe
    .exe 450KB
  • Toxic/Win32.DarkTequila.exe
    .exe 857KB
  • Toxic/Win32.GravityRAT.exe
    .exe 645KB
  • Toxic/Win32.SofacyCarberp.exe
    .exe 130KB
  • Toxic/Win32.WannaPeace.exe
    .exe 659KB
  • Toxic/Win32.Wannacry.exe
    .dll 5.0MB
  • Toxic/Win32_klez.exe
    .exe 248KB
  • Toxic/Win32_klez_1.exe
    .exe 248KB
  • Toxic/Win7Recovery.exe
    .exe 467KB
  • Toxic/WinFXDocObj.exe
    .exe 337KB
  • Toxic/WinNuke.98.exe
    .exe 32KB
  • Toxic/Windows-KB2670838.msu.exe
    .exe 728KB
  • Toxic/WindowsAcceleratorPro.exe
    .exe 1023KB
  • Toxic/WindowsUpdate.exe
    .exe 760KB
  • Toxic/Winevar.exe
    .exe 89KB
  • Toxic/Winlocker #0.5.exe
    .exe 1.9MB
  • Toxic/WinlockerVB6Blacksod.exe
    .exe 2.4MB
  • Toxic/WolframAV.exe
    .exe 2.6MB
  • Toxic/XFileCorrupter.exe
    .exe 136KB
  • Toxic/XMoon.exe
    .exe 669KB
  • Toxic/XPAntivirus2008.exe
    .exe 1.3MB
  • Toxic/Xanax.exe
    .exe 33KB
  • Toxic/Xyeta.exe
    .exe 84KB
  • Toxic/Y-L3052.EXE
    3KB
  • Toxic/Y-TP46.EXE
    29KB
  • Toxic/YAUNCH.EXE
    8KB
  • Toxic/YEKE1204.EXE
    21KB
  • Toxic/YESMILE.EXE
    4KB
  • Toxic/Yarner.a.exe
    .exe 427KB
  • Toxic/YouAreAnIdiot.exe
    .exe 424KB
  • Toxic/YouAreAnIdiot.zip
    .zip 223KB
  • Toxic/ZHR1958.EXE
    4KB
  • Toxic/ZHR2970.EXE
    5KB
  • Toxic/ZeroAccess.avi.exe
    .exe 160KB
  • Toxic/ZeroAccess_xxx-porn-movie.avi.exe
    .exe 160KB
  • Toxic/Zika.exe
    .exe 5.6MB
  • Toxic/ZippedFiles.a.exe
    .exe 205KB
  • Toxic/Zloader.xlsm
    .xlsm 93KB
  • Toxic/a4442ce59064bab5d49f33de37fc04e6.exe
    .exe 216KB
  • Toxic/aapt.exe
    .exe 834KB
  • Toxic/abba_-_happy_new_year_zaycev_net.exe
    .exe 190KB
  • Toxic/agent.exe
    .exe 113KB
  • Toxic/apktool.bat
    .bat .vbs 92B
  • Toxic/bc12d7052e6cfce8f16625ca8b88803cd4e58356eb32fe62667336d4dee708a3.exe
    .exe 416KB
  • Toxic/bea95bebec95e0893a845f62e832d7cf.exe
    .exe 100KB
  • Toxic/blanca de nieve.scr
    .exe 22KB
  • Toxic/butterflyondesktop.exe
    .exe 2.8MB
  • Toxic/cerber.exe
    .exe 604KB
  • Toxic/counter.exe
    .exe 31KB
  • Toxic/data.exe_
    .exe 1.6MB
  • Toxic/debug.bat
    33B
  • Toxic/dump1.exe
    .exe 268KB
  • Toxic/dumped.exe
    .exe 1.9MB
  • Toxic/dumped_1.exe
    .exe 1.9MB
  • Toxic/e89614e3b0430d706bef2d1f13b30b43e5c53db9a477e2ff60ef5464e1e9add4.exe
    .dll 116KB
  • Toxic/ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe
    .exe 3.4MB
  • Toxic/ef4a2cfe4d9d3495d4957a65299f608f7b823fab0699fded728fd3900c0b2bb4.exe
    .exe 863KB
  • Toxic/f-mydoom.exe
    .exe 111KB
  • Toxic/f9af081bbbad885175732c1adb77691a0dc8b4fbd3487904063d219e32cf93df.exe
    .exe 3.4MB
  • Toxic/fax_390392029_072514.exe
    .exe 276KB
  • Toxic/file_4571518150a8181b403df4ae7ad54ce8b16ded0c.exe
    .exe 853KB
  • Toxic/file_4571518150a8181b403df4ae7ad54ce8b16ded0c_1.exe
    .exe 853KB
  • Toxic/gchrome.exe
    .exe 2.8MB
  • Toxic/hive.bin_exe
    .exe 764KB
  • Toxic/hostr.exe
    .exe 105KB
  • Toxic/input_files.exe
    .dll 94KB
  • Toxic/invoice_2318362983713_823931342io.pdf.exe
    .exe 247KB
  • Toxic/jigsaw.exe
    .exe 283KB
  • Toxic/loveletter.VBS
    .vbs 2KB
  • Toxic/malware.exe
    .dll 154KB
  • Toxic/malware_1.exe
    .dll 68KB
  • Toxic/malware_2.exe
    .exe 263KB
  • Toxic/malware_3.exe
    .sys 95KB
  • Toxic/malware_4.exe
    .exe 418KB
  • Toxic/malware_5.exe
    .exe 20KB
  • Toxic/math129.exe
    .exe 323KB
  • Toxic/metrofax.doc
    .doc 221KB
  • Toxic/midgets.scr
    .exe 22KB
  • Toxic/msxml.exe
    .dll 366KB
  • Toxic/njRAT.exe
    .exe 959KB
  • Toxic/raffle.exe
    .exe 1.7MB
  • Toxic/remit.vbs
    .vbs 9KB
  • Toxic/rickroll.exe
    .exe 129KB
  • Toxic/sample.exe
    .exe 871KB
  • Toxic/sample1.exe
    .exe 3.0MB
  • Toxic/sample2.exe
    .exe 2.9MB
  • Toxic/sample_1.exe
    .exe 871KB
  • Toxic/satan.exe
    .exe 184KB
  • Toxic/scanslam.exe
    .exe 60KB
  • Toxic/signed.exe
    .exe 89KB
  • Toxic/ska2pwej.aeh.exe
    .exe 5.0MB
  • Toxic/slide.exe
    .exe 100KB
  • Toxic/soy.exe
    .zip 64KB
  • Toxic/strip-girl-2.0bdcom_patches.exe
    .exe 22KB
  • Toxic/svchost.exe
    .exe 704KB
  • Toxic/tunamor.exe
    .exe 71KB
  • Toxic/win32.exe
    .sys 24KB
  • Toxic/win33.exe
    .exe 66KB
  • Toxic/wirelesskeyview.exe
    .exe 173KB
  • Toxic/x2s443bc.cs1.exe
    .exe 15.9MB
  • Toxic/xpaj.exe
    .exe 219KB
  • Toxic/xpajB.exe
    .exe 520KB
  • Toxic/yfoye_dump.exe
    .exe 36KB
  • Toxic/zerolocker_d4c62215df74753371db33a19a69fccdc4b375c893a4b7f8b30172710fbd4cfa.exe
    .exe 398KB
  • Toxic/{71257279-042b-371d-a1d3-fbf8d2fadffa}.exe
    .exe 338KB

Toxic.7z

  • SHA256 0245cdb76d5aad7c457fa837b65262ab63fd2c1bd9ab885497166d3f378013f2
  • MD5 SHA1 SHA512 SSDEEP
Password
infected