Reports | Triage

Sample ID

Created

Filename

Tags

Status/Score

SHA256

241126-x5awmaskck

26-11-2024 19:25 UTC

Downloaders.zip

botneta21440e9f7223be06be5f5e2f94969c7logsdillerdefense_evasiondiscoveryevasionexecutiondcratlummanjratphorphiexstealcvidarxmrigzharkbotinfostealerloaderminerpersistenceprivilege_escalationratspywarestealertrojanupxworm

bootkitbotnetdefault_valencigafed3aamarsoffice04credential_accessdefense_evasiondiscoveryevasionexecutionamadeyammyyadminasyncratbabbleloaderflawedammyylummaneshtaphorphiexquasarredlinestealcxwormzharkbotinfostealerloaderpersistencepyinstallerratspywarestealerthemidatrojanupxworm

Reported

241120-t1tw6azjfy

20-11-2024 16:31 UTC

4363463463464363463463463.exe.zip

backdoorbotnet14082024@oleh_pspa21440e9f7223be06be5f5e2f94969c7defaultdiamotrixoffice04tg cloud @rlreborn admin @fatherofcarderscredential_accessdefense_evasiondiscoveryevasionexecutionammyyadminasyncratavoslockerflawedammyymetasploitphorphiexquasarredlinevidarxmrigxwormzharkbotimpactinfostealerloaderminerpersistencepyinstallerransomwareratspywarestealerthemidatrojanupxworm

Reported

241120-nt4j5awncv

20-11-2024 11:42 UTC

DocuSign01210021100.vbs

botnetdefense_evasiondiscoveryexecutionzharkbotpersistence

Reported

241120-ng3gaswaqb

20-11-2024 11:22 UTC

DocuSign01210021100.vbs

botnetdefense_evasiondiscoveryexecutionzharkbotpersistence

Reported

241120-gtdv5ssnes

20-11-2024 06:05 UTC

4363463463464363463463463.exe.zip

backdoorbootkitbotnet0910241176f21a72eb06939ea478753d5c4df4b2bd32aryszxdefaultdiamotrixjavalogsdilleroffice04svhosttg cloud @rlreborn admin @fatherofcarderscollectioncredential_accessdefense_evasiondiscoveryevasionexecutionamadeyasyncratavoslockerberbewcobaltstrikecryptbotdcratdharmagurculockbitlokibotmetasploitmimikatzneshtanjratphorphiexquasarredlineriseprostealcvidarxmrigxwormzharkbotimpactinfostealerloaderminerpersistenceprivilege_escalationpyinstallerransomwareratspywarestealerthemidatrojanupxvmprotectworm

Reported

241118-1sd93a1lfr

18-11-2024 21:54 UTC

4363463463464363463463463.exe.zip

backdoorbotnet09102425072023608ae071401962557c43939c9aa5defaultdefault2df523263f44cc8d55414a260a0197e4adiamotrixhackedlivetrafficmainnewbundle2newofficeoffice04tg@cvv88888credential_accessdiscoveryevasionexecutionexploitamadeyammyyadminasyncratcryptbotflawedammyylummametasploitneshtanjratphorphiexquasarredlinesectopratstealcvidarxmrigxwormzharkbotinfostealerloaderminerpersistenceprivilege_escalationpyinstallerratspywarestealerthemidatrojanupxvmprotectworm

Reported

241116-ylqcmssfqd

16-11-2024 19:52 UTC

New Text Document.exe.zip

aspackv2backdoorbotnetcollectiondiscoveryevasionexecutiongh0stratlummametasploitpurplefoxvipkeyloggerzharkbotkeyloggerpersistenceratrootkitspywarestealertrojanupx

Reported

241116-xsbmdssbkd

16-11-2024 19:06 UTC

4363463463464363463463463.exe.zip

aspackv2backdoorbootkitbotnet2507202330072024321a707fa673780c2e4ab40d133f28997ff5633f6218118c2fc394dfa59b2dd9@oleh_pspbundledefaultdefault_valencigadf523263f44cc8d55414a260a0197e4adriver hosthackednewbundle2officeoffice04playerremotehostrewasdruntimebrokervalencigacollectioncredential_accessdefense_evasiondiscoveryevasionexecutionamadeyammyyadminasyncratcobaltstrikecryptbotdcratflawedammyygurculummameduzametasploitmimikatznanocorenjratphorphiexquasarredlineremcosstealcvidarxmrigxwormzharkbotinfostealerkeyloggerloaderminerpersistenceprivilege_escalationpyinstallerratspywarestealerthemidatrojanupxvmprotectworm

Reported

241116-w913ya1jcy

16-11-2024 18:38 UTC

4363463463464363463463463.exe.zip

aspackv2backdoorbootkitbotnet100 rnd321a707fa673780c2e4ab40d133f289971401962557c37934964656ffad71319cfd3f70c69816faa21440e9f7223be06be5f5e2f94969c7defaulthackedoffice04sigortatg cloud @rlreborn admin @fatherofcarderscollectioncredential_accessdefense_evasiondiscoveryevasionexecutionamadeyammyyadminasyncratcobaltstrikecryptbotflawedammyylokibotlummameduzametasploitmimikatznjratphorphiexquasarredlinestealcstormkittytroldeshvidarvipkeyloggerwannacryxmrigxwormzharkbotimpactinfostealerkeyloggerloaderminerpersistenceprivilege_escalationpyinstallerransomwareratspywarestealerthemidatrojanupxvmprotectworm

Reported

241116-wwkh2a1emm

16-11-2024 18:16 UTC

4363463463464363463463463.exe.zip

backdoorbotnetbbb7dasaddefaultdiamotrixnewbundle2office04valencigacollectioncredential_accessdefense_evasiondiscoveryevasionexecutionamadeyammyyadminasyncratbuerdcratdharmaexelastealerflawedammyygh0stratlokibotlummametasploitnetsupportnjratphorphiexpurplefoxquasarredlinestealcxmrigxwormzharkbotimpactinfostealerloaderminerpersistenceprivilege_escalationpyinstallerransomwareratrootkitspywarestealerthemidatrojanupxvmprotectworm

Reported

241115-xxjtkayqgz

15-11-2024 19:13 UTC

4363463463464363463463463.exe

botnet4bee07allahsizdefaultdefault2diamotrixsu-pctg cloud @rlreborn admin @fatherofcarderscredential_accessdiscoveryevasionexecutionamadeyasyncratphorphiexquasarredlinestealcxmrigzharkbotinfostealerloaderminerpersistencepyinstallerratspywarestealertrojanupxworm

Reported

241115-xr6q5szdnf

15-11-2024 19:06 UTC

4363463463464363463463463.exe

backdoorbotnetbbb7defaultdefault2javanewestoffice04qllcredential_accessdefense_evasiondiscoveryevasionexecutionasyncratlummametasploitphorphiexquasarredlinesectopratstealcxwormzharkbotinfostealerloaderpersistenceprivilege_escalationratspywarestealertrojanupxworm

Reported

241114-3dnajayler

14-11-2024 23:24 UTC

4363463463464363463463463.exe

botnet9c9aa5defaultcredential_accessdefense_evasiondiscoveryevasionexecutionamadeyammyyadminasyncratdcratflawedammyylockbitphorphiexquasarredlinestormkittyxwormzharkbotinfostealerloaderpersistenceprivilege_escalationransomwareratspywarestealertrojanupxworm

Reported

241114-3rj52avgna

14-11-2024 23:44 UTC

4363463463464363463463463.exe

aspackv2botnet1a72eb06939ea478753d5c4df4b2bd32defaultdefault_valencigakurbannewwwwwwwwwwwwwwwwwwservicetg@cvv88888credential_accessdefense_evasiondiscoveryevasionexecutionasyncratcryptbotlockbitphorphiexquasarredlinestealcvidarxwormzharkbotinfostealerloaderpersistenceransomwareratspywarestealerthemidatrojanupxworm

Reported

241113-3qa6qsvleq

13-11-2024 23:42 UTC

4363463463464363463463463.zip

botnetdefaultnewbundle2testdiscoveryevasionexecutionasyncratgh0stratjigsawphorphiexquasarredlinexmrigxwormzharkbotinfostealerloaderminerpersistenceprivilege_escalationpyinstallerransomwareratspywarethemidatrojanupxvmprotectworm

Reported

241113-d4gs1ayngm

13-11-2024 03:33 UTC

13112024_0333_Sign021000110.vbs.zip

botnetdefense_evasiondiscoveryexecutionzharkbotpersistence

botnetdefense_evasiondiscoveryexecutionzharkbotpersistence

Reported

241111-sr92ca1dka

11-11-2024 15:22 UTC

118f1c6f61bcbd7daa4753a6d033518e027d864fc206a7e1866524a0391d4417

118f1c6f61bcbd7daa4753a6d033518e027d864fc206a7e1866524a0391d4417

118f1c6f61bcbd7daa4753a6d033518e027d864fc206a7e1866524a0391d4417

ceed375c476042757b2fd50ede4f2445d99d8ed281ab7fdb4ff29bacd288e2a4

botnet7c4393default_valencigafed3aatalecredential_accessdiscoveryevasionamadeylummastealczharkbotpersistencespywarestealerthemidatrojan

Reported

241105-ezwxssvaqe

05-11-2024 04:23 UTC

da6390e0e3971f3acc3e14d20822d54fe6a893c4a00a588efafeff55240e4b2e.exe

botnet7c4393default_valencigafed3aatalecredential_accessdiscoveryevasionamadeylummastealczharkbotpersistencespywarestealerthemidatrojan

botnet7c4393default_valencigafed3aatalecredential_accessdiscoveryevasionamadeylummastealczharkbotpersistencespywarestealerthemidatrojan

Reported

241105-b4y16s1hnc

05-11-2024 01:42 UTC

9d83104fa15fdd8a631bf2da5b36ec8250b7f83efc5bf53f6ecb2cc3374f9ada

botnetdefault_valencigafed3aatalecredential_accessdiscoveryevasionamadeylummastealczharkbotpersistencespywarestealerthemidatrojan

Reported

241105-bg1w9asank

05-11-2024 01:07 UTC

3caf7535dac02718e14c86bd48e6408b6298eea6056acf2e201dd9dd1506eaf7

botnet7c4393default_valencigafed3aatalecredential_accessdiscoveryevasionamadeylummastealczharkbotpersistencespywarestealerthemidatrojan

Reported

241104-2whx4azclr

04-11-2024 22:55 UTC

624d5f40fb22aad85527f5d811ba4a154936521fb0a804ccf8cd8afbe58537e8

botnet7c4393default_valencigafed3aatalecredential_accessdiscoveryevasionamadeylummastealczharkbotpersistencespywarestealerthemidatrojan

Reported

241104-1h99raybqp

04-11-2024 21:40 UTC

c096e5ea9ca242ea20e8cf8beabea6297ab476c3527d51e59ae897a159d4051f

botnet7c4393default_valencigafed3aatalecredential_accessdiscoveryevasionamadeylummastealczharkbotpersistencespywarestealerthemidatrojan

Reported

241104-xzyeqsyjem

04-11-2024 19:18 UTC

b63d0548d57f2e9e1c91e4555dce96f69072015389b49e5840e85c751b5758e0

botnet7c4393default_valencigafed3aatalecredential_accessdiscoveryevasionamadeylummastealczharkbotpersistencespywarestealerthemidatrojan

Reported

241104-vjaydstcmg

04-11-2024 17:00 UTC

1e0c279995b4cbe44ef6cd051ae88d31a3b8870663065439dfd05632deabd3fe

botnet7c4393default_valencigafed3aatalecredential_accessdiscoveryevasionamadeylummastealczharkbotpersistencespywarestealerthemidatrojan

Reported

241104-csheqazndz

04-11-2024 02:20 UTC

4b5a876b1c230b28c0862d5f8158b3657016709855bf3329d8fea6cada3adbfe.exe

botnetdiscoveryevasionzharkbotthemidatrojan

Reported

241103-mlh3savldq

03-11-2024 10:33 UTC

d2a8b6cdfaf14a244d67ed5a6d4ef96b.exe

botnet7c4393default_valencigafed3aatalecredential_accessdiscoveryevasionamadeylummastealczharkbotpersistencespywarestealerthemidatrojan

Reported

241103-hbbhqsxfrl

03-11-2024 06:33 UTC

b45668e08c03024f2432ff332c319131.exe

botnetdiscoveryevasionzharkbotthemidatrojan

Reported

241103-g8wz9sxfmp

03-11-2024 06:29 UTC

b45668e08c03024f2432ff332c319131.exe

botnetdiscoveryevasionzharkbotthemidatrojan

botnet7c4393default_valencigafed3aatalecredential_accessdiscoveryevasionamadeybuerlummastealczharkbotloaderpersistencespywarestealerthemidatrojan

botnet7c4393default_valencigafed3aatalecredential_accessdiscoveryevasionamadeylummastealczharkbotpersistencespywarestealerthemidatrojan

Reported

241103-d3dd7atele

03-11-2024 03:31 UTC

a44c927e4a23da13388d2be3a31ccaed8ead5320d8d6d8cd890f7926e682f8fb.exe

botnet7c4393default_valencigafed3aatalecredential_accessdiscoveryevasionamadeylummastealczharkbotpersistencespywarestealerthemidatrojan

Reported

241103-dmq1catcql

03-11-2024 03:07 UTC

985043e0e4561aef4e9c7d7ef8ba1f241ba0f25c85b9d2d1646988c66374b4ab

botnet7c4393default_valencigafed3aatalecredential_accessdiscoveryevasionamadeylummastealczharkbotpersistencespywarestealerthemidatrojan

Reported

241103-dlz7matcnl

03-11-2024 03:06 UTC

7e3f81a0d68d41a3644337e71b439171103f67c7fc8c1df1310715fe350ebc73.exe

a53a554301475205830875c9f876f132.bin

botnet7c4393default_valencigafed3aatalecredential_accessdiscoveryevasionamadeylummastealczharkbotpersistencespywarestealerthemidatrojan

Reported

241102-3h5elsyenr

02-11-2024 23:31 UTC

SecuriteInfo.com.Win32.MalwareX-gen.14200.26000.exe

SecuriteInfo.com.Win32.MalwareX-gen.14200.26000.exe

botnet7c43939c9aa5default_valencigafed3aatalecredential_accessdiscoveryevasionamadeylummastealczharkbotpersistencespywarestealerthemidatrojan

Reported

241102-l8es7ssblc

02-11-2024 10:11 UTC

12938790f91b2612b7c6a1fd4aa16219a7d2469731e27d4bbd409ad438e64669.exe

12938790f91b2612b7c6a1fd4aa16219a7d2469731e27d4bbd409ad438e64669.exe

e80171fd5b32206e71fed542c3cae3055217f5f590faf8daa155b4a362942e65.exe

botnet7c4393default_valencigafed3aatalecredential_accessdiscoveryevasionamadeylummastealczharkbotpersistencespywarestealerthemidatrojan

Reported

241102-lc2yvszmcz

02-11-2024 09:24 UTC

e80171fd5b32206e71fed542c3cae3055217f5f590faf8daa155b4a362942e65.exe

botnet7c4393default_valencigafed3aatalecredential_accessdiscoveryevasionamadeylummastealczharkbotpersistencespywarestealerthemidatrojan

Reported

241102-lc2yvszmcz

02-11-2024 09:24 UTC

e80171fd5b32206e71fed542c3cae3055217f5f590faf8daa155b4a362942e65.exe

botnet7c4393default_valencigafed3aatalecredential_accessdiscoveryevasionamadeylummastealczharkbotpersistencespywarestealerthemidatrojan

Reported

241102-karjns1crf

02-11-2024 08:24 UTC

cd5327ade58bdcbd9e18407525a8c54ae311c97c512f0931173432f83d4d4d4a.exe

botnet7c4393default_valencigafed3aatalecredential_accessdiscoveryevasionamadeylummastealczharkbotpersistencespywarestealerthemidatrojan

Reported

241102-karjns1crf

02-11-2024 08:24 UTC

cd5327ade58bdcbd9e18407525a8c54ae311c97c512f0931173432f83d4d4d4a.exe

botnet7c4393default_valencigafed3aatalecredential_accessdiscoveryevasionamadeylummastealczharkbotpersistencespywarestealerthemidatrojan

Reported