Reports | Triage

Sample ID

Created

Filename

Tags

Status/Score

SHA256

241117-2gx4gazdmf

17-11-2024 22:33 UTC

10901a912b1705fa6dbada787e7249166c8570e0e88a9413b536208fb0c2fd2b.exe

discoveryexecutionphorphiexxmrigloaderminerpersistencetrojanworm

Reported

241117-ygbzfsxcpj

17-11-2024 19:44 UTC

4586378fb8e91587b6c436af567fa9cc9f44d88ff665ff4115d72d0983340e43.exe

ad1b56defaultoffice04trupashotcredential_accessdiscoveryevasionexecutionamadeyasyncratcryptbotnjratphorphiexquasarxwormloaderpersistenceprivilege_escalationratspywarestealertrojanupxworm

Reported

241117-ekxksa1brh

17-11-2024 04:00 UTC

260f4bd4d9f08e29026f540d60aa1d54f1d1b8965141dae3defa112b688651dfN.exe

discoveryexecutionphorphiexxmrigloaderminerpersistencetrojanworm

Reported

241117-apj32a1lgn

17-11-2024 00:23 UTC

3523dedcaafb867201cbc845a91715109830fbc04d3a12b3185f178355bd31d0N.exe

discoveryexecutionphorphiexxmrigloaderminerpersistencetrojanworm

Reported

241116-2ka34svhla

16-11-2024 22:37 UTC

79ee1c91ea5545d6de00ddedfeada11b71df432015127ea18692dd90827f0046

discoveryexecutionphorphiexxmrigloaderminerpersistencetrojanworm

Reported

241116-zqxg7axpfp

16-11-2024 20:55 UTC

b30b0e955073d37687b9ca9c1170eaca6789b45e05459225886abf498663c18a.exe

discoveryexecutionphorphiexxmrigloaderminerpersistencetrojanworm

Reported

241116-xsbmdssbkd

16-11-2024 19:06 UTC

4363463463464363463463463.exe.zip

aspackv2backdoorbootkitbotnet2507202330072024321a707fa673780c2e4ab40d133f28997ff5633f6218118c2fc394dfa59b2dd9@oleh_pspbundledefaultdefault_valencigadf523263f44cc8d55414a260a0197e4adriver hosthackednewbundle2officeoffice04playerremotehostrewasdruntimebrokervalencigacollectioncredential_accessdefense_evasiondiscoveryevasionexecutionamadeyammyyadminasyncratcobaltstrikecryptbotdcratflawedammyygurculummameduzametasploitmimikatznanocorenjratphorphiexquasarredlineremcosstealcvidarxmrigxwormzharkbotinfostealerkeyloggerloaderminerpersistenceprivilege_escalationpyinstallerratspywarestealerthemidatrojanupxvmprotectworm

Reported

241116-w913ya1jcy

16-11-2024 18:38 UTC

4363463463464363463463463.exe.zip

aspackv2backdoorbootkitbotnet100 rnd321a707fa673780c2e4ab40d133f289971401962557c37934964656ffad71319cfd3f70c69816faa21440e9f7223be06be5f5e2f94969c7defaulthackedoffice04sigortatg cloud @rlreborn admin @fatherofcarderscollectioncredential_accessdefense_evasiondiscoveryevasionexecutionamadeyammyyadminasyncratcobaltstrikecryptbotflawedammyylokibotlummameduzametasploitmimikatznjratphorphiexquasarredlinestealcstormkittytroldeshvidarvipkeyloggerwannacryxmrigxwormzharkbotimpactinfostealerkeyloggerloaderminerpersistenceprivilege_escalationpyinstallerransomwareratspywarestealerthemidatrojanupxvmprotectworm

Reported

241116-wwkh2a1emm

16-11-2024 18:16 UTC

4363463463464363463463463.exe.zip

backdoorbotnetbbb7dasaddefaultdiamotrixnewbundle2office04valencigacollectioncredential_accessdefense_evasiondiscoveryevasionexecutionamadeyammyyadminasyncratbuerdcratdharmaexelastealerflawedammyygh0stratlokibotlummametasploitnetsupportnjratphorphiexpurplefoxquasarredlinestealcxmrigxwormzharkbotimpactinfostealerloaderminerpersistenceprivilege_escalationpyinstallerransomwareratrootkitspywarestealerthemidatrojanupxvmprotectworm

Reported

241116-wwbwws1elr

16-11-2024 18:15 UTC

4363463463464363463463463.exe.zip

backdoorbootkit2ee1445fc63bc20d0e7966867b13e0e190019c9aa5defaultdefault_valencigafed3aasolarafakecredential_accessdefense_evasiondiscoveryevasionexecutionamadeyammyyadminasyncratflawedammyylummametasploitnjratphorphiexredlinestealcvidarxmrigxworminfostealerloaderminerpersistenceprivilege_escalationratspywarestealertrojanupxworm

Reported

241115-xxjtkayqgz

15-11-2024 19:13 UTC

4363463463464363463463463.exe

botnet4bee07allahsizdefaultdefault2diamotrixsu-pctg cloud @rlreborn admin @fatherofcarderscredential_accessdiscoveryevasionexecutionamadeyasyncratphorphiexquasarredlinestealcxmrigzharkbotinfostealerloaderminerpersistencepyinstallerratspywarestealertrojanupxworm

Reported

241115-xr6q5szdnf

15-11-2024 19:06 UTC

4363463463464363463463463.exe

backdoorbotnetbbb7defaultdefault2javanewestoffice04qllcredential_accessdefense_evasiondiscoveryevasionexecutionasyncratlummametasploitphorphiexquasarredlinesectopratstealcxwormzharkbotinfostealerloaderpersistenceprivilege_escalationratspywarestealertrojanupxworm

Reported

241114-3dnajayler

14-11-2024 23:24 UTC

4363463463464363463463463.exe

botnet9c9aa5defaultcredential_accessdefense_evasiondiscoveryevasionexecutionamadeyammyyadminasyncratdcratflawedammyylockbitphorphiexquasarredlinestormkittyxwormzharkbotinfostealerloaderpersistenceprivilege_escalationransomwareratspywarestealertrojanupxworm

Reported

241114-3zzkpavhpf

14-11-2024 23:57 UTC

4363463463464363463463463.exe

bootkitbundledefaultoffice04penisqll2targettg@cvv88888collectioncredential_accessdefense_evasiondiscoveryevasionexecutionammyyadminasyncratcryptbotflawedammyygurculockbitphorphiexquasarredlinestealcxmrigxworminfostealerloaderminerpersistenceprivilege_escalationpyinstallerransomwareratspywarestealertrojanupxworm

Reported

241114-3rj52avgna

14-11-2024 23:44 UTC

4363463463464363463463463.exe

aspackv2botnet1a72eb06939ea478753d5c4df4b2bd32defaultdefault_valencigakurbannewwwwwwwwwwwwwwwwwwservicetg@cvv88888credential_accessdefense_evasiondiscoveryevasionexecutionasyncratcryptbotlockbitphorphiexquasarredlinestealcvidarxwormzharkbotinfostealerloaderpersistenceransomwareratspywarestealerthemidatrojanupxworm

Reported

241114-3lfknavfqg

14-11-2024 23:35 UTC

4363463463464363463463463.exe

backdooraryszxdatabasedefaulthackedmae-warenewofficeoffice04solarafaketg cloud @rlreborn admin @fatherofcarderscollectioncredential_accessdefense_evasiondiscoveryevasionexecutionexploitasyncratcryptbotinfinitylockjigsawlockbitlummametasploitnjratphorphiexquasarredlinevidarvipkeyloggerxmrigxworminfostealerkeyloggerloaderminerpersistenceprivilege_escalationransomwareratspywarestealerthemidatrojanupxworm

Reported

241114-3ln7ssvjfs

14-11-2024 23:36 UTC

4363463463464363463463463.exe

backdooraquariusdefaultdefault2newbundle2wenzcordratdefense_evasiondiscoveryevasionexecutionasyncratcobaltstrikelummametasploitphorphiexquasarredlinestealcxwormimpactinfostealerloaderpersistencepyinstallerransomwareratspywarestealertrojanupxworm

Reported

241114-3eysnavfje

14-11-2024 23:26 UTC

4363463463464363463463463.exe

backdoor30072024321a707fa673780c2e4ab40d133f2899af458cf23e4b27326a35871876cc63d9buy tg @fatherofcardersdefaultlogsnewbundle2office04svhosttg cloud @rlreborn admin @fatherofcarderscredential_accessdefense_evasiondiscoveryevasionexecutionasyncratmetasploitneshtaphorphiexquasarredlinevidarxmrigxwormimpactinfostealerloaderminerpersistencepyinstallerransomwareratspywarestealertrojanupxworm

Reported

241114-26znlavdqq

14-11-2024 23:12 UTC

4363463463464363463463463.exe

aspackv2backdoorbootkit1b47b87875b9774afdda9b2528e389d1321a707fa673780c2e4ab40d133f28997c4393a770ee12f3b037ae568cfe2254681c7ddefaultlogsnewclientoffice04testcredential_accessdefense_evasiondiscoveryevasionexecutionamadeyasyncratdcratdharmagurcuhivelummametasploitnjratphorphiexquasarredlinerhadamanthysvidarxmrigxredxwormimpactinfostealerloaderminerpersistenceprivilege_escalationpyinstallerransomwareratspywarestealertrojanupxworm

discoveryexecutionphorphiexxmrigloaderminerpersistencetrojanworm

Reported

241114-mhpfdsxkfs

14-11-2024 10:28 UTC

2024-11-14_bebfd4dfaa73236ac92a8acbb322e3ff_cobalt-strike_hijackloader_ryuk

discoveryexecutionphorphiexxmrigloaderminerpersistencetrojanworm

Reported

241113-3qa6qsvleq

13-11-2024 23:42 UTC

4363463463464363463463463.zip

botnetdefaultnewbundle2testdiscoveryevasionexecutionasyncratgh0stratjigsawphorphiexquasarredlinexmrigxwormzharkbotinfostealerloaderminerpersistenceprivilege_escalationpyinstallerransomwareratspywarethemidatrojanupxvmprotectworm

Reported

241113-feg4kswera

13-11-2024 04:46 UTC

f4909c420e208e4728116e8b0f4254c9f741d864f9618cddbe3f51b71f602066

discoveryevasionphorphiexloaderpersistencetrojanworm

Reported

241111-csj9batmfq

11-11-2024 02:20 UTC

b014f479c70d22623b1a3826e16d70abc750c9103c6597d623ab4183124130f3

discoveryevasionexecutionphorphiexxmrigloaderminerpersistencespywarestealertrojanworm

Reported

241108-kjc3mszalc

08-11-2024 08:37 UTC

066ea7e779e63f2881e049d1c66b712babcf263168e5a118dbecf6546159f11fN

79ee1c91ea5545d6de00ddedfeada11b71df432015127ea18692dd90827f0046.exe

discoveryevasionexecutionphorphiexloaderpersistencetrojanworm

Reported

241107-xa22maxbrp

07-11-2024 18:39 UTC

5b68d93f21d6b07ac727cb0b813615a547cbb929f9e36147f5ce9eeddbde4e98N

discoveryevasionexecutionphorphiexloaderpersistencetrojanworm

Reported

241107-w8rg4swpdt

07-11-2024 18:35 UTC

5b68d93f21d6b07ac727cb0b813615a547cbb929f9e36147f5ce9eeddbde4e98N

discoveryevasionexecutionphorphiexloaderpersistencetrojanworm

Reported

241107-p11mgsvmgk

07-11-2024 12:48 UTC

79ee1c91ea5545d6de00ddedfeada11b71df432015127ea18692dd90827f0046.exe

discoveryevasionexecutionphorphiexloaderpersistencetrojanworm

Reported

241106-r5c34avjdk

06-11-2024 14:46 UTC

2024-11-06_dbf5cc46257e16d6a694c1be8972afdf_icedid

discoveryevasionexecutionphorphiexxmrigloaderminerpersistencetrojanworm

Reported