241219-edefmawnhy
19-12-2024 03:49 UTC
ba8d4df86924743be143d569ac06b8a1b1d7e2c554720e7f31126a0db04c3daa.exe
botnetdiscoveryzharkbot
10
Reported
241218-mr9spawrfj
18-12-2024 10:43 UTC
RedSystem.exe
botnetdiscoveryzharkbot
10
Reported
241216-f2cglswlhs
16-12-2024 05:21 UTC
4363463463464363463463463.exe.zip
botnetbotnetofficeoffice04remotehosttg cloud @rlreborn admin @fatherofcarderscredential_accessdiscoveryevasionexecutiondcratdiscordratlummaphorphiexquasarredlineremcosriseprosnakekeyloggerxmrigxwormzharkbotinfostealerkeyloggerloaderminerpersistenceratrootkitspywarestealertrojanupxworm
10
Reported
241214-y6jqlasrhy
14-12-2024 20:23 UTC
241127-xqsswsslej_pw_infected.zip
backdoorbotnet7140196255crypteddefaulteewxfvcxcxoffice04rmxwindows clientcollectioncredential_accessdefense_evasiondiscoveryevasionexecutionexploitasyncratdiscordratlummameduzamercurialgrabbermerlinmetasploitnanocorephorphiexquasarredlineremcosstealcvidarxwormzharkbotinfostealerkeyloggerloaderpersistenceprivilege_escalationpyinstallerransomwareratrootkitspywarestealertrojanupxworm
10
Reported
241214-qgw1masrcy
14-12-2024 13:14 UTC
241127-xqsswsslej_pw_infected.zip
backdoorbotnetcollectioncredential_accessdefense_evasiondiscoveryevasionexecutionamadeyasyncratmerlinnjratphorphiexquasarredlinevidarxwormzharkbotinfostealerloaderpersistenceprivilege_escalationpyinstallerransomwareratspywarestealertrojanupxvmprotectworm
10
Reported
241214-pwz56atpap
14-12-2024 12:41 UTC
https://www.youtube.com/watch?v=FEpcreqb8jY
backdoorbootkitbotnet2ee1445fc63bc20d0e7966867b13e0e1defaultcollectioncredential_accessdefense_evasiondiscoveryevasionexecutionamadeyasyncratlummamerlinnanocorephorphiexquasarredlinevidarxwormzharkbotinfostealerkeyloggerloaderpersistenceprivilege_escalationpyinstallerratspywarestealerthemidatrojanupxvmprotectworm
10
Reported
N/A
241212-wymq6ssnat
12-12-2024 18:19 UTC
241127-xqsswsslej_pw_infected.zip
botnet1337defaultdefault2newwwwwwwwwwwwwwwwwwqqtalkqqtalk1qqtalk2remotehostvoovvoov1voov2voov3collectioncredential_accessdefense_evasiondiscoveryevasionexecution44caliberamadeyasyncratdiscordratexelastealergurculummaphorphiexquasarredlineremcosriseprormsstealcsystembcta505umbralxmrigxwormzharkbotinfostealerloaderminerpersistenceprivilege_escalationpyinstallerratrootkitspywarestealerthemidatrojanupxvmprotectworm
10
Reported
241212-wmml2askcs
12-12-2024 18:02 UTC
241127-xqsswsslej_pw_infected.zip
botnetdefault[email protected]qqtalk2voov3collectioncredential_accessdefense_evasiondiscoveryevasionexecution44caliberasyncratcryptbotdiscordratexelastealergurculummamimikatznjratphorphiexquasarredlinestealcumbralvidarxmrigxwormzharkbotinfostealerloaderminerpersistenceprivilege_escalationpyinstallerratrootkitspywarestealerthemidatrojanupxvmprotectworm
10
Reported
241211-c3kylawpgk
11-12-2024 02:36 UTC
540df5c639021c723908d31a4c089c9f9f4fe9c363209f8d7a61117b957a44ac.exe
discoveryzharkbot
10
Reported
241210-g4pqds1naq
10-12-2024 06:21 UTC
3609432610d1fbc5cb0a8b94539e3489.exe
discoveryzharkbot
10
Reported
241210-gyr9bs1lap
10-12-2024 06:13 UTC
3609432610d1fbc5cb0a8b94539e3489.exe
discoveryzharkbot
10
Reported
241205-crzmlstkhw
05-12-2024 02:19 UTC
3053cd36ef1b15fb7a2d3a00be85930c7dfb1be9b4ac9c87175e6dc1fbacd230.exe
discoveryzharkbot
10
Reported
241204-xfrsvawja1
04-12-2024 18:48 UTC
1733325245efb540ba670bc87cda05695e7839c909eeca3e1633b495d258461820ead14a47442.dat-decoded.exe
discoveryzharkbot
10
Reported
241204-smwcdsyqhs
04-12-2024 15:15 UTC
1733325245efb540ba670bc87cda05695e7839c909eeca3e1633b495d258461820ead14a47442.dat-decoded.exe
discoveryzharkbot
10
Reported
241128-2f9qwatjcw
28-11-2024 22:32 UTC
take3.exe
aspackv2backdoorbankerbotnetdefaultoffice04sgvpcredential_accessdefense_evasiondiscoverydropperevasionexecutionexploitammyyadminasyncratdcratflawedammyygh0stratquasarramnitredlinexmrigxredxwormzharkbotinfostealerminerpersistenceprivilege_escalationpyinstallerratspywarestealerthemidatrojanupxvmprotectworm
10
Reported
241128-zh3dgavrcr
28-11-2024 20:43 UTC
take3.exe
aspackv2backdoorbotnetoffice04sgvpcredential_accessdefense_evasiondiscoverydropperevasionexecutionammyyadminasyncratdcratflawedammyylummametasploitquasarredlinexmrigxredxwormzharkbotinfostealerminerpersistenceprivilege_escalationpyinstallerratspywarestealerthemidatrojanupxvmprotect
10
Reported
241128-b19y9szkbv
28-11-2024 01:37 UTC
take3.exe
botnetdiamotrixmohiboffice04sgvpcredential_accessdiscoveryevasionexecutionlokibotnjratquasarredlinexmrigzharkbotinfostealerminerpyinstallerspywarestealertrojanupxvmprotect
10
Reported
241128-a17ngatncn
28-11-2024 00:41 UTC
241127-xqsswsslej_pw_infected.zip
aspackv2botnet9c9aa5defaultmain-pcmarsofficeoffice04tg@cvv88888zjebcollectioncredential_accessdefense_evasiondiscoveryevasionexecutionamadeyammyyadminasyncratflawedammyylokibotlummamercurialgrabbernjratphorphiexquasarredlinestealcumbralvidarxmrigxwormzharkbotinfostealerloaderminerpersistenceprivilege_escalationpyinstallerratspywarestealertrojanupxvmprotectworm
10
Reported
241128-a4gw8atpak
28-11-2024 00:45 UTC
241127-xqsswsslej_pw_infected.zip
botnetdefaultdiamotrixoffice04rewasdsgvpzjebcollectioncredential_accessdefense_evasiondiscoveryevasionexecutionasyncratlokibotlummamercurialgrabbernjratphorphiexquasarredlinestormkittyumbralxmrigxwormzharkbotinfostealerloaderminerpersistencephishingprivilege_escalationpyinstallerratspywarestealerthemidatrojanupxworm
10
Reported
241127-yl61dsxpcs
27-11-2024 19:53 UTC
Downloaders.zip
botnet119b6e2263f46f13917bbde173112248defaultlivetrafficofficeusercredential_accessdiscoveryevasionexecutionasyncratlummaphorphiexquasarredlinevidarxmrigxwormzharkbotinfostealerloaderminerpersistenceprivilege_escalationpyinstallerratspywarestealertrojanupxworm
10
Reported
241126-2gvncasrhw
26-11-2024 22:33 UTC
Downloaders.zip
botnetdatabasedefaultnewwwwwwwwwwwwwwwwwwoffice04collectioncredential_accessdefense_evasiondiscoveryevasionexecutionasyncratexelastealerjigsawlokibotlummamonsterphorphiexpurplefoxquasarxwormzharkbotloaderpersistenceprivilege_escalationpyinstallerransomwareratrootkitspywarestealerthemidatrojanupxvmprotectworm
10
Reported
241127-a58fkayjav
27-11-2024 00:48 UTC
Downloaders.zip
aspackv2bootkitbotnet091024a21440e9f7223be06be5f5e2f94969c7defaultnewestofficeoffice04tg cloud @rlreborn admin @fatherofcarderscollectioncredential_accessdefense_evasiondiscoveryevasionexecutionamadeyammyyadminasyncratcryptbotflawedammyylokibotlummananocorephorphiexquasarredlinerhadamanthyssectopratvidarxmrigxwormzharkbotinfostealerkeyloggerloaderminerpersistencephishingprivilege_escalationpyinstallerratspywarestealerthemidatrojanupxworm
10
Reported
241126-xgsfrstqav
26-11-2024 18:49 UTC
Downloaders.zip
backdoorbotnetamcleanerv2defaultlivetrafficnewwwwwwwwwwwwwwwwwwsigortatg@cvv88888collectioncredential_accessdefense_evasiondiscoveryevasionexecutionasyncratbabbleloadergurculokibotlummametasploitnjratphemedronephorphiexquasarredlineremcossectopratskuldxwormzharkbotinfostealerloaderpersistenceprivilege_escalationpyinstallerransomwareratspywarestealerthemidatrojanupxvmprotectworm
10
Reported
241126-3azt6a1pcm
26-11-2024 23:19 UTC
Downloaders.zip
botnet2ee1445fc63bc20d0e7966867b13e0e130072024defaultdiamotrixvalencigacollectioncredential_accessdefense_evasiondiscoveryevasionexecutionamadeyasyncratbabbleloaderlokibotlummaphorphiexredlinestealcvidarxenoratxwormzharkbotinfostealerloaderpersistenceprivilege_escalationpyinstallerratspywarestealertrojanupxworm
10
Reported
241126-x5kqtsskdl
26-11-2024 19:26 UTC
Downloaders.zip
botnet0910247c4393defaultdefault_valencigalogsofficecollectioncredential_accessdefense_evasiondiscoveryevasionexecutionamadeyasyncratlokibotlummaphorphiexquasarredlinestealcxmrigxwormzharkbotinfostealerloaderminerpersistenceprivilege_escalationpyinstallerratspywarestealertrojanworm
10
Reported
241126-x5awmaskck
26-11-2024 19:25 UTC
Downloaders.zip
botneta21440e9f7223be06be5f5e2f94969c7logsdillerdefense_evasiondiscoveryevasionexecutiondcratlummanjratphorphiexstealcvidarxmrigzharkbotinfostealerloaderminerpersistenceprivilege_escalationratspywarestealertrojanupxworm
10
Reported
241126-xpcehs1lck
26-11-2024 19:01 UTC
Downloaders.zip
bootkitbotnetdefault_valencigafed3aamarsoffice04credential_accessdefense_evasiondiscoveryevasionexecutionamadeyammyyadminasyncratbabbleloaderflawedammyylummaneshtaphorphiexquasarredlinestealcxwormzharkbotinfostealerloaderpersistencepyinstallerratspywarestealerthemidatrojanupxworm
10
Reported
241120-t1tw6azjfy
20-11-2024 16:31 UTC
4363463463464363463463463.exe.zip
backdoorbotnet14082024@oleh_pspa21440e9f7223be06be5f5e2f94969c7defaultdiamotrixoffice04tg cloud @rlreborn admin @fatherofcarderscredential_accessdefense_evasiondiscoveryevasionexecutionammyyadminasyncratavoslockerflawedammyymetasploitphorphiexquasarredlinevidarxmrigxwormzharkbotimpactinfostealerloaderminerpersistencepyinstallerransomwareratspywarestealerthemidatrojanupxworm
10
Reported
241120-nt4j5awncv
20-11-2024 11:42 UTC
DocuSign01210021100.vbs
botnetdefense_evasiondiscoveryexecutionzharkbotpersistence
10
Reported
241120-ng3gaswaqb
20-11-2024 11:22 UTC
DocuSign01210021100.vbs
botnetdefense_evasiondiscoveryexecutionzharkbotpersistence
10
Reported
241120-gtdv5ssnes
20-11-2024 06:05 UTC
4363463463464363463463463.exe.zip
backdoorbootkitbotnet0910241176f21a72eb06939ea478753d5c4df4b2bd32aryszxdefaultdiamotrixjavalogsdilleroffice04svhosttg cloud @rlreborn admin @fatherofcarderscollectioncredential_accessdefense_evasiondiscoveryevasionexecutionamadeyasyncratavoslockerberbewcobaltstrikecryptbotdcratdharmagurculockbitlokibotmetasploitmimikatzneshtanjratphorphiexquasarredlineriseprostealcvidarxmrigxwormzharkbotimpactinfostealerloaderminerpersistenceprivilege_escalationpyinstallerransomwareratspywarestealerthemidatrojanupxvmprotectworm
10
Reported
241118-1sd93a1lfr
18-11-2024 21:54 UTC
4363463463464363463463463.exe.zip
backdoorbotnet09102425072023608ae071401962557c43939c9aa5defaultdefault2df523263f44cc8d55414a260a0197e4adiamotrixhackedlivetrafficmainnewbundle2newofficeoffice04tg@cvv88888credential_accessdiscoveryevasionexecutionexploitamadeyammyyadminasyncratcryptbotflawedammyylummametasploitneshtanjratphorphiexquasarredlinesectopratstealcvidarxmrigxwormzharkbotinfostealerloaderminerpersistenceprivilege_escalationpyinstallerratspywarestealerthemidatrojanupxvmprotectworm
10
Reported
241116-ylqcmssfqd
16-11-2024 19:52 UTC
New Text Document.exe.zip
aspackv2backdoorbotnetcollectiondiscoveryevasionexecutiongh0stratlummametasploitpurplefoxvipkeyloggerzharkbotkeyloggerpersistenceratrootkitspywarestealertrojanupx
10
Reported
241116-xsbmdssbkd
16-11-2024 19:06 UTC
4363463463464363463463463.exe.zip
aspackv2backdoorbootkitbotnet2507202330072024321a707fa673780c2e4ab40d133f28997ff5633f6218118c2fc394dfa59b2dd9@oleh_pspbundledefaultdefault_valencigadf523263f44cc8d55414a260a0197e4adriver hosthackednewbundle2officeoffice04playerremotehostrewasdruntimebrokervalencigacollectioncredential_accessdefense_evasiondiscoveryevasionexecutionamadeyammyyadminasyncratcobaltstrikecryptbotdcratflawedammyygurculummameduzametasploitmimikatznanocorenjratphorphiexquasarredlineremcosstealcvidarxmrigxwormzharkbotinfostealerkeyloggerloaderminerpersistenceprivilege_escalationpyinstallerratspywarestealerthemidatrojanupxvmprotectworm
10
Reported
241116-w913ya1jcy
16-11-2024 18:38 UTC
4363463463464363463463463.exe.zip
aspackv2backdoorbootkitbotnet100 rnd321a707fa673780c2e4ab40d133f289971401962557c37934964656ffad71319cfd3f70c69816faa21440e9f7223be06be5f5e2f94969c7defaulthackedoffice04sigortatg cloud @rlreborn admin @fatherofcarderscollectioncredential_accessdefense_evasiondiscoveryevasionexecutionamadeyammyyadminasyncratcobaltstrikecryptbotflawedammyylokibotlummameduzametasploitmimikatznjratphorphiexquasarredlinestealcstormkittytroldeshvidarvipkeyloggerwannacryxmrigxwormzharkbotimpactinfostealerkeyloggerloaderminerpersistenceprivilege_escalationpyinstallerransomwareratspywarestealerthemidatrojanupxvmprotectworm
10
Reported