Reports | Triage

Sample ID

Created

Filename

Tags

Status/Score

SHA256

241126-xpcehs1lck

26-11-2024 19:01 UTC

Downloaders.zip

bootkitbotnetdefault_valencigafed3aamarsoffice04credential_accessdefense_evasiondiscoveryevasionexecutionamadeyammyyadminasyncratbabbleloaderflawedammyylummaneshtaphorphiexquasarredlinestealcxwormzharkbotinfostealerloaderpersistencepyinstallerratspywarestealerthemidatrojanupxworm

aspackv2bootkit1176f2defaultlivetrafficnewwwwwwwwwwwwwwwwwwcollectioncredential_accessdefense_evasiondiscoveryevasionexecutionamadeyammyyadminasyncratdcratexelastealerflawedammyygh0stratgurculokibotlummananocorephorphiexpurplefoxquasarredlinesectopratstormkittyvidarxenarmorxmrigxworminfostealerkeyloggerloaderminerpasswordpersistenceprivilege_escalationpyinstallerratrecoveryrootkitspywarestealerthemidatrojanupxvmprotectworm

Reported

241126-g5xsdsvqhr

26-11-2024 06:23 UTC

2024-11-26_ca250c61b88e6a6cf1bc0999f277f1cd_bkransomware_hawkeye

discoveryexecutionphorphiexxmrigloaderminerpersistencespywarestealertrojanworm

Reported

241126-cv9xrayrbz

26-11-2024 02:25 UTC

2024-11-26_db93400050537c7db6136e7aae7a8368_bkransomware_hawkeye_icedid

discoveryexecutionphorphiexxmrigloaderminerpersistencespywarestealertrojanworm

Reported

241125-1a1ekstpcq

25-11-2024 21:27 UTC

2024-11-25_afecaaf4b2dcd72b5573fbcd0610732a_cobalt-strike_ryuk

discoveryexecutionphorphiexxmrigloaderminerpersistencespywarestealertrojanworm

Reported

241125-1akdcsxkcz

25-11-2024 21:26 UTC

2024-11-25_847b677750eee60cec9cbdb6dfcc9d51_cobalt-strike_ryuk

discoveryexecutionphorphiexxmrigloaderminerpersistencespywarestealertrojanworm

Reported

241125-z8184atncr

25-11-2024 21:24 UTC

2024-11-25_5a5dbc125577288f490f6d568d3133e4_cobalt-strike_ryuk

discoveryexecutionphorphiexxmrigloaderminerpersistencespywarestealertrojanworm

Reported

241125-y6vg4a1mfm

25-11-2024 20:24 UTC

5eab2c8952f35b1f3b7f29a08daaabb593bc0eddc449a62999c6391c6a27cb3a.exe

discoveryevasionphorphiexloadertrojanworm

Reported

241124-29n19s1lej

24-11-2024 23:17 UTC

5f974771b827e521b0b81c0a30913ba8b5d955eaa3e12202e15c89a295e4454b

discoveryexecutionphorphiexxmrigloaderminerpersistencespywarestealertrojanworm

Reported

241123-y7jrzsvla1

23-11-2024 20:25 UTC

2024-11-23_669c8cc562e81ad860e00c411b9c7b58_bkransomware

discoveryexecutionphorphiexxmrigloaderminerpersistencespywarestealertrojanworm

Reported

241123-y6jets1mar

23-11-2024 20:23 UTC

2024-11-23_433c39d908c32d8efd034ed1819e536a_icedid

discoveryexecutionphorphiexxmrigloaderminerpersistencespywarestealertrojanworm

discoveryexecutionphorphiexxmrigloaderminerpersistencetrojanworm

Reported

241120-2la5hazjfn

20-11-2024 22:39 UTC

4363463463464363463463463.exe.zip

aspackv2backdoor091024250720237c4393defaultdefault_valencigamarsoffice04sigortataletg cloud @rlreborn admin @fatherofcarderscollectioncredential_accessdefense_evasiondiscoveryevasionexecutionamadeyammyyadminasyncratcobaltstrikecryptbotflawedammyygurculummametasploitnetsupportphemedronephorphiexquasarredlinesectopratstealcxmrigxwormimpactinfostealerloaderminerpersistencephishingprivilege_escalationpyinstallerransomwareratspywarestealertrojanupxvmprotectworm

Reported

241120-t1tw6azjfy

20-11-2024 16:31 UTC

4363463463464363463463463.exe.zip

backdoorbotnet14082024@oleh_pspa21440e9f7223be06be5f5e2f94969c7defaultdiamotrixoffice04tg cloud @rlreborn admin @fatherofcarderscredential_accessdefense_evasiondiscoveryevasionexecutionammyyadminasyncratavoslockerflawedammyymetasploitphorphiexquasarredlinevidarxmrigxwormzharkbotimpactinfostealerloaderminerpersistencepyinstallerransomwareratspywarestealerthemidatrojanupxworm

Reported

241120-gtdv5ssnes

20-11-2024 06:05 UTC

4363463463464363463463463.exe.zip

backdoorbootkitbotnet0910241176f21a72eb06939ea478753d5c4df4b2bd32aryszxdefaultdiamotrixjavalogsdilleroffice04svhosttg cloud @rlreborn admin @fatherofcarderscollectioncredential_accessdefense_evasiondiscoveryevasionexecutionamadeyasyncratavoslockerberbewcobaltstrikecryptbotdcratdharmagurculockbitlokibotmetasploitmimikatzneshtanjratphorphiexquasarredlineriseprostealcvidarxmrigxwormzharkbotimpactinfostealerloaderminerpersistenceprivilege_escalationpyinstallerransomwareratspywarestealerthemidatrojanupxvmprotectworm

Reported

241120-gqchxascje

20-11-2024 06:00 UTC

4363463463464363463463463.exe.zip

backdoorbanker30072024defaultgrouptg cloud @rlreborn admin @fatherofcarderscredential_accessdefense_evasiondiscoveryevasionexecutionberbewdcratemotetmeshagentnjratphorphiexquasarredlinesectopratsliverstealcvidarxmrigxworminfostealerloaderminerpersistenceprivilege_escalationpyinstallerratspywarestealerthemidatrojanupxvmprotectworm

Reported

241120-gk2kvaxkgn

20-11-2024 05:52 UTC

4363463463464363463463463.exe.zip

backdoorbootkit100 rnd2ee1445fc63bc20d0e7966867b13e0e19c9aa5amdefault_valencigafed3aamain-pcmarsremotehosttg@cvv88888collectioncredential_accessdefense_evasiondiscoveryevasionexecutionamadeyasyncratdcratdharmagurculockbitlummametasploitnanocorephorphiexquasarredlineremcosstealcvidarxmrigxwormimpactinfostealerkeyloggerloaderminerpersistenceprivilege_escalationpyinstallerransomwareratspywarestealerthemidatrojanworm

Reported

241118-1sd93a1lfr

18-11-2024 21:54 UTC

4363463463464363463463463.exe.zip

backdoorbotnet09102425072023608ae071401962557c43939c9aa5defaultdefault2df523263f44cc8d55414a260a0197e4adiamotrixhackedlivetrafficmainnewbundle2newofficeoffice04tg@cvv88888credential_accessdiscoveryevasionexecutionexploitamadeyammyyadminasyncratcryptbotflawedammyylummametasploitneshtanjratphorphiexquasarredlinesectopratstealcvidarxmrigxwormzharkbotinfostealerloaderminerpersistenceprivilege_escalationpyinstallerratspywarestealerthemidatrojanupxvmprotectworm

Reported

241118-rbsxfsxpb1

18-11-2024 14:01 UTC

2fcad226b17131da4274e1b9f8f31359bdd325c9568665f08fd1f6c5d06a23ce.zip

newbundle2defense_evasiondiscoveryevasionexecutionphorphiexredlinewannacryxmriginfostealerloaderminerransomwarethemidatrojanupxworm

Reported

241118-pg2enswhpk

18-11-2024 12:18 UTC

2fcad226b17131da4274e1b9f8f31359bdd325c9568665f08fd1f6c5d06a23ce.zip

backdoorbotnet7140196255@oleh_pspaquariuscrypteddefaultmae-wareoffice04rat1solarafaketg cloud @rlreborn admin @fatherofcarderscredential_accessdefense_evasiondiscoveryevasionexecutionammyyadminasyncratdcratflawedammyylummametasploitnjratphorphiexquasarredlinesocks5systemzstealctroldeshxmrigxworminfostealerloaderminerpersistenceprivilege_escalationpyinstallerransomwareratspywarestealerthemidatrojanupxworm

Reported

241117-2gx4gazdmf

17-11-2024 22:33 UTC

10901a912b1705fa6dbada787e7249166c8570e0e88a9413b536208fb0c2fd2b.exe

discoveryexecutionphorphiexxmrigloaderminerpersistencetrojanworm

Reported

241117-ygbzfsxcpj

17-11-2024 19:44 UTC

4586378fb8e91587b6c436af567fa9cc9f44d88ff665ff4115d72d0983340e43.exe

ad1b56defaultoffice04trupashotcredential_accessdiscoveryevasionexecutionamadeyasyncratcryptbotnjratphorphiexquasarxwormloaderpersistenceprivilege_escalationratspywarestealertrojanupxworm

Reported

241117-ekxksa1brh

17-11-2024 04:00 UTC

260f4bd4d9f08e29026f540d60aa1d54f1d1b8965141dae3defa112b688651dfN.exe

discoveryexecutionphorphiexxmrigloaderminerpersistencetrojanworm

Reported

241117-apj32a1lgn

17-11-2024 00:23 UTC

3523dedcaafb867201cbc845a91715109830fbc04d3a12b3185f178355bd31d0N.exe

discoveryexecutionphorphiexxmrigloaderminerpersistencetrojanworm

Reported

241116-2ka34svhla

16-11-2024 22:37 UTC

79ee1c91ea5545d6de00ddedfeada11b71df432015127ea18692dd90827f0046

discoveryexecutionphorphiexxmrigloaderminerpersistencetrojanworm

Reported

241116-zqxg7axpfp

16-11-2024 20:55 UTC

b30b0e955073d37687b9ca9c1170eaca6789b45e05459225886abf498663c18a.exe

discoveryexecutionphorphiexxmrigloaderminerpersistencetrojanworm

Reported

241116-xsbmdssbkd

16-11-2024 19:06 UTC

4363463463464363463463463.exe.zip

aspackv2backdoorbootkitbotnet2507202330072024321a707fa673780c2e4ab40d133f28997ff5633f6218118c2fc394dfa59b2dd9@oleh_pspbundledefaultdefault_valencigadf523263f44cc8d55414a260a0197e4adriver hosthackednewbundle2officeoffice04playerremotehostrewasdruntimebrokervalencigacollectioncredential_accessdefense_evasiondiscoveryevasionexecutionamadeyammyyadminasyncratcobaltstrikecryptbotdcratflawedammyygurculummameduzametasploitmimikatznanocorenjratphorphiexquasarredlineremcosstealcvidarxmrigxwormzharkbotinfostealerkeyloggerloaderminerpersistenceprivilege_escalationpyinstallerratspywarestealerthemidatrojanupxvmprotectworm

Reported

241116-w913ya1jcy

16-11-2024 18:38 UTC

4363463463464363463463463.exe.zip

aspackv2backdoorbootkitbotnet100 rnd321a707fa673780c2e4ab40d133f289971401962557c37934964656ffad71319cfd3f70c69816faa21440e9f7223be06be5f5e2f94969c7defaulthackedoffice04sigortatg cloud @rlreborn admin @fatherofcarderscollectioncredential_accessdefense_evasiondiscoveryevasionexecutionamadeyammyyadminasyncratcobaltstrikecryptbotflawedammyylokibotlummameduzametasploitmimikatznjratphorphiexquasarredlinestealcstormkittytroldeshvidarvipkeyloggerwannacryxmrigxwormzharkbotimpactinfostealerkeyloggerloaderminerpersistenceprivilege_escalationpyinstallerransomwareratspywarestealerthemidatrojanupxvmprotectworm

Reported

241116-wwkh2a1emm

16-11-2024 18:16 UTC

4363463463464363463463463.exe.zip

backdoorbotnetbbb7dasaddefaultdiamotrixnewbundle2office04valencigacollectioncredential_accessdefense_evasiondiscoveryevasionexecutionamadeyammyyadminasyncratbuerdcratdharmaexelastealerflawedammyygh0stratlokibotlummametasploitnetsupportnjratphorphiexpurplefoxquasarredlinestealcxmrigxwormzharkbotimpactinfostealerloaderminerpersistenceprivilege_escalationpyinstallerransomwareratrootkitspywarestealerthemidatrojanupxvmprotectworm

Reported

241116-wwbwws1elr

16-11-2024 18:15 UTC

4363463463464363463463463.exe.zip

backdoorbootkit2ee1445fc63bc20d0e7966867b13e0e190019c9aa5defaultdefault_valencigafed3aasolarafakecredential_accessdefense_evasiondiscoveryevasionexecutionamadeyammyyadminasyncratflawedammyylummametasploitnjratphorphiexredlinestealcvidarxmrigxworminfostealerloaderminerpersistenceprivilege_escalationratspywarestealertrojanupxworm

Reported

241115-xxjtkayqgz

15-11-2024 19:13 UTC

4363463463464363463463463.exe

botnet4bee07allahsizdefaultdefault2diamotrixsu-pctg cloud @rlreborn admin @fatherofcarderscredential_accessdiscoveryevasionexecutionamadeyasyncratphorphiexquasarredlinestealcxmrigzharkbotinfostealerloaderminerpersistencepyinstallerratspywarestealertrojanupxworm

Reported

241115-xr6q5szdnf

15-11-2024 19:06 UTC

4363463463464363463463463.exe

backdoorbotnetbbb7defaultdefault2javanewestoffice04qllcredential_accessdefense_evasiondiscoveryevasionexecutionasyncratlummametasploitphorphiexquasarredlinesectopratstealcxwormzharkbotinfostealerloaderpersistenceprivilege_escalationratspywarestealertrojanupxworm

Reported

241114-3dnajayler

14-11-2024 23:24 UTC

4363463463464363463463463.exe

botnet9c9aa5defaultcredential_accessdefense_evasiondiscoveryevasionexecutionamadeyammyyadminasyncratdcratflawedammyylockbitphorphiexquasarredlinestormkittyxwormzharkbotinfostealerloaderpersistenceprivilege_escalationransomwareratspywarestealertrojanupxworm

Reported

241114-3zzkpavhpf

14-11-2024 23:57 UTC

4363463463464363463463463.exe

bootkitbundledefaultoffice04penisqll2targettg@cvv88888collectioncredential_accessdefense_evasiondiscoveryevasionexecutionammyyadminasyncratcryptbotflawedammyygurculockbitphorphiexquasarredlinestealcxmrigxworminfostealerloaderminerpersistenceprivilege_escalationpyinstallerransomwareratspywarestealertrojanupxworm

Reported

241114-3rj52avgna

14-11-2024 23:44 UTC

4363463463464363463463463.exe

aspackv2botnet1a72eb06939ea478753d5c4df4b2bd32defaultdefault_valencigakurbannewwwwwwwwwwwwwwwwwwservicetg@cvv88888credential_accessdefense_evasiondiscoveryevasionexecutionasyncratcryptbotlockbitphorphiexquasarredlinestealcvidarxwormzharkbotinfostealerloaderpersistenceransomwareratspywarestealerthemidatrojanupxworm

Reported

241114-3lfknavfqg

14-11-2024 23:35 UTC

4363463463464363463463463.exe

backdooraryszxdatabasedefaulthackedmae-warenewofficeoffice04solarafaketg cloud @rlreborn admin @fatherofcarderscollectioncredential_accessdefense_evasiondiscoveryevasionexecutionexploitasyncratcryptbotinfinitylockjigsawlockbitlummametasploitnjratphorphiexquasarredlinevidarvipkeyloggerxmrigxworminfostealerkeyloggerloaderminerpersistenceprivilege_escalationransomwareratspywarestealerthemidatrojanupxworm

Reported

241114-3ln7ssvjfs

14-11-2024 23:36 UTC

4363463463464363463463463.exe

backdooraquariusdefaultdefault2newbundle2wenzcordratdefense_evasiondiscoveryevasionexecutionasyncratcobaltstrikelummametasploitphorphiexquasarredlinestealcxwormimpactinfostealerloaderpersistencepyinstallerransomwareratspywarestealertrojanupxworm

Reported

241114-3eysnavfje

14-11-2024 23:26 UTC

4363463463464363463463463.exe

backdoor30072024321a707fa673780c2e4ab40d133f2899af458cf23e4b27326a35871876cc63d9buy tg @fatherofcardersdefaultlogsnewbundle2office04svhosttg cloud @rlreborn admin @fatherofcarderscredential_accessdefense_evasiondiscoveryevasionexecutionasyncratmetasploitneshtaphorphiexquasarredlinevidarxmrigxwormimpactinfostealerloaderminerpersistencepyinstallerransomwareratspywarestealertrojanupxworm

Reported

241114-26znlavdqq

14-11-2024 23:12 UTC

4363463463464363463463463.exe

aspackv2backdoorbootkit1b47b87875b9774afdda9b2528e389d1321a707fa673780c2e4ab40d133f28997c4393a770ee12f3b037ae568cfe2254681c7ddefaultlogsnewclientoffice04testcredential_accessdefense_evasiondiscoveryevasionexecutionamadeyasyncratdcratdharmagurcuhivelummametasploitnjratphorphiexquasarredlinerhadamanthysvidarxmrigxredxwormimpactinfostealerloaderminerpersistenceprivilege_escalationpyinstallerransomwareratspywarestealertrojanupxworm

discoveryexecutionphorphiexxmrigloaderminerpersistencetrojanworm

Reported

241114-mhpfdsxkfs

14-11-2024 10:28 UTC

2024-11-14_bebfd4dfaa73236ac92a8acbb322e3ff_cobalt-strike_hijackloader_ryuk

discoveryexecutionphorphiexxmrigloaderminerpersistencetrojanworm

Reported

241113-3qa6qsvleq

13-11-2024 23:42 UTC

4363463463464363463463463.zip

botnetdefaultnewbundle2testdiscoveryevasionexecutionasyncratgh0stratjigsawphorphiexquasarredlinexmrigxwormzharkbotinfostealerloaderminerpersistenceprivilege_escalationpyinstallerransomwareratspywarethemidatrojanupxvmprotectworm

Reported

241113-feg4kswera

13-11-2024 04:46 UTC

f4909c420e208e4728116e8b0f4254c9f741d864f9618cddbe3f51b71f602066

discoveryevasionphorphiexloaderpersistencetrojanworm

Reported

241111-csj9batmfq

11-11-2024 02:20 UTC

b014f479c70d22623b1a3826e16d70abc750c9103c6597d623ab4183124130f3

discoveryevasionexecutionphorphiexxmrigloaderminerpersistencespywarestealertrojanworm

Reported

241108-kjc3mszalc

08-11-2024 08:37 UTC

066ea7e779e63f2881e049d1c66b712babcf263168e5a118dbecf6546159f11fN

79ee1c91ea5545d6de00ddedfeada11b71df432015127ea18692dd90827f0046.exe

discoveryevasionexecutionphorphiexloaderpersistencetrojanworm

Reported

241107-xa22maxbrp

07-11-2024 18:39 UTC

5b68d93f21d6b07ac727cb0b813615a547cbb929f9e36147f5ce9eeddbde4e98N

discoveryevasionexecutionphorphiexloaderpersistencetrojanworm

Reported

241107-w8rg4swpdt

07-11-2024 18:35 UTC

5b68d93f21d6b07ac727cb0b813615a547cbb929f9e36147f5ce9eeddbde4e98N

discoveryevasionexecutionphorphiexloaderpersistencetrojanworm

Reported

241107-p11mgsvmgk

07-11-2024 12:48 UTC

79ee1c91ea5545d6de00ddedfeada11b71df432015127ea18692dd90827f0046.exe

discoveryevasionexecutionphorphiexloaderpersistencetrojanworm

Reported

241106-r5c34avjdk

06-11-2024 14:46 UTC

2024-11-06_dbf5cc46257e16d6a694c1be8972afdf_icedid

discoveryevasionexecutionphorphiexxmrigloaderminerpersistencetrojanworm

Reported