241128-2vcdxszjfm
28-11-2024 22:53 UTC
f135c0dd7ca9d2ad23c976c00876daec77150416220701ab513833633ad5c0ddN.exe
discoveryevasionphorphiexloadertrojanworm
10
Reported
241128-yyscrsypb1
28-11-2024 20:11 UTC
4363463463464363463463463.exe.zip
testdiscoveryevasionexecutionphorphiexquasarloaderpersistenceprivilege_escalationpyinstallerspywaretrojanworm
10
Reported
241128-yygw2aypas
28-11-2024 20:11 UTC
be068de9e770469a4969741b399e6e2c36e9dc1eb93ffd51c777b6f1aab97168N.exe
discoveryevasionphorphiexloaderpersistencetrojanworm
10
Reported
241128-ydqnfaxqgy
28-11-2024 19:40 UTC
4363463463464363463463463.exe.zip
office04collectiondefense_evasiondiscoveryevasionexecutionexelastealermimikatzphorphiexquasarloaderpersistenceprivilege_escalationspywarestealertrojanworm
10
Reported
241128-vtnx1atpgw
28-11-2024 17:17 UTC
8ce09f13942ab5bcb81b175996c8385f.exe
discoveryexecutionphorphiexxmrigloaderminerpersistencespywarestealertrojanworm
10
Reported
241128-cr9sks1kht
28-11-2024 02:19 UTC
Downloaders.zip
backdoordefaultdf523263f44cc8d55414a260a0197e4aoffice04sgvpsvhosttargettg cloud @rlreborn admin @fatherofcarderszjebmicrosoftcredential_accessdefense_evasiondiscoveryevasionexecutionexploitasyncratmercurialgrabbermetasploitnetsupportnjratphorphiexquasarredlineumbralvidarxmrigxworminfostealerloaderminerpersistencephishingprivilege_escalationransomwareratspywarestealerthemidatrojanupxworm
10
Reported
241128-a17ngatncn
28-11-2024 00:41 UTC
241127-xqsswsslej_pw_infected.zip
aspackv2botnet9c9aa5defaultmain-pcmarsofficeoffice04tg@cvv88888zjebcollectioncredential_accessdefense_evasiondiscoveryevasionexecutionamadeyammyyadminasyncratflawedammyylokibotlummamercurialgrabbernjratphorphiexquasarredlinestealcumbralvidarxmrigxwormzharkbotinfostealerloaderminerpersistenceprivilege_escalationpyinstallerratspywarestealertrojanupxvmprotectworm
10
Reported
241128-a4gw8atpak
28-11-2024 00:45 UTC
241127-xqsswsslej_pw_infected.zip
botnetdefaultdiamotrixoffice04rewasdsgvpzjebcollectioncredential_accessdefense_evasiondiscoveryevasionexecutionasyncratlokibotlummamercurialgrabbernjratphorphiexquasarredlinestormkittyumbralxmrigxwormzharkbotinfostealerloaderminerpersistencephishingprivilege_escalationpyinstallerratspywarestealerthemidatrojanupxworm
10
Reported
241128-azmlxaxngv
28-11-2024 00:39 UTC
241127-xqsswsslej_pw_infected.zip
defaultcollectioncredential_accessdiscoveryevasionexecutionasyncratmercurialgrabberphorphiexumbralxmrigloaderminerratspywarestealertrojanupxworm
10
Reported
241127-zc7q1ayrey
27-11-2024 20:35 UTC
2024-11-27_b01190f95c0ef2c141e2a74a2ca96a8b_bkransomware_hawkeye
discoveryexecutionphorphiexxmrigloaderminerpersistencespywarestealertrojanworm
10
Reported
241127-zblgdavqgk
27-11-2024 20:32 UTC
2024-11-27_9a3de42da9677b565c606b80dd3898b1_bkransomware_hawkeye
discoveryexecutionphorphiexxmrigloaderminerpersistencespywarestealertrojanworm
10
Reported
241127-y145caymbs
27-11-2024 20:16 UTC
Downloaders.zip
defaulthackedmaincollectioncredential_accessdefense_evasiondiscoveryevasionexecutionasyncratlokibotnjratphorphiexquasarredlinestealcxmrigxworminfostealerloaderminerpersistenceprivilege_escalationratspywarestealertrojanupxworm
10
Reported
241127-yy2w7svldj
27-11-2024 20:12 UTC
2024-11-27_597303e153b9ed80567645e96b461a96_avoslocker_hijackloader_luca-stealer
discoveryexecutionphorphiexxmrigloaderminerpersistencespywarestealertrojanworm
10
Reported
241127-yl61dsxpcs
27-11-2024 19:53 UTC
Downloaders.zip
botnet119b6e2263f46f13917bbde173112248defaultlivetrafficofficeusercredential_accessdiscoveryevasionexecutionasyncratlummaphorphiexquasarredlinevidarxmrigxwormzharkbotinfostealerloaderminerpersistenceprivilege_escalationpyinstallerratspywarestealertrojanupxworm
10
Reported
241127-w6pkqs1mek
27-11-2024 18:32 UTC
Downloaders.zip
backdoordefaultsigortamicrosoftdefense_evasiondiscoveryevasionexecutionasyncratcobaltstrikecryptbotgh0stratlummametasploitphorphiexpurplefoxquasarredlinexmrigxworminfostealerloaderminerpersistencephishingprivilege_escalationpyinstallerransomwareratrootkitspywarestealertrojanupxworm
10
Reported
241127-gmlx6sxlhq
27-11-2024 05:55 UTC
1bed2239ee0a68baa41751d9a4e0a697c3400f07fa3f738d6f90b74091188c68N.exe
discoveryevasionphorphiexloadertrojanworm
10
Reported
241127-b851aaxkfq
27-11-2024 01:49 UTC
Downloaders.zip
office04potg cloud @rlreborn admin @fatherofcardersdefense_evasiondiscoveryevasionexecutionlummaphorphiexquasarredlinesectopratxworminfostealerloaderpersistenceprivilege_escalationpyinstallerratspywarestealertrojanvmprotectworm
10
Reported
241126-2gvncasrhw
26-11-2024 22:33 UTC
Downloaders.zip
botnetdatabasedefaultnewwwwwwwwwwwwwwwwwwoffice04collectioncredential_accessdefense_evasiondiscoveryevasionexecutionasyncratexelastealerjigsawlokibotlummamonsterphorphiexpurplefoxquasarxwormzharkbotloaderpersistenceprivilege_escalationpyinstallerransomwareratrootkitspywarestealerthemidatrojanupxvmprotectworm
10
Reported
241127-a58fkayjav
27-11-2024 00:48 UTC
Downloaders.zip
aspackv2bootkitbotnet091024a21440e9f7223be06be5f5e2f94969c7defaultnewestofficeoffice04tg cloud @rlreborn admin @fatherofcarderscollectioncredential_accessdefense_evasiondiscoveryevasionexecutionamadeyammyyadminasyncratcryptbotflawedammyylokibotlummananocorephorphiexquasarredlinerhadamanthyssectopratvidarxmrigxwormzharkbotinfostealerkeyloggerloaderminerpersistencephishingprivilege_escalationpyinstallerratspywarestealerthemidatrojanupxworm
10
Reported
241127-a5ehgsvlaq
27-11-2024 00:47 UTC
79348af82dd8ddb40449df516db901d83c72ef6f3e16677eb8a8950c9a6f6dc0
discoveryexecutionphorphiexxmrigloaderminerpersistencespywarestealertrojanworm
10
Reported
241126-xgsfrstqav
26-11-2024 18:49 UTC
Downloaders.zip
backdoorbotnetamcleanerv2defaultlivetrafficnewwwwwwwwwwwwwwwwwwsigortatg@cvv88888collectioncredential_accessdefense_evasiondiscoveryevasionexecutionasyncratbabbleloadergurculokibotlummametasploitnjratphemedronephorphiexquasarredlineremcossectopratskuldxwormzharkbotinfostealerloaderpersistenceprivilege_escalationpyinstallerransomwareratspywarestealerthemidatrojanupxvmprotectworm
10
Reported
241126-3azt6a1pcm
26-11-2024 23:19 UTC
Downloaders.zip
botnet2ee1445fc63bc20d0e7966867b13e0e130072024defaultdiamotrixvalencigacollectioncredential_accessdefense_evasiondiscoveryevasionexecutionamadeyasyncratbabbleloaderlokibotlummaphorphiexredlinestealcvidarxenoratxwormzharkbotinfostealerloaderpersistenceprivilege_escalationpyinstallerratspywarestealertrojanupxworm
10
Reported
241126-3a6byavlhw
26-11-2024 23:19 UTC
Downloaders.zip
1a72eb06939ea478753d5c4df4b2bd32defaultcredential_accessdefense_evasiondiscoveryevasionexecutionasyncratbabbleloadergh0stratgurculummaphorphiexpurplefoxquasarredlinesectopratvidarxenoratxmrigxworminfostealerloaderminerpersistenceprivilege_escalationratrootkitspywarestealertrojanupxworm
10
Reported
241126-26h1va1mel
26-11-2024 23:11 UTC
Downloaders.zip
defaultdefault_valencigafed3aavalencigacredential_accessdiscoveryevasionexecutionamadeyasyncratbabbleloadergurculummananocorenjratphorphiexstealckeyloggerloaderpersistenceprivilege_escalationratspywarestealertrojanworm
10
Reported
241126-24va4avjdt
26-11-2024 23:08 UTC
Downloaders.zip
defaultcollectiondefense_evasiondiscoveryevasionexecutionammyyadminasyncratexelastealerflawedammyygurculockbitmonsterphorphiexxwormloaderpersistenceprivilege_escalationransomwareratspywarestealerthemidatrojanworm
10
Reported
241126-2ykvga1jdr
26-11-2024 22:59 UTC
Downloaders.zip
diamotrixjavakurbandefense_evasiondiscoveryevasionexecutionexploitlummananocorenjratphorphiexquasarredlinexworminfostealerkeyloggerloaderpersistenceprivilege_escalationpyinstallerratspywarestealerthemidatrojanworm
10
Reported
241126-2t9b9szqfp
26-11-2024 22:53 UTC
Downloaders.zip
aquariusdefaultqllremotehostcollectioncredential_accessdefense_evasiondiscoveryevasionexecutionammyyadminasyncratflawedammyyphorphiexpovertystealerquasarremcosstealcxenoratxwormloaderpersistenceprivilege_escalationpyinstallerratspywarestealerthemidatrojanupxworm
10
Reported
241126-z7aprawrgk
26-11-2024 21:21 UTC
2024-11-26_2771c5047c43a95cb2e844a824222524_bkransomware_hawkeye
discoveryphorphiexloaderpersistencespywarestealertrojanworm
10
Reported
241126-x4d7navres
26-11-2024 19:24 UTC
Downloaders.zip
backdoor@oleh_pspbundledefaulthackedniggaoffice04tg cloud @rlreborn admin @fatherofcarderscredential_accessdefense_evasiondiscoveryevasionexecutionasyncratbabbleloadergurculummanjratphorphiexquasarredlinetroldeshxredxworminfostealerloaderpersistenceprivilege_escalationpyinstallerransomwareratspywarestealertrojanworm
10
Reported
241126-x5kqtsskdl
26-11-2024 19:26 UTC
Downloaders.zip
botnet0910247c4393defaultdefault_valencigalogsofficecollectioncredential_accessdefense_evasiondiscoveryevasionexecutionamadeyasyncratlokibotlummaphorphiexquasarredlinestealcxmrigxwormzharkbotinfostealerloaderminerpersistenceprivilege_escalationpyinstallerratspywarestealertrojanworm
10
Reported
241126-x5awmaskck
26-11-2024 19:25 UTC
Downloaders.zip
botneta21440e9f7223be06be5f5e2f94969c7logsdillerdefense_evasiondiscoveryevasionexecutiondcratlummanjratphorphiexstealcvidarxmrigzharkbotinfostealerloaderminerpersistenceprivilege_escalationratspywarestealertrojanupxworm
10
Reported
241126-x5ql3sskdr
26-11-2024 19:26 UTC
Downloaders.zip
backdoor814fadefaultmarscredential_accessdefense_evasiondiscoveryevasionexecutionasyncratlummametasploitphorphiexredlinestealcxmriginfostealerloaderminerpersistenceprivilege_escalationratspywarestealertrojanworm
10
Reported
241126-xpcehs1lck
26-11-2024 19:01 UTC
Downloaders.zip
bootkitbotnetdefault_valencigafed3aamarsoffice04credential_accessdefense_evasiondiscoveryevasionexecutionamadeyammyyadminasyncratbabbleloaderflawedammyylummaneshtaphorphiexquasarredlinestealcxwormzharkbotinfostealerloaderpersistencepyinstallerratspywarestealerthemidatrojanupxworm
10
Reported
241126-wtl9vasqas
26-11-2024 18:12 UTC
Downloaders.zip
aspackv2bootkit1176f2defaultlivetrafficnewwwwwwwwwwwwwwwwwwcollectioncredential_accessdefense_evasiondiscoveryevasionexecutionamadeyammyyadminasyncratdcratexelastealerflawedammyygh0stratgurculokibotlummananocorephorphiexpurplefoxquasarredlinesectopratstormkittyvidarxenarmorxmrigxworminfostealerkeyloggerloaderminerpasswordpersistenceprivilege_escalationpyinstallerratrecoveryrootkitspywarestealerthemidatrojanupxvmprotectworm
10
Reported
241126-g5xsdsvqhr
26-11-2024 06:23 UTC
2024-11-26_ca250c61b88e6a6cf1bc0999f277f1cd_bkransomware_hawkeye
discoveryexecutionphorphiexxmrigloaderminerpersistencespywarestealertrojanworm
10
Reported
241126-cv9xrayrbz
26-11-2024 02:25 UTC
2024-11-26_db93400050537c7db6136e7aae7a8368_bkransomware_hawkeye_icedid
discoveryexecutionphorphiexxmrigloaderminerpersistencespywarestealertrojanworm
10
Reported
241125-1a1ekstpcq
25-11-2024 21:27 UTC
2024-11-25_afecaaf4b2dcd72b5573fbcd0610732a_cobalt-strike_ryuk
discoveryexecutionphorphiexxmrigloaderminerpersistencespywarestealertrojanworm
10
Reported
241125-1akdcsxkcz
25-11-2024 21:26 UTC
2024-11-25_847b677750eee60cec9cbdb6dfcc9d51_cobalt-strike_ryuk
discoveryexecutionphorphiexxmrigloaderminerpersistencespywarestealertrojanworm
10
Reported
241125-z8184atncr
25-11-2024 21:24 UTC
2024-11-25_5a5dbc125577288f490f6d568d3133e4_cobalt-strike_ryuk
discoveryexecutionphorphiexxmrigloaderminerpersistencespywarestealertrojanworm
10
Reported
241125-y6vg4a1mfm
25-11-2024 20:24 UTC
5eab2c8952f35b1f3b7f29a08daaabb593bc0eddc449a62999c6391c6a27cb3a.exe
discoveryevasionphorphiexloadertrojanworm
10
Reported
241124-29n19s1lej
24-11-2024 23:17 UTC
5f974771b827e521b0b81c0a30913ba8b5d955eaa3e12202e15c89a295e4454b
discoveryexecutionphorphiexxmrigloaderminerpersistencespywarestealertrojanworm
10
Reported
241123-y7jrzsvla1
23-11-2024 20:25 UTC
2024-11-23_669c8cc562e81ad860e00c411b9c7b58_bkransomware
discoveryexecutionphorphiexxmrigloaderminerpersistencespywarestealertrojanworm
10
Reported
241123-y6jets1mar
23-11-2024 20:23 UTC
2024-11-23_433c39d908c32d8efd034ed1819e536a_icedid
discoveryexecutionphorphiexxmrigloaderminerpersistencespywarestealertrojanworm
10
Reported
241123-bm9rcatqby
23-11-2024 01:16 UTC
pp.exe
discoveryexecutionphorphiexxmrigloaderminerpersistencetrojanworm
10
Reported
241120-2la5hazjfn
20-11-2024 22:39 UTC
4363463463464363463463463.exe.zip
aspackv2backdoor091024250720237c4393defaultdefault_valencigamarsoffice04sigortataletg cloud @rlreborn admin @fatherofcarderscollectioncredential_accessdefense_evasiondiscoveryevasionexecutionamadeyammyyadminasyncratcobaltstrikecryptbotflawedammyygurculummametasploitnetsupportphemedronephorphiexquasarredlinesectopratstealcxmrigxwormimpactinfostealerloaderminerpersistencephishingprivilege_escalationpyinstallerransomwareratspywarestealertrojanupxvmprotectworm
10
Reported
241120-t1tw6azjfy
20-11-2024 16:31 UTC
4363463463464363463463463.exe.zip
backdoorbotnet14082024@oleh_pspa21440e9f7223be06be5f5e2f94969c7defaultdiamotrixoffice04tg cloud @rlreborn admin @fatherofcarderscredential_accessdefense_evasiondiscoveryevasionexecutionammyyadminasyncratavoslockerflawedammyymetasploitphorphiexquasarredlinevidarxmrigxwormzharkbotimpactinfostealerloaderminerpersistencepyinstallerransomwareratspywarestealerthemidatrojanupxworm
10
Reported
241120-gtdv5ssnes
20-11-2024 06:05 UTC
4363463463464363463463463.exe.zip
backdoorbootkitbotnet0910241176f21a72eb06939ea478753d5c4df4b2bd32aryszxdefaultdiamotrixjavalogsdilleroffice04svhosttg cloud @rlreborn admin @fatherofcarderscollectioncredential_accessdefense_evasiondiscoveryevasionexecutionamadeyasyncratavoslockerberbewcobaltstrikecryptbotdcratdharmagurculockbitlokibotmetasploitmimikatzneshtanjratphorphiexquasarredlineriseprostealcvidarxmrigxwormzharkbotimpactinfostealerloaderminerpersistenceprivilege_escalationpyinstallerransomwareratspywarestealerthemidatrojanupxvmprotectworm
10
Reported
241120-gqchxascje
20-11-2024 06:00 UTC
4363463463464363463463463.exe.zip
backdoorbanker30072024defaultgrouptg cloud @rlreborn admin @fatherofcarderscredential_accessdefense_evasiondiscoveryevasionexecutionberbewdcratemotetmeshagentnjratphorphiexquasarredlinesectopratsliverstealcvidarxmrigxworminfostealerloaderminerpersistenceprivilege_escalationpyinstallerratspywarestealerthemidatrojanupxvmprotectworm
10
Reported
241120-gk2kvaxkgn
20-11-2024 05:52 UTC
4363463463464363463463463.exe.zip
backdoorbootkit100 rnd2ee1445fc63bc20d0e7966867b13e0e19c9aa5amdefault_valencigafed3aamain-pcmarsremotehosttg@cvv88888collectioncredential_accessdefense_evasiondiscoveryevasionexecutionamadeyasyncratdcratdharmagurculockbitlummametasploitnanocorephorphiexquasarredlineremcosstealcvidarxmrigxwormimpactinfostealerkeyloggerloaderminerpersistenceprivilege_escalationpyinstallerransomwareratspywarestealerthemidatrojanworm
10
Reported
241118-1sd93a1lfr
18-11-2024 21:54 UTC
4363463463464363463463463.exe.zip
backdoorbotnet09102425072023608ae071401962557c43939c9aa5defaultdefault2df523263f44cc8d55414a260a0197e4adiamotrixhackedlivetrafficmainnewbundle2newofficeoffice04tg@cvv88888credential_accessdiscoveryevasionexecutionexploitamadeyammyyadminasyncratcryptbotflawedammyylummametasploitneshtanjratphorphiexquasarredlinesectopratstealcvidarxmrigxwormzharkbotinfostealerloaderminerpersistenceprivilege_escalationpyinstallerratspywarestealerthemidatrojanupxvmprotectworm
10
Reported