Index

Backdoor.ASP.Titshell.a Sep 12

6403cae8a39efdc7442c70bd314cf540ff109eea8e245e1a3619c147a3241a91 H₂(CmOs)Th

99% ASP webshell with command execution

Email-Worm.VBS.Triny.s Sep 11

c9ca157b272b217521c3dbeb7a4b55e6dc029fa911d3c2d8353cd10835594e63 H₂(CmOs)Th

Case/Anomalysend/outlook

VirusShare_cfca4869ae820ed170665dede2748095 Jun 17

8269384099f71c3f6ae561686ec7a466462d0b684d4eb2b72bed8c29512bb003 H₂(CmOs)Th

100% PHP webshell uploads malicious files

VirusShare_acb3b404b5363c9197bd182dad95b5c5 Jun 17

717b9447e7882070b26f9cda59242a3e4d98ff603c372143febc7b3e22d11fb8 H₂(CmOs)Th

100% PHP webshell with malicious path

180401bb5e239fa755c84cfd2a905807 Jun 17

2adda66e73cfb2a0f67b1efcde56c7f635386b2bda02e88ed2a76acaa8ebef6d H₂(CmOs)Th

100% PHP webshell file upload

[email protected] Jun 17

453dfc0c8866cb4736b075932542325a91c8ddfdcbfad4f267c72d71c1c813ae H₂(CmOs)Th

100% PHP webshell uploads arbitrary files

9a24c6894044a6b0de057dab8768f81d736c372ba7d3ed49bd7494b38164c03c.elf May 18

9a24c6894044a6b0de057dab8768f81d736c372ba7d3ed49bd7494b38164c03c H₂(CmOs)Th

3a4861106d76226099d4725979b7d95010900120e85f1034edc1a28b5e669680.elf May 17

3a4861106d76226099d4725979b7d95010900120e85f1034edc1a28b5e669680 H₂(CmOs)Th

99% Mirai/Gafgyt botnet signatures

3c3e63e781b5faf085b668cdeda4aaf369b5bba2688c5da7ef8ba34824a113c3.elf May 16

3c3e63e781b5faf085b668cdeda4aaf369b5bba2688c5da7ef8ba34824a113c3 H₂(CmOs)Th

trojan/mirai

4379488a25e16b72e7a44aab8221340f33fbbeb1b1e4a6caed37a7573bead093.elf May 16

4379488a25e16b72e7a44aab8221340f33fbbeb1b1e4a6caed37a7573bead093 H₂(CmOs)Th

99% Mirai/Gafgyt botnet signatures

870dd072fc95897b682967fb12583b56ae39e144a6845fbdf56488511f956157.elf May 14

870dd072fc95897b682967fb12583b56ae39e144a6845fbdf56488511f956157 H₂(CmOs)Th

100% CVE-2021-4034 exploit detected

69077e54f4b658a232a9a363ae3b5c2e9861e2248ad1b746ff14cb08f2dfd668.elf May 14

69077e54f4b658a232a9a363ae3b5c2e9861e2248ad1b746ff14cb08f2dfd668 H₂(CmOs)Th

99% Mirai botnet indicators

29d7f40fb08f4f8c0375dc87952bf60480f59d0fcdbe457357936ee508b0308f.elf May 14

29d7f40fb08f4f8c0375dc87952bf60480f59d0fcdbe457357936ee508b0308f H₂(CmOs)Th

99% Mirai/Gafgyt botnet signatures

ebcdc1e5488205aa306d3a1b05d1af709dc656f48cf41851279aabce1a2984d5.elf May 13

ebcdc1e5488205aa306d3a1b05d1af709dc656f48cf41851279aabce1a2984d5 H₂(CmOs)Th

80d7d535edefb1846919e96ba320a18734f93e28c9a564575fc5cf5f6a828243.elf May 13

80d7d535edefb1846919e96ba320a18734f93e28c9a564575fc5cf5f6a828243 H₂(CmOs)Th

522fee056aec9055f3d5251eb7a63601 May 8 kaker-scripts

81ac45eff4f8bd5f0b8e9d50420ac5fcb33c59ab3db17fb41b315886c74a9045 H₂(CmOs)Th