Index

Backdoor.Win32.Poison.ryf Sep 12

462541d9b61a0c3d96d6115e2baa08be9ba8bbf40910a919ad30aac62620a706 O(Al)H(Po₂)

96% Named backdoor, anti-analysis APIs

Backdoor.Win32.IRCBot.acl Sep 12

248056ca208a4700a8d2cdab42ad9a8039403487bc09c7ec4bf0822edc894d33 O(Al)H(Po₂)

94% Named IRC bot backdoor

Backdoor.Win32.Rbot.wgh Sep 12

3da410e4287f9a40bb4f7e81dc010d4d3504cedb3c1009f3717e1c3fa2de89d9 O(Al)H(Po₂)

96% Named Rbot backdoor binary

Backdoor.Win32.Poison.swd Sep 12

fa1e92f030e9b916df24ebecfe6e981612d3bf696fb910bdf7c0818475fe3230 O(Al)H(Po₂)

96% Named backdoor, anti-analysis APIs

Backdoor.Win32.Poison.sso Sep 12

8495ae705fea2ada0609b45f6a58076b22a4d386bbd97feec99fdef81bc1391d O(Al)H(Po₂)

96% Named backdoor, anti-analysis APIs

Worm.Win32.AutoRun.qtm Sep 12

58e7fc5c8fcbcfd3c1c33b06b3f8774528230a93d1bb1c86302dfca4a05f9213 O(Al)H(Po₂)

95% Worm with process injection

Trojan-Proxy.Win32.Mitglieder.cb Sep 12

a10f026cb39b8bd9250a452731597347a6856f805368559359536d4058d544ed O(Al)H(Po₂)

tool-detect/process

Trojan-Downloader.Win32.Delf.hto Sep 12

d396530f9c111e41577d43b31f29e71c969ad775f0be3a4c9b1063c0d32851c9 O(Al)H(Po₂)

Trojan.Win32.VB.vdl Sep 12

a939ecd2c40407692e29eb7012cab3f398854658dd945522592cea16e7e4d8af O(Al)H(Po₂)

pe-tampering/corrupted-header

Trojan.Win32.VB.itf Sep 12

e96f4396285e317d565f3e3339b1ae9532a6f919e55fec0206a7965c67f95adb O(Al)H(Po₂)

96% Trojan name, anti-debug APIs

upower 1.91.3-1 Jul 3 arch

61fb1fc99fb4ac7c37cf19eb2c1e3b895af797108ddcfc9b68a0d97d4b9c55b0 O(Al)H(Po₂)

61% Legitimate Arch Linux package

code-stats.nvim 0.1.0-1 Jun 23 lua

15152c65328d6d3880253fbad6b12bbbd819ecc15ee7461346c633ee3949f7d9 O(Al)H(Po₂)

80% Lua references tracer process names

qemu-guest-agent 11.0.0-11.fc45 Jun 13 fedora

c0b9427f22ff6086f0a33c4af7cb7cf191dd339cd2d1ae97b93e7c6d62e40d7b O(Al)H(Po₂)

ConPtyShell.cs May 21

741d42e6b64e04423ece771ac55d4068644bd6365cb6a617653b432ffb25a57c O(Al)H(Po₂)

829bd5f565e165ff8d718e9014ccd4404fa6d942e219e2b39179b5b44024daaa.exe May 16

829bd5f565e165ff8d718e9014ccd4404fa6d942e219e2b39179b5b44024daaa O(Al)H(Po₂)

TOML-Tiny 0.21 May 13 perl

be79c165c8b5c416faa267a64032945114b51e80727738451ec1586ad4b0d29c O(Al)H(Po₂)

cca0563ae1aac9447ba5e3f73cafc63a21671e478dc198695db6c698a2a17d2b.exe May 12

cca0563ae1aac9447ba5e3f73cafc63a21671e478dc198695db6c698a2a17d2b O(Al)H(Po₂)

injection.c May 1 windows

d8f1d4299f8d1108610e9403d3916ddde0abd6ee2bf95021ee9651e1731fa289 O(Al)H(Po₂)

barrelene-safety.cpp May 1 Malware2.0Database

b4a145fe926f99ac28e23724a3eba88c7c1b0988df695e85253d277f287a2318 O(Al)H(Po₂)