Index

wwwq.bat Oct 11

a0b100a9e630e0e6ed3035e2bd835461bb33007bb354e271ad14b8b263eb5799 ✓ O₂(AsC)Md

99% obfuscated batch dropper

9e7fefec277860ee17f5b8620c594a6da5e4df7427f847b74e64a6cb4b5fa181.apk Sep 18

9e7fefec277860ee17f5b8620c594a6da5e4df7427f847b74e64a6cb4b5fa181 ✓ O₂(AsC)Md

vAlO94PsYI0j.apk Sep 15

2654e2389e20457172d935b2919b0c8f6712399075362c4f1e9fc26321abfec4 ✓ O₂(AsC)Md

5af59971935a51d745d4305e4c352f4ef384f3623ad7a7b4473b113a97c1b9ec.iso Jul 31

5af59971935a51d745d4305e4c352f4ef384f3623ad7a7b4473b113a97c1b9ec O₂(AsC)Md

99% ISO contains .NET reflection loader

35cd45fe0886a34247586537bf5b1aed29f5a8e40cb7055f715e052e9084543a.iso Jul 31

35cd45fe0886a34247586537bf5b1aed29f5a8e40cb7055f715e052e9084543a O₂(AsC)Md

99% ISO contains obfuscated .NET dropper

e9fc754844df1a7196a001ac3dfbcf28b80397a718a3ceb8d397378a6375ff62.iso Jul 31

e9fc754844df1a7196a001ac3dfbcf28b80397a718a3ceb8d397378a6375ff62 O₂(AsC)Md

99% ISO hides obfuscated PowerShell loader

dc3d9585811d3b9061b6e77e43e63da061e2e6f09ca1fcd5a0ac5e020f902e17.iso Jul 31

dc3d9585811d3b9061b6e77e43e63da061e2e6f09ca1fcd5a0ac5e020f902e17 O₂(AsC)Md

99% Obfuscated Java dropper in ISO

ecca4c734c96741f23dc4f03864cfa62408ecfb25b2a76010f4f106726ffbc80.iso Jul 31

ecca4c734c96741f23dc4f03864cfa62408ecfb25b2a76010f4f106726ffbc80 O₂(AsC)Md

99% ISO contains encoded WSH payload

e032f9a2df3b1da692dfca8d6bc256c29a8294f5d6fd0ace335e595068b5f0c5.iso Jul 31

e032f9a2df3b1da692dfca8d6bc256c29a8294f5d6fd0ace335e595068b5f0c5 O₂(AsC)Md

99% ISO .NET reflective loader dropper

109638b877ede704a66f28b1881255bacfcb9b1ad4a1023e11af266a63f9ac36.iso Jul 31

109638b877ede704a66f28b1881255bacfcb9b1ad4a1023e11af266a63f9ac36 O₂(AsC)Md

99% ISO dropper with .NET reflection loader

65571d8e6cdd5053d70579ce66365b2d0b01fabf14c6f86feb435a35a929fb93.iso Jul 31

65571d8e6cdd5053d70579ce66365b2d0b01fabf14c6f86feb435a35a929fb93 O₂(AsC)Md

99% ISO contains .NET reflection loader

f5fdfd64ee35404d0971d347d2e8172de0ceadb989171a2c1215ba89c0b8252f.iso Jul 31

f5fdfd64ee35404d0971d347d2e8172de0ceadb989171a2c1215ba89c0b8252f O₂(AsC)Md

99% ISO contains .NET reflection loader

d0211802a977e1e9f87a6f2bbd760170f4d0c0773d99339247f9b78867d8815a.iso Jul 31

d0211802a977e1e9f87a6f2bbd760170f4d0c0773d99339247f9b78867d8815a O₂(AsC)Md

99% ISO contains obfuscated .NET dropper

40ba01aaffa0dad87807e0b8fe4f0d3d5a8da63bd5d7193b56706d4cc0003a89.iso Jul 31

40ba01aaffa0dad87807e0b8fe4f0d3d5a8da63bd5d7193b56706d4cc0003a89 O₂(AsC)Md

99% ISO contains .NET reflection loader dropper

6e1a54bcb313944dd79bd62f5a8e755bb6266c8f4e5245b3af8570ce61573e3c.iso Jul 31

6e1a54bcb313944dd79bd62f5a8e755bb6266c8f4e5245b3af8570ce61573e3c O₂(AsC)Md

99% ISO contains obfuscated .NET dropper

c3533ac8efe42e657e4ce2443f7f358d9f732900ca797cfe83f11cf64e001304.iso Jul 31

c3533ac8efe42e657e4ce2443f7f358d9f732900ca797cfe83f11cf64e001304 O₂(AsC)Md

99% ISO contains .NET reflection loader

5e9aac829d0027873c993e9160b57a6590715189469676eeb78640e23f0ca012.iso Jul 31

5e9aac829d0027873c993e9160b57a6590715189469676eeb78640e23f0ca012 O₂(AsC)Md

99% Obfuscated .NET dropper in ISO

9e8e13d4d4166dfcc1fc5c661f80e446f7f63a62de42ce152f05de20b6ff649d.iso Jul 31

9e8e13d4d4166dfcc1fc5c661f80e446f7f63a62de42ce152f05de20b6ff649d O₂(AsC)Md

92% staging/embeddedreflection/iso

55b16b7a59c57bd5aef54aff5c8956e93a0b1f4568d43f00d7216084205c1c66.iso Jul 31

55b16b7a59c57bd5aef54aff5c8956e93a0b1f4568d43f00d7216084205c1c66 O₂(AsC)Md

99% ISO contains obfuscated .NET dropper

ec05736133f139881f78e5ad32179c048ed7b9337d763f47c4b2f1c5a7afbef2.iso Jul 31

ec05736133f139881f78e5ad32179c048ed7b9337d763f47c4b2f1c5a7afbef2 O₂(AsC)Md

99% ISO contains .NET reflection loader

3ff810efa7cabb7e4c91319244aa19d0460fad2b8500663441c7bff068014067.iso Jul 31

3ff810efa7cabb7e4c91319244aa19d0460fad2b8500663441c7bff068014067 O₂(AsC)Md

99% ISO contains obfuscated .NET dropper

eeba7a843ff95e803376996104be47346dfaf9e651723cc088e5caafed86ab77.iso Jul 31

eeba7a843ff95e803376996104be47346dfaf9e651723cc088e5caafed86ab77 O₂(AsC)Md

99% ISO contains .NET reflection loader

118354482a52b6b5b7f212830ba552d5935444c38f10bce7be702dbdf9d12dbd.iso Jul 31

118354482a52b6b5b7f212830ba552d5935444c38f10bce7be702dbdf9d12dbd O₂(AsC)Md

99% ISO dropper with .NET reflection loader

5a0b4673b76e22c6deb6a9999ca21099d07f3935adabf856b00ddd091fe95196.iso Jul 31

5a0b4673b76e22c6deb6a9999ca21099d07f3935adabf856b00ddd091fe95196 O₂(AsC)Md

99% ISO contains obfuscated .NET dropper

56da942b147f17cad3f589da6805e59d221934946ece3b6c125514ada57f684c.iso Jul 31

56da942b147f17cad3f589da6805e59d221934946ece3b6c125514ada57f684c O₂(AsC)Md

99% ISO contains obfuscated .NET dropper

3167a32d075d3c38d0c30d274ff51bcb77a23d7465788e295a3553556403776a.iso Jul 31

3167a32d075d3c38d0c30d274ff51bcb77a23d7465788e295a3553556403776a O₂(AsC)Md

99% ISO contains obfuscated .NET dropper

00c683daa732a0f64c8601e5c6ba8e006f84f9ed24180dea224f05c72d27baed.iso Jul 31

00c683daa732a0f64c8601e5c6ba8e006f84f9ed24180dea224f05c72d27baed O₂(AsC)Md

99% ISO dropper with .NET reflection loader

8475e2f204e215d1f8bb0c5a7c76f0e696423d79e3ffc0bece3d051222e374c3.iso Jul 31

8475e2f204e215d1f8bb0c5a7c76f0e696423d79e3ffc0bece3d051222e374c3 O₂(AsC)Md

99% ISO contains .NET reflection loader

1ed52900ce861165d4656527c56841109ccd8d32b6d46e8975d5d3802ab9a6c1.iso Jul 31

1ed52900ce861165d4656527c56841109ccd8d32b6d46e8975d5d3802ab9a6c1 O₂(AsC)Md

92% reflection/isostaging/embedded

Botnet Jul 26

0b6858ca0ce809991dc795c2b1ee41a03a774a8f824f84f68d312e545eb92d3e O₂(AsC)Md

5399184a8be51fce92edc8b1e3153459e36e1e5f253623481bf2e861491f94c8.bat Jul 18

5399184a8be51fce92edc8b1e3153459e36e1e5f253623481bf2e861491f94c8 ✓ O₂(AsC)Md

100% Rouki obfuscated batch malware loader

588e6ed7f440ff77b3dc294d6edcd72e23d8e367e07c905d92fb93404eed09de.wsf Jul 3

588e6ed7f440ff77b3dc294d6edcd72e23d8e367e07c905d92fb93404eed09de O₂(AsC)Md

100% Obfuscated WSH script with high-byte evasion

misfortune 0.1.2.1-207 Jul 3 arch

dfb762cdf5c43acd2b0936ac7429aa4e81497d35b776e2d41499e7c70efcaded O₂(AsC)Md

60% False positives in text data

53eee95df04e2db4b9582c284db560c4fd98d0702a56054b45536e158f7f7446.bat Jun 27

53eee95df04e2db4b9582c284db560c4fd98d0702a56054b45536e158f7f7446 O₂(AsC)Md

85% Obfuscated batch malware

9ac3ff0225bfb5a51c583b68df131c06e75e38f44244fd80f8e21e11bd94a957.bat Jun 27

9ac3ff0225bfb5a51c583b68df131c06e75e38f44244fd80f8e21e11bd94a957 O₂(AsC)Md

85% Abobus obfuscator indicates malware

6bf5abcdd7110ce950b92f4128c16e52cd2c9401f69955c1b112958ee64bcb0e.bat Jun 27

6bf5abcdd7110ce950b92f4128c16e52cd2c9401f69955c1b112958ee64bcb0e O₂(AsC)Md

b1229de39cb00e8c982795ee3cb3219e073574fdb2120055a85c07e9998dd89d.bat Jun 27

b1229de39cb00e8c982795ee3cb3219e073574fdb2120055a85c07e9998dd89d O₂(AsC)Md

85% Obfuscated batch malware

1c6ed67e1f3f3d53b5fd66132885058f3eab295a37942159c5cee1275c4afc96.bat Jun 27

1c6ed67e1f3f3d53b5fd66132885058f3eab295a37942159c5cee1275c4afc96 O₂(AsC)Md

85% Abobus obfuscator indicates malware

897dd4cbb4e4c37f7a752a736321d3c92d92624c95723ea4fc29cbca50ad4d60.bat Jun 27

897dd4cbb4e4c37f7a752a736321d3c92d92624c95723ea4fc29cbca50ad4d60 O₂(AsC)Md

85% Abobus obfuscator indicates malware

a25343f655582985ba05b7bed1134d7335574a9b1562cc47c3ac09a72917f446.bat Jun 27

a25343f655582985ba05b7bed1134d7335574a9b1562cc47c3ac09a72917f446 O₂(AsC)Md

85% Abobus obfuscator indicates malware

92e74013cefe3d821be9e4be0f68cb61929c143c6e69e005bafb79d3666f0bef.bat Jun 27

92e74013cefe3d821be9e4be0f68cb61929c143c6e69e005bafb79d3666f0bef O₂(AsC)Md

85% Abobus obfuscator indicates malware

61e9db26c03e7850f014dff5430495ada8406aea46fc4fbe237b68d3abc8e59d.bat Jun 27

61e9db26c03e7850f014dff5430495ada8406aea46fc4fbe237b68d3abc8e59d O₂(AsC)Md

85% Abobus obfuscator indicates malware

33bfe8f16c738aa611e809a77ba7b4b8701d33ed8ab729d123e283fe434fef9e.bat Jun 27

33bfe8f16c738aa611e809a77ba7b4b8701d33ed8ab729d123e283fe434fef9e O₂(AsC)Md

85% Abobus obfuscator indicates malware

6ca57459b733a492829acb51ec9b134b4ed13ef4efafe6f10bd0716633945008.bat Jun 27

6ca57459b733a492829acb51ec9b134b4ed13ef4efafe6f10bd0716633945008 O₂(AsC)Md

85% Abobus obfuscator indicates malware

63f3f149ea4accea79b181ae90569ac05fbc9c4a56dc6097d4f7c5373aecac36.bat Jun 27

63f3f149ea4accea79b181ae90569ac05fbc9c4a56dc6097d4f7c5373aecac36 O₂(AsC)Md

85% Abobus obfuscator indicates malware

6179ff3762d8205b2c4d81e3adefe1b93d1597a4ff6d833947e20073b999bbb0.bat Jun 27

6179ff3762d8205b2c4d81e3adefe1b93d1597a4ff6d833947e20073b999bbb0 O₂(AsC)Md

85% Obfuscated batch malware

aafec2b0c8ce51c8dd9b9ab9a85ebce09f4dce0f27e29fbe71f0be4f8657ba26.bat Jun 27

aafec2b0c8ce51c8dd9b9ab9a85ebce09f4dce0f27e29fbe71f0be4f8657ba26 O₂(AsC)Md

2b263ebe0799d770453033d075b5ed1daee4a36bde2451e9866354c046852198.bat Jun 27

2b263ebe0799d770453033d075b5ed1daee4a36bde2451e9866354c046852198 O₂(AsC)Md

85% Abobus obfuscator indicates malware

6a4060634a62ae634a594050c229d4bab58eeaa337d6d645de6d80fce6b70bd1.bat Jun 27

6a4060634a62ae634a594050c229d4bab58eeaa337d6d645de6d80fce6b70bd1 O₂(AsC)Md

85% Abobus obfuscator indicates malware

a128b85c24c08a629cf5399d7f3cf70108a1112ed59c2bf98b9e11a9ee749701.bat Jun 27

a128b85c24c08a629cf5399d7f3cf70108a1112ed59c2bf98b9e11a9ee749701 O₂(AsC)Md

85% Abobus obfuscator indicates malware

a6999c75fc017960d8221e51e6fd21904d517837b9646479a49998539931b546.bat Jun 27

a6999c75fc017960d8221e51e6fd21904d517837b9646479a49998539931b546 O₂(AsC)Md

85% Obfuscated batch malware

ba964723b240fa66837068184f6f4a11e309ee85e25b0d3fe1dc15f6a5fe9ef7.bat Jun 27

ba964723b240fa66837068184f6f4a11e309ee85e25b0d3fe1dc15f6a5fe9ef7 O₂(AsC)Md

85% Abobus obfuscator indicates malware

462fdb86855a912ee6c9a076c1a6f77973daea97df652cf47310976c7e58b340.bat Jun 27

462fdb86855a912ee6c9a076c1a6f77973daea97df652cf47310976c7e58b340 O₂(AsC)Md

85% Obfuscated batch malware with Abobus

misfortune 0.1.2.1-203 Jun 25 arch

52867f541ac7ab48a3f16a055d6484dd900d009c2f26c035424a466251f1506d O₂(AsC)Md

misfortune 0.1.2.1-201 Jun 24 arch

b4220de97a1e2a314eac20e7a09d8d1ad36559f2fdf680a0ff1aa627045a7f73 O₂(AsC)Md

misfortune 0.1.2.1-200 Jun 23 arch

da74ac3d9c5feaf1832ba9592d4ad5a67f57734b8da1d6152ddad20265722405 O₂(AsC)Md

misc/py-comfyui-workflow-templates-media-image 0.3.152 Jun 17 freebsd

7ea91e80c3dc5d660ac65239899a9b93b2d7bda230efe3718c3769245fcf9905 O₂(AsC)Md

JettyFilterInjectorTpl.java Jun 16

5e0d93c693ab0e085d97edbbe11e862cc440e9aec07f2e965326b30072c42335 O₂(AsC)Md

85% Reflective class loading and injection

8b645e3c3d914b12d5ad6acfc778aff4 May 21

ac34ab0d45353786b678f7e5dea983fee55d4f3a0972778845439717b4d066cb O₂(AsC)Md

thaiphon 0.6.2 May 19 python

b1d4d050abaf72e083ea60fa297fa448c3c3fd19b9d4aa0303415a0af8a983ec O₂(AsC)Md

35a04f4c8de8774eb25a2aae3496778813310290003541ce69b4b0b847ece650.bat May 18

35a04f4c8de8774eb25a2aae3496778813310290003541ce69b4b0b847ece650 O₂(AsC)Md

a28e27653070e97c1bff76407eecc9f40832f265ea4373babb30669854927b3a.bat May 18

a28e27653070e97c1bff76407eecc9f40832f265ea4373babb30669854927b3a O₂(AsC)Md

963d036682fc67d7afa813a0b18c78952bd39c7b9fde530288b61b498debc7a9.bat May 18

963d036682fc67d7afa813a0b18c78952bd39c7b9fde530288b61b498debc7a9 O₂(AsC)Md

2a91f68ecb550085680a192445ad710d8a73ceb4c1cf884ac81277993098f626.bat May 18

2a91f68ecb550085680a192445ad710d8a73ceb4c1cf884ac81277993098f626 O₂(AsC)Md

747546fb5b8020b4a3422ed52d40dc2a7291e88e0c3c3da94fbf72258d538747.js May 17

747546fb5b8020b4a3422ed52d40dc2a7291e88e0c3c3da94fbf72258d538747 O₂(AsC)Md

6357866d9a4110843c44f4a4986d50a0af5380f4e185373d062f123d73fe63d9.bat May 14

6357866d9a4110843c44f4a4986d50a0af5380f4e185373d062f123d73fe63d9 O₂(AsC)Md

f81e245a9e66e87936a2a6f09a71eec5014c2488a8cef657c9227d46f4588957.bat May 14

f81e245a9e66e87936a2a6f09a71eec5014c2488a8cef657c9227d46f4588957 O₂(AsC)Md

d90554b8cf36add67ceaaedfdcab5507eca5951197aed9b2a851485736640779.js May 13

d90554b8cf36add67ceaaedfdcab5507eca5951197aed9b2a851485736640779 O₂(AsC)Md

ConnectionInterface.php May 8 php-malware-analysis

ff73eba4934b8d9c07df224c291cee88cfaa5b4785a9e77d546df1dc0cb8c7db O₂(AsC)Md

autoload.php May 8 php-malware-analysis

524c199961d014eb806031bbed165c057f52af2cad8b3c740bfc1d3cd72d26a1 O₂(AsC)Md

notequal.php May 8 php-malware-analysis

3b2628ab72643ea3a331501dbec4dcc77c83a5777a5c989ecb57051b21af3344 O₂(AsC)Md

encode.php May 8 php-malware-analysis

4763c5604c4d99d5a1c640cd38397a1c49bb173f9207aed56440d7d90363b072 O₂(AsC)Md

d5dd657da18d9ebf72f9f1eba1489292 May 8 kaker-scripts

1c27a38537e44aea98db227207d904eefb868d0a82034b53be7b76f535371dc6 O₂(AsC)Md

9987c14dc4846070e656e9c1db92a9c9 May 8 kaker-scripts

e07e9502bac8e344b38416300fbf13a3a36917680823b5cf6485b7911a347bf0 O₂(AsC)Md

7166e27cd4d2deda4271cd2fc55e4af5 May 8 kaker-scripts

caa4df4fe59a6f55e7f87c00a7402e5bbca712ec7a4f3e773f7135c9371b73d8 O₂(AsC)Md

customizer-header.php May 8 awesome-malware

3d1fdc4c9b58c9a1d4a84ec86456885abe5e23ab27857931e82d57d026819072 O₂(AsC)Md

customizer-post.php May 8 awesome-malware

769d753c6978f10436039e2f6c5e33aca856cc52056d09b7d324f0ac63e1aa32 O₂(AsC)Md

matchRegexp.php May 7 cross-platform

1890ced34f09b6a1b0ae6019b06e461ef4983c218fe426ffa4f04113df7d7212 O₂(AsC)Md

hex.ps1 May 7 windows

f3fee4ae370d619586f29a74df1729e695549ac937d77ceb37021af2755516fd O₂(AsC)Md

opensearch-3-reporting 3.4.0-r4 May 2 linux

528559d52174cb2e03e6e73e39163948b65c82fc1deb0321791a5580cfefdc2d O₂(AsC)Md

jeejeepo_booter_fixed.txt May 1 The-Awesome-And-Dangerous-collection

f25d60bd25b1fad3f6614bc519ff4bbced9a6d3b8f742c1f21bbf83ad8816ed1 O₂(AsC)Md

Maketests Apr 24 freebsd-ports

a7ae5797d7ed0666a2d08fdd1803417884834f7512b5969d5708c7ee0605732c O₂(AsC)Md