datasets · Index

208499 May 1 datasets

5c0876aef09abb814796e59ffaf0d4db1c7acffb27ed8ebe2d96a49b55f0fe97 H₆(CmDbMgOs₂Po₄Ti)Md₃(Bi₂PaSi₃)Th

90% Legitimate Microsoft Visual Studio binary

233122 May 1 datasets

97d27e1225b472a63c88ac9cfb813019b72598b9dd2d70fe93f324f7d034fb95 K(Te)H₅(CmF₅Os₃Po₂Ti)Md₄(Bi₄PaSi₃)Th

90% Legitimate Microsoft SDelete tool

243885 May 1 datasets

bfb1655f0fe89d35dc9a55e8693a9bd62a2c22f31fbbc2785eac1a56b3008ecc H₂(MgPo₄)Md₃(BiPaSi₃)Th

90% Legitimate Microsoft Visual Studio DLL

465732 May 1 datasets

f24aba60e4df097c9f4a39fd91020f76cbbac0c259c39742343b050382d6427d K(Am)H₃(Cm₂OsPo₂)Md₃(BiPaSi₂)Th

93% Hyperbro backdoor signature detected

210035 May 1 datasets

5f1c81b8fc1f9b810e4d0122bb0f795775c6a179aeadd28ee06ede52a3a4c4bc K(Am)H₇(CmDb₂F₂Hf₂MgOs₄Po₅)Md₃(Bi₃PaSi₂)Th

93% Stolen certificate, process injection APIs

209428 May 1 datasets

5def75d7d7522cc77fe838abe1e89a291baf10fa149399bd7db188785784ede4 K(Am)H₅(Cm₂DbOs₄PoTi)Md₃(BiPaSi₃)Th

90% Stolen certificate, registry manipulation

231580 May 1 datasets

92d5d402b52c0c34103e101f9aecc0ffb40b12a9d6f03ddf156c8efaa7c32d69 H₄(CmFOs₅Po₄)Md₃(Bi₃PaSi₂)Th

90% Legitimate signed TechSmith Snagit DLL

239362 May 1 datasets

ab6e6b5d810bcc821d8f0e0c875367e54a0e3a83b305b0d49fd4565797e15580 K(Am)O(As₂)H₅(CmCr₃Db₂OsPo₃)Md₄(BiBkPaSi₄)Th

93% Obfuscated .NET with process injection APIs

187562 May 1 datasets

15d8548de44587f3bd37e5c4068f34c4747e5ba80433429c01324d04f4821d7a K(Am)H₅(Cm₃DbOs₆Po₇Ti)Md₄(Bi₂PaSi₃)Th

93% stolen certificate signature

190527 May 1 datasets

22df865b2df8f8302f5150ba6a1214ca5acb0b0abe0b8d09827f8e6f2d1032f7 K(Am)H₇(CmDb₂F₂Hf₂MgOs₄Po₅)Md₃(Bi₃PaSi₂)Th

93% Stolen certificate, process injection APIs

214292 May 1 datasets

69ab190c9eb85f6169a6b7b8d14dcc5894d39296e7d5e96cff1dc008a8c038e9 K(Am)H₅(CmDb₂HfOs₄Po₂)Md₂(Bi₄Pa)Th

90% Legitimate Dell printer driver binary

454891 May 1 datasets

6fef51a0e1555c2c3173e237a2cb8c4b7beca91ef407a18f5b316f529339f05e K(Li)O₂(Er₅Pr)H₅(CrDbOs₆Po₅Ti)Md₄(Bi₆PaSi)

80% unsigned fake amsi.dll with malware PDB path

228655 May 1 datasets

8bf3e2a1091de35c8517b107bacd266cc6d328e9604d8440d2e20665fcf6e130 K(Am)H₃(CmDsPo)Md₂(Bi₃Pa)Th

93% Yara rule matches Cobratransform

225290 May 1 datasets

82d7264274bd05149572a50ae6e9dfaf4ec5b3ad020a19ffaa287502a447051a K(Am)H₇(CmDb₂F₂Hf₂MgOs₄Po₅)Md₃(Bi₃PaSi₂)Th

93% Stolen certificate, process injection APIs

188105 May 1 datasets

182fe90c25c062249f0b8549058378373df5ca72a798a40aaaf143f20717e1c0 K(Am)H₄(CmDb₂OsPo)Md₂(PaSi₂)Th

90% Legitimate TechSmith updater binary

209147 May 1 datasets

5d5e395de5ca3557faf955a96f7ee79c3b9f71930e096958f9e3a1256e7fd961 K(Am)H₇(CmDb₃F₃Hf₂MgOs₄Po₅)Md₃(Bi₃PaSi₂)Th

93% Stolen certificate, suspicious API usage

201568 May 1 datasets

4c21bd70c821e0765ef326f84a760b491c553112fad1f96997db5091fcfa2234 K(Am)O(Pr)H₇(CmDb₂F₃Hf₂MgOs₄Po₆)Md₃(Bi₃PaSi₂)Th

93% Stolen certificate, suspicious API imports

221179 May 1 datasets

79908f93dbe8e1006706d35fb44c64b278a9bd13993bc29f69ed9807f992eb6a K(Te)H₆(DbF₂MgOs₃Po₂Ti)Md₃(Bi₂Pa)Th₂

90% Known offensive reconnaissance tool

251588 May 1 datasets

e2be658d5ee5eb9d7a4557717c56c873b8fc2024efff96cf6b52a517957bfbcf K(Li)H₅(FMgOsPo₃Ti)Md₃(Bi₃Pa)Th

90% Legitimate Java launcher

254739 May 1 datasets

f17c66299624184d1c0f3d65b5ff719057380c3c808ea4e15ab020323337ee63 KH(Cm)Md₃(Bi₂PaSi₃)Th

90% Legitimate NetSupport client binary

c3dc71edc05a9e1778bbea6757b65c1f9b2f491615cb68ba686eedafb3afc0f5.exe Apr 30 datasets

c3dc71edc05a9e1778bbea6757b65c1f9b2f491615cb68ba686eedafb3afc0f5 O(Pr)H₅(Db₂FOs₂Po₂U)Md₃(Bi₂PaSi₄)Th

90% Legitimate Microsoft HelpLibManager.exe

CNET_23363.msi Apr 29 datasets

92a0c8a34eb7f64c5951fa1f5de2faf764f0c92268e5952ab25f2ba561b398f9 O₆(Co₂AlAsCEr₂I)H₇(CmDb₂F₃Hf₂Os₆Po₆U₄)Md₃(Bi₂BkSi₂)

CNET_215299.exe Apr 29 datasets

88662df20827c6d1fa511a33d80fd84bf42ee14730e97a33c046add8df729cce O₄(As₄CCoEr₃)H₈(Cm₅Cr₄Db₁₄F₄HfOs₆Po₆U)Md₆(Bi₆PaPtSi₄)

99% Legitimate DevExpress-based business app

CNET_108092.exe Apr 29 datasets

17a02cc54bf59fb68cd7ec8d34a681604647b45ef6bb765776028e7cfddd07ac O₃(CErAs₃)H₅(CmCr₃Db₂OsPo₃)Md₄(Bi₃BkPaSi)Th

99% Reactor obfuscator, process injection, encrypted payload

CNET_245545.exe Apr 29 datasets

19d7fc24e2fe0aa138e8084ff2a31e4e249263382bbe37924c7cc7631f90b4c3 K₂(LiMc)O₂(C₂As₃)H₇(Cm₆Cr₅Db₁₀DsF₂Os₂Po₇)Md₆(Bi₂BkPaPtSi₃)Th

100% Embedded base64 PE payload

DriverUpdate.exe Apr 24 datasets

850ba8e48a2a2222eaea113d03bcf79b33b71231ee384bcfe5bc2bec54a843a1 K(Am)O(I)H₈(CmCrF₂Hf₃MgOs₁₀Po₉U₃)Md₄(BkPaSi₂)

99% Browser credential theft and process injection

launc.dll Apr 24 datasets

3865be53e2e03723a3fece2d7fd6a0cc846f83e0c6737a1c5e757177647daf85 KO(Er₅)H₃(Mg₃Os₃Po₆)Md(Bi₃)

99% Goldberg Social Club emulator injector