Index

Backdoor.Win32.VB.fkx Sep 12

b98c69cb0f48547575d842be6597490f57f44add6ee447d51564cb545fb467c1 Th

100% Named backdoor, signed PE

Backdoor.Win32.Rbot.byk Sep 12

a23bdab5ad7fd03ed45f098842099860a058dbf22d7d0837e80ec971aea342e4 Th

100% Rbot backdoor malware

Backdoor.Win32.Poison.hej Sep 12

0fb2ce7bbd17097d36816d2ba9eeab69522834dba65444bb6f5df3d77e494011 Th

JPCERT/Poisonivypoisonivy/poisonivy

Backdoor.Win32.Hupigon.esj Sep 12

e9e115a19dd97059120853ebb52e53d7ed3b2db2319beea4fd4670b0520e4a5a Th

100% Known backdoor malware

Backdoor.Win32.Poison.cxx Sep 12

e992717429f4c695fff5b6f199382285960882ce2b9880d99a7d10eba14f0893 Th

JPCERT/Poisonivypoisonivy/poisonivy

Backdoor.Win32.Poison.jed Sep 12

3bd6c347e7bdda957e8ee14d7faf710cee5dd080ed2c36ad05483ee517c83d58 Th

100% PoisonIvy backdoor detected

Backdoor.Win32.Hupigon.cqkf Sep 12

2c1adff0043b1faa00633154f4215331cbce376b7e38534b2fc168765c986350 Th

Honker/Webshell

Backdoor.Win32.Hupigon.cthk Sep 12

add323615c5cb57cd422be3648df90b9ad5443a3edf4b00335c76a4e082d9423 Th

Backdoor.Win32.Agent.hxl Sep 12

6ed11f993124adc37a56434dbfd7077608532a4ca02edfe62440e92f5125190a Th

100% Nitol malware detected

Backdoor.Win32.Nuclear.ai Sep 12

c74e249f8e234ff632f436c54c9d6dffabdfe517bc2ab3831d89adf28dec582c Th

100% Named backdoor, hacktool signature

Backdoor.Win32.Poison.cgk Sep 12

de51928692516aad2507819019ecdcdac07e9d8a5d1768367b87d3f0b335c2fe Th

100% Poison Ivy backdoor detected

Backdoor.Win32.Small.elt Sep 12

c140e28f880e5843f0d84f02bbd1e0858977ff4641ef76cd693edbd421633f99 Th

Malware/Jan19

Backdoor.Win32.PcClient.bgt Sep 12

211ed3d1ee311172f41c0802de878211a1e9b26de5f0f956f043b13c73191f0a Th

SigBase/Iisputscannesr

Backdoor.Win32.Poison.aik Sep 12

bfd1e40572b5d2b15fc7209d25d86bd4214b048430a72a420d3028ff73ddd93d Th

100% Named backdoor, malicious signature

Backdoor.Win32.Hupigon.atb Sep 12

9058363323c7c7bbafa4549cd8f704ba9164fb06387bbc7ce91650f9839b74f2 Th

SigBase/Iisputscannesr

Backdoor.Win32.Poison.fxn Sep 12

96561ba00f96756324a7651f2fca08783c51c8e70a678b53fd8937d81f767c78 Th

JPCERT/Poisonivypoisonivy/poisonivy

Backdoor.Win32.Bifrose.allh Sep 12

daf5790c36fb6750f5365b44df19bb8f7f892b71a72f941fe23b127e7f52f725 Th

100% Named Bifrose backdoor

Backdoor.Win32.Poison.fhc Sep 12

0ea6b4ddc88dc58538b46af32261b6300884383ff3a24d8c06cf96ef9befd051 Th

100% Poison Ivy backdoor detected

Backdoor.Win32.Poison.lre Sep 12

982c4fb19144443f054be8e911bef663c9778edfee1acc6bff4a266f3e90d9d3 Th

JPCERT/Poisonivypoisonivy/poisonivy

Backdoor.Win32.Poison.cyv Sep 12

5025b31b8e3ab2c9c30867b73de8b72dff91362f37227d62dc07461a172c1342 Th

100% Poison Ivy backdoor detected

Backdoor.Win32.Turkojan.bup Sep 12

1cf07e726eddce3d3866d6170b440e23b5e0cd867b41e3a4bc17c482a3f1ed63 Th

Honker/Webshell

Backdoor.Win32.Rbot.usy Sep 12

a58d4bbdddf31b12f6d93dba8971e1b2006000f9bbde1becbbadaf30d8b4ca3d Th

100% Named Rbot backdoor

Backdoor.Win32.Bifrose.wvq Sep 12

6ec19a28d98be31ec9d8dc86b938a56b1c924268e55c283ba8e079dabe537b9f Th

SigBase/Iisputscannesr

Backdoor.Win32.Poison.hxh Sep 12

3b934fa8d7ad1b3236a0d9b5c00501a3ee047653568715ec0c9233111602d578 Th

100% Named backdoor, sandbox evasion

Backdoor.Win32.PcClient.glw Sep 12

134db2788abeb3a75cf97cdcdea9bc2110c77fccb6a82d3f4fb8fface61facd9 Th

Update/Pcmain

Backdoor.Win32.Bifrose.za Sep 12

eeef4e4ef26fef7b5ed037b73c87ee4c9d5b9a511ddf2826271cdf3307dd05d9 Th

100% Named Bifrose backdoor

Backdoor.Win32.Rbot.cfo Sep 12

8e2ab981f86415237eae3a4d8e688e0aae029c4f04a02c6b2c49c52e60af5097 Th

100% Rbot backdoor malware

Backdoor.Win32.IRCBot.wt Sep 12

4dccc273e36b3b5c29f71e775cfc30485f9a459a6955ffcab47355ee5f582fba Th

100% Named IRC backdoor

Backdoor.Win32.Hupigon.vnd Sep 12

6fd870209bd33f40e440b554fb7fde2707dfa9ac5ce2785447270c446437cd31 Th

JPCERT/Poisonivypoisonivy/poisonivy

Backdoor.Win32.Hupigon.cqog Sep 12

85bebdcfa5774a78b38665e2e8b2137dedc4dae143690bf18030e9be088e8209 Th

String/Transforms

Backdoor.Win32.Bifrose.akzn Sep 12

68e59f3efb33905384e51685a72023af092bfe771b745a2126ae10e31b1042d0 Th

100% Named Bifrose backdoor

Backdoor.Win32.VB.ehd Sep 12

c53553e16cebfc8fdd3cf240a753c7706dff7f2805fd6185b75ec3aeec90cadc Th

100% Named backdoor, embedded executable

Backdoor.Win32.Hupigon.chtd Sep 12

e9d08a873d631f38e43a90b2a3b14b9ed95d51ab35ddc7c72ebbc5d35e207d6d Th

SigBase/Iisputscannesr

Backdoor.Win32.Bifrose.aarz Sep 12

ff76b70339b92017b1e995a7f41e846c5ef5876bf259c64d5d1b00c82f69ec77 Th

JPCERT/Poisonivypoisonivy/poisonivy

Backdoor.Win32.SdBot.ibw Sep 12

acea4ab2207a29e5ed4a3be5d73ff337dde4acd799b2774a9a0515f6ac18edf0 Th

100% SdBot backdoor with sandbox evasion

Backdoor.Win32.Poison.dgz Sep 12

1b5de42a8192ff5d30930660ce4e531f1665d9d47431ab260820e243dbe8eb36 Th

JPCERT/Poisonivypoisonivy/poisonivy

Backdoor.Win32.SdBot.euq Sep 12

1604f6b00e7ef14581c7deb867b350d48cd764ba9ec2c8d1f09cdfe335db7248 Th

100% Named SdBot backdoor

Backdoor.Win32.Kbot.dd Sep 12

54665c6fee27b7f48b846769e6185a0ad1ea158d16123e1fd1cd296e719ea292 Th

Backdoor.Win32.Httpbot.id Sep 12

1f0996a16a5b70e94aea26c7983384fb94a5530ba601efff65e45664c147d8ba Th

Malware/Jan19

Backdoor.Win32.Poison.kfq Sep 12

acd4b97eebf0c9b34ee83893ff65fe1f589df157dc94316b89c9b53c8d8277ef Th

100% Named backdoor, sandbox evasion

Backdoor.Win32.PcClient.gdz Sep 12

26efe9c3644a6b012db6f591b78bc0e428a514649ed189a41985d79805baf75f Th

Update/Pcmain

Backdoor.Win32.Poison.gvp Sep 12

2c086a484d1b7d7dcff2c9fde65b711603f8254ae18d09569dace789828599c6 Th

100% Poison Ivy backdoor detected

Backdoor.Win32.Poison.fxs Sep 12

17257e34de27fa99ccd5dfb92901501f99e15a3fb6b9afea338ebc3b4e0b801d Th

JPCERT/Poisonivypoisonivy/poisonivy

Backdoor.Win32.Nytroloh.ag Sep 12

6f0fe2a4340d334a67169de138ac6cf56630bc715a7f8e7d4cad68020223dfe1 Th

JPCERT/Poisonivypoisonivy/poisonivy

Backdoor.Win32.Poison.esr Sep 12

61e88577cc22fabf64c8f592a9848ec4aed172fbbf8dd28731400594a6d2dbd0 Th

100% Poison Ivy backdoor detected

Backdoor.Win32.Bifrose.yee Sep 12

c549d4524f2b6fe04e173db125481e395a503efff5cef2e1a6c0e7f3b77b390e Th

String/Transforms

Backdoor.Win32.Poison.etu Sep 12

98dc13f6a1aa92bffe7a6a50e64362a66902264a453458dd8593f15df7cafea7 Th

100% Poison Ivy backdoor detected

Backdoor.Win32.SdBot.efg Sep 12

05bf9ea264cf5d46fac727b50dbdb04164d338fe410704be9ce0f25995071b36 Th

100% Named SdBot backdoor

Backdoor.Win32.Poison.bwv Sep 12

1e5242b9412cfa76138c147439c9226a467162849dcc2a779c3e813904e2d57e Th

100% Poison Ivy backdoor signature

Backdoor.Win32.Poison.boq Sep 12

bbfb916fd7750feb130459ef79ad3f53c85bfeff7745f8be86e70860763c2d95 Th

100% Known PoisonIvy backdoor

Backdoor.Win32.Hupigon.dadd Sep 12

481b6980cd10db8528bfac880cfa40aa61ba49684bacf2603fa6dc0f7fad3942 Th

100% Known Hupigon backdoor malware

Backdoor.Win32.Rbot.rpi Sep 12

a9936ce957107840905b1d48d52eb60d0ae97acad69f0911d080cdb113679d40 Th

Honker/Webshell

Worm.Win32.Viking.hu Sep 12

b0f7226674f7b08e057d3a10cd8dbd44d8935b53004e05d5cd5113d511a0aea8 Th

1609/A

Worm.Win32.AutoRun.mfo Sep 12

929b1847a5330f780d28efed3fc902f0841a20bbff7c6841ea8961af9d5bc84c Th

100% Named worm, signed PE

Worm.Win32.AutoRun.lsp Sep 12

13999af31b36996d5ece41ea1f7fcc1c19eadfaa29cfcdf38b435222470125d8 Th

Knight/Auto

Worm.Win32.Viking.aq Sep 12

fa43f7f987984aa94dd998ebd2380c9713391246a0bc1344307d1729e2a517a3 Th

Worm.Win32.Viking.kt Sep 12

008e3b26be09466ea0a3d5d8f630f9679cf7cdc830aaace2230aadc0215ce5d2 Th

100% Known worm signature detected

Worm.Win32.AutoRun.eou Sep 12

22ee2f1587bef2a045387d37221f0b113ae617436c8cd97433837c97591baf24 Th

Flystudio/May18

Worm.Win32.FlyStudio.q Sep 12

aaecc85abad8171597bd7106f5b129d5420ee3aa10c11e6701900f169b8971d0 Th

100% Known worm signature

Worm.Win32.Viking.ix Sep 12

d01773712f6c513f19d74a81337d039b0e7103ab8c57369e44a130be25fdacbd Th

100% Known worm signature detected

Worm.Win32.AutoRun.cts Sep 12

1a392f87f9658629ff7252563024a35cba07e1be3c568f9fdb768f10e50c3a11 Th

Opcloudhopper/Malware

Worm.Win32.Viking.ea Sep 12

ef0028e73841dcb023d4ae60cf95db20f791aa36d53b3959e31181894597b734 Th

1609/A

Worm.Win32.Viking.an Sep 12

ced8a2579deb8add754d78ddb1de23bf3ba3caac3b5a11249f64948d5ef43ea4 Th

Worm.Win32.AutoRun.psk Sep 12

c674fdab2ac2b999b003725082a8ddba6fa60b780acec1c87fbbd963c31adb48 Th

Worm.Win32.Viking.cv Sep 12

b518654c3c41a8989e9c8665972bf79e5913cccbde1dba25790c9e4198fb26ac Th

38% 1609/A

Worm.Win32.AutoRun.qs Sep 12

1bc925038e7fc4e91210f3c687392b8bf9e5a407117daefece84b3acfd988657 Th

100% Named worm, pentest toolset

Worm.Win32.Small.z Sep 12

bbd1561680c5d7b71ed9272365b602b48dcb60c18ed80c735abdbef0732b5fc4 Th

Malware/Jan19

Worm.Win32.Viking.lu Sep 12

ceed45457f3309a19f271ca1aaf75b3d7c74c6784f3d59ef19eaa636b80ecf52 Th

100% Known worm with embedded PE

Worm.Win32.AutoRun.trw Sep 12

2df9250bc70cfaad8f083948d4c943b0e7caf586e29d0d35cb1096d3950d60ca Th

Constructor.Win32.Ace.a Sep 12

ce0c02b2a3b90dc5914d603e3c632e75cb0446b4fe667e4ff5af6cc1a452c67c Th

100% Webshell detected

Constructor.Win32.VB.he Sep 12

d4eaf6057c1a77baec84d7473387157618e4cce38aa628e8e9ddb08c79628d75 Th

100% Nitol malware signature detected

Trojan-PSW.Win32.QQPass.dru Sep 12

6478c007b2ae724b817a6974d7aed5f1f78e875a55cdcdaccd15bb294127f55e Th

Trojan-PSW.Win32.Agent.jj Sep 12

ec6126dc7ec2070b74122710956607bf8c9929d3ff8ad6dca2925276ab2cca09 Th

Trojan-PSW.Win32.OnLineGames.apgm Sep 12

b535bfa2d9b39edf9241b779d17e7263ef3a7618780a23dd6114dffad8e38b98 Th

Trojan-PSW.Win32.OnLineGames.aiih Sep 12

3fc024ba1442ac957a0b0c6518b6dbdd8dd667f6dad156f7b25483e9c428d25a Th

Trojan-PSW.Win32.QQPass.btd Sep 12

14371742b0c546ea2bb899a18e5a86e9ca8111b3afa974b75c9cc24397579599 Th

Trojan-PSW.Win32.QQPass.csp Sep 12

e8faa43f00e9cc5b299a765660fedec6232ad56673fd0eea74b8280e8f00025a Th

Trojan-PSW.Win32.QQPass.bhf Sep 12

f071386324aff08e3a71b4fba4284f162c5ddbc6b60769dd2f5c398e67cc49d6 Th

Trojan-PSW.Win32.Delf.wl Sep 12

1fdb931c8c34cf9a6e3ab15e7d2d9cd2347a91b61332e0af4e733f9eaffc4480 Th

Trojan-PSW.Win32.QQPass.dac Sep 12

75bc18b512b12f51f5121c3eff1a1e079a0e5554bdadbc7f710bbb64fed69ccc Th

Trojan-PSW.Win32.QQPass.cei Sep 12

90b1f8d66078888aa1ef774607bab50cbd19b8fe3b490e601750be16cde2c764 Th

Trojan-PSW.Win32.QQPass.afe Sep 12

af38aed3797b56a869c922ed9569b6cd3dae2916c96e9ff5aa8d5809e33292f8 Th

Trojan-PSW.Win32.OnLineGames.dz Sep 12

ef16b73e152799a8ddf8cc8cf11d5de05a0fffcc7836b207ec3cf017c2d53b1d Th

Trojan-PSW.Win32.OnLineGames.gf Sep 12

b2916f45122b62d869f753fcb8991118f9d9de2c78c7f5f494b2b9ddc38d7482 Th

100% Named password stealer

Trojan-PSW.Win32.OnLineGames.aqis Sep 12

bfcd3a08fb0e534e4bb05079781f5d390454643d550e9463aa1c633896e2a2d2 Th

Trojan-PSW.Win32.QQPass.bil Sep 12

388b1288938388723e5079ab326ba6f76df4fdb52b5add395603788ce7cd3b5c Th

Trojan-PSW.Win32.OnLineGames.anij Sep 12

12eaeeb194198ebf28634837fd2f883d423a47e9842966a67fa1f10bbe5582ff Th

Trojan-PSW.Win32.Magania.pcn Sep 12

328097fd0c1c925f243717bc002fefc63891d6c81ea78eaf4226c38f525ba3b4 Th

Trojan-PSW.Win32.Dina.a Sep 12

0c8e83d45c98f43a115260887549ce5c3584b90b52456871776d3cf6f3221e16 Th

100% Named password stealer

Trojan-PSW.Win32.QQPass.css Sep 12

237179899d15e3ec587efdc98d4a97c254231551b1eb02d9573b05fa9bed2838 Th

Trojan-PSW.Win32.QQPass.ctv Sep 12

4adf208d0f48c8ff1a6f87e4f9e657a82aea72469efff95558bb9c17e3126007 Th

Trojan-PSW.Win32.QQPass.dfe Sep 12

5698a8ea91074f786547337a8a10852265774db0bc18b2895b2b8e5f831e1822 Th

Trojan-PSW.Win32.QQPass.beu Sep 12

cfbd7685d026de3997d48a9e7833cb25e94f2495ffd471daa4449d3b78511fe7 Th

Trojan-PSW.Win32.QQPass.xl Sep 12

581154dd81277b7d6c44520009281c9245b7fe15102b8233548357d90d1c8a1c Th

Trojan-PSW.Win32.Agent.anm Sep 12

97fc5b5911f30865a1a76f0f7f91ef1781b979ab7f6f003326dd536c2de9604e Th

V4/LPK

Trojan-PSW.Win32.QQPass.adr Sep 12

5175e9ddcc842c0946843cd710413a396b0f97d9bc2f6316a56d30b13a1635af Th

Trojan-PSW.Win32.QQPass.cmk Sep 12

9c2abf5a47cc86bfc196be5e8402e2192881e1f303950e77dc80578e23a2eff4 Th

Trojan-PSW.Win32.OnLineGames.ajqt Sep 12

4d21e1b191686b7a156f209b2351abc44f422c3bd5dd5afbd082cb686aa5d2d1 Th

Trojan-PSW.Win32.QQPass.bwj Sep 12

b2934e9569bf5a3448c205d63aebb8d7849556a997c0194e128a81dc75dfa367 Th

Trojan-PSW.Win32.QQPass.can Sep 12

75d0ecc3c2c4ea748cad62416d777dd4d452d8f27fa63489111e769719e4441c Th