Search tag:Known C2 infrastructure

QuasarRat

Portable Executable fileRAT

12424064e68c62ea927e16acc4ec5e8f

MD5 12424064e68c62ea927e16acc4ec5e8f · SHA256 9e40aacf77d0caed41a3670eaa817ae178493ccfda[...]b8b

SOS: 0.32 Managed .NET PE File Layout Win 32 Exe x86 Malicious Known C2 infrastructure⚠ C2 patri00-42082.portmap.host

784.38 KB 4 days ago

njRat

Portable Executable fileRAT

293c3e20c87639896d2847bd8cfe71c8

MD5 293c3e20c87639896d2847bd8cfe71c8 · SHA256 d65e2eb84444c69bc58ea794056f7d2b00f517a484[...]585

SOS: 0.29 Managed .NET PE File Layout Win 32 Exe x86 Known C2 infrastructure⚠ C2 32.tcp.cpolar.top

56.32 KB 4 days ago

njRat

Portable Executable fileRAT

1fc7144ac1174488040af8d845eb6107

MD5 1fc7144ac1174488040af8d845eb6107 · SHA256 6bba006161f3d18b18495b329961b76ec1a6ad6e75[...]370

SOS: 0.29 Managed .NET PE File Layout Win 32 Exe x86 Known C2 infrastructure⚠ C2 32.tcp.cpolar.top

56.32 KB 5 days ago

Malicious

PowerShell Script

2c4f2816e2e354d4e399f4b12deae996

MD5 2c4f2816e2e354d4e399f4b12deae996 · SHA256 e5ff711ca8d505be6f83ac1cd7a1615143e7568c77[...]6a0

PowerShell T1059.001 T1105 Known C2 infrastructureC2 https[:]//nodejs.org/download/release/[...]x64.zipC2 https[:]//nodejs.org/download/release/[...]x86.zipC2 https[:]//nodejs.org/download/release/[...]m64.zip

13.03 KB 5 days ago

njRat

Portable Executable fileRAT

08637a5f2fb2789dd0f9e3f186001bed

MD5 08637a5f2fb2789dd0f9e3f186001bed · SHA256 6b39054cd0facc18c46cf4ad3bdab92072a34933fa[...]11c

Managed .NET PE File Layout Win 32 Exe x86 SOS: 0.26 Known C2 infrastructure⚠ C2 xuiandreya-53112.portmap.host

44.03 KB 6 days ago

njRat

Portable Executable fileRAT

0a85e9263cd4dc174ecdcc628447a2b5

MD5 0a85e9263cd4dc174ecdcc628447a2b5 · SHA256 165619e61ebf6feb78b2b78f1fa407540e71712e6f[...]aff

Managed .NET PE File Layout Win 32 Exe x86 SOS: 0.29 Known C2 infrastructure⚠ C2 33.tcp.cpolar.top

56.32 KB 9 days ago

XBinder

Portable Executable fileLoaderCrypterRAT

d2c20418550c97b75a6f0aa15aef57d1

MD5 d2c20418550c97b75a6f0aa15aef57d1 · SHA256 98379ccde6fc0517a749bdfb4fa3a384ccc8dbb86f[...]d87

Malicious XBinder Resource SOS: 0.82 Managed .NET PE File Layout Win 32 Exe x86 SOS: 0.96 Known C2 infrastructure⚠ C2 valid-rpg.gl.at.ply.gg

362.5 KB 9 days ago

XBinder

Portable Executable fileLoaderCrypterRAT

0706cd387a4eba2beaf3325911a4957d

MD5 0706cd387a4eba2beaf3325911a4957d · SHA256 51ef64b51fbc68f3fdffa43e7c0d89fad5a522a53d[...]067

Managed .NET PE File Layout Win 32 Exe x86 SOS: 0.85 Malicious XBinder Resource SOS: 0.93 Known C2 infrastructure⚠ C2 Artexxiz-64097.portmap.host

100.35 KB 9 days ago

Malicious

ZIP archive

14201c51d9407b1b10e1c39eb3a349e4

MD5 14201c51d9407b1b10e1c39eb3a349e4 · SHA256 eaaa4bc79fde2741c391726f90fe393f63e0be136a[...]c79

Malicious LOLBin T1218: System Binary Proxy Execution LOLBin:cmd.exe Execution: CMD in LNK T1059.003 T1202: Indirect Command Execution T1204.002 Execution: PowerShell in LNK T1059.001⚠ C2 https[:]//cliff-entire-thinks-once.try[...]vic.png

1.39 MB 17 days ago

Malicious

HTML file

8de4893e0d37a176c9028b270c07a21a

MD5 8de4893e0d37a176c9028b270c07a21a · SHA256 051fbc556893b59270e63cbbd2fcb18ca1a8d8c28c[...]e90

PowerShell T1059.001 Powershell: Hidden Execution Contains Base64 Block Base64 Block T1105 T1027 DeObfuscated Known C2 infrastructure⚠ C2 https[:]//hardly-signatures-loc-surf.t[...]ate.ps1

18.39 KB 18 days ago

DcRat

Portable Executable fileRAT

dcf43d26d9539424c87e7c1658f702d9

MD5 dcf43d26d9539424c87e7c1658f702d9 · SHA256 f70d9ba4d86e23fcad6e2173cf17c08d31c4a87355[...]8ee

SOS: 0.26 Managed .NET PE File Layout Win 32 Exe x86 Known C2 infrastructure⚠ C2 anarchy10.duckdns.org

65.54 KB one month ago

njRat

Portable Executable fileRAT

198adff053c489a0608a4952bb2608ce

MD5 198adff053c489a0608a4952bb2608ce · SHA256 bc8de4497ab08ddbc33aa7ce4a50b4550f132e9a6d[...]ed8

SOS: 0.29 Managed .NET PE File Layout Win 32 Exe x86 Known C2 infrastructure⚠ C2 32.tcp.cpolar.top

56.32 KB one month ago

njRat

Portable Executable fileRAT

284ad6b6c0c24e56c56b681f4492a1e3

MD5 284ad6b6c0c24e56c56b681f4492a1e3 · SHA256 d7d42055585aaf602b8a00d8d62afe4150da70b606[...]5ab

Managed .NET PE File Layout Win 32 Exe x86 SOS: 0.27 Known C2 infrastructure⚠ C2 joaoszr3.ddns.net

33.79 KB one month ago

XBinder

Portable Executable fileLoaderCrypterRAT

01af93c099eda51a2b46fb2108fc1e2a

MD5 01af93c099eda51a2b46fb2108fc1e2a · SHA256 f9ac08dc0d9d265ba44e7b256cc554cd9a741ca2a7[...]024

Managed .NET PE File Layout Win 32 Exe x86 Malicious SOS: 0.18 XBinder Resource SOS: 0.29 SOS: 0.23 SOS: 0.40⚠ C2 8.tcp.cpolar.top

2.27 MB one month ago

njRat

Portable Executable fileRAT

364546dc5ef5bac9c45058d02f7b5b1d

MD5 364546dc5ef5bac9c45058d02f7b5b1d · SHA256 c6022364b4690bc9ed47ad9c4f36828edb26447983[...]58f

Managed .NET PE File Layout Win 32 Exe x86 SOS: 0.29 Known C2 infrastructure⚠ C2 11.tcp.cpolar.top

56.32 KB one month ago

Malicious

Microsoft Office document

577e05630d004293f6bbf580f5d880fb

MD5 577e05630d004293f6bbf580f5d880fb · SHA256 0bb0df4532ac09f270020c14b6aa3c430af126d4e0[...]b42

CAB:COMPRESSION:LZX PowerShell T1059.001 T1105 Known C2 infrastructure⚠ C2 https[:]//notaemitida.dynv6.net⚠ C2 https[:]//notaemitida.dynv6.net/headless-deps.zip

61.44 KB 2 months ago

Search results