Antelox's Pastebin

4,602 23,249 0 10 years ago

Name / Title	Added	Expires	Hits	Comments	Syntax
Ramnit config	Nov 7th, 2019	Never	1,063	0	None	-
Deobfuscated Powershell	Mar 2nd, 2017	Never	1,423	0	PowerShell	-
Revslider deobfuscated - 27/10/2016	Oct 27th, 2016	Never	360	0	PHP	-
Pony panels	Oct 16th, 2016	Never	322	0	None	-
Pony panels	Oct 11th, 2016	Never	640	0	None	-
04/09/2016 - OTX Phishing pulse updated	Sep 4th, 2016	Never	305	0	None	-
New RAA ransomware variant - differences	Aug 29th, 2016	Never	1,515	11	None	-
phishing/scam - 28/08/2016	Aug 28th, 2016	Never	472	0	None	-
phishing/scam Apple - Android - Microsoft	Aug 27th, 2016	Never	327	0	None	-
Apple phishing - source code decrypted	Aug 1st, 2016	Never	383	0	HTML	-
Nemucod PHP script	Jul 28th, 2016	Never	456	0	PHP	-
Nemucod PHP variant - 27/07/2016	Jul 27th, 2016	Never	319	0	None	-
New Locky distribution sites - 15/07/2016	Jul 15th, 2016	Never	624	0	None	-
New Locky distribution sites - 12/07/2016	Jul 12th, 2016	Never	749	0	None	-
Cerber HTA file downloader	Jul 11th, 2016	Never	474	0	None	-
Nemucod PHP variant - 07/08/2016	Jul 8th, 2016	Never	303	0	None	-
Nemucod PHP variant - 07/07/2016	Jul 7th, 2016	Never	421	0	None	-
New Locky distribution sites - 29/06/2016 affid=3	Jun 29th, 2016	Never	625	0	None	-
Nemucod PHP variant - 06/29/2016	Jun 29th, 2016	Never	412	0	None	-
Nemucod PHP variant - 06/29/2016	Jun 29th, 2016	Never	393	0	None	-
New Locky distribution sites - 28/06/2016	Jun 28th, 2016	Never	348	0	None	-
New Locky distribution sites - 28/06/2016 continue	Jun 28th, 2016	Never	344	0	None	-
Nemucod PHP variant - 06/24/2016	Jun 24th, 2016	Never	432	0	None	-
List of targeted extensions by Locky - campaign 06/23/2016	Jun 23rd, 2016	Never	434	0	None	-
New Locky distribution sites - 23/06/2016	Jun 23rd, 2016	Never	835	0	None	-
New Locky distribution sites - 23/06/2016 continue	Jun 23rd, 2016	Never	392	0	None	-
New Locky distribution sites - 22/06/2016	Jun 21st, 2016	Never	1,745	0	None	-
RAA Ransomware note - 06/20/2016	Jun 20th, 2016	Never	701	0	None	-
Targeted extensions by PowerWare ransomware	Jun 18th, 2016	Never	510	0	None	-
PowerWare ransomware	Jun 18th, 2016	Never	641	0	PowerShell	-
PHP!Anuna deobfuscated	Jun 15th, 2016	Never	477	0	PHP	-
How Pony is launched	Jun 13th, 2016	Never	380	0	JavaScript	-
Locky JS Deobfuscated	Jun 3rd, 2016	Never	430	0	JavaScript	-
New Locky distribution sites - 31/05/2016	May 30th, 2016	Never	384	0	None	-
New Locky distribution sites - 20/05/2016	May 20th, 2016	Never	340	0	None	-
RevSlider - 11/05/2016	May 17th, 2016	Never	389	0	PHP	-
New Locky distribution sites - 14/05/2016	May 14th, 2016	Never	407	0	None	-
New Locky distribution sites - 12/05/2016	May 12th, 2016	Never	476	0	None	-
New Locky distribution sites - 10/05/2016	May 10th, 2016	Never	930	0	None	-
.hta deobfuscated	May 10th, 2016	Never	306	0	JavaScript	-
.hta obfuscated	May 10th, 2016	Never	496	0	HTML	-
JS in Spam mail - Lars Robbins agent Fedex	May 7th, 2016	Never	323	0	JavaScript	-