JohnGalt14's Pastebin

Germany 58,087 176,591 1 13 years ago

Name / Title	Added	Expires	Hits	Comments	Syntax
YARA Rule Riddle	Sep 27th, 2025	Never	14,414	3	YARA	-
Manipulated File in Malicious NPM Packages	Sep 8th, 2025	Never	13,957	6	JavaScript	-
Windows Batch Loader	Mar 29th, 2025	Never	1,002	1	Winbatch	-
JAVA Memory Shell	Feb 28th, 2025	Never	802	1	Java	-
JAVA Web Shell	Feb 28th, 2025	Never	10,166	7	Java	-
Java Shell	Feb 28th, 2025	Never	779	1	Java	-
PowerShell Loader - Obfuscated	Nov 7th, 2024	Never	3	0	PowerShell	-
StrelaStealer BATCH Obfuscated	Jul 12th, 2024	Never	5,993	3	Winbatch	-
Example: AI generated malicious script	Dec 28th, 2023	Never	2,334	13	PowerShell	-
PerlKit Webshell	Jan 20th, 2023	Never	8,406	3	Perl	-
Batch FUD Samples	Aug 19th, 2022	Never	1,159	7	None	-
Exif Exploit Payload	Apr 26th, 2022	Never	1,304	1	None	-
PowerShell Obfuscation with Space and Tab	Jan 21st, 2022	Never	2,432	1	PowerShell	-
bash_history	Jan 17th, 2022	Never	748	1	None	-
Obfusctaed PS1 Dec21	Dec 22nd, 2021	Never	2,254	1	PowerShell	-
Obfuscated PS1 Dec	Dec 22nd, 2021	Never	623	1	PowerShell	-
Zoho Desktop Central CVE-2021-44515 Detector	Dec 6th, 2021	Never	3,716	1	Java	-
Sigma Converter Targets : October 2021	Oct 22nd, 2021	Never	643	1	None	-
Related Files - MalDocs Jul 21	Jul 10th, 2021	Never	925	1	None	-
SilverFish config32.ini Sample B	Mar 19th, 2021	Never	11,228	3	INI file	-
SilverFish config32.ini Sample A	Mar 19th, 2021	Never	1,194	1	INI file	-
CS Custom Loader Pivot	Feb 11th, 2021	Never	967	1	None	-
Related Samples	Dec 30th, 2020	Never	1,044	1	None	-
XORed Shell Codes	Dec 9th, 2020	Never	1,142	1	None	-
Weekly CrackMe	Jul 1st, 2020	Never	878	1	None	-
AMSI_TN_bypass.txt	Jul 1st, 2020	Never	2,106	1	PowerShell	-
TA410 DLL	Jun 9th, 2020	Never	1,781	1	None	-
Translate Examples for GodMode Rule	May 18th, 2020	Never	2,468	1	Bash	-
Base64 + Reverse + Replaced Malware	Apr 6th, 2020	Never	2,083	1	None	-
China Chopper	Nov 19th, 2019	Never	887	1	None	-
VpsTools.bat	Oct 30th, 2019	Never	1,371	1	Batch	-
Bashfuscator Examples	May 25th, 2019	Never	1,272	1	None	-
APT10 Loader Samples	May 24th, 2019	Never	1,336	1	None	-
APT10 .NET Loader Samples	May 24th, 2019	Never	1,361	1	None	-
Malicious or Legitimate	May 19th, 2019	Never	2,051	1	JavaScript	-
Untitled	Apr 1st, 2019	Never	4,341	1	None	-
DKMC Matches	Mar 1st, 2019	Never	998	1	None	-
Metasploit User-Agents - no count	Feb 27th, 2019	Never	738	1	None	-
Metasploit Framework User Agents	Feb 27th, 2019	Never	2,254	1	None	-
Empire User Agents	Feb 27th, 2019	Never	2,052	1	None	-
st3.ps1 ISESteroids obfuscation	Jan 26th, 2019	Never	1,035	1	PowerShell	-
RAT / Patchwork / Imphash Pivot 2dfea0cb99dfd178aefd42a0ebb0	Jan 12th, 2019	Never	1,033	13	None	-
SUSP_Obfuscted_PowerShell_Code	Dec 13th, 2018	Never	827	1	None	-
APT34 Obfuscated Code	Dec 13th, 2018	Never	3,345	1	PowerShell	-
Malformed Zoomit	Dec 7th, 2016	Never	992	1	None	-
Dirty COW Samples	Oct 22nd, 2016	Never	1,538	1	None	-
Sofacy Samples - and YARA matches	Jun 14th, 2016	Never	1,397	1	None	-
Dubnium Rule Coverage	Jun 10th, 2016	Never	981	1	None	-
Petrya Samples	Mar 24th, 2016	Never	920	1	None	-
Chrome on OSX Automator - disabled NSA backdoored ciphers	Nov 5th, 2015	Never	1,097	1	Perl	-
Banker SHIFU Samples	Oct 31st, 2015	Never	1,893	1	None	-
Unit 78020 Malware Samples	Sep 24th, 2015	Never	1,911	1	Perl	-
Rocket Kitten 2 - Keylogger	Sep 3rd, 2015	Never	1,067	1	None	-
Emdivi Rule Results	Aug 21st, 2015	Never	865	1	None	-
Emdivi User Agent	Aug 20th, 2015	Never	1,245	1	None	-
Phishing campaign SWF CVE-2015-5119 exploit, payload matches	Aug 12th, 2015	Never	1,212	1	Python	-
KillString	Jul 23rd, 2015	Never	885	1	None	-
Simple PHP Webshell cloaked as GIF	Apr 5th, 2015	Never	1,551	1	PHP	-
PHP Webshell with GIF Header	Apr 3rd, 2015	Never	1,168	1	PHP	-
TurkisH-RuleZ SheLL / Webshell Gzipped as 1.CSS	Mar 16th, 2015	Never	1,178	1	Java	-
Microsoft Identifier used in EquationDrug Platform	Mar 11th, 2015	Never	1,033	1	Perl	-
BlackEnergy 2 Yara Rule	Feb 19th, 2015	Never	1,491	2	Perl	-
Equation Group Malware - Yara Signatures	Feb 16th, 2015	Never	6,555	1	Perl	-
Yara Rules from the Symantec Waterbug Report	Jan 26th, 2015	Never	1,470	1	Perl	-
Five Eyes QUERTY Malware Yara Rules	Jan 18th, 2015	Never	1,804	1	Perl	-
Targeted Destructive Malware - Yara Rules - US-CERT	Dec 20th, 2014	Never	1,094	1	Perl	-
BlueCoat Inception APT Report Yara Rules	Dec 10th, 2014	Never	1,093	1	Perl	-
Operation Cleaver Yara Rules	Dec 2nd, 2014	Never	1,365	1	Perl	-
Splunk Tags - Detect Regin Backdoor Logs Files	Nov 26th, 2014	Never	2,052	8	Perl	-
Regin Backdoor - Yara Rules	Nov 24th, 2014	Never	6,674	7	Perl	-
CN GUI Scanner Tool Yara Rule	Oct 4th, 2014	Never	1,067	1	Perl	-
PlugX APT Groups C2 Server	Jun 11th, 2014	Never	2,690	2	None	-
Nmap Script to detect Linksys "The Moon" malware	Feb 16th, 2014	Never	1,531	1	Lua	-
POSCardStealer B/R/S Spybot Yara Rule	Feb 10th, 2014	Never	947	1	Perl	-
Malware_Campaign_Jan14	Jan 15th, 2014	Never	1,009	1	Perl	-
YARA Rule - AutoIt Malware	Jun 21st, 2013	Never	815	1	Perl	-
Neurevt Malware Yara Rule	Jun 21st, 2013	Never	796	5	Perl	-
CVE-2013-3660 EPATHOBJ Exploit Code YARA Signatures	Jun 14th, 2013	Never	946	1	Perl	-
YARA Rules - NetTraveler	Jun 14th, 2013	Never	859	1	Perl	-