Search
Keyword: usojan.ps1.powload.jkp
* charlie aa123456 Aa123456 admin homelesspa password1 1q2w3e4r5t qwertyuiop 1qaz2wsx sa sasa sa123 sql2005 1 admin@123 sa2008 1111 passw0rd abc abc123 abcdefg sapassword Aa12345678 ABCabc123 sqlpassword
{e44a1809-4d10-4ab8-b343-3326b64c7cdd}" HKEY_CURRENT_USER\Software\Conduit\ ISM\IE _COUNTRY_CODE_ = "US" HKEY_CURRENT_USER\Software\Conduit\ ISM\IE _CRE_MODE_ = "1" HKEY_CURRENT_USER\Software\Conduit\ ISM\IE
Mimikatz Pass-The-Hash Capable of performing Brute Force Attack. It uses the following credentials: Username: Administrator admin Password: !@#$%^&* 000000 1 1111 111111 111111111 112233 11223344 12
This Backdoor arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It executes commands from a remote malicious user,
This malware is part of an attack chain that involves searching for exposed or publicly accessible Elasticsearch databases/servers. The malware would invoke a shell with an attacker-crafted search
This Ransomware encrypts files with the following extensions: 000 001 1 101 103 108 110 123 128 1cd 1sp 1st 3 3d 3d4 3dd 3df 3df8 3dm 3dr 3ds 3dxml 3fr 3g2 3ga 3gp 3gp2 3mm 3pr 3w 4w7 602 7z 7zip 8 89t
This Ransomware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It deletes the initially executed copy of itself. It
This Ransomware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It lowers the security setting of Internet Explorer.
rgss3a rha wwt wxmx wxp wyn wzn wzs x11 x16 xgml xht xhtml xif xig xis xjf xl xla xlam ync yps yuv z02 z04 zap zip zipx zoo $efs 000 001 1 101 103 108 110 123 128 1cd 1sp 1st 3 3d 3d4 3dd 3df 3df8 3dm 3dr
999999 Passw0rd 123qwe!@# football welcome 1 12 21 123 321 1234 12345 123123 123321 111111 654321 666666 121212 0 222222 888888 1111 555555 1234567 12345678 123456789 987654321 admin abc123 abcd1234
This Ransomware arrives as an attachment to email messages spammed by other malware/grayware or malicious users. It arrives on a system as a file dropped by other malware or as a file downloaded
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This Trojan arrives on a system as a
credentials: Username: administrator Password: 123456 password PASSWORD football welcome 1 12 21 123 321 1234 12345 123123 123321 111111 654321 666666 121212 000000 222222 888888 1111 555555 1234567 12345678
This Backdoor arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It executes commands from a remote malicious user,
\ Advanced Hidden = "1" (Note: The default value data of the said registry entry is {User preference} .) Web Browser Home Page and Search Page Modification This spyware modifies the Internet Explorer Zone
This Coinminer arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It deletes files in certain folders, disabling
System Modifications This Ransomware adds the following registry entries: HKEY_CURRENT_USER\Software\Microsoft\ Windows\CurrentVersion\Policies\ Explorer NoDesktop = 1 HKEY_CURRENT_USER\Software\Microsoft
This Potentially Unwanted Application arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This
In HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender DisableAntiSpyware = 1 Adds the following registry keys to allow macro to be inserted on document files: In HKEY_CURRENT_USER\Software
\Windows\regedit.exe It adds the following registry entries: HKEY_CURRENT_USER\Software\Microsoft\ Windows\CurrentVersion\Policies\ Explorer DisableCMD = 1 HKEY_CURRENT_USER\Software\Microsoft\ Windows