Netfilter Rootkit Samples

	A	B	C	D	E	F	G	H	I	J	K	L	M	N	O	P	Q	R	S	T	U	V	W	X	Y	Z	AA	AB	AC	AD	AE	AF	AG	AH	AI	AJ	AK	AL	AM	AN
1	Lookup Hash	Rating	Positives	Virus	File Names	First Submitted	Last Submitted	File Type	MD5	SHA1	SHA256	Imphash	Harmless	Revoked	Expired	Trusted	Signed	Signer	Hybrid Analysis Sample	MalShare Sample	VirusBay Sample	MISP	MISP Events	URLhaus	AnyRun	CAPE	VALHALLA	User Comments	Microsoft	Kaspersky	McAfee	CrowdStrike	TrendMicro	ESET-NOD32	Symantec	F-Secure	Sophos	GData
2	04e88b7717aadc6b56dfa006b9414fc2c899c398d7e003627770e07fed52edfd	malicious	25	Microsoft: Program:Win32/Wacapew.C!ml / McAfee: Artemis!8A66CCF9261A / CrowdStrike: win/malicious_confidence_90% (W) / GData: Trojan.GenericKD.37107279	sdl	6/15/21 16:14	6/16/21 16:15	Win32 EXE	8a66ccf9261a0cc08a6ad085d6dd4055	8b860c5d34254290769d40d703625f774c213e00	04e88b7717aadc6b56dfa006b9414fc2c899c398d7e003627770e07fed52edfd	7de9cfe0bdee43624ca3dd090f8a405c	FALSE	FALSE	FALSE	FALSE	FALSE	-	FALSE	FALSE	FALSE	FALSE		FALSE	FALSE	FALSE	[]	['-']	Program:Win32/Wacapew.C!ml	-	Artemis!8A66CCF9261A	win/malicious_confidence_90% (W)	-	-	-	-	-	Trojan.GenericKD.37107279
3	4a229ab274e364df92cc46ecbc9faab32f7b0955dab982658313f2faf9410863	malicious	49	Microsoft: Trojan:Win32/Casdet!rfn / Kaspersky: Trojan-Downloader.Win32.Stantinko.gjwy / McAfee: RDN/Generic Downloader.x / CrowdStrike: win/malicious_confidence_60% (W) / TrendMicro: TROJ_GEN.R002C0PF821 / Sophos: Mal/UPXHack-A / GData: Trojan.GenericKD.46432528	sdl	6/5/21 16:11	6/5/21 16:11	Win32 EXE	fd969b03b439284ff7a31c39cd336f25	6a8c00b703a5d6b8c82878628978db9bf282d6ae	4a229ab274e364df92cc46ecbc9faab32f7b0955dab982658313f2faf9410863	fc785ac8507eb2f8e2af81f89b4cb6fd	FALSE	FALSE	FALSE	FALSE	FALSE	-	FALSE	FALSE	FALSE	FALSE		FALSE	FALSE	FALSE	[]	['-']	Trojan:Win32/Casdet!rfn	Trojan-Downloader.Win32.Stantinko.gjwy	RDN/Generic Downloader.x	win/malicious_confidence_60% (W)	TROJ_GEN.R002C0PF821	-	-	-	Mal/UPXHack-A	Trojan.GenericKD.46432528
4	63d61549030fcf46ff1dc138122580b4364f0fe99e6b068bc6a3d6903656aff0	malicious	17	Microsoft: Trojan:Win64/Retliften.A / McAfee: Artemis!0BD3B9F55A2D / TrendMicro: TROJ_FRS.0NA104FI21 / ESET-NOD32: Win64/Agent.AOD / GData: Win64.Rootkit.Netfilter.N	netfilter.sys, d6	6/12/21 18:04	6/12/21 18:04	Win32 EXE	0bd3b9f55a2d3a13f506d9d8b970e0de	f023177aca17f6dc90fdd9588240cb16c70a9fe2	63d61549030fcf46ff1dc138122580b4364f0fe99e6b068bc6a3d6903656aff0	d252001e327cf09463aba69fb4de2125	FALSE	FALSE	FALSE	FALSE	TRUE	Microsoft Windows Hardware Compatibility Publisher	Microsoft Windows Third Party Component CA 2012	Microsoft Root Certificate Authority 2010	TRUE	FALSE	FALSE	FALSE		FALSE	FALSE	FALSE	[]	['thor', 'thor', 'khahn']	Trojan:Win64/Retliften.A	-	Artemis!0BD3B9F55A2D	-	TROJ_FRS.0NA104FI21	Win64/Agent.AOD	-	-	-	Win64.Rootkit.Netfilter.N
5	659e0d1b2405cadfa560fe648cbf6866720dd40bb6f4081d3dce2dffe20595d9	malicious	34	Microsoft: Trojan:Win32/Hynamer.C!ml / Kaspersky: UDS:DangerousObject.Multi.Generic / McAfee: Artemis!83720E64AA13 / CrowdStrike: win/malicious_confidence_90% (W) / Symantec: ML.Attribute.HighConfidence / Sophos: ML/PE-A / GData: Gen:Trojan.Heur.PT.aiW@aG6Jqhl	sdl	4/16/21 9:27	4/16/21 9:27	Win32 EXE	83720e64aa1388d55324a22536bd39cd	8fa3636a7697f953d7daa02a313981b9e3bc98e4	659e0d1b2405cadfa560fe648cbf6866720dd40bb6f4081d3dce2dffe20595d9	7e3bbc4aa48a3d61a7b995aba939311c	FALSE	FALSE	FALSE	FALSE	FALSE	-	TRUE	FALSE	FALSE	FALSE		FALSE	TRUE	FALSE	[]	['-']	Trojan:Win32/Hynamer.C!ml	UDS:DangerousObject.Multi.Generic	Artemis!83720E64AA13	win/malicious_confidence_90% (W)	-	-	ML.Attribute.HighConfidence	-	ML/PE-A	Gen:Trojan.Heur.PT.aiW@aG6Jqhl
6	6c856c3c315c0f213684045da3203692c07c3da5df755155fd8b128fb447c437	malicious	31	Microsoft: Program:Win32/Wacapew.C!ml / Kaspersky: HEUR:Trojan.Win32.Agent.gen / McAfee: Artemis!5BF9F601188A / Symantec: ML.Attribute.HighConfidence / Sophos: Mal/Generic-S / GData: Trojan.GenericKD.36697886	5bf9f601188a4b11a8baf9b2abbd18fa.virus	4/12/21 1:05	4/12/21 1:05	Win32 EXE	5bf9f601188a4b11a8baf9b2abbd18fa	125ea078bc3cc79b34bec8141391acaf2d69ffe2	6c856c3c315c0f213684045da3203692c07c3da5df755155fd8b128fb447c437	ce4f5e973ee00c64e01844fd345452dd	FALSE	FALSE	FALSE	FALSE	FALSE	-	FALSE	FALSE	FALSE	FALSE		FALSE	FALSE	FALSE	[]	['-']	Program:Win32/Wacapew.C!ml	HEUR:Trojan.Win32.Agent.gen	Artemis!5BF9F601188A	-	-	-	ML.Attribute.HighConfidence	-	Mal/Generic-S	Trojan.GenericKD.36697886
7	8249e9c0ac0840a36d9a5b9ff3e217198a2f533159acd4bf3d9b0132cc079870	malicious	13	Microsoft: Trojan:Win32/Retliften.A / McAfee: Artemis!0E2D4679F687 / ESET-NOD32: Win32/Agent.ADFG / GData: Win32.Rootkit.Netfilter.O	netfilter.sys	6/2/21 16:14	6/2/21 16:14	Win32 EXE	0e2d4679f68796e9dd0d663137cb9e12	7cb3ea53660dbc1b4fe12e0c03c7bfea0a3c92a2	8249e9c0ac0840a36d9a5b9ff3e217198a2f533159acd4bf3d9b0132cc079870	b5403fb8687d7afd40fd8cf3b4dfe29b	FALSE	FALSE	FALSE	FALSE	TRUE	Microsoft Windows Hardware Compatibility Publisher	Microsoft Windows Third Party Component CA 2012	Microsoft Root Certificate Authority 2010	TRUE	FALSE	FALSE	FALSE		FALSE	TRUE	FALSE	[]	['-']	Trojan:Win32/Retliften.A	-	Artemis!0E2D4679F687	-	-	Win32/Agent.ADFG	-	-	-	Win32.Rootkit.Netfilter.O
8	9804787b31e0025dd2ae9344ca1beae2e701cdf8fd77a60f424295dc9280dc89	malicious	38	Microsoft: Trojan:Script/Phonzy.A!ml / Kaspersky: HEUR:Trojan.Win32.Agent.gen / McAfee: Artemis!145E3C224E4E / CrowdStrike: win/malicious_confidence_100% (W) / Symantec: ML.Attribute.HighConfidence / GData: Gen:Variant.Doina.6915	145e3c224e4ecaf26d4638efb9d622a7.virus	4/3/21 20:47	4/3/21 20:47	Win32 EXE	145e3c224e4ecaf26d4638efb9d622a7	70d5b0be6ed51e43c0a19b773cead8793257bbc1	9804787b31e0025dd2ae9344ca1beae2e701cdf8fd77a60f424295dc9280dc89	70621d2ef55d2dd65a1fa41928fe3d0f	FALSE	FALSE	FALSE	FALSE	FALSE	-	TRUE	FALSE	FALSE	FALSE		FALSE	FALSE	FALSE	[]	['-']	Trojan:Script/Phonzy.A!ml	HEUR:Trojan.Win32.Agent.gen	Artemis!145E3C224E4E	win/malicious_confidence_100% (W)	-	-	ML.Attribute.HighConfidence	-	-	Gen:Variant.Doina.6915
9	a3e8ea5e593176f9e66c17f6a200fa665c7ef409c97f49aadf5a55ad6b0be97e	malicious	19	McAfee: RDN/Generic.hbg / CrowdStrike: win/malicious_confidence_90% (W) / GData: Gen:Variant.Razy.877806	sdl	6/14/21 18:51	6/14/21 18:51	Win32 EXE	491a38f52692a88f5e97a1107c06a9f5	4a4609839b846f384f1b6f3a9a945bf3119d2f9c	a3e8ea5e593176f9e66c17f6a200fa665c7ef409c97f49aadf5a55ad6b0be97e	7de9cfe0bdee43624ca3dd090f8a405c	FALSE	FALSE	FALSE	FALSE	FALSE	Microsoft Corporation	Microsoft Code Signing PCA 2011	Microsoft Root Certificate Authority 2011	FALSE	FALSE	FALSE	FALSE		FALSE	FALSE	FALSE	[]	['-']	-	-	RDN/Generic.hbg	win/malicious_confidence_90% (W)	-	-	-	-	-	Gen:Variant.Razy.877806
10	a5c873085f36f69f29bb8895eb199d42ce86b16da62c56680917149b97e6dac4	malicious	47	Microsoft: Trojan:Win32/Tiggre!rfn / Kaspersky: Trojan-Downloader.Win32.Stantinko.gjwx / McAfee: Artemis!8BF00EF4DD6B / CrowdStrike: win/malicious_confidence_100% (W) / TrendMicro: Trojan.Win32.STANTINKO.USMANF421 / Symantec: Trojan.Gen.2 / Sophos: Mal/Generic-S / GData: Gen:Variant.Doris.9146	sdl	6/2/21 16:12	6/2/21 16:12	Win32 EXE	8bf00ef4dd6bb308c76849901b03ccbd	04e8a8d30869cf60ad42825667224d5cd01ade15	a5c873085f36f69f29bb8895eb199d42ce86b16da62c56680917149b97e6dac4	7e3bbc4aa48a3d61a7b995aba939311c	FALSE	FALSE	FALSE	FALSE	FALSE	-	TRUE	FALSE	FALSE	FALSE		FALSE	FALSE	FALSE	[]	['-']	Trojan:Win32/Tiggre!rfn	Trojan-Downloader.Win32.Stantinko.gjwx	Artemis!8BF00EF4DD6B	win/malicious_confidence_100% (W)	Trojan.Win32.STANTINKO.USMANF421	-	Trojan.Gen.2	-	Mal/Generic-S	Gen:Variant.Doris.9146
11	b16c3ed44cd04b033621ada7f9ab89d830949b3c9dc26999d862ddbeb7cc5a86	malicious	25	Microsoft: Program:Win32/Wacapew.C!ml / Kaspersky: UDS:DangerousObject.Multi.Generic / McAfee: Artemis!31D3F0AE33C7 / CrowdStrike: win/malicious_confidence_90% (W) / Symantec: ML.Attribute.HighConfidence / Sophos: ML/PE-A / GData: Trojan.GenericKD.46480791	sdl	6/13/21 16:10	6/13/21 16:11	Win32 EXE	31d3f0ae33c72beff48c9459b132d24d	f5bf9d483e0a204e7ff59fc092b4e580951802ca	b16c3ed44cd04b033621ada7f9ab89d830949b3c9dc26999d862ddbeb7cc5a86	7de9cfe0bdee43624ca3dd090f8a405c	FALSE	FALSE	FALSE	FALSE	FALSE	-	FALSE	FALSE	FALSE	FALSE		FALSE	FALSE	FALSE	[]	['-']	Program:Win32/Wacapew.C!ml	UDS:DangerousObject.Multi.Generic	Artemis!31D3F0AE33C7	win/malicious_confidence_90% (W)	-	-	ML.Attribute.HighConfidence	-	ML/PE-A	Trojan.GenericKD.46480791
12	bbc58fd69ce5fed6691dd8d2084e9b728add808ffd5ea8b42ac284b686f77d9a	malicious	23	Microsoft: Trojan:Win64/Retliften.A / McAfee: Artemis!530F12F80581 / TrendMicro: TROJ_FRS.0NA104FI21 / ESET-NOD32: Win64/Agent.AOD / GData: Win64.Rootkit.Netfilter.N	netfilter.sys, d6, file.sys	5/25/21 10:49	6/18/21 17:00	Win32 EXE	530f12f8058199964d0b41f1856185ec	8b04023990d18dcd5cc4c5538b332b017f3962fc	bbc58fd69ce5fed6691dd8d2084e9b728add808ffd5ea8b42ac284b686f77d9a	d252001e327cf09463aba69fb4de2125	FALSE	FALSE	FALSE	FALSE	TRUE	Microsoft Windows Hardware Compatibility Publisher	Microsoft Windows Third Party Component CA 2012	Microsoft Root Certificate Authority 2010	TRUE	FALSE	FALSE	FALSE		FALSE	FALSE	FALSE	[]	['khahn']	Trojan:Win64/Retliften.A	-	Artemis!530F12F80581	-	TROJ_FRS.0NA104FI21	Win64/Agent.AOD	-	-	-	Win64.Rootkit.Netfilter.N
13	bff9b75ae2eea49a765f79d9c67c997edb6c67a2cc720c6187dd2f67980acab7	malicious	53	Microsoft: Trojan:Win32/Multiverze / Kaspersky: Trojan-Downloader.Win32.Stantinko.gjxa / McAfee: Artemis!AA043913E02F / CrowdStrike: win/malicious_confidence_90% (W) / TrendMicro: TROJ_GEN.R03FC0GFA21 / ESET-NOD32: Win64/Agent.AOD / Symantec: ML.Attribute.HighConfidence / Sophos: Mal/Generic-S / GData: Win32.Rootkit.Netfilter.O	sdl	6/7/21 16:11	6/7/21 16:12	Win32 EXE	aa043913e02f124a4e7171fa40dfc9a2	73338b8931a3c265e8b544fa17de3056a3e56b59	bff9b75ae2eea49a765f79d9c67c997edb6c67a2cc720c6187dd2f67980acab7	8dab5adbb7713839714005d50ba76bb8	FALSE	FALSE	FALSE	FALSE	FALSE	-	TRUE	FALSE	FALSE	FALSE		FALSE	FALSE	FALSE	[]	['-']	Trojan:Win32/Multiverze	Trojan-Downloader.Win32.Stantinko.gjxa	Artemis!AA043913E02F	win/malicious_confidence_90% (W)	TROJ_GEN.R03FC0GFA21	Win64/Agent.AOD	ML.Attribute.HighConfidence	-	Mal/Generic-S	Win32.Rootkit.Netfilter.O
14	cb8e536680732b474a5c26970ace2087667622caa3dd82c1c56731a7c5a1c8ce	malicious	38	Microsoft: Trojan:Win32/Wacatac.B!ml / Kaspersky: HEUR:Trojan.Win32.Agent.gen / McAfee: RDN/Generic.dx / CrowdStrike: win/malicious_confidence_100% (W) / Symantec: ML.Attribute.HighConfidence / GData: Trojan.GenericKD.36588027	400c1c6312f99e4640077994bbfaedde.virus, sdl	3/28/21 16:20	3/28/21 16:20	Win32 EXE	400c1c6312f99e4640077994bbfaedde	657a875554b075eb7f2d314bbbe967c789624b30	cb8e536680732b474a5c26970ace2087667622caa3dd82c1c56731a7c5a1c8ce	abf3c9fa5452a2214a167cac8c6a73de	FALSE	FALSE	FALSE	FALSE	FALSE	-	TRUE	FALSE	FALSE	FALSE		FALSE	FALSE	FALSE	[]	['-']	Trojan:Win32/Wacatac.B!ml	HEUR:Trojan.Win32.Agent.gen	RDN/Generic.dx	win/malicious_confidence_100% (W)	-	-	ML.Attribute.HighConfidence	-	-	Trojan.GenericKD.36588027
15	d0a03a8905c4f695843bc4e9f2dd062b8fd7b0b00103236b5187ff3730750540	malicious	23	Microsoft: Program:Win32/Wacapew.C!ml / McAfee: GenericRXOX-EP!DA6B25206A29 / CrowdStrike: win/malicious_confidence_90% (W) / Sophos: ML/PE-A / GData: Trojan.GenericKD.46488506	sdl	6/14/21 16:12	6/14/21 16:12	Win32 EXE	da6b25206a29c8ac9a8cbb4be5d3875c	0e23cd5f100a035bd5ad521a6ad40454fda084c7	d0a03a8905c4f695843bc4e9f2dd062b8fd7b0b00103236b5187ff3730750540	7de9cfe0bdee43624ca3dd090f8a405c	FALSE	FALSE	FALSE	FALSE	FALSE	Microsoft Corporation	Microsoft Code Signing PCA 2011	Microsoft Root Certificate Authority 2011	TRUE	FALSE	FALSE	FALSE		FALSE	FALSE	FALSE	[]	['-']	Program:Win32/Wacapew.C!ml	-	GenericRXOX-EP!DA6B25206A29	win/malicious_confidence_90% (W)	-	-	-	-	ML/PE-A	Trojan.GenericKD.46488506
16	d64f906376f21677d0585e93dae8b36248f94be7091b01fd1d4381916a326afe	malicious	54	Microsoft: Trojan:Win32/Dridex!ml / Kaspersky: Trojan-Downloader.Win32.Stantinko.gjxd / McAfee: RDN/Generic.dx / CrowdStrike: win/malicious_confidence_80% (W) / TrendMicro: TROJ_GEN.R070C0PFE21 / ESET-NOD32: Win64/Agent.AOD / Symantec: ML.Attribute.HighConfidence / Sophos: Mal/Generic-S / GData: Win32.Rootkit.Netfilter.O	sdl	6/11/21 16:11	6/11/21 16:12	Win32 EXE	1c3db7002523e1acd621c90701c694ae	aee092fd31772d33932a7a02dd2d73ede67f7db0	d64f906376f21677d0585e93dae8b36248f94be7091b01fd1d4381916a326afe	8dab5adbb7713839714005d50ba76bb8	FALSE	FALSE	FALSE	FALSE	FALSE	-	TRUE	FALSE	FALSE	FALSE		FALSE	FALSE	FALSE	[]	['khahn']	Trojan:Win32/Dridex!ml	Trojan-Downloader.Win32.Stantinko.gjxd	RDN/Generic.dx	win/malicious_confidence_80% (W)	TROJ_GEN.R070C0PFE21	Win64/Agent.AOD	ML.Attribute.HighConfidence	-	Mal/Generic-S	Win32.Rootkit.Netfilter.O
17	e0afb8b937a5907fbe55a1d1cc7574e9304007ef33fa80ff3896e997a1beaf37	malicious	12	Microsoft: Trojan:Win32/Retliften.A / McAfee: Artemis!CB34374F1B5F / ESET-NOD32: Win32/Agent.ADFG / GData: Win32.Rootkit.Netfilter.O	netfilter.sys, d3	6/11/21 16:18	6/11/21 16:18	Win32 EXE	cb34374f1b5fb771076872c6b14b7501	118f688c30a2f6c2d1feb955f53ce4acf3086b3b	e0afb8b937a5907fbe55a1d1cc7574e9304007ef33fa80ff3896e997a1beaf37	b5403fb8687d7afd40fd8cf3b4dfe29b	FALSE	FALSE	FALSE	FALSE	TRUE	Microsoft Windows Hardware Compatibility Publisher	Microsoft Windows Third Party Component CA 2012	Microsoft Root Certificate Authority 2010	TRUE	FALSE	FALSE	FALSE		FALSE	TRUE	FALSE	[]	['thor', 'thor']	Trojan:Win32/Retliften.A	-	Artemis!CB34374F1B5F	-	-	Win32/Agent.ADFG	-	-	-	Win32.Rootkit.Netfilter.O
18	f83c357106a7d1d055b5cb75c8414aa3219354deb16ae9ee7efe8ee4c8c670ca	malicious	27	Microsoft: Trojan:Win64/Retliften.A / Kaspersky: HEUR:Trojan.Win64.MalDrv.gen / McAfee: Artemis!A57E4E3A3FA4 / TrendMicro: TROJ_FRS.0NA103FI21 / ESET-NOD32: Win64/Agent.AOD / GData: Trojan.GenericKD.46223767		4/19/21 6:19	4/19/21 6:19	Win32 EXE	a57e4e3a3fa46bbdbc9d803283af3479	4ede7f018c317ddc6a5f8f935f917621668cb1ec	f83c357106a7d1d055b5cb75c8414aa3219354deb16ae9ee7efe8ee4c8c670ca	d252001e327cf09463aba69fb4de2125	FALSE	FALSE	FALSE	FALSE	TRUE	Microsoft Windows Hardware Compatibility Publisher	Microsoft Windows Third Party Component CA 2012	Microsoft Root Certificate Authority 2010	TRUE	FALSE	FALSE	FALSE		FALSE	TRUE	FALSE	[]	['thor']	Trojan:Win64/Retliften.A	HEUR:Trojan.Win64.MalDrv.gen	Artemis!A57E4E3A3FA4	-	TROJ_FRS.0NA103FI21	Win64/Agent.AOD	-	-	-	Trojan.GenericKD.46223767
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100