Webshells
fe8c3512fb69d95dda0bf8be3504303db17372b1	Backdoor.ASP.WEBSHELL.SMYXBH5A
112d93779df978005e8bb296e27cc3f4966fa36d	Backdoor.ASP.WEBSHELL.SMYXBH5A
e4af7325151280caa16040d50b4c38c038a030b7	Backdoor.ASP.WEBSHELL.SMYXBH5A	
8cceb378eb83f589e87417d75aca132f8879206a	Backdoor.ASP.WEBSHELL.SMYXBH5A
98b261e1d0fc77e4a45ee70d1e633f810a444b4b	Backdoor.ASP.WEBSHELL.SMYXBH5A
e4e21af4b344b3015f2d1bc4e379f91616fc8ae2	Backdoor.ASP.WEBSHELL.SMYXBH5A
d9f7735ee128f29e8e058a292144badda534a63b	Backdoor.ASP.WEBSHELL.SMYXBH5A
7701707d563eb744f13589688526c8420b61b859	Backdoor.ASP.WEBSHELL.SMYXBH5A
f6df68f27dafa699f6bfaab5d60b276623a6c608	Backdoor.ASP.WEBSHELL.SMYXBH5A
b290614f85d44fcd5234f1fa81a7a549d3287a2b	Backdoor.ASP.WEBSHELL.SMYXBH5A
1ffdc233034198c64fef76cd58bb4adcea0f00a9	Backdoor.ASP.WEBSHELL.SMYXBH5A
5093be336fa3fa79c7f582bdfdabe10527295ba0	Backdoor.ASP.WEBSHELL.SMYXBH5A
dc82e060bda5d7a41aa477e23c31fa969bab82ed	Backdoor.ASP.WEBSHELL.SMYXBH5A
5f5d676311420a673bd1d5f1a65078aae8ee4742	Backdoor.ASP.WEBSHELL.SMYXBH5A
3b163d6fa3f6fa6e18aefee223777d2bd04b1911	Backdoor.ASP.WEBSHELL.SMYXBH5A
1b76a07c8b417b6f4f288c1cd1bef02b07605f00	Backdoor.ASP.WEBSHELL.SMYXBH5A
2402020e1081461258aff54af44ffd5052f98aa1	Backdoor.ASP.WEBSHELL.SMYXBH5A
29b196fa82a6a692e52af266b7fe43b2661a2e31	Backdoor.ASP.WEBSHELL.SMYXBH5A

Cobalt Strike
f0f5f5de1c182c4905a51c1f132866a234818706	Backdoor.Win32.COBEACON.OSLJDO
f1063e55ef96e0fabd39645e51e98a08d9595ace	Backdoor.Win32.COBEACON.OSLJDO
e525616b726cfe39f320a19f9dae8d0bbe9729c6	Backdoor.Win32.COBEACON.OSLJDO

C&C Cobalt Strike
updatedaemon.com

C&C Cobalt Strike IP Address
51.83.57.149
5.255.100.242

BlackCat
9373F26B9C872047A1BEFD2E776889FDED4F360D	Ransom.Win32.BLACKCAT.YXCCY & Troj.Win32.TRX.XXPE50FFF054
97d5153f43eb48b9c2b12ba1f7857173da0e4143	Ransom.Win32.BLACKCAT.YXCCY & Troj.Win32.TRX.XXPE50FFF054
928d66f4fe8da031daccfb7642324f1e10f31ce0	Trojan.XML.BLACKCAT.YXCCY

CrackMapExec
619652b42afe5fb0e3719d7aeda7a5494ab193e8	HackTool.Win32.Mpacket.SM