We tested those patterns on 100 Backspace samples.
Disclaimer:
- These are live Windows malware
- Download them only if you know what you are doing
- Do not execute them on a (non sandboxed) machine
You can find them here: https://drive.google.com/open?id=1jmMsjOFUsez2gsAc9S6MF7MPKkry4qgL.
The .zip password is: PonaeR4oihei
- 010ca5e1de980f5f45f9d82027e1606c
- 0570066887f44bc6c82ebe033cad0451
- 062fe1336459a851bd0ea271bb2afe35
- 07bb30a2a42423e54f70af61e20edca3
- 08f299c2d8cfe1ae64d71dfb15fe6e8d
- 09010917cd00dc8ddd21aeb066877aa2
- 0a4fdacde69a566f53833500a0d53a35
- 0cdc35ffc222a714ee138b57d29c8749
- 0fcb4ffe2eb391421ec876286c9ddb6c
- 10aa368899774463a355f1397e6e5151
- 1133fe501fa4691b7f52e53706c80df9
- 12e1dcd71693b6f875a98aefbd4ec91a
- 139158fe63a0e46639cc20b754a7c38c
- 1dbb584e19499e26398fb0a7aa2a01b7
- 1f64afa4069036513604cbf651e53e0d
- 29395c528693b69233c1c12bef8a64b3
- 2a2b22aa94a59575ca1dea8dd489d2eb
- 2d75de9e1bb58fe61fd971bb720a49b7
- 310a4a62ba3765cbf8e8bbb9f324c503
- 3166baffecccd0934bdc657c01491094
- 37e568bed4ae057e548439dc811b4d3a
- 40601cf29c1bbfe0942d1ac914d8ce27
- 414854a9b40f7757ed7bfc6a1b01250f
- 428fc53c84e921ac518e54a5d055f54a
- 44992068aab25daa1decae93b25060af
- 49ee6365618b2a5819d36a48131e280c
- 4a41c422e9eb29f5d722700b060bca11
- 4b8531d294c020d5f856b58a5a23b238
- 4c10a1efed25b828e4785d9526507fbc
- 4c6b21e98ca03e0ef0910e07cef45dac
- 4e5c116d874bbaaf7d6dadec7be926f5
- 4ee00c46da143ba70f7e6270960823be
- 550459b31d8dabaad1923565b7e50242
- 572c9cd4388699347c0b2edb7c6f5e25
- 59e055cee87d8faf6f701293e5830b5a
- 5ae51243647b7d03a5cb20dccbc0d561
- 5b590798da581c894d8a87964763aa8b
- 5ddbd80720997f7a8ff53396e8e8b920
- 62e5d5e244059dc02654f497401615cc
- 646e2cfa6aa457013769e2b89454acf7
- 65232a8d555d7c4f7bc0d7c5da08c593
- 65b984b198359003a5a3b8aaf91af234
- 6791254f160e98ac1f46b4d506b695ad
- 6f931c15789d234881be8ae8ccfe33f4
- 71f25831681c19ea17b2f2a84a41bbfb
- 78c4fcee5b7fdbabf3b9941225d95166
- 7b111e1054b6b929de071c4f48386415
- 8022a4136a6200580962da94f3cdb905
- 8214b0e18fbcd5db6b008884e7685f2c
- 853a20f5fc6d16202828df132c41a061
- 8c713117af4ca6bbd69292a78069e75b
- 8c9db773d387bf9b3f2b6a532e4c937c
- 8da9373fc5b8320fb04d6202ca1eb6f1
- 8ff473bedbcc77df2c49a91167b1abeb
- 948a53450e1d7dc7535ea52ca7d5bddd
- 95bfe940816a89f168cacbc340eb4a5f
- 9c0cad1560cd0ffe2aa570621ef7d0a0
- 9c31551cd8087072d08c9004c0ce76c5
- 9cbcc68c9b913a5fda445fbc7558c658
- 9e3ef98abcfffcf3205261e09e06cba6
- a5ca2c5b4d8c0c1bc93570ed13dcab1a
- a813eba27b2166620bd75029cc1f04b0
- a9e8e402a7ee459e4896d0ba83543684
- ab153afbfbcfc8c67cf055b0111f0003
- acb2ba25ef225d820ac8a5923b746cb8
- ad044dc0e2e1eaa19cf031dbcff9d770
- af1c1c5d8031c4942630b6a10270d8f4
- b2138a57f723326eda5a26d2dec56851
- b5546842e08950bc17a438d785b5a019
- b590c15499448639c2748ff9e0d214b2
- b7b282c9e3eca888cbdb5a856e07e8bd
- ba80e3ad617e6998f3c4b003397db840
- c4dec6d69d8035d481e4f2c86f580e81
- c6e388ee5269239070e5ad7336d0bf59
- c90f798ccfbedb4bbe6c4568e0f05b68
- c9484902c7f1756b26244d6d644c9dd5
- c95cd106c1fecbd500f4b97566d8dc96
- cb1087b2add3245418257d648ac9e9a7
- cc06815e8d8c0083263651877decb44b
- cd1aa1c8cdf4a4ba8dc4309ce30ec263
- d28d67b4397b7ce1508d10bf3054ffe5
- d38e02eac7e3b299b46ff2607dd0f288
- d55514d8b97999453621a8614090cbf0
- d8248be5ed0f2f8f9787be331a18c36b
- d8e68db503f4155ed1aeba95d1f5e3e4
- d93026b1c6c828d0905a0868e4cbc55f
- da92b863095ee730aef6c6c541ab7697
- db3e5c2f2ce07c2d3fa38d6fc1ceb854
- dc95b0e8ecb22ad607fc912219a640c1
- df1799845b51300b03072c6569ab96d5
- e26a2afaaddfb09d9ede505c6f1cc4e3
- e3ae3cbc024e39121c87d73e87bb2210
- e62a63307deead5c9fcca6b9a2d51fb0
- ebf42e8b532e2f3b19046b028b5dfb23
- ec3905d8e100644ae96ad9b51d701a7f
- ed151602dea80f39173c2f7b1dd58e06
- f4a648a2382c51ca367be87d05628cff
- f97ec83d68362e4dff4756ed1101fea8
- fe211c7a081c1dac46e3935f7c614549
- ff00682b0b8c8d13b797d722d9048ea2