MalShare

SHA256 Hash	File type	Added	Source	Yara Hits
201c8572bbf19bf3327484e902e23a07fdd305f74e2c70282c3aa805006e4e41	PE32+	2017-10-18 03:36:00	User Submission	YRP/Microsoft_Visual_Cpp_80_DLL YRP/IsPE64 YRP/IsConsole YRP/HasRichSignature [+] YRP/domain YRP/IP YRP/contentis_base64 YRP/System_Tools YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/DebuggerException__ConsoleCtrl YRP/DebuggerException__SetConsoleCtrl YRP/anti_dbg YRP/inject_thread YRP/create_service YRP/network_tcp_socket YRP/escalate_priv YRP/screenshot YRP/rat_rdp YRP/rat_telnet YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Big_Numbers1 YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API FlorianRoth/PlugX_J16_Gen
284d8e8bcb9d1830cf37669f481d4e989244c5b6ba5e56f44a32d6006a117692	PE32+	2017-10-18 03:36:01	User Submission	YRP/Microsoft_Visual_Cpp_80_DLL YRP/IsPE64 YRP/IsConsole YRP/HasRichSignature [+] YRP/domain YRP/IP YRP/contentis_base64 YRP/System_Tools YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/DebuggerException__ConsoleCtrl YRP/DebuggerException__SetConsoleCtrl YRP/anti_dbg YRP/inject_thread YRP/create_service YRP/network_tcp_socket YRP/escalate_priv YRP/screenshot YRP/rat_rdp YRP/rat_telnet YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Big_Numbers1 YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API FlorianRoth/PlugX_J16_Gen
350df85f82048b259161f1786d42868a1ef7e23909bd3eb6949133dfc3e6093d	PE32+	2017-10-18 03:36:02	User Submission	YRP/Microsoft_Visual_Cpp_80_DLL YRP/IsPE64 YRP/IsConsole YRP/HasRichSignature [+] YRP/domain YRP/IP YRP/contentis_base64 YRP/System_Tools YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/DebuggerException__ConsoleCtrl YRP/DebuggerException__SetConsoleCtrl YRP/anti_dbg YRP/inject_thread YRP/create_service YRP/network_tcp_socket YRP/escalate_priv YRP/screenshot YRP/rat_rdp YRP/rat_telnet YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Big_Numbers1 YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API FlorianRoth/PlugX_J16_Gen
40039571d9a5c2c3f2ca44a05523dfb028793758787006f8fef87244adb178fd	PE32+	2017-10-18 03:36:04	User Submission	YRP/Microsoft_Visual_Cpp_80_DLL YRP/IsPE64 YRP/IsConsole YRP/HasRichSignature [+] YRP/domain YRP/IP YRP/contentis_base64 YRP/System_Tools YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/DebuggerException__ConsoleCtrl YRP/DebuggerException__SetConsoleCtrl YRP/anti_dbg YRP/inject_thread YRP/create_service YRP/network_tcp_socket YRP/escalate_priv YRP/screenshot YRP/rat_rdp YRP/rat_telnet YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Big_Numbers1 YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API FlorianRoth/PlugX_J16_Gen
561c25694083b96d3912b3096bc2e9f35ee84a1850ac2297ff6e2cac849dd670	PE32+	2017-10-18 03:36:05	User Submission	YRP/Microsoft_Visual_Cpp_80_DLL YRP/IsPE64 YRP/IsWindowsGUI YRP/HasRichSignature [+] YRP/domain YRP/contentis_base64 YRP/System_Tools YRP/Dropper_Strings YRP/DebuggerCheck__QueryInfo YRP/DebuggerException__ConsoleCtrl YRP/DebuggerException__SetConsoleCtrl YRP/anti_dbg YRP/inject_thread YRP/create_service YRP/escalate_priv YRP/screenshot YRP/rat_rdp YRP/rat_telnet YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Big_Numbers1 YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API FlorianRoth/PlugX_J16_Gen
6204fc88f6a4653d164b4be8b9654e2a98dc487adf42df91f3ec71de5db058f7	PE32+	2017-10-18 03:36:07	User Submission	YRP/Microsoft_Visual_Cpp_80_DLL YRP/IsPE64 YRP/IsConsole YRP/HasRichSignature [+] YRP/domain YRP/IP YRP/contentis_base64 YRP/System_Tools YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/DebuggerException__ConsoleCtrl YRP/DebuggerException__SetConsoleCtrl YRP/anti_dbg YRP/inject_thread YRP/create_service YRP/network_tcp_socket YRP/escalate_priv YRP/screenshot YRP/rat_rdp YRP/rat_telnet YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Big_Numbers1 YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API FlorianRoth/PlugX_J16_Gen
6f285afee1eac45c1aaad9e7d49e99a1cd2f399b12f7997d9fc8b5200b385fc6	PE32+	2017-10-18 03:36:08	User Submission	YRP/Microsoft_Visual_Cpp_80_DLL YRP/IsPE64 YRP/IsConsole YRP/HasRichSignature [+] YRP/domain YRP/IP YRP/contentis_base64 YRP/System_Tools YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/DebuggerException__ConsoleCtrl YRP/DebuggerException__SetConsoleCtrl YRP/anti_dbg YRP/inject_thread YRP/create_service YRP/network_tcp_socket YRP/escalate_priv YRP/screenshot YRP/rat_rdp YRP/rat_telnet YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Big_Numbers1 YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API FlorianRoth/PlugX_J16_Gen
89d2d7e1e441dc20b4a967aa00423da33bce68a55cf0e855e8d9ba3e6c5cbd72	PE32+	2017-10-18 03:36:09	User Submission	YRP/Microsoft_Visual_Cpp_80_DLL YRP/IsPE64 YRP/IsConsole YRP/HasRichSignature [+] YRP/domain YRP/IP YRP/contentis_base64 YRP/System_Tools YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/DebuggerException__ConsoleCtrl YRP/DebuggerException__SetConsoleCtrl YRP/anti_dbg YRP/inject_thread YRP/create_service YRP/network_tcp_socket YRP/escalate_priv YRP/screenshot YRP/rat_rdp YRP/rat_telnet YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Big_Numbers1 YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API FlorianRoth/PlugX_J16_Gen
91d8009c116c4cbfcf0c540084912e76587abdfa0b64facba85aa4418b2a3556	PE32+	2017-10-18 03:36:11	User Submission	YRP/Microsoft_Visual_Cpp_80_DLL YRP/IsPE64 YRP/IsConsole YRP/HasRichSignature [+] YRP/domain YRP/IP YRP/contentis_base64 YRP/System_Tools YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/DebuggerException__ConsoleCtrl YRP/DebuggerException__SetConsoleCtrl YRP/anti_dbg YRP/inject_thread YRP/create_service YRP/network_tcp_socket YRP/escalate_priv YRP/screenshot YRP/rat_rdp YRP/rat_telnet YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Big_Numbers1 YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API FlorianRoth/PlugX_J16_Gen
dd2acdac10324ff4896003c651813c3caef891ef89c889ea00cf4c43e479f169	PE32+	2017-10-18 03:36:13	User Submission	YRP/Microsoft_Visual_Cpp_80_DLL YRP/IsPE64 YRP/IsConsole YRP/HasRichSignature [+] YRP/domain YRP/IP YRP/contentis_base64 YRP/System_Tools YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/DebuggerException__ConsoleCtrl YRP/DebuggerException__SetConsoleCtrl YRP/anti_dbg YRP/inject_thread YRP/create_service YRP/network_tcp_socket YRP/escalate_priv YRP/screenshot YRP/rat_rdp YRP/rat_telnet YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Big_Numbers1 YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API FlorianRoth/PlugX_J16_Gen
e59b310502b0750f0c45e55313a3ab9fb76567cc51a5c344696e97f4b396dde9	PE32+	2017-10-18 03:36:15	User Submission	YRP/Microsoft_Visual_Cpp_80_DLL YRP/IsPE64 YRP/IsConsole YRP/HasRichSignature [+] YRP/domain YRP/IP YRP/contentis_base64 YRP/System_Tools YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/DebuggerException__ConsoleCtrl YRP/DebuggerException__SetConsoleCtrl YRP/anti_dbg YRP/inject_thread YRP/create_service YRP/network_tcp_socket YRP/escalate_priv YRP/screenshot YRP/rat_rdp YRP/rat_telnet YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Big_Numbers1 YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API FlorianRoth/PlugX_J16_Gen
f49f2a6b8447b809cb1e90135d08c81af671202426e8fe1688a90c1d78708b46	PE32+	2017-10-18 03:36:16	User Submission	YRP/Microsoft_Visual_Cpp_80_DLL YRP/IsPE64 YRP/IsConsole YRP/HasRichSignature [+] YRP/domain YRP/IP YRP/contentis_base64 YRP/System_Tools YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/DebuggerException__ConsoleCtrl YRP/DebuggerException__SetConsoleCtrl YRP/anti_dbg YRP/inject_thread YRP/create_service YRP/network_tcp_socket YRP/escalate_priv YRP/screenshot YRP/rat_rdp YRP/rat_telnet YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Big_Numbers1 YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API FlorianRoth/PlugX_J16_Gen
3cf78a6d0244c33a14905f91f9912e2c7255c3247313456ca4eec93a7839abbd	PE32	2020-01-27 01:55:06	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature YRP/maldoc_find_kernel32_base_method_1 YRP/domain YRP/IP YRP/contentis_base64 YRP/System_Tools YRP/VM_Generic_Detection YRP/Dropper_Strings YRP/WMI_strings YRP/Misc_Suspicious_Strings YRP/DebuggerException__ConsoleCtrl YRP/DebuggerException__SetConsoleCtrl YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/inject_thread YRP/create_service YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/plugX FlorianRoth/PlugX_J16_Gen
6b46e36245b5b9ed13c0fbfae730b49c04aba43b98deb75e388e03695ff5cbd1	PE32	2020-01-27 01:55:23	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature YRP/maldoc_find_kernel32_base_method_1 YRP/domain YRP/IP YRP/contentis_base64 YRP/System_Tools YRP/VM_Generic_Detection YRP/Dropper_Strings YRP/WMI_strings YRP/Misc_Suspicious_Strings YRP/DebuggerException__ConsoleCtrl YRP/DebuggerException__SetConsoleCtrl YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/inject_thread YRP/create_service YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/plugX FlorianRoth/PlugX_J16_Gen
725e252b9a759587bffe569832c002108b57127dbdc4ed7bddfec04c6a2e1d41	PE32+	2020-08-20 23:09:44	User Submission	YRP/IsPE64 YRP/IsDLL YRP/IsWindowsGUI YRP/HasDebugData [+] YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/WMI_strings YRP/ThreadControl__Context YRP/anti_dbg YRP/network_http YRP/network_tcp_socket YRP/network_dns YRP/network_dga YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Big_Numbers1 YRP/Advapi_Hash_API YRP/Crypt32_CryptBinaryToString_API YRP/BLOWFISH_Constants YRP/BASE64_table YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API FlorianRoth/PlugX_J16_Gen
4c10ff11b5b417e790f089459a97e34db217097ec677eeaea49e222127db80e5	PE32	2021-05-28 18:38:13	User Submission	YRP/IsPE32 YRP/IsDLL YRP/IsConsole YRP/HasModified_DOS_Message [+] YRP/maldoc_find_kernel32_base_method_1 YRP/domain YRP/IP YRP/contentis_base64 YRP/VM_Generic_Detection YRP/Dropper_Strings YRP/WMI_strings YRP/Misc_Suspicious_Strings YRP/DebuggerCheck__QueryInfo YRP/DebuggerException__ConsoleCtrl YRP/DebuggerException__SetConsoleCtrl YRP/anti_dbg YRP/inject_thread YRP/create_service YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/plugX FlorianRoth/PlugX_J16_Gen
3cdd33dea12f21a4f222eb060e1e8ca8a20d5f6ca0fd849715f125b973f3a257	PE32	2021-08-02 12:01:45	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI [+] YRP/HasRichSignature YRP/maldoc_find_kernel32_base_method_1 YRP/domain YRP/IP YRP/contentis_base64 YRP/VM_Generic_Detection YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/DebuggerException__ConsoleCtrl YRP/DebuggerException__SetConsoleCtrl YRP/anti_dbg YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API FlorianRoth/PlugX_J16_Gen

Recent Searches
florianroth/plugx_j16_gen
florianroth/equation_kaspersky_equationlaserinstaller
florianroth/equationgroup_equationdrug_gen_2
florianroth/empire_powershell_framework_gen2
yrp/eqgrp_callbacks
yrp/webshell_phpspy_2005_full_phpspy_2005_lite_phpspy_2006_phpspy
bamfdetect/pony
florianroth/fvey_shadowbroker_nopen_oneshot
bamfdetect/njrat
yrp/goggles_apt1

Search

Recent Searches