MD5 Hash File type Added Source Yara Hits
5171cadea186a8e7b377f6e0d871f261 Composite 2018-06-19 15:28:19User Submission YRP/powershell YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
1b243668e1e8c92619a15768242c5529 Composite 2018-06-23 09:29:25User Submission YRP/powershell YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
0c1caa39cee91e2b1863b3f456faf6bc Composite 2018-06-27 12:48:27User Submission YRP/powershell YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
41720ece0561a2d0d7d65627fa0bc51b Composite 2018-07-24 12:23:38User Submission YRP/powershell YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
78911f4e25eefa3b98467fc53f842b4c Composite 2018-07-24 12:27:36User Submission YRP/powershell YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
36cb8b2eeb8df96fefa5dccb1b10bb72 Composite 2018-08-20 12:56:11User Submission YRP/powershell YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
e956488d66d51f170a6fefbaff4056d0 Composite 2018-08-20 12:56:39User Submission YRP/powershell YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
b4ba1418a969793619c957bda246f7ac Composite 2018-08-20 12:57:05User Submission YRP/powershell YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
c6ecd64622b295b5a08bbcec0502f1f5 Composite 2018-08-20 12:58:29User Submission YRP/powershell YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
9c690164bc2eb6aeb232b96669d82860 Composite 2018-11-13 12:45:17User Submission YRP/powershell YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
543d5e22dc9f8e57ca288e6c0ea281f3 Composite 2018-11-13 16:35:52User Submission YRP/powershell YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
ff9e63e208f60023acccf3876d8de715 Composite 2018-11-14 02:38:14User Submission YRP/powershell YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
1d20b7284271fad1d7c2da77d10c8143 Composite 2018-11-15 01:11:50User Submission YRP/powershell YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
f1ee6f8fdd7d08a3d656bf5353570dd3 Composite 2018-11-15 14:41:18User Submission YRP/Contains_UserForm_Object YRP/powershell YRP/office_document_vba YRP/Contains_VBA_macro_code [+]
b811a63eaa3f6a76d4176a64655c086f Composite 2018-11-15 14:53:52User Submission YRP/Contains_UserForm_Object YRP/powershell YRP/office_document_vba YRP/Contains_VBA_macro_code [+]
dce667bf69831e4db92c5c6530353b40 Composite 2018-11-20 16:30:51User Submission YRP/Contains_UserForm_Object YRP/powershell YRP/office_document_vba YRP/Contains_VBA_macro_code [+]
e130aa3812488a5fb9dee458f2c2e957 Composite 2018-11-20 16:30:57User Submission YRP/Contains_UserForm_Object YRP/powershell YRP/office_document_vba YRP/Contains_VBA_macro_code [+]
0bc31066ae54bc4a2902f76851a6e9f3 Composite 2019-01-21 17:23:13User Submission YRP/powershell YRP/domain YRP/url YRP/contentis_base64 [+]
e1187edfa460d915d1a4b6273cf80ef7 Composite 2019-01-27 13:03:06User Submission YRP/powershell YRP/domain YRP/url YRP/contentis_base64 [+]
0e41d2eef9dda5908b9ec1f365f96cfb Composite 2019-01-30 10:03:41User Submission YRP/powershell YRP/domain YRP/url YRP/contentis_base64 [+]
cb8e88b4d40d387b9ec0d80435d862b5 Composite 2019-02-01 13:33:48User Submission YRP/powershell YRP/domain YRP/url YRP/contentis_base64 [+]
27dc076a95f8c6a2508aa8c0fe40ff0f Composite 2019-05-14 20:34:45User Submission YRP/powershell YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
5074e705c0fc4ca3a998a1345e0fc5f2 Composite 2019-05-21 17:35:31User Submission YRP/with_images YRP/without_attachments YRP/with_urls YRP/powershell [+]
486bdf835a453c6ffb5f56647e697871 Composite 2019-05-24 22:49:55User Submission YRP/powershell YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
485041067b8e37d3b172f5c0e700bff1 Composite 2019-05-24 22:52:19User Submission CuckooSandbox/embedded_win_api YRP/powershell YRP/office_document_vba YRP/Contains_VBA_macro_code [+]
ea799d23c18e3e9435b05eb40251c28c Composite 2019-05-24 22:53:13User Submission YRP/powershell YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
00ad9a036c6f46c95c774b589154b677 Composite 2019-05-25 07:15:03User Submission CuckooSandbox/embedded_win_api YRP/powershell YRP/office_document_vba YRP/Contains_VBA_macro_code [+]
d3638bbc201f0c44c281d0f9d95796ce Composite 2019-06-11 08:37:01User Submission YRP/powershell YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
878827a207b86c8cfdba7c64e897198f Composite 2019-06-17 19:07:23User Submission YRP/powershell YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
a0567cb99e6ac9b17001c2a07e6f0ea4 Composite 2019-06-18 13:31:41User Submission YRP/powershell YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
53f8eb7ef9f67124dff7996898d89f08 Composite 2019-06-29 00:00:21http://www.safelinks-protection.com/OZK/First... YRP/powershell YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
a4525b06bc5e8bcf27538fd14e4f2785 Composite 2019-07-25 08:48:08User Submission CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api YRP/powershell YRP/office_document_vba [+]
e769aee3f0f9879756ad47c841561140 Composite 2019-07-29 07:48:39User Submission CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api YRP/powershell YRP/office_document_vba [+]
8044263c411e33f91b17e3a4f89c4236 Composite 2019-09-03 16:29:10User Submission YRP/powershell YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]