MalShare

SHA256 Hash	File type	Added	Source	Yara Hits
1584116aeede8202ea219d694d5b7f3a46500735a4f505f615ac8f24f9d4e5f9	MS-DOS	2022-02-25 05:00:44	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasRichSignature YRP/powershell YRP/maldoc_find_kernel32_base_method_1 YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/ThreadControl__Context YRP/anti_dbg YRP/inject_thread YRP/network_http YRP/escalate_priv YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Prime_Constants_long YRP/RijnDael_AES YRP/BASE64_table YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API FlorianRoth/PowerShell_Susp_Parameter_Combo FlorianRoth/WiltedTulip_ReflectiveLoader FlorianRoth/ReflectiveLoader FlorianRoth/Beacon_K5om
fceb7c53c97614ca70051410c1edb96169e2a688bd484f9667e094e7a7fdaf50	PE32+	2022-02-24 18:54:38	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE64 YRP/IsConsole YRP/IsPacked [+] YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/anti_dbg
627aa9fea7775233e60ae7276cefdb5605df2ff705aa69a7f3c97bd7dd4117ac	PE32	2022-02-24 18:17:57	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/HasOverlay YRP/domain YRP/contentis_base64 YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Wininet_Library
1af52e33f9f6643e8e090fcdc2731237f82dd8907bd592f6b34a88c6a2b1f9b4	MS-DOS	2022-02-24 17:46:01	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/HasOverlay YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Wininet_Library
799edba0d975c26036004267863beb50ff6ec52ee4d80cec129b8fc554204d84	PE32+	2022-02-24 16:54:18	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE64 YRP/IsConsole YRP/IsPacked [+] YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/anti_dbg
8fcb18e44edde7c95bf03753b4909196882abb7dfdbde1aea3fbfb0553e4f454	PE32+	2022-02-24 16:52:39	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE64 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Browsers YRP/anti_dbg YRP/network_tcp_socket YRP/escalate_priv YRP/win_registry YRP/win_token YRP/win_files_operation YRP/BASE64_table YRP/Str_Win32_Winsock2_Library
d90e8aedbdaae468500e9125f7294e4abb449e6ea8f5eabf193e7ab9cd5c1d8b	MS-DOS	2022-02-24 15:29:34	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/HasOverlay YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Wininet_Library
ee20338cc737b5527180713820afb6c5972869dedbe5e1590862ba82fa30ff24	PE32+	2022-02-24 14:21:18	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE64 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/anti_dbg YRP/escalate_priv YRP/win_registry YRP/win_token
bd2c2bbac3f93a366e178ef75f9da0c373d6ffe84a59dc880ea326db845f46a3	PE32	2022-02-24 13:51:59	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/domain YRP/contentis_base64 YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library
dbf0d7f3fee3f6861fa0b6a83b00fb28a4ca733bfb9ca4dae60a3415f6f23c44	PE32	2022-02-24 13:48:02	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/HasOverlay YRP/domain YRP/contentis_base64 YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library
588849622c25b5ee14aed0e51aef7cc6d46ebbbb3c228654af99bfbaf75d3d52	PE32	2022-02-24 12:30:04	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/HasOverlay YRP/HasModified_DOS_Message YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Wininet_Library
d417faf001e4b236e6e4aca5a6c828355c71d9d762378969ca6ee9151ae94dea	PE32	2022-02-24 12:03:45	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/HasOverlay YRP/HasModified_DOS_Message YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Wininet_Library
9a269fa0ce7b73687898178f37e4e1f662e2351355d42fad5552537f25f792c0	PE32	2022-02-24 11:32:43	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Wininet_Library
db126bc3713634f9baeb7b0354e85b07c5214ec5125bf9bb405c82f00cafb36e	PE32	2022-02-24 10:31:48	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/HasModified_DOS_Message YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Wininet_Library
8e64645e236bb96b66bfe42d6349a9b9820ed0aa220207cc0324215b50b49689	PE32+	2022-02-24 10:26:48	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE64 YRP/IsWindowsGUI YRP/HasDebugData [+] YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Antivirus YRP/anti_dbg YRP/escalate_priv YRP/screenshot YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Big_Numbers0 YRP/Advapi_Hash_API
33c3965dedc06bc5a389f96adb8299c1d30caf83fc1f596e6c8c7b65fb29c35d	PE32	2022-02-24 09:20:45	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/HasOverlay YRP/HasModified_DOS_Message YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Wininet_Library
7fab982358d26d66a9ab27f19f86ba97903e36df9e1935d7818de0d1386cae13	PE32	2022-02-24 08:44:11	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/HasOverlay YRP/domain YRP/contentis_base64 YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Wininet_Library
22513b7838023d427234e56843ab60a4a167dbd229d92d55104b09b75d717992	PE32	2022-02-24 07:46:47	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/HasModified_DOS_Message YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Wininet_Library
869ffb2592d379f28815ca5c6b78d34a5f824a4b78653104d037dd2d786ac52e	PE32+	2022-02-24 06:18:32	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE64 YRP/IsConsole YRP/IsPacked [+] YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Dropper_Strings YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/escalate_priv YRP/win_registry YRP/win_token YRP/win_files_operation
8961eb1cd7bbc204c626bfc8f186be8534ecb6f3f36c285516690f412fa28be9	PE32+	2022-02-24 04:53:09	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE64 YRP/IsWindowsGUI YRP/HasDebugData [+] YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Antivirus YRP/anti_dbg YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Str_Win32_Wininet_Library YRP/suspicious_packer_section
4887037e05b2f493d401f7961221af378f36c88070e8077d769f87bc443c1211	PE32+	2022-02-24 03:23:04	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE64 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/anti_dbg YRP/escalate_priv YRP/win_registry YRP/win_token
3d9e4d3b1fd384e61c61dc68294c031a72ab39661985f89c5b7d5321ef37d76a	PE32+	2022-02-24 00:34:57	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE64 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/Dropper_Strings YRP/WMI_strings YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/create_service YRP/escalate_priv YRP/spreading_share YRP/win_registry YRP/win_token YRP/win_files_operation
ad95e3b5217fde73906c9212128a1a0056d2328d5e0dce23558f0a490cab5200	PE32+	2022-02-24 00:20:15	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE64 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/anti_dbg YRP/escalate_priv YRP/win_registry YRP/win_token YRP/Big_Numbers0
1a9e656f0cf72436e33c085cf2188876dadbc67ead834c1a3ebb672709e60a58	PE32	2022-02-24 00:08:59	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/IsBeyondImageSize YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/SHA1_Constants YRP/suspicious_packer_section
9f67505c8295abc02022db9f9c9b4a861f57e6d97fa6cb7459806032a4743a3f	PE32+	2022-02-23 22:53:17	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE64 YRP/IsWindowsGUI YRP/HasDebugData [+] YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/win_registry
01c6dc0be7fb0b2b9f9b154d53ba8191b53a4b89e8c3c23f52114c0e2b7355ee	PE32	2022-02-23 18:52:29	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/domain YRP/contentis_base64 YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library
378f9b0e83386fd9c941cff4ccc5ad8b9ab83e514417821834786de6a9bbd39f	PE32+	2022-02-23 18:50:35	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE64 YRP/IsWindowsGUI YRP/HasDebugData [+] YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Dropper_Strings YRP/anti_dbg YRP/create_service YRP/network_http YRP/escalate_priv YRP/screenshot YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Big_Numbers0 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API
6a6864afe6d02afd8d3afc8e067d8e6a745c5b2e3c47f0bbee0de8170ec8aabd	PE32	2022-02-23 18:13:09	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/HasOverlay YRP/domain YRP/contentis_base64 YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Wininet_Library
a5281b525e6ac4abeb5980b5d2a6b32f1b5fe59706e889e0390a0da3adacb009	PE32	2022-02-23 16:24:20	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/HasOverlay YRP/domain YRP/contentis_base64 YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Wininet_Library
1fe3f2e89103a6a316977106fd001f26293f65b3540288725e63fad061ace3b5	PE32+	2022-02-23 14:26:19	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE64 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/escalate_priv YRP/win_registry YRP/win_token YRP/win_files_operation
59b98adb9f7fd454f3770f52f302af2c199ff03dad2c22b9bb340880bf30989e	PE32	2022-02-23 14:17:26	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay [+] YRP/domain YRP/contentis_base64 YRP/disable_dep YRP/screenshot YRP/win_registry
eb87f3665548f0fc0b5fbe339c65c0aee87e2463b888530f5d1f00cd86234b61	PE32	2022-02-23 14:09:25	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/maldoc_find_kernel32_base_method_1 YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/DebuggerException__SetConsoleCtrl YRP/anti_dbg YRP/network_tcp_listen YRP/network_http YRP/network_tcp_socket YRP/spreading_share YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Big_Numbers1 YRP/MD5_Constants YRP/BASE64_table YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API
6de7d794f1649408271f2b4fb677e4a6b1e4180ba4bf31c4ce6f640725957cb1	PE32	2022-02-23 14:04:56	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/domain YRP/contentis_base64 YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Wininet_Library
e7195f6acec2d05d1d1f49eba65d86c95235fd19b93cc2c19d831cd3a46a1ec5	PE32	2022-02-23 14:04:19	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/HasOverlay YRP/HasModified_DOS_Message YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Wininet_Library
bf382b2173ca99c24c8bce58972d973a30412d9f5aa49766378fcdbb5196883a	MS-DOS	2022-02-23 13:37:27	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/HasOverlay YRP/domain YRP/contentis_base64 YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Wininet_Library
7ed796613f4f2646d7b27b5c42d12c0859612131d612452295c2686ba44ad63b	PE32+	2022-02-23 13:28:39	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE64 YRP/IsConsole YRP/IsPacked [+] YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/anti_dbg YRP/win_mutex YRP/win_registry YRP/win_token YRP/Big_Numbers0 YRP/Str_Win32_Wininet_Library
e62ff2a9a95c496c63d40b63b0d1a29fbdf89c6bcc0b04dcee9bc22373003b58	PE32	2022-02-23 12:02:25	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library
22d19bef380c234ac665ee99ccd55edb97c3b9e428a2e188d8c36cf6994fe89e	PE32	2022-02-23 11:10:50	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/HasOverlay YRP/HasModified_DOS_Message YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Wininet_Library
6188a5b808b3275847380ffa582ab29f808b9a857eadcb1eec3b8e8ade59de23	PE32	2022-02-23 10:04:29	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Wininet_Library
cc547c285bcbe6de41fe9f81141e107f9b0f2bfd677554998f6a2c55e5fe240b	PE32	2022-02-23 07:20:35	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/HasOverlay YRP/domain YRP/contentis_base64 YRP/disable_dep YRP/screenshot YRP/win_registry
35d07e32fc4433f7ae7a23c74a9a8c8a9d25ebf3e73baaab4e535de34f11fe30	PE32+	2022-02-23 06:45:35	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE64 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/win_registry YRP/Big_Numbers0
23c3d9851d8b063e0b736368a9e9d9a260e5c59df4f1411df9e32a331eca6fbf	MS-DOS	2022-02-23 04:56:22	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/HasOverlay YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Wininet_Library
c040284937165493d619b65245d554870ddadc31cabb34109598341d0a8fac9e	PE32+	2022-02-23 03:53:06	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE64 YRP/IsConsole YRP/HasDebugData [+] YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Dropper_Strings YRP/WMI_strings YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/create_service YRP/network_tcp_socket YRP/spreading_share YRP/win_registry YRP/BASE64_table YRP/Str_Win32_Winsock2_Library
052e777a931529682dd9a7783412d94ce9eaae71d24c9cd49d67061d2116a4ce	PE32	2022-02-23 01:28:37	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/HasOverlay YRP/domain YRP/contentis_base64 YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Wininet_Library
ac6617a0f2ff2820dde4fbaa8ae139166b2a17ee19879910db90da65fe8b2c50	MS-DOS	2022-02-22 23:53:23	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/HasOverlay YRP/domain YRP/contentis_base64 YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Wininet_Library
9c6c2a4785c9e4fded4c35fbad446633f336aa85f01a34e560829a6913413cf6	PE32+	2022-02-22 23:00:59	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE64 YRP/IsWindowsGUI YRP/HasDebugData [+] YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/anti_dbg YRP/escalate_priv YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Big_Numbers1
e125b3f96937ba0d58aa1a945dd28234bfb8ba929a485b0146bd79a161d5004d	PE32	2022-02-22 19:04:29	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/domain YRP/contentis_base64 YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library
d096cbb7b3b8673bd86bbfe1e04b364dbdc6f8cbe58842f37b53027de37926ed	PE32	2022-02-22 18:11:04	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/HasOverlay YRP/domain YRP/contentis_base64 YRP/disable_dep YRP/screenshot YRP/win_registry
fac821508c5636f4ccabf46ca14d1bdd659c905a9bdadedd5b65c1c15b73a2da	PE32	2022-02-22 17:59:26	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/domain YRP/contentis_base64 YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library
d7111ae9a18196156f635cdc36bbbe0b51cea014ddcfc172b74c69b6f9b216aa	PE32	2022-02-22 17:37:26	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/HasOverlay YRP/domain YRP/contentis_base64 YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Wininet_Library
0a89a5042b36d6512f7445e50ebdd0737230fb306c0bd07335095c1a2918e5e3	PE32+	2022-02-22 17:36:32	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE64 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/anti_dbg YRP/win_registry YRP/win_token
ba7b170f4c603dd9ae84d97bbb5f4f50f89c8f5dcdb60e870e4dbf0bc73e91f2	PE32	2022-02-22 17:29:37	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/HasOverlay YRP/HasModified_DOS_Message YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Wininet_Library
622eff59a6096e5ccee07eab5cadcfec0c189cd644d4da4bc91abd9ddeccb015	PE32	2022-02-22 15:06:36	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/HasOverlay YRP/HasModified_DOS_Message YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Wininet_Library
ea21cb426ea523dcf0fb269740f09b776dfb3cbdfc5a16f0ca171677944a1828	PE32+	2022-02-22 13:18:35	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE64 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/HasDebugData YRP/domain YRP/IP YRP/contentis_base64 YRP/Browsers YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/win_registry YRP/win_files_operation YRP/Big_Numbers0 YRP/CRC32_poly_Constant YRP/CRC32_table YRP/MD5_Constants YRP/RIPEMD160_Constants YRP/SHA1_Constants YRP/SHA512_Constants
a084e6b01687291bb73151e53c0d906c9d52300e372f4c494e3a3aba4ba6d5f7	PE32+	2022-02-22 13:08:14	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE64 YRP/IsConsole YRP/IsPacked [+] YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/Str_Win32_Winsock2_Library
ce5ec048984ad37274072ac0dc4aa902d0fc61519eef4a63518ab362e64efe79	PE32+	2022-02-22 13:00:05	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE64 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/anti_dbg YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/suspicious_packer_section
ac9122317acfa96439ff7d0cb9cd0bafe681a1c5b89dfbe651a7be7a4f1ce177	PE32	2022-02-22 12:35:08	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/HasOverlay YRP/HasModified_DOS_Message YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Wininet_Library
e307cd6f9895746e437debf3cd2cb39204a168874ea60f4af0e96ff026d8eefc	PE32+	2022-02-22 12:34:18	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE64 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/screenshot YRP/win_registry YRP/suspicious_packer_section
505bfed35490036f598b81fe468c3411f70b7bb1ab7c52627608b3d096483aba	PE32	2022-02-22 12:01:28	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/HasOverlay YRP/domain YRP/contentis_base64 YRP/disable_dep YRP/screenshot YRP/win_registry
a0f7f9c96f821ff95bcdf813cedc0260ce092e5aa097b83310a9ec0fb784bff8	PE32+	2022-02-22 11:27:00	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE64 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/Browsers YRP/anti_dbg YRP/win_mutex
a5f92370523b8b37ab59051a5de80930fe90e10ae73517447c36bfbe7ae0c49a	PE32	2022-02-22 05:52:04	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/domain YRP/contentis_base64 YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library
2caf771f60ded813aa10f82dfaf669b89bc64a03262dbb3f2ce4ca7ba195c936	PE32	2022-02-22 04:58:39	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/HasOverlay YRP/HasModified_DOS_Message YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Wininet_Library
a2cd4a8e51e86671058ea5584bf40288afb0418c21ccfd9169b188092dcab306	PE32+	2022-02-22 04:51:19	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE64 YRP/IsWindowsGUI YRP/HasDebugData [+] YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Dropper_Strings YRP/anti_dbg YRP/create_service YRP/network_http YRP/escalate_priv YRP/screenshot YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Big_Numbers0 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API
98e804081b61fa30f1ecd2ab45fc34486871cbaf6b4b2a3175e515ce506d943b	PE32	2022-02-19 06:42:25	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/borland_delphi YRP/domain YRP/IP YRP/contentis_base64 YRP/ThreadControl__Context YRP/inject_thread YRP/create_service YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/sniff_audio YRP/spreading_share YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/CRC32_poly_Constant YRP/CRC32_table YRP/FGint_FGIntDestroy YRP/FGint_RsaDecrypt YRP/Delphi_Random YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API
ba9b6cbc2fd9d74593e18f16df18e5f8f3da593ed49ff9dd5964b3ccf58cec3a	PE32	2022-02-19 03:43:39	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/HasRichSignature YRP/maldoc_find_kernel32_base_method_1 YRP/domain YRP/contentis_base64 YRP/win_mutex YRP/win_files_operation FlorianRoth/DragonFly_APT_Sep17_3
2beba87159d8681633e4339fc9ce02be34b66eb174eaf315204f625e6569cd77	PE32	2022-02-18 22:06:26	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/HasRichSignature YRP/maldoc_find_kernel32_base_method_1 YRP/domain YRP/contentis_base64 YRP/win_mutex YRP/win_files_operation FlorianRoth/DragonFly_APT_Sep17_3
18c7d7ce7ad32c0692d76fe223cc0ea6d1c7eaf70f181d1c4b7f59614840c55e	PE32	2022-02-18 15:00:49	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI YRP/domain [+] YRP/contentis_base64 FlorianRoth/DragonFly_APT_Sep17_3
f4c593c6a42e68057186be06779fbe38cfdb29df754f3d2e82c5e56f5c624672	PE32	2022-02-18 07:27:52	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/HasOverlay YRP/ImportTableIsBad YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/Big_Numbers1 YRP/suspicious_packer_section FlorianRoth/DragonFly_APT_Sep17_3
b4a8d3642641b79ce839db40082db34f6d996465e6e787a027e8e7592dc68ebc	MS-DOS	2022-02-18 07:27:08	User Submission	YRP/AHTeam_EP_Protector_03_fake_SVKP_13x_FEUERRADER YRP/AHTeam_EP_Protector_03_041_FEUERRADER YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/AHTeam_EP_Protector_03_fake_SVKP_13x_FEUERRADER_additional [+] YRP/AHTeam_EP_Protector_v03_FEUERRADER YRP/AHTeam_EP_Protector_v03_FEUERRADER_additional YRP/AHTeam_EP_Protector_V03_V041_FEUERRADER YRP/AHTeamEPProtector03fakeSVKP13xFEUERRADER YRP/KBysPacker028BetaShoooo YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64
c097be8385a3df5004324c57b404d6efefa9204b42e6fd9febe62b90ac6ee312	PE32	2022-02-18 07:22:09	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/HasOverlay YRP/ExportTableIsBad YRP/HasModified_DOS_Message YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/VMWare_Detection YRP/network_tcp_socket YRP/keylogger YRP/rat_webcam YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API
0f9ba416c10e8a43c89255106e7f750679c84ea2555080c328617ab0205c5c00	PE32	2022-02-18 07:07:05	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/HideProtect_V10X_SoftWar_Company YRP/HideProtect_V10X_SoftWar_Company_additional YRP/ThemidaWinLicenseV1XNoCompressionSecureEngineOreansTechnologies [+] YRP/PENinja YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section
2af229dbd658a0df9c3379ec1a19eff0b5f1f6d607ad944f6c025504b8499af0	PE32	2022-02-18 07:04:51	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/ImportTableIsBad YRP/HasModified_DOS_Message YRP/HasRichSignature YRP/domain YRP/contentis_base64
cdd9ef592f8109d116a212b4d28184a1570aec6325d7c7634771ec3b4bd02d6b	PE32	2022-02-18 07:00:29	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/eXPressorv13CGSoftLabs YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasRichSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/anti_dbg YRP/win_registry YRP/win_files_operation
f418541778bbc2baf1d43c78a3dbd3e8f556b61c4688e706556026470383e6f6	PE32	2022-02-18 06:58:53	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/HasModified_DOS_Message YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/contentis_base64 YRP/Antivirus YRP/DebuggerCheck__QueryInfo YRP/escalate_priv YRP/win_token YRP/Typical_Malware_String_Transforms YRP/suspicious_packer_section FlorianRoth/Typical_Malware_String_Transforms
4916c9f760a99efce7a76535435b4f4ec2ddceb1cb72d1bdd56676a924757b79	PE32	2022-02-18 06:53:48	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/maldoc_find_kernel32_base_method_1 YRP/domain YRP/contentis_base64
1fd02e53b62ea630626f608dfc28f6b95fb3de7c44fbdaa89f754a2c7ce19813	PE32	2022-02-18 06:47:11	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Browsers YRP/Dropper_Strings YRP/win_registry YRP/win_files_operation
5e98a008d45964da8f9d37ce0772b721139eb6debf551e69acc65e4798dea0ec	PE32	2022-02-18 06:44:25	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay [+] YRP/IsBeyondImageSize YRP/domain YRP/contentis_base64
e903b0b3a7777b197ed90f8c7b89fb450f3acf49a17259015b00942889b01d38	PE32	2022-02-18 06:14:23	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/ASProtect_SKE_2122_exe_Alexey_Solodovnikov_h YRP/ASProtect_SKE_2122_exe_Alexey_Solodovnikov YRP/ASProtect_SKE_21x_exe_Alexey_Solodovnikov [+] YRP/ASProtect_SKE_2122_exe_Alexey_Solodovnikov_h_additional YRP/ASProtect_SKE_21x_exe_Alexey_Solodovnikov_h YRP/ASProtectSKE21xexeAlexeySolodovnikov YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/IsPacked YRP/domain YRP/contentis_base64 YRP/keylogger YRP/rat_webcam YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/suspicious_packer_section
6b5a34f9f1a40b319c89cc0829a80b302936f74a02e9b4eb68a52d908182e4d7	PE32	2022-02-18 06:02:58	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/HasOverlay YRP/ExportTableIsBad YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/VMWare_Detection YRP/network_tcp_socket YRP/keylogger YRP/rat_webcam YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API
e5f03309439ec3d1caaacb7b8655a34038a6ecb9eeaf4f405a5313da7f650b90	MS-DOS	2022-02-18 06:01:58	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasOverlay YRP/HasModified_DOS_Message YRP/maldoc_find_kernel32_base_method_1 YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/sniff_audio YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library
699b2037d3653c77ccfd9295d965ebfa189a2e2a1b9ee15ed82e2254ee52d6c5	MS-DOS	2022-02-18 05:50:14	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/win_files_operation YRP/CRC32_poly_Constant YRP/CRC32_table YRP/RijnDael_AES YRP/RijnDael_AES_CHAR YRP/RijnDael_AES_LONG
195a23e03511d3bb17f6ebd6216ee8d05264ed08568562a1d1b43adee3c40dcf	PE32	2022-02-18 05:48:49	User Submission	CuckooSandbox/vmdetect YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasModified_DOS_Message YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/VirtualPC_Detection YRP/ThreadControl__Context YRP/vmdetect YRP/win_mutex
519a041c2741ad5a2018cdc9049d6f4c333ce028938de0d160c06a5eef3078c2	PE32	2022-02-18 05:42:51	User Submission	YRP/HideProtect_V1016C_SoftWar_Company_SignByfly YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/HideProtect_1016_SoftWar_Company_additional YRP/HideProtect_V1016C_SoftWar_Company [+] YRP/HideProtect_V10X_SoftWar_Company YRP/HideProtect_1016_SoftWar_Company YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/borland_cpp YRP/domain YRP/contentis_base64 YRP/DebuggerHiding__Active YRP/DebuggerException__SetConsoleCtrl YRP/ThreadControl__Context YRP/anti_dbg YRP/win_registry YRP/win_files_operation YRP/CRC32_poly_Constant YRP/CRC32_table YRP/suspicious_packer_section
cd0ba395f5dcb14bbdcff50b4737b273c97c0d1f6335c32e9a3c30759ad174dc	PE32	2022-02-18 05:37:20	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/ImportTableIsBad YRP/HasModified_DOS_Message YRP/HasRichSignature YRP/domain YRP/contentis_base64
94b3b17999931906f0e15d158cc0d111b2cd628c200b9e90b302b0e893c06c47	PE32	2022-02-18 05:36:42	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/ThreadControl__Context YRP/create_service YRP/network_udp_sock YRP/network_tcp_listen YRP/network_dropper YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/sniff_audio YRP/rat_webcam YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/CookieTools
1e2fc3766b888f4b047ca0f3b5e06ec6f3571ce52c269738e561a4811bf2c384	PE32	2022-02-18 05:25:30	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature [+] YRP/domain YRP/contentis_base64 YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/win_registry YRP/win_token YRP/win_files_operation YRP/suspicious_packer_section
2a7c7343174a10ba10e858b509fdf72b4f44b891fad8ec0be541494328740f61	PE32	2022-02-18 05:23:59	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/HasOverlay YRP/IsBeyondImageSize YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64
a5ad665ff37b190b107ffb763c0467a89d04223902776740de7dec9b7ad19fdd	PE32	2022-02-18 05:22:46	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/maldoc_find_kernel32_base_method_1 YRP/domain YRP/contentis_base64 YRP/CRC32_poly_Constant
946c8597557d16e1e845863042059fcde4ceb0024452d7c9ca83cefb0cc4c7a4	MS-DOS	2022-02-18 05:08:21	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/HasOverlay YRP/HasDigitalSignature YRP/HasModified_DOS_Message YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/win_mutex YRP/win_files_operation
b8797ade867d9b97089b8a9087db178f19cb435556defd1ccd992f624156782f	PE32	2022-02-18 05:07:55	User Submission	YRP/UPX_Scrambler_RC_v1x YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/ASPack_v106b_additional YRP/UPXProtectorv10x2 [+] YRP/UPXScramblerRCv1x YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Obfuscated_Strings YRP/network_dns YRP/win_registry YRP/Str_Win32_Winsock2_Library
101d52923215151c27918a10eec9ea5b1e45f7701886dd13c681176d6874331c	PE32	2022-02-18 04:58:44	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasDigitalSignature YRP/ImportTableIsBad YRP/ExportTableIsBad YRP/HasModified_DOS_Message YRP/borland_delphi YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Browsers YRP/ThreadControl__Context YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/inject_thread YRP/create_service YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/sniff_audio YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers1 YRP/CRC32_poly_Constant YRP/CRC32_table YRP/Delphi_Random YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API
eb73c845825bf7396f583d6fcd75e54fa4c345b73e287ed63f1ea4a9757f2995	PE32	2022-02-18 04:58:33	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/Borland YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 [+] YRP/IsDLL YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/domain YRP/contentis_base64 YRP/screenshot YRP/rat_webcam YRP/CRC32_poly_Constant YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/UPX YRP/suspicious_packer_section
e7e39872122f9544e4f9cf1fd479f4bb45db7795aec8c4a1ae1c746017f1e9d9	MS-DOS	2022-02-18 04:51:35	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/HasModified_DOS_Message YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/network_dropper YRP/network_tcp_socket YRP/rat_webcam YRP/win_registry YRP/CRC32_poly_Constant YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API
038434e4622a410a901c409291abd7eaec0a34948cba24c64b42869a9dc844c3	PE32	2022-02-18 04:50:30	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/borland_delphi YRP/domain YRP/contentis_base64 YRP/keylogger YRP/win_registry YRP/win_files_operation YRP/Delphi_Random YRP/Delphi_Copy FlorianRoth/DragonFly_APT_Sep17_3
bae2b33899b46ac07b23f9485b3805e68fac0ffd95591b61e6694225550cbd97	PE32	2022-02-18 04:46:46	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/Borland YRP/UPXv20MarkusLaszloReiser YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser [+] YRP/UPXProtectorv10x2 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/domain YRP/contentis_base64 YRP/screenshot YRP/rat_webcam YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/UPX YRP/suspicious_packer_section
87fe1de7b82c9f9782dd67dba6fc1bf135cd7a99998cd65b0fb31b85ecb6642b	PE32	2022-02-18 04:41:33	User Submission	YRP/ASPack_v107b_DLL YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/ASPack_v106b YRP/IsPE32 [+] YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/win_registry YRP/Str_Win32_Winsock2_Library
65607ce606576d76207a8afd9b2c4b3208884014ff308ec4cfb00761ac6e7c37	PE32	2022-02-18 04:38:25	User Submission	YRP/HideProtect_V1016C_SoftWar_Company_SignByfly YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/HideProtect_1016_SoftWar_Company_additional YRP/HideProtect_V1016C_SoftWar_Company [+] YRP/HideProtect_V10X_SoftWar_Company YRP/HideProtect_1016_SoftWar_Company YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/contentis_base64 YRP/DebuggerHiding__Active YRP/DebuggerException__SetConsoleCtrl YRP/ThreadControl__Context YRP/anti_dbg YRP/win_files_operation YRP/CRC32_poly_Constant YRP/CRC32_table YRP/CookieTools
d1a454873f2e1bbf0d1feee25b76fa683b83646e1f04477f377c6b09076f2260	PE32	2022-02-18 04:35:53	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/HasOverlay YRP/HasDigitalSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/url YRP/contentis_base64 YRP/keylogger YRP/rat_webcam YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API
1029e2eff257a53437ec6926ebc31db5115bfa1803e06b752f2645ea095401bc	PE32	2022-02-18 04:33:07	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/Borland YRP/MaskPEV20yzkzero YRP/eXPressorv14CGSoftLabs [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/IsBeyondImageSize YRP/borland_delphi YRP/maldoc_find_kernel32_base_method_1 YRP/domain YRP/contentis_base64 YRP/Browsers YRP/escalate_priv YRP/keylogger YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/suspicious_packer_section
df5027f6c917b1cc6ab32a098fe5be6f6a9432660ba78b94f3c7ce4e24ae44b4	PE32	2022-02-18 04:23:35	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI YRP/ImportTableIsBad [+] YRP/maldoc_find_kernel32_base_method_1 YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/Obfuscated_Strings YRP/Big_Numbers3

Recent Searches
yrp/ahteam_ep_protector_03_fake_pcguard_403_415_feuerrader
yrp/webshell_ironshell
yrp/webshell_php_sh_server
yrp/webshell_asp_efso_2
yrp/office_autoopen_macro
yrp/network_tcp_socket
yrp/webshell_generic_php_1
yrp/multiple_webshells_0005
yrp/webshell_bypass_iisuser_p
yrp/_bitchin_threads_

Search

Recent Searches