MalShare

SHA256 Hash	File type	Added	Source	Yara Hits
bab472dae19a251fc8b1c2259dc394437784bc19e6fc55474f143d38942052ea	PE32	2022-02-17 22:58:50	User Submission	YRP/Armadillo_v300a_additional YRP/Armadillo_301_305 YRP/Armadillo_301_350a_Silicon_Realms_Toolworks YRP/Armadillo_v300a [+] YRP/Armadillo_300a_Silicon_Realms_Toolworks_additional YRP/Armadillo_v301_v305_additional YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/Armadillo_v301_v305 YRP/Armadillo_300a_Silicon_Realms_Toolworks YRP/Armadillo_v3xx YRP/Armadillo_v300_additional YRP/Armadillo_300a_361_Silicon_Realms_Toolworks YRP/Armadillo_301_305_additional YRP/Armadillo_v301_v350a_Silicon_Realms_Toolworks_additional YRP/Armadillo_v301_v350a_Silicon_Realms_Toolworks YRP/Armadillov301v305 YRP/Armadillov3xx YRP/Armadillov300a YRP/Armadillo300aSiliconRealmsToolworks YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/DebuggerHiding__Active YRP/ThreadControl__Context YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_files_operation YRP/CRC32_poly_Constant YRP/CRC32_table YRP/suspicious_packer_section
512fb6997c1ee90ee50a86d319e71c96e1585257497660ffd856e4fa8a24a6a7	PE32	2022-02-17 22:24:54	User Submission	YRP/Armadillo_v300a_additional YRP/Armadillo_301_305 YRP/Armadillo_301_350a_Silicon_Realms_Toolworks YRP/Armadillo_v300a [+] YRP/Armadillo_300a_Silicon_Realms_Toolworks_additional YRP/Armadillo_v301_v305_additional YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/Armadillo_v301_v305 YRP/Armadillo_300a_Silicon_Realms_Toolworks YRP/Armadillo_v3xx YRP/Armadillo_v300_additional YRP/Armadillo_300a_361_Silicon_Realms_Toolworks YRP/Armadillo_301_305_additional YRP/Armadillo_v301_v350a_Silicon_Realms_Toolworks_additional YRP/Armadillo_v301_v350a_Silicon_Realms_Toolworks YRP/Armadillov301v305 YRP/Armadillov3xx YRP/Armadillov300a YRP/Armadillo300aSiliconRealmsToolworks YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/HasRichSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/DebuggerHiding__Active YRP/ThreadControl__Context YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_files_operation YRP/CRC32_poly_Constant YRP/CRC32_table YRP/suspicious_packer_section
9c3622b5870b3f05ba6e4be222a6e7605d8f9a311520b638770c78828e31eed7	PE32	2022-02-16 18:26:39	User Submission	YRP/Armadillo_v300a_additional YRP/Armadillo_301_305 YRP/Armadillo_301_350a_Silicon_Realms_Toolworks YRP/Armadillo_v300a [+] YRP/Armadillo_300a_Silicon_Realms_Toolworks_additional YRP/Armadillo_v301_v305_additional YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/Armadillo_v301_v305 YRP/Armadillo_300a_Silicon_Realms_Toolworks YRP/Armadillo_v3xx YRP/Armadillo_v300_additional YRP/Armadillo_300a_361_Silicon_Realms_Toolworks YRP/Armadillo_301_305_additional YRP/Armadillo_v301_v350a_Silicon_Realms_Toolworks_additional YRP/Armadillo_v301_v350a_Silicon_Realms_Toolworks YRP/Armadillov301v305 YRP/Armadillov3xx YRP/Armadillov300a YRP/Armadillo300aSiliconRealmsToolworks YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/HasRichSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/DebuggerHiding__Active YRP/ThreadControl__Context YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_files_operation YRP/CRC32_poly_Constant YRP/CRC32_table YRP/suspicious_packer_section
adcfe8b30d5825912c7934be1259374d62c9d24773149e1c8371d85592e8589f	PE32	2020-01-15 10:37:17	User Submission	YRP/Armadillo_v300a_additional YRP/Armadillo_301_305 YRP/Armadillo_37x_Silicon_Realms_Toolworks_additional YRP/Armadillo_v300a [+] YRP/Armadillo_300a_Silicon_Realms_Toolworks_additional YRP/Armadillo_v301_v305_additional YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/Armadillo_v301_v305 YRP/Armadillo_300a_Silicon_Realms_Toolworks YRP/Armadillo_v3xx YRP/Armadillo_37x_Silicon_Realms_Toolworks YRP/Armadillo_v300_additional YRP/Armadillo_300a_361_Silicon_Realms_Toolworks YRP/Armadillo_301_305_additional YRP/Armadillov301v305 YRP/Armadillov3xx YRP/Armadillov300a YRP/Armadillo300aSiliconRealmsToolworks YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/DebuggerHiding__Active YRP/ThreadControl__Context YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_files_operation YRP/CRC32_poly_Constant YRP/CRC32_table YRP/suspicious_packer_section
43dbe1186862690443f8e319b27a3780afde3536e9d4fc1a32fa77afab453e7c	PE32	2020-01-15 10:32:37	User Submission	YRP/Armadillo_v300a_additional YRP/Armadillo_301_305 YRP/Armadillo_301_350a_Silicon_Realms_Toolworks YRP/Armadillo_v300a [+] YRP/Armadillo_300a_Silicon_Realms_Toolworks_additional YRP/Armadillo_v301_v305_additional YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/Armadillo_v301_v305 YRP/Armadillo_300a_Silicon_Realms_Toolworks YRP/Armadillo_v3xx YRP/Armadillo_v300_additional YRP/Armadillo_300a_361_Silicon_Realms_Toolworks YRP/Armadillo_301_305_additional YRP/Armadillo_v301_v350a_Silicon_Realms_Toolworks_additional YRP/Armadillo_v301_v350a_Silicon_Realms_Toolworks YRP/Armadillov301v305 YRP/Armadillov3xx YRP/Armadillov300a YRP/Armadillo300aSiliconRealmsToolworks YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/DebuggerHiding__Active YRP/ThreadControl__Context YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_files_operation YRP/CRC32_poly_Constant YRP/CRC32_table YRP/suspicious_packer_section
a5321e749191fb5e8c32929fc51ea8f3135dbcb9dc6b52e986dc05c218aad2b9	PE32	2020-01-15 10:31:40	User Submission	YRP/Armadillo_v300a_additional YRP/Armadillo_301_305 YRP/Armadillo_301_350a_Silicon_Realms_Toolworks YRP/Armadillo_v300a [+] YRP/Armadillo_300a_Silicon_Realms_Toolworks_additional YRP/Armadillo_v301_v305_additional YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/Armadillo_v301_v305 YRP/Armadillo_300a_Silicon_Realms_Toolworks YRP/Armadillo_v3xx YRP/Armadillo_v300_additional YRP/Armadillo_300a_361_Silicon_Realms_Toolworks YRP/Armadillo_301_305_additional YRP/Armadillo_v301_v350a_Silicon_Realms_Toolworks_additional YRP/Armadillo_v301_v350a_Silicon_Realms_Toolworks YRP/Armadillov301v305 YRP/Armadillov3xx YRP/Armadillov300a YRP/Armadillo300aSiliconRealmsToolworks YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/DebuggerHiding__Active YRP/ThreadControl__Context YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_files_operation YRP/CRC32_poly_Constant YRP/CRC32_table YRP/suspicious_packer_section
cd5f1c95ce97798cfe6b5ea5a29f7b6b565e177b4fef32f3cb280132ea8afad6	PE32	2020-01-13 14:37:27	User Submission	YRP/Armadillo_v300a_additional YRP/Armadillo_301_305 YRP/Armadillo_301_350a_Silicon_Realms_Toolworks YRP/Armadillo_v300a [+] YRP/Armadillo_300a_Silicon_Realms_Toolworks_additional YRP/Armadillo_v301_v305_additional YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/Armadillo_v301_v305 YRP/Armadillo_300a_Silicon_Realms_Toolworks YRP/Armadillo_v3xx YRP/Armadillo_v300_additional YRP/Armadillo_300a_361_Silicon_Realms_Toolworks YRP/Armadillo_301_305_additional YRP/Armadillo_v301_v350a_Silicon_Realms_Toolworks_additional YRP/Armadillo_v301_v350a_Silicon_Realms_Toolworks YRP/Armadillov301v305 YRP/Armadillov3xx YRP/Armadillov300a YRP/Armadillo300aSiliconRealmsToolworks YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/url YRP/contentis_base64 YRP/DebuggerHiding__Active YRP/ThreadControl__Context YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_files_operation YRP/suspicious_packer_section
1aa30218417f35be74fff18d10738823560ca70171d259870f3548dd427d81ec	PE32	2019-11-24 10:14:30	User Submission	YRP/Armadillo_v300a_additional YRP/Armadillo_301_305 YRP/Armadillo_301_350a_Silicon_Realms_Toolworks YRP/Armadillo_v300a [+] YRP/Armadillo_300a_Silicon_Realms_Toolworks_additional YRP/Armadillo_v301_v305_additional YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/Armadillo_v301_v305 YRP/Armadillo_300a_Silicon_Realms_Toolworks YRP/Armadillo_v3xx YRP/Armadillo_v300_additional YRP/Armadillo_300a_361_Silicon_Realms_Toolworks YRP/Armadillo_301_305_additional YRP/Armadillo_v301_v350a_Silicon_Realms_Toolworks_additional YRP/Armadillo_v301_v350a_Silicon_Realms_Toolworks YRP/Armadillov301v305 YRP/Armadillov3xx YRP/Armadillov300a YRP/Armadillo300aSiliconRealmsToolworks YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/DebuggerHiding__Active YRP/ThreadControl__Context YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_files_operation YRP/CRC32_poly_Constant YRP/CRC32_table YRP/suspicious_packer_section
84fd5dd112deb40fbfd391fd8739e9d09cc8fa088674becb572d3275378713c5	PE32	2019-11-24 10:14:01	User Submission	YRP/Armadillo_v300a_additional YRP/Armadillo_36x_Silicon_Realms_Toolworks YRP/Armadillo_301_305 YRP/Armadillo_v300a [+] YRP/Armadillo_300a_Silicon_Realms_Toolworks_additional YRP/Armadillo_36x_Silicon_Realms_Toolworks_additional YRP/Armadillo_v301_v305_additional YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/Armadillo_v301_v305 YRP/Armadillo_300a_Silicon_Realms_Toolworks YRP/Armadillo_v3xx YRP/Armadillo_v300_additional YRP/Armadillo_300a_361_Silicon_Realms_Toolworks YRP/Armadillo_301_305_additional YRP/Armadillov301v305 YRP/Armadillov3xx YRP/Armadillov300a YRP/Armadillo300aSiliconRealmsToolworks YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/DebuggerHiding__Active YRP/ThreadControl__Context YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_files_operation YRP/CRC32_poly_Constant YRP/CRC32_table YRP/suspicious_packer_section
0d6416f4f2a6a0535d38ad658ae96e578525cd9c9e589c250749ce56710ef2c8	PE32	2019-11-24 10:10:06	User Submission	YRP/Armadillo_v300a_additional YRP/Armadillo_36x_Silicon_Realms_Toolworks YRP/Armadillo_301_305 YRP/Armadillo_v300a [+] YRP/Armadillo_300a_Silicon_Realms_Toolworks_additional YRP/Armadillo_36x_Silicon_Realms_Toolworks_additional YRP/Armadillo_v301_v305_additional YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/Armadillo_v301_v305 YRP/Armadillo_300a_Silicon_Realms_Toolworks YRP/Armadillo_v3xx YRP/Armadillo_v300_additional YRP/Armadillo_300a_361_Silicon_Realms_Toolworks YRP/Armadillo_301_305_additional YRP/Armadillov301v305 YRP/Armadillov3xx YRP/Armadillov300a YRP/Armadillo300aSiliconRealmsToolworks YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/DebuggerHiding__Active YRP/ThreadControl__Context YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_files_operation YRP/CRC32_poly_Constant YRP/CRC32_table YRP/suspicious_packer_section
9de8eb3d24c82880a62defd9b0e8e63fc0cdcbbd2e28e8f824c3592f86e2d77c	PE32	2019-11-24 10:08:42	User Submission	YRP/Armadillo_v300a_additional YRP/Armadillo_301_305 YRP/Armadillo_301_350a_Silicon_Realms_Toolworks YRP/Armadillo_v300a [+] YRP/Armadillo_300a_Silicon_Realms_Toolworks_additional YRP/Armadillo_v301_v305_additional YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/Armadillo_v301_v305 YRP/Armadillo_300a_Silicon_Realms_Toolworks YRP/Armadillo_v3xx YRP/Armadillo_v300_additional YRP/Armadillo_300a_361_Silicon_Realms_Toolworks YRP/Armadillo_301_305_additional YRP/Armadillo_v301_v350a_Silicon_Realms_Toolworks_additional YRP/Armadillo_v301_v350a_Silicon_Realms_Toolworks YRP/Armadillov301v305 YRP/Armadillov3xx YRP/Armadillov300a YRP/Armadillo300aSiliconRealmsToolworks YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/DebuggerHiding__Active YRP/ThreadControl__Context YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_files_operation YRP/CRC32_poly_Constant YRP/CRC32_table YRP/suspicious_packer_section
ca68507940da9451d48e2c1f827fccd5814d72aed99a199472e2639f8afcc924	PE32	2019-11-24 10:07:56	User Submission	YRP/Armadillo_v300a_additional YRP/Armadillo_301_305 YRP/Armadillo_301_350a_Silicon_Realms_Toolworks YRP/Armadillo_v300a [+] YRP/Armadillo_300a_Silicon_Realms_Toolworks_additional YRP/Armadillo_v301_v305_additional YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/Armadillo_v301_v305 YRP/Armadillo_300a_Silicon_Realms_Toolworks YRP/Armadillo_v3xx YRP/Armadillo_v300_additional YRP/Armadillo_300a_361_Silicon_Realms_Toolworks YRP/Armadillo_301_305_additional YRP/Armadillo_v301_v350a_Silicon_Realms_Toolworks_additional YRP/Armadillo_v301_v350a_Silicon_Realms_Toolworks YRP/Armadillov301v305 YRP/Armadillov3xx YRP/Armadillov300a YRP/Armadillo300aSiliconRealmsToolworks YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/DebuggerHiding__Active YRP/ThreadControl__Context YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_files_operation YRP/CRC32_poly_Constant YRP/CRC32_table YRP/suspicious_packer_section
dc9f8c7129fd52ca409980d0b5ca20053cb886b538cbf46986af34201258bb3b	PE32	2019-11-24 10:06:38	User Submission	YRP/Armadillo_v300a_additional YRP/Armadillo_301_305 YRP/Armadillo_301_350a_Silicon_Realms_Toolworks YRP/Armadillo_v300a [+] YRP/Armadillo_300a_Silicon_Realms_Toolworks_additional YRP/Armadillo_v301_v305_additional YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/Armadillo_v301_v305 YRP/Armadillo_300a_Silicon_Realms_Toolworks YRP/Armadillo_v3xx YRP/Armadillo_v300_additional YRP/Armadillo_300a_361_Silicon_Realms_Toolworks YRP/Armadillo_301_305_additional YRP/Armadillo_v301_v350a_Silicon_Realms_Toolworks_additional YRP/Armadillo_v301_v350a_Silicon_Realms_Toolworks YRP/Armadillov301v305 YRP/Armadillov3xx YRP/Armadillov300a YRP/Armadillo300aSiliconRealmsToolworks YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/url YRP/contentis_base64 YRP/VM_Generic_Detection YRP/Misc_Suspicious_Strings YRP/DebuggerHiding__Active YRP/ThreadControl__Context YRP/anti_dbg YRP/antivm_bios YRP/network_tcp_socket YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/CRC32_poly_Constant YRP/CRC32_table YRP/MD5_Constants YRP/TEAN YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section
35794b33fba48f52a0eed9081b00eae04a18308789c74dad82db266ee3f2d259	PE32	2019-11-24 09:39:58	User Submission	YRP/Armadillo_v300a_additional YRP/Armadillo_301_305 YRP/Armadillo_301_350a_Silicon_Realms_Toolworks YRP/Armadillo_v300a [+] YRP/Armadillo_300a_Silicon_Realms_Toolworks_additional YRP/Armadillo_v301_v305_additional YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/Armadillo_v301_v305 YRP/Armadillo_300a_Silicon_Realms_Toolworks YRP/Armadillo_v3xx YRP/Armadillo_v300_additional YRP/Armadillo_300a_361_Silicon_Realms_Toolworks YRP/Armadillo_301_305_additional YRP/Armadillo_v301_v350a_Silicon_Realms_Toolworks_additional YRP/Armadillo_v301_v350a_Silicon_Realms_Toolworks YRP/Armadillov301v305 YRP/Armadillov3xx YRP/Armadillov300a YRP/Armadillo300aSiliconRealmsToolworks YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/HasRichSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/DebuggerHiding__Active YRP/ThreadControl__Context YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_files_operation YRP/CRC32_poly_Constant YRP/CRC32_table YRP/suspicious_packer_section
f01110af20d297cd3d01b7a2f46482a8479123a87e34efa143f8384c77700047	PE32	2019-11-24 09:39:05	User Submission	YRP/Armadillo_v300a_additional YRP/Armadillo_301_305 YRP/Armadillo_301_350a_Silicon_Realms_Toolworks YRP/Armadillo_v300a [+] YRP/Armadillo_300a_Silicon_Realms_Toolworks_additional YRP/Armadillo_v301_v305_additional YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/Armadillo_v301_v305 YRP/Armadillo_300a_Silicon_Realms_Toolworks YRP/Armadillo_v3xx YRP/Armadillo_v300_additional YRP/Armadillo_300a_361_Silicon_Realms_Toolworks YRP/Armadillo_301_305_additional YRP/Armadillo_v301_v350a_Silicon_Realms_Toolworks_additional YRP/Armadillo_v301_v350a_Silicon_Realms_Toolworks YRP/Armadillov301v305 YRP/Armadillov3xx YRP/Armadillov300a YRP/Armadillo300aSiliconRealmsToolworks YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/HasRichSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/DebuggerHiding__Active YRP/ThreadControl__Context YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_files_operation YRP/CRC32_poly_Constant YRP/CRC32_table YRP/suspicious_packer_section

Recent Searches
yrp/armadillo_300a_361_silicon_realms_toolworks
yrp/webshell_asp_ice
yrp/webshell_bypass_iisuser_p
yrp/webshell_caidao_shell_404
yrp/webshell_caidao_shell_guo
yrp/webshell_caidao_shell_ice_2
yrp/webshell_cihshell_fix
yrp/webshell_dev_core
yrp/webshell_gfs_sh_r57shell_r57shell127_sniper_sa_xxx
yrp/webshell_imhapftp_2

Search

Recent Searches