MalShare

SHA256 Hash	File type	Added	Source	Yara Hits
3858b8fbba638839155c46e559eb1ac3fcaa89624e4592022336f4ba9e47475e	PE32	2022-02-17 04:55:37	User Submission	CuckooSandbox/vmdetect YRP/Armadillo_V540_Silicon_Realms_Toolworks_20080214 YRP/Armadillo_V540_Silicon_Realms_Toolworks_SignByfly_20080214_additional YRP/VC8_Microsoft_Corporation [+] YRP/Armadillo_V540_Silicon_Realms_Toolworks_SignByfly_20080214 YRP/Microsoft_Visual_Cpp_8 YRP/Armadillo_V540_V542_Silicon_Realms_Toolworks_20080214 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/maldoc_find_kernel32_base_method_1 YRP/domain YRP/contentis_base64 YRP/VirtualPC_Detection YRP/DebuggerHiding__Active YRP/ThreadControl__Context YRP/vmdetect YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_files_operation YRP/CRC32_poly_Constant YRP/CRC32_table YRP/TEAN YRP/suspicious_packer_section YRP/GenerateTLSClientHelloPacket_Test
6a25a115a9a61f4a71cbbd9d45649594d2364bf68ed64c53c4ed9e5daf246a2d	PE32	2020-06-30 19:51:00	User Submission	CuckooSandbox/vmdetect YRP/Armadillo_V540_Silicon_Realms_Toolworks_20080214 YRP/Armadillo_V540_Silicon_Realms_Toolworks_SignByfly_20080214_additional YRP/VC8_Microsoft_Corporation [+] YRP/Armadillo_V540_Silicon_Realms_Toolworks_SignByfly_20080214 YRP/Microsoft_Visual_Cpp_8 YRP/Armadillo_V540_V542_Silicon_Realms_Toolworks_20080214 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature YRP/maldoc_find_kernel32_base_method_1 YRP/domain YRP/contentis_base64 YRP/VirtualPC_Detection YRP/DebuggerHiding__Active YRP/ThreadControl__Context YRP/vmdetect YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_files_operation YRP/CRC32_poly_Constant YRP/CRC32_table YRP/TEAN YRP/suspicious_packer_section
1132040dab4ef7c15e8c101434147620ace78d351f9a5b141efa1a92fdefe604	PE32	2020-06-27 05:57:24	User Submission	CuckooSandbox/vmdetect YRP/Armadillo_V540_Silicon_Realms_Toolworks_20080214 YRP/Armadillo_V540_Silicon_Realms_Toolworks_SignByfly_20080214_additional YRP/VC8_Microsoft_Corporation [+] YRP/Armadillo_V540_Silicon_Realms_Toolworks_SignByfly_20080214 YRP/Microsoft_Visual_Cpp_8 YRP/Armadillo_V540_V542_Silicon_Realms_Toolworks_20080214 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature YRP/maldoc_find_kernel32_base_method_1 YRP/domain YRP/contentis_base64 YRP/VirtualPC_Detection YRP/DebuggerHiding__Active YRP/ThreadControl__Context YRP/vmdetect YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_files_operation YRP/CRC32_poly_Constant YRP/CRC32_table YRP/TEAN YRP/UPX YRP/suspicious_packer_section YRP/GenerateTLSClientHelloPacket_Test
0f4edf8f4e6e794165721d748543cd5e40d43e4910f64c4cab928d1ea8bb6279	PE32	2020-01-15 11:08:55	User Submission	CuckooSandbox/vmdetect YRP/Armadillo_V540_Silicon_Realms_Toolworks_20080214 YRP/Armadillo_V540_Silicon_Realms_Toolworks_SignByfly_20080214_additional YRP/VC8_Microsoft_Corporation [+] YRP/Armadillo_V540_Silicon_Realms_Toolworks_SignByfly_20080214 YRP/Microsoft_Visual_Cpp_8 YRP/Armadillo_V540_V542_Silicon_Realms_Toolworks_20080214 YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/maldoc_find_kernel32_base_method_1 YRP/domain YRP/contentis_base64 YRP/VirtualPC_Detection YRP/DebuggerHiding__Active YRP/ThreadControl__Context YRP/SEH__vba YRP/vmdetect YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_files_operation YRP/CRC32_poly_Constant YRP/CRC32_table YRP/TEAN YRP/UPX YRP/suspicious_packer_section YRP/GenerateTLSClientHelloPacket_Test
1519631c01aa63264fbf9da1b487231ef0747f4920044acfa3dfa8c33b8de090	PE32	2020-01-15 10:00:12	User Submission	CuckooSandbox/vmdetect YRP/Armadillo_V540_Silicon_Realms_Toolworks_20080214 YRP/Armadillo_V540_Silicon_Realms_Toolworks_SignByfly_20080214_additional YRP/VC8_Microsoft_Corporation [+] YRP/Armadillo_V540_Silicon_Realms_Toolworks_SignByfly_20080214 YRP/Microsoft_Visual_Cpp_8 YRP/Armadillo_V540_V542_Silicon_Realms_Toolworks_20080214 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/maldoc_find_kernel32_base_method_1 YRP/domain YRP/contentis_base64 YRP/VirtualPC_Detection YRP/DebuggerHiding__Active YRP/ThreadControl__Context YRP/vmdetect YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_files_operation YRP/CRC32_poly_Constant YRP/CRC32_table YRP/TEAN YRP/suspicious_packer_section YRP/GenerateTLSClientHelloPacket_Test
2b40dc237fccc97abecc943455e7bf95c3dd0639982f7979aca761cb2a441b2e	PE32	2020-01-15 09:23:03	User Submission	CuckooSandbox/vmdetect YRP/Armadillo_V540_Silicon_Realms_Toolworks_20080214 YRP/Armadillo_V540_Silicon_Realms_Toolworks_SignByfly_20080214_additional YRP/VC8_Microsoft_Corporation [+] YRP/Armadillo_V540_Silicon_Realms_Toolworks_SignByfly_20080214 YRP/Microsoft_Visual_Cpp_8 YRP/Armadillo_V540_V542_Silicon_Realms_Toolworks_20080214 YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/maldoc_find_kernel32_base_method_1 YRP/domain YRP/url YRP/contentis_base64 YRP/VM_Generic_Detection YRP/VMWare_Detection YRP/VirtualPC_Detection YRP/Misc_Suspicious_Strings YRP/DebuggerHiding__Active YRP/ThreadControl__Context YRP/vmdetect YRP/anti_dbg YRP/antivm_bios YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/CRC32_poly_Constant YRP/CRC32_table YRP/CRC32b_poly_Constant YRP/MD5_Constants YRP/TEAN YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/suspicious_packer_section
53f50ddf32d3ef49cfc88cc0752bfda9f6e472a2e8b9ae583275d9af94c9d270	PE32	2018-11-15 03:00:51	User Submission	CuckooSandbox/vmdetect YRP/Armadillo_V540_Silicon_Realms_Toolworks_20080214 YRP/Armadillo_V540_Silicon_Realms_Toolworks_SignByfly_20080214_additional YRP/VC8_Microsoft_Corporation [+] YRP/Armadillo_V540_Silicon_Realms_Toolworks_SignByfly_20080214 YRP/Microsoft_Visual_Cpp_8 YRP/Armadillo_V540_V542_Silicon_Realms_Toolworks_20080214 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/maldoc_find_kernel32_base_method_1 YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/VirtualPC_Detection YRP/DebuggerHiding__Active YRP/ThreadControl__Context YRP/vmdetect YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_files_operation YRP/Big_Numbers0 YRP/Big_Numbers1 YRP/CRC32_poly_Constant YRP/CRC32_table YRP/TEAN YRP/suspicious_packer_section
429441c1bc79fdcb0317d1af132c318faaf809ae687ffc5b896c614e7b69c47d	PE32	2018-11-14 18:51:48	User Submission	CuckooSandbox/vmdetect YRP/Armadillo_V540_Silicon_Realms_Toolworks_20080214 YRP/Armadillo_V540_Silicon_Realms_Toolworks_SignByfly_20080214_additional YRP/VC8_Microsoft_Corporation [+] YRP/Armadillo_V540_Silicon_Realms_Toolworks_SignByfly_20080214 YRP/Microsoft_Visual_Cpp_8 YRP/Armadillo_V540_V542_Silicon_Realms_Toolworks_20080214 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/maldoc_find_kernel32_base_method_1 YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/VirtualPC_Detection YRP/DebuggerHiding__Active YRP/ThreadControl__Context YRP/vmdetect YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_files_operation YRP/CRC32_poly_Constant YRP/CRC32_table YRP/TEAN YRP/suspicious_packer_section YRP/GenerateTLSClientHelloPacket_Test

Recent Searches
yrp/armadillo_v540_v542_silicon_realms_toolworks_20080214
yrp/y0das_crypter_v12
yrp/ransom
yrp/ransom_alfa
yrp/microsoft_visual_basic_v50_additional
yrp/ransom_alpha
yrp/waterbug_sav
yrp/waterbug_fa_malware
yrp/waterbug_turla_dropper
yrp/waterbug_wipbot_2013_core

Search

Recent Searches