MalShare

SHA256 Hash	File type	Added	Source	Yara Hits
fbc66b75d41324979e33746db3865526f64388a2dc3f8dc50e7fdc1d7bcbd763	PE32	2022-03-15 23:04:32	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
39586d1d2708b26ebcb188599b9564f8657b879f32c27c1a156288c0399fa83e	PE32	2022-03-15 18:04:06	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
b6137dce9ddca24ba720d65ffb2fadac112e268e3be6e82fdd30c778f34249c0	PE32	2022-03-15 18:03:44	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
8eb91c20f5f5dd0878a5bca1fdead8a5d860f0842b2f7123c062db73ba36b2ff	PE32	2022-03-15 08:03:22	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
9531b2062aa7a49bc141d406496202c741cd77c290bfb270afd17a6a667a61f5	PE32	2022-03-14 17:03:44	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
7c7ef413f202f872188b5f8bc03da7bcdc949e173e5ff36b3babec039df3e7ab	PE32	2022-03-14 06:02:17	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
6e1a26dfa802c7c824ea4672c756f5264182d73bfaeb2ad2bd19dd9382c920fb	PE32	2022-03-02 21:00:49	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Browsers YRP/VMWare_Detection YRP/Sandboxie_Detection YRP/VirtualBox_Detection YRP/Dropper_Strings YRP/WMI_strings YRP/Misc_Suspicious_Strings YRP/anti_dbg YRP/network_dns YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_hook YRP/vmdetect_misc YRP/Advapi_Hash_API YRP/BlackShades_4 YRP/CAP_HookExKeylogger FlorianRoth/Quasar_RAT_1 FlorianRoth/Quasar_RAT_2
77d3799393c1d6a9781aafefb31b9d4067f74d96bd03746bb1dd68b561460fdb	PE32	2022-02-24 20:16:38	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
64fcf6e27ea721d0d4e8c5703ac06d5414d46c0b56d47d437ef0e5fdd0813e36	PE32	2022-02-24 19:48:30	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
a107e12e50d80bbd650e15d195ce17433cf4c2938765011453054c5699367bb2	PE32	2022-02-24 19:23:08	User Submission	YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasRichSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Browsers YRP/Dropper_Strings YRP/WMI_strings YRP/Misc_Suspicious_Strings YRP/SEH__vba YRP/disable_dep YRP/network_udp_sock YRP/network_tcp_listen YRP/network_http YRP/network_ftp YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/cred_local YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Advapi_Hash_API YRP/CRC32_poly_Constant YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_3 YRP/BlackShades_4
019db7075adc0a8a1f29ea55ac458f3a68bc9f46465bc08d6f63edce7e4e5bc7	PE32	2022-02-24 19:00:33	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
072908d0d557147f4986daa706dfa452814e18975b6577c04ca96a90d703c307	PE32	2022-02-24 18:35:13	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
c6345bdf5b0822527759d3f02f95f09164aa51025eb475ec94d4455553fad26b	PE32	2022-02-24 17:49:19	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
fe4d634dbc975872c2a1b0e2250417e6b2a9af7cbe3c8774a237c84dfd981571	PE32	2022-02-24 17:19:43	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
f09e39b3a9abe8925cd82eb6b806e28dda105c24ebdde5b45071106335bab999	PE32	2022-02-24 16:16:39	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
8a6ea4fdbd71619939ca27206e895dff3c56b3f796e430be1196c733ba6929a1	PE32	2022-02-24 15:23:04	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
151f02f2eb3009538f81b8a454b6b2eb41a8486e213762ef2f3ed4c93912024c	PE32	2022-02-24 14:44:04	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
0472ab6b7533b201dc5337105443629e5e80852aa9a9beb02f4b4b80f5c50483	PE32	2022-02-24 13:54:52	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
45e418caa5423dff039013ff8b9b7545e624ab61f1fec583db210b5ad8386db6	PE32	2022-02-24 13:08:43	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
abf5d3acda99b0e3180e91db08eeaac1a03894994b7f02ca0cf6ddc113a15e90	PE32	2022-02-24 09:34:46	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
c176f1a4817c846a4f498af69fcc3f4216d3e5979d5717fe2a4ef927d8dc7022	PE32	2022-02-24 07:40:11	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
253529602b09b1fbaa647ba6b64c09f9ea8774f890dbdc7794d5aaa5f6f11d54	PE32	2022-02-24 06:59:59	User Submission	YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasRichSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Browsers YRP/Dropper_Strings YRP/WMI_strings YRP/Misc_Suspicious_Strings YRP/SEH__vba YRP/disable_dep YRP/network_udp_sock YRP/network_tcp_listen YRP/network_http YRP/network_ftp YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/cred_local YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Advapi_Hash_API YRP/CRC32_poly_Constant YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_3 YRP/BlackShades_4
7b616eca83c71586218421105d2c3b14cc53e5fb172c48019622e591be101ca9	PE32	2022-02-24 06:55:10	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
00957f69ca7c14210c9e4b44ef236e1f0020324214646603703e0608e0e6e9ae	PE32	2022-02-24 05:27:32	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
f8501fabd8d5e0be7079548f19e8acf39a7caa42cfe4fb6c45f968394e62f74c	PE32	2022-02-24 04:57:32	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
e36d1ac81cb19bfa52dc08b2e60ce320cc32d9eeb43dde809edc7999f1a926e5	PE32	2022-02-24 03:12:21	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
612abc894845aa9b42f06a69f3256594df0c050331fa293c7f21318a86884360	PE32	2022-02-24 02:47:32	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
af95271d6e79bd1699bc942f8bb24b692fb83007ab6813662f0067a6fc537e1f	PE32	2022-02-24 02:34:20	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
433859412cbe1896a252752e5c8f0b5dd27b085b84c8db723b879b41bbe639fb	PE32	2022-02-24 02:27:41	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
83a78e4dd6ad985d210879041dc8ab6c5128b4d38ad8ae68a8b45637f4883493	PE32	2022-02-23 23:39:50	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
f68f528b4c0829fc38ceba2176f1648c88828117e35677d2de77621c079408be	PE32	2022-02-23 23:35:22	User Submission	YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasRichSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Browsers YRP/Dropper_Strings YRP/WMI_strings YRP/Misc_Suspicious_Strings YRP/SEH__vba YRP/disable_dep YRP/network_udp_sock YRP/network_tcp_listen YRP/network_http YRP/network_ftp YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/cred_local YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Advapi_Hash_API YRP/CRC32_poly_Constant YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_3 YRP/BlackShades_4 YRP/BlackShades_25052015 FlorianRoth/RAT_BlackShades KevTheHermit/BlackShades BAMFDetect/BlackShadesServer
6b1d4cae15af6175cec5c9177c786f20bbfe553cd64caff4180a39fac038249e	PE32	2022-02-23 22:39:11	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
81d9c5389f6828d9d812b214047c1a7176b583c90fc9ca23fe241a3928b2db7c	PE32	2022-02-23 22:00:46	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
46ff6235d4c0140ee91f745f14c3614f86554ed7d05b6ef05d81df3a6b39d52f	PE32	2022-02-23 21:24:25	User Submission	YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasRichSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Browsers YRP/Dropper_Strings YRP/WMI_strings YRP/Misc_Suspicious_Strings YRP/SEH__vba YRP/disable_dep YRP/network_udp_sock YRP/network_tcp_listen YRP/network_http YRP/network_ftp YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/cred_local YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Advapi_Hash_API YRP/CRC32_poly_Constant YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_3 YRP/BlackShades_4
8d9b6461d22e33d37e7177002aa331869d899a02dd75ea3ef8913c8ddaa2242e	PE32	2022-02-23 21:17:24	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
c157a7aa9ce09aa51a94665b082fdaeb9d05191d7dbcd6a1b9e641100ee6cfff	PE32	2022-02-23 21:08:50	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
5f47a74796350d3b60c5533b714bc9acf97866d38c4739b05a87ea08dc456e3b	PE32	2022-02-23 20:17:32	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
8e98e69b6aaf339ebe1bfa23997279e139227a996d559e3e5b9e02d5f2dd7614	PE32	2022-02-23 20:16:11	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
7202fee5c655c0d2f855a9c428ae1893b4b564c28f68ac56e7ab0219fff479fa	PE32	2022-02-23 20:04:40	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
e4bee8e4b97a2c63130474e2b3e650d44ec7189d03d8595c7e4a73adce555c22	PE32	2022-02-23 20:01:16	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
d77de398fe4d3b89cf15ed5e4f848d2a281ca94793ec474b7ae227c94a5d2eba	PE32	2022-02-23 19:09:31	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
fdc2d59285731534faaf6ba52c3d18eee5fd721fb9701ee15a9ddc42995a33ee	PE32	2022-02-23 18:35:02	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
2acc3cd85919a10811667e47eddb3556e88b84ea1dcbe998e504a3c74e74c2fd	PE32	2022-02-23 17:22:18	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
c721d91ba83430cdde2fc56ccd2d1af2ea21d2e8eb28294d24c98b5154857483	PE32	2022-02-23 16:54:24	User Submission	YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasRichSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Browsers YRP/Dropper_Strings YRP/WMI_strings YRP/Misc_Suspicious_Strings YRP/SEH__vba YRP/disable_dep YRP/network_udp_sock YRP/network_tcp_listen YRP/network_http YRP/network_ftp YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/cred_local YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Advapi_Hash_API YRP/CRC32_poly_Constant YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_3 YRP/BlackShades_4
1b56a22c984a6c1c4b0cfda12c85f862661d0f045eea8b6d7142cc03446c84c6	PE32	2022-02-23 16:08:02	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
118349a79c2695a76eaf466e2753e9f5e75a3d1f876facffa15cc1768d205d50	PE32	2022-02-23 16:06:52	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
c14a4ec9bdcef34bd01dba30b6b4426bec71f5dae2c11e8a2eaf5c21b64b6414	PE32	2022-02-23 15:06:35	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
0484ea9a4a3dad21640bf5505bd3da002958c6a0b3ddbe1206f91a7b789f9bcf	PE32	2022-02-23 14:39:00	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
bf0221ee96a04443257cf13757d394646c0b050981d08d47e6134357abc0408b	PE32	2022-02-23 14:20:17	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
cdec559bc2110caeece104914dede132038c872194d98012d1c96287bc64ca76	PE32	2022-02-23 14:07:13	User Submission	YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasRichSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Browsers YRP/Dropper_Strings YRP/WMI_strings YRP/Misc_Suspicious_Strings YRP/SEH__vba YRP/disable_dep YRP/network_udp_sock YRP/network_tcp_listen YRP/network_http YRP/network_ftp YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/cred_local YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Advapi_Hash_API YRP/CRC32_poly_Constant YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_3 YRP/BlackShades_4
b39549a701fd93e43e09bb8d3dcb5ffaac010ab2bc585e483b06a0381c3262b7	PE32	2022-02-23 13:04:59	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
60a5328c8ef23d606ca32a1fafd49da94b9b9190d497a997c63f9d269f5116a2	PE32	2022-02-23 12:41:39	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
ab9cd357adfdcefd38e05adac29394be132f37a4deead0072a61afcc6134dc61	PE32	2022-02-23 12:26:57	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
2d40b0c719c41993c83d9142c614df4b43fbb2f6052d38375a3e1fa2133d5557	PE32	2022-02-23 11:44:58	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
9425fb11e546953e780147c748eb649c36537db1db6e4bc5a2e05c4eb1cdc0c9	PE32	2022-02-23 11:43:06	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
c98f067780ee013bfebc6ca0228354f24f6db016ec4c970c29799c4530368a52	PE32	2022-02-23 10:55:00	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
907851f54e9841791a000b003bac35464182e49dd77ef08dae16f8f5f3ad389e	PE32	2022-02-23 10:35:13	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
be10d80e3b84df43e29808720fc661644de374d7373ae93dd62d87e0f8d197f4	PE32	2022-02-23 10:08:57	User Submission	YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasRichSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Browsers YRP/Dropper_Strings YRP/WMI_strings YRP/Misc_Suspicious_Strings YRP/SEH__vba YRP/disable_dep YRP/network_udp_sock YRP/network_tcp_listen YRP/network_http YRP/network_ftp YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/cred_local YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Advapi_Hash_API YRP/CRC32_poly_Constant YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_3 YRP/BlackShades_4
a83ec51987c580bcc292535c55acbd0cbe1417370b6404e0ec2a0a60d30c9d71	PE32	2022-02-23 08:20:44	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
cc37da695085c75be895a90d975358fa5f5e03f280d93b4ea415e805af7dbda1	PE32	2022-02-23 08:20:39	User Submission	YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasRichSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Browsers YRP/Dropper_Strings YRP/WMI_strings YRP/Misc_Suspicious_Strings YRP/SEH__vba YRP/disable_dep YRP/network_udp_sock YRP/network_tcp_listen YRP/network_http YRP/network_ftp YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/cred_local YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Advapi_Hash_API YRP/CRC32_poly_Constant YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_3 YRP/BlackShades_4
6b1512ecc37890ea1f512d5ebc0a9f1decc1787469c68f6d64725bb106121523	PE32	2022-02-23 08:16:43	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
f224084765b498143c1cf04091444531686fc1a3df2d5a994c8b610263cb20de	PE32	2022-02-23 08:06:23	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
f3a4204d8c64ef9d424d941560ca60fdb8fb791095296383d9399a02f47d5aab	PE32	2022-02-23 08:05:11	User Submission	YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/UPXv20MarkusLaszloReiser YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Browsers YRP/Dropper_Strings YRP/WMI_strings YRP/Misc_Suspicious_Strings YRP/SEH__vba YRP/disable_dep YRP/network_udp_sock YRP/network_tcp_listen YRP/network_http YRP/network_ftp YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/cred_local YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Advapi_Hash_API YRP/CRC32_poly_Constant YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/UPX YRP/BlackShades_3 YRP/BlackShades_4 YRP/BlackShades_25052015 YRP/suspicious_packer_section FlorianRoth/RAT_BlackShades KevTheHermit/BlackShades BAMFDetect/BlackShadesServer
31414172bc9a78e79420a1147fd4adec3a4f67e39d3b739054dfc7299bf96d8b	PE32	2022-02-23 07:17:43	User Submission	YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasRichSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Browsers YRP/Dropper_Strings YRP/WMI_strings YRP/Misc_Suspicious_Strings YRP/SEH__vba YRP/disable_dep YRP/network_udp_sock YRP/network_tcp_listen YRP/network_http YRP/network_ftp YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/cred_local YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Advapi_Hash_API YRP/CRC32_poly_Constant YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_3 YRP/BlackShades_4
b5fc76f2b2ce0c0e1b44ef2dd6acb42111a852167d0a361ff01659d16d8f62b8	PE32	2022-02-23 07:06:49	User Submission	YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasRichSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Browsers YRP/Dropper_Strings YRP/WMI_strings YRP/Misc_Suspicious_Strings YRP/SEH__vba YRP/disable_dep YRP/network_udp_sock YRP/network_tcp_listen YRP/network_http YRP/network_ftp YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/cred_local YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Advapi_Hash_API YRP/CRC32_poly_Constant YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_3 YRP/BlackShades_4
f13bfe2e6f3f0d3733c68d3c9d445aa1a4a2fea2f10bbe2fe25ff7066473bfa4	PE32	2022-02-23 06:30:48	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
9f5bc43aa487ce53cee6713bcfffb2b156eb43d12c11a7dc4ed7aa082b822d60	PE32	2022-02-23 05:29:14	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
1dd8c11c837d5a5d2f8c33441ac0a4b69449e9a962fc097c6485d99c951eac49	PE32	2022-02-23 05:12:27	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
8d3cb4a828c64d5facb0b4fd927a0dbce8089a5631e8e50e3bcecb7e2883f3d5	PE32	2022-02-23 04:40:36	User Submission	YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasRichSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Browsers YRP/Dropper_Strings YRP/WMI_strings YRP/Misc_Suspicious_Strings YRP/SEH__vba YRP/disable_dep YRP/network_udp_sock YRP/network_tcp_listen YRP/network_http YRP/network_ftp YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/cred_local YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Advapi_Hash_API YRP/CRC32_poly_Constant YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_3 YRP/BlackShades_4
6316fa46410f1473fb01aabf66e995ba9a55da3f2038d7b7f03545f9a5a2c619	PE32	2022-02-23 04:04:33	User Submission	YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasRichSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Browsers YRP/Dropper_Strings YRP/WMI_strings YRP/Misc_Suspicious_Strings YRP/SEH__vba YRP/disable_dep YRP/network_udp_sock YRP/network_tcp_listen YRP/network_http YRP/network_ftp YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/cred_local YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Advapi_Hash_API YRP/CRC32_poly_Constant YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_3 YRP/BlackShades_4
fafe2a370f58cda9b2ae35c67746485eb674ae1b23b12f0a27eb4ed514d42c62	PE32	2022-02-23 03:47:03	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
852c5f75fc93a4c715c11e9473498139934442b57f705ab01c8c8d969b399994	PE32	2022-02-23 03:33:33	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
4bf00699d9e5dd12d48336fe5e53211f8b088babd88310de1108b8c143a212b4	PE32	2022-02-23 03:22:50	User Submission	YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasRichSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Browsers YRP/Dropper_Strings YRP/WMI_strings YRP/Misc_Suspicious_Strings YRP/SEH__vba YRP/disable_dep YRP/network_udp_sock YRP/network_tcp_listen YRP/network_http YRP/network_ftp YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/cred_local YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Advapi_Hash_API YRP/CRC32_poly_Constant YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_3 YRP/BlackShades_4
41bcc6e4e4ce538872c67fc10c9c5ee895ddc1f19b92d6cb8553c04ff6feb9f0	PE32	2022-02-23 02:54:43	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
d4be82222259d5767e4776cf48a7465707624a7280542980bc6d828afa04fd8d	PE32	2022-02-23 02:52:16	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
39c829dc988c3b71c996261649bb20756361e0902b102e8fec7aeded82bfaaa0	PE32	2022-02-23 01:54:43	User Submission	YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasRichSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Browsers YRP/Dropper_Strings YRP/WMI_strings YRP/Misc_Suspicious_Strings YRP/SEH__vba YRP/disable_dep YRP/network_udp_sock YRP/network_tcp_listen YRP/network_http YRP/network_ftp YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/cred_local YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Advapi_Hash_API YRP/CRC32_poly_Constant YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_3 YRP/BlackShades_4
a8be0981d687a937627aea32bed31c7e63fad6e7039810b16232dc9c875d8610	PE32	2022-02-22 22:52:27	User Submission	YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasRichSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Browsers YRP/Dropper_Strings YRP/WMI_strings YRP/Misc_Suspicious_Strings YRP/SEH__vba YRP/disable_dep YRP/network_udp_sock YRP/network_tcp_listen YRP/network_http YRP/network_ftp YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/cred_local YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Advapi_Hash_API YRP/CRC32_poly_Constant YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_3 YRP/BlackShades_4
594df08550dc88a6a497d108589bc08ecb741d466c6725559b71fb2ee8db113e	PE32	2022-02-22 22:34:39	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
bbc1e8b9ab5fc20b956b65f04c1ff71b1e0c553e0ee707364cfb57e324caabf8	PE32	2022-02-22 22:28:51	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
c8ef31fdb4d5e74fa5aa1e3a1eceb2a52efe9a0bc7ff23cc73049e8c9f74f6e6	PE32	2022-02-22 22:11:19	User Submission	YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/UPXv20MarkusLaszloReiser YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Browsers YRP/Dropper_Strings YRP/WMI_strings YRP/Misc_Suspicious_Strings YRP/SEH__vba YRP/disable_dep YRP/network_udp_sock YRP/network_tcp_listen YRP/network_http YRP/network_ftp YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/cred_local YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Advapi_Hash_API YRP/CRC32_poly_Constant YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/UPX YRP/BlackShades_3 YRP/BlackShades_4 YRP/BlackShades_25052015 YRP/suspicious_packer_section FlorianRoth/RAT_BlackShades KevTheHermit/BlackShades BAMFDetect/BlackShadesServer
aa970d2a9b453d376073212833ee3f17f48b21fa6e67e97329fb155366a362d1	PE32	2022-02-22 21:37:33	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
1581e9e626bc3e72dd51d291da36d95188b22d4d8943487ff5c0ae64aea64df8	PE32	2022-02-22 21:23:02	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
73c2b784d30237d1e912380fb35b9534be823cd58692f5741c46be638953d759	PE32	2022-02-22 21:22:39	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
4dd079d109bf652b4a76ab3c1b1768b3d06d4517f4ba6d1f4ff9bb1e72cfd059	PE32	2022-02-22 21:20:09	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
6e40d32e74c771056afd15ab0802ccb6302ca55dc9b0a375064a2f3fca1e64b8	PE32	2022-02-22 21:14:10	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
7add8fd925514f207591a0e91f70498336747f00c3fa74b2eb960aee326dbd83	PE32	2022-02-22 21:02:17	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
569f2e492d746aba7a00b48ee108e7281fcdcbe9b7407ed36f6c4dd427f85e5e	PE32	2022-02-22 20:45:39	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
8c1d3b6c94588e27e8a72b5f45a20685c600577e90a7dfffc6abb311286799ed	PE32	2022-02-22 18:59:29	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
55c720ed9736ae9cfc196399f3d89270dfca7efd05daeb828ccf72d5923e785e	PE32	2022-02-22 18:03:01	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
29d1c228cd48e23ebf2540abfad2ff251127f40bff4282bf1acef90b1c213407	PE32	2022-02-22 17:59:59	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
8911a8e232e74c4b26eb2e3e52a76e0617f8297d1275e08189f974aa3902f1ee	PE32	2022-02-22 17:37:53	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
56836a9d417eeb70efb9f042edd17247bd6002d3e1bf9911068d746e43dc9fa7	PE32	2022-02-22 16:39:37	User Submission	YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasRichSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Browsers YRP/Dropper_Strings YRP/WMI_strings YRP/Misc_Suspicious_Strings YRP/SEH__vba YRP/disable_dep YRP/network_udp_sock YRP/network_tcp_listen YRP/network_http YRP/network_ftp YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/cred_local YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Advapi_Hash_API YRP/CRC32_poly_Constant YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_3 YRP/BlackShades_4
cd7b09417c7c564073b6d5d0e4249fcf77d01b342df400f12babca9729ea3c56	PE32	2022-02-22 16:21:50	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
d50bdb589d3b70b202471a951633119d7142298586d1948a9f4fe929832cd956	PE32	2022-02-22 15:51:34	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
43788306153cb77e954fe5cc0dca2a74340f36cb636a2ccd1a82140e079c6505	PE32	2022-02-22 15:17:56	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
dc7d761fe022bef7eb8513348f2cb4878729c389ff0752438f1ad48a92458c93	PE32	2022-02-22 15:17:26	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
ea3f300fea2c2e95d1f02988b846a919ca4fc35b99a1516df6d402e86e2af94e	PE32	2022-02-22 15:08:27	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
120d12dec8c40ae5a856edf15d44c5ac30d15ad2e37584d35afa581eb1898901	PE32	2022-02-22 14:24:06	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
b2d3d071a097028680cf194959aac3204e0ddcef9f70c854a0b05b2e8ab6360d	PE32	2022-02-22 13:59:15	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4
466944733011bbf013694b19f8b2e58d9258490f881d06c19779992cdcb87806	PE32	2022-02-22 13:52:04	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/SEH__vba YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers4 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/BlackShades_4

Recent Searches
yrp/blackshades_4
yrp/upx_v0896_v102_v105_v122_delphi_stub_additional
yrp/autoit_2
yrp/vmware_detection
yrp/excalibur103forgot
yrp/yoda_crypter_1_3
yrp/microsoft_visual_cpp_60
yrp/advapi_hash_api
yrp/freebasic_016b
yrp/whirlpool_constants

Search

Recent Searches