MalShare

SHA256 Hash	File type	Added	Source	Yara Hits
5cfd4884faa30fbdd5af432e70b22c033f36f032b4b92f84aead84b57b5dd592	data	2020-03-18 00:55:14	User Submission	CuckooSandbox/shellcode CuckooSandbox/embedded_win_api CuckooSandbox/vmdetect YRP/possible_includes_base64_packed_functions [+] YRP/Borland YRP/powershell YRP/maldoc_find_kernel32_base_method_1 YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Browsers YRP/RE_Tools YRP/Antivirus YRP/VM_Generic_Detection YRP/VMWare_Detection YRP/Sandboxie_Detection YRP/VirtualBox_Detection YRP/Dropper_Strings YRP/WMI_strings YRP/Misc_Suspicious_Strings YRP/vmdetect YRP/WMI_VM_Detect YRP/anti_dbgtools YRP/network_tcp_listen YRP/network_dyndns YRP/network_dropper YRP/network_tcp_socket YRP/spreading_file YRP/rat_rdp YRP/win_mutex YRP/win_files_operation YRP/vmdetect_misc YRP/android_meterpreter YRP/Big_Numbers0 YRP/Big_Numbers1 YRP/CRC32_poly_Constant YRP/TEAN YRP/spyeye YRP/spyeye_plugins YRP/GEN_PowerShell YRP/Str_Win32_Winsock2_Library YRP/SurtrStrings YRP/Surtr YRP/nAspyUpdateStrings YRP/nAspyUpdate YRP/Mimikatz_Memory_Rule_1 YRP/REDLEAVES_CoreImplant_UniqueStrings YRP/Ham_backdoor YRP/Tofu_Backdoor YRP/fin7_functions FlorianRoth/Tofu_Backdoor FlorianRoth/REDLEAVES_CoreImplant_UniqueStrings FlorianRoth/Msfpayloads_msf_psh
8558c69b0e013764755a691d2336e8c016784f8a4569d738fa2c8524d54155a1	data	2019-10-23 06:40:23	User Submission	CuckooSandbox/shellcode CuckooSandbox/embedded_win_api YRP/powershell YRP/domain [+] YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Browsers YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/android_meterpreter YRP/TEAN YRP/Ham_backdoor
fd6a956a7708708cddff78c8505c7db73d7c4e961da8a3c00cc5a51171a92b7b	PE32	2018-06-22 12:37:06	User Submission	YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/maldoc_find_kernel32_base_method_1 YRP/domain YRP/url YRP/contentis_base64 YRP/anti_dbg YRP/screenshot YRP/win_files_operation YRP/Ham_backdoor
f251485a62e104dfd8629dc4d2dfd572ebd0ab554602d682a28682876a47e773	PE32	2018-06-22 12:35:38	User Submission	YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/maldoc_find_kernel32_base_method_1 YRP/domain YRP/url YRP/contentis_base64 YRP/anti_dbg YRP/win_files_operation YRP/Big_Numbers2 YRP/Ham_backdoor
e6ecb146f469d243945ad8a5451ba1129c5b190f7d50c64580dbad4b8246f88e	PE32	2018-06-22 12:34:01	User Submission	YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/maldoc_find_kernel32_base_method_1 YRP/domain YRP/url YRP/contentis_base64 YRP/Dropper_Strings YRP/anti_dbg YRP/win_registry YRP/win_files_operation YRP/Ham_backdoor
c2539cb0495fc09f1ba8b29c6eec17af61f502d4406cc214a0ee65211441efba	PE32	2018-06-22 12:29:56	User Submission	YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/maldoc_find_kernel32_base_method_1 YRP/domain YRP/url YRP/contentis_base64 YRP/Dropper_Strings YRP/anti_dbg YRP/screenshot YRP/win_registry YRP/win_files_operation YRP/Ham_backdoor
5cebc133ae3b6afee27beb7d3cdb5f3d675c3f12b7204531f453e99acdaa87b1	PE32	2018-06-22 12:16:28	User Submission	YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasDebugData YRP/HasRichSignature YRP/maldoc_find_kernel32_base_method_1 YRP/domain YRP/contentis_base64 YRP/anti_dbg YRP/screenshot YRP/win_files_operation YRP/Ham_backdoor
4521a74337a8b454f9b80c7d9e57b4c9580567f84e513d9a3ce763275c55e691	PE32	2018-06-22 12:14:01	User Submission	YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/maldoc_find_kernel32_base_method_1 YRP/domain YRP/url YRP/contentis_base64 YRP/Dropper_Strings YRP/anti_dbg YRP/win_registry YRP/win_files_operation YRP/Ham_backdoor
446bbb96cf8518d60d652ba8df0bbaa78f5a23ac1abdfc93d0182d3bcb06bf4e	PE32	2018-06-22 12:13:48	User Submission	YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/win_files_operation YRP/android_meterpreter YRP/Ham_backdoor
1ebf3eabaf3ea08c45358ec57beca27de44d53cee2e5a8d545da9f75696d1fb7	PE32	2018-06-22 12:09:18	User Submission	YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasDebugData YRP/HasRichSignature YRP/maldoc_find_kernel32_base_method_1 YRP/domain YRP/contentis_base64 YRP/anti_dbg YRP/screenshot YRP/win_files_operation YRP/Ham_backdoor
1ba4f8d569dafdf2c0152d706fc9cc3d6eb646e8ea639c410c8f95e07bc2551e	PE32	2018-06-22 12:08:39	User Submission	YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/DebuggerException__SetConsoleCtrl YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/screenshot YRP/win_registry YRP/win_files_operation YRP/Ham_backdoor
19aa5019f3c00211182b2a80dd9675721dac7cfb31d174436d3b8ec9f97d898b	PE32	2018-06-22 12:08:26	User Submission	YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasDebugData YRP/HasRichSignature YRP/maldoc_find_kernel32_base_method_1 YRP/domain YRP/contentis_base64 YRP/anti_dbg YRP/screenshot YRP/win_files_operation YRP/Ham_backdoor
13ea0b029b797ca222d54f81a22623719bc440a89cdd8108611ab2354152297c	PE32	2018-06-22 12:08:13	User Submission	YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/win_mutex YRP/win_files_operation YRP/Ham_backdoor

Recent Searches
yrp/ham_backdoor
yrp/microsoft_visual_cpp_60_dll
yrp/microsoft_visual_cpp_60_dll_additional
yrp/microsoft_visual_cpp_70_custom
yrp/microsoft_visual_cpp_70_dll
yrp/microsoft_visual_cpp_8
yrp/microsoft_visual_cpp_80_debug_
yrp/microsoft_visual_cpp_v80_debug
yrp/microsoft_visual_cpp_v50v60_mfc_additional
yrp/qemu_detection

Search

Recent Searches