MalShare

SHA256 Hash	File type	Added	Source	Yara Hits
aaf675086e288e4cc30671b09f2ed55528973aeaab20b2bfaa76c2221c1475bb	PE32	2022-02-24 19:58:16	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/contentis_base64 YRP/win_registry
bed8abf3fdde0d8c6265ed2730e657aefd52145b89af763b0e92c09469c61f04	PE32	2022-02-24 19:44:53	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/contentis_base64
1ccca98fd41a9a4917f4c4806c70f43cd151976719280a3cf7189af91a0c0de6	PE32	2022-02-24 12:58:31	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/_v10_additional [+] YRP/LCC_Win32_v1x YRP/_v10_ YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/domain YRP/contentis_base64 YRP/win_registry
ee0aba55809b0ea4da180d75cbe74df4d7b660ec92eaadb6427037fd3242f850	MS-DOS	2022-02-24 08:43:54	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasModified_DOS_Message YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section
762803160f29b7a1f880f791b495e0d836244b824a876c415ae81215806c1d14	PE32	2022-02-23 19:35:57	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/_v10_additional [+] YRP/LCC_Win32_v1x YRP/_v10_ YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/domain YRP/contentis_base64 YRP/win_registry
0678a94e8b2c96351fd39d367de6b91fdb2abff2b1f801bf2077a1ef33fb942f	PE32	2022-02-23 19:34:04	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/contentis_base64
9088a8022ac4e0ed23a24e3294b0c23a097979535a9c05a115e8dedda58a094e	MS-DOS	2022-02-23 13:11:18	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/_v10_additional [+] YRP/LCC_Win32_v1x YRP/_v10_ YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasModified_DOS_Message YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/screenshot YRP/win_registry YRP/suspicious_packer_section
f38559df84d77ff9b1d14316ab18804675b9da723784c0379c80d4c3076e9af1	PE32	2022-02-23 07:33:06	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/contentis_base64 YRP/win_registry
3e41d595cabadd73f0e30d3635951361cdf7663e1b1a52815160c10e78e73573	PE32	2022-02-23 04:25:43	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/domain YRP/contentis_base64 YRP/win_registry
0dc86a3f1aa57e6b25d9f4a525f884f20b90f1c38205dfd563d058d33dd98133	PE32	2022-02-23 03:47:18	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/contentis_base64 YRP/win_registry
93d109d9b8c6d01f254244585eae546365bd6847e42eacb4ebf96bc943736d3f	PE32	2022-02-23 02:53:20	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/contentis_base64 YRP/win_registry
20adeb8db21137333240be9b83f57806acdad03b05dae52d43006c5b8873aeab	PE32	2022-02-23 00:53:18	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/contentis_base64 YRP/win_registry
d4567728a130a9f8452e9fe23bfbb1aa27a6d7a5962d6c0b27fe4382e234209a	PE32	2022-02-22 22:31:11	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/contentis_base64 YRP/DebuggerException__SetConsoleCtrl YRP/anti_dbg YRP/win_registry YRP/win_files_operation
af1ff8a3d8aed270785dd63bec7ca666b69d0eddf04714130b02f8115c8d9fd9	PE32	2022-02-22 20:05:42	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/contentis_base64
c254c18559b1907b7a48af4798b8a757e77248b4dd45d94d61ad4565333a81e1	MS-DOS	2022-02-22 18:58:17	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/_v10_additional [+] YRP/LCC_Win32_v1x YRP/_v10_ YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasModified_DOS_Message YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/screenshot YRP/win_registry YRP/suspicious_packer_section
d9a220e685052e06163c152ee298a2add9c7d037a49dc79cbff66462bd3836cf	PE32	2022-02-22 16:37:15	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/contentis_base64 YRP/DebuggerException__SetConsoleCtrl YRP/anti_dbg YRP/win_registry YRP/win_files_operation
21aed052f94387579f80653f22585d47d0240bb29b0ecf9f192fc7238c7e9ea5	PE32	2022-02-22 15:12:58	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/contentis_base64 YRP/DebuggerException__SetConsoleCtrl YRP/anti_dbg YRP/win_registry YRP/win_files_operation
204596c7d03a78d71d88855aeeccfd4d5c19b3c4c6b825ba2644cedd0d95dbc9	PE32	2022-02-22 12:34:21	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/contentis_base64
c4d34bf80699a1669ae95c6b0ee703cfc1c301526396b86d2b5abdf925fff309	PE32	2022-02-22 05:40:01	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/contentis_base64
b9bbf41ea70ed795e989c4562f9f314981b2f5b6490d4c00e97cc87388a9b0e0	PE32	2022-02-20 08:00:20	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/contentis_base64 YRP/DebuggerException__SetConsoleCtrl YRP/anti_dbg YRP/win_registry YRP/win_files_operation
cdb29c4a0d55647f8cf78be8672eaf9b12019595ee3bec7eb36346eebd408ef8	PE32	2022-02-19 12:45:51	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/System_Tools YRP/Antivirus YRP/network_tcp_socket YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API FlorianRoth/DragonFly_APT_Sep17_3
3057c90f2255828eb65ed6ee90bbda0dec9457507717459ac39e4dd8c5b1891d	PE32	2022-02-19 04:49:36	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/contentis_base64 YRP/Dropper_Strings YRP/network_irc YRP/network_tcp_socket YRP/network_dns YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library FlorianRoth/DragonFly_APT_Sep17_3
bc5759c63d1adf05a464c86d0480957543feeb7c1ec308648a183227127a2a8c	PE32	2022-02-19 02:30:30	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/IP YRP/contentis_base64 YRP/network_tcp_socket YRP/network_dns YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library FlorianRoth/DragonFly_APT_Sep17_3
2d49c1b10afcf79fa41561f3cb0312178edcdf3289071319527a0b6ca858f74a	PE32	2022-02-19 00:03:34	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/contentis_base64 YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API FlorianRoth/DragonFly_APT_Sep17_3
d23c47d2cbf3e99e7f8de283e85581ccaaeb64aa4b1ed6ffe4b5d86673fccc3f	PE32	2022-02-18 11:18:03	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/contentis_base64 YRP/network_tcp_socket YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API FlorianRoth/DragonFly_APT_Sep17_3
092e8f24ede330854892916b547f7cb9ed3aeca4e6989a548dfe6dc017c572ba	PE32	2022-02-18 03:28:56	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/network_tcp_socket YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API FlorianRoth/DragonFly_APT_Sep17_3
c45452dd62c6cc4767d9519d7c27ddadd726636d42f0a7e521721b486747e275	PE32	2022-02-18 01:46:15	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/network_irc YRP/network_tcp_socket YRP/network_dns YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library
3a06884e18939ddb690793b0f3950ff56e5ea42bfdca49ce0e3fa8c197d67240	PE32	2022-02-18 00:28:41	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/IP YRP/contentis_base64 YRP/System_Tools YRP/Misc_Suspicious_Strings YRP/network_udp_sock YRP/network_tcp_listen YRP/network_irc YRP/network_tcp_socket YRP/network_dns YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/android_meterpreter YRP/Str_Win32_Winsock2_Library YRP/UPX YRP/suspicious_packer_section
2a868f6a480db63007bc1700d5fc98007c0ce90fc67c6b07038c9348f36dd174	PE32	2022-02-17 23:21:01	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/network_irc YRP/network_tcp_socket YRP/network_dns YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library
c24ce752b6eae8eb1c4a81fb0ad55d08829f9eb121e2c83bb6312230fa519010	PE32	2022-02-17 20:41:56	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/network_tcp_socket YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library FlorianRoth/DragonFly_APT_Sep17_3
725d92b4de462eb29561d6c528655c2b5d553bf56c6a3ec913666af38ec64766	PE32	2022-02-17 20:38:46	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/network_irc YRP/network_tcp_socket YRP/network_dns YRP/keylogger YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library
f6ace8ad66460b9df244ae5a5b5526a4a66520a95448e24047e7d0f42e458704	PE32	2022-02-17 20:11:58	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/network_irc YRP/network_tcp_socket YRP/network_dns YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library
f0fc2d7a94d7ed86fd4fab3038e998a23bff394c28245843f81d7c5966e5bcf4	PE32	2022-02-17 19:45:35	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/_v10_additional [+] YRP/LCC_Win32_v1x YRP/_v10_ YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/IP YRP/contentis_base64 YRP/anti_dbg YRP/network_tcp_listen YRP/escalate_priv YRP/screenshot YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/UPX YRP/suspicious_packer_section FlorianRoth/DragonFly_APT_Sep17_3
02ae92b2c69c2c3dbce2426fb0635859bdcd68699d33a168f7631e4ca4f394c3	PE32	2022-02-17 19:43:44	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/IsBeyondImageSize YRP/ImportTableIsBad YRP/domain YRP/contentis_base64 YRP/network_tcp_socket YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/suspicious_packer_section FlorianRoth/DragonFly_APT_Sep17_3
4383285096e4be85befcbd63e39f7f15f8fdedeb3e86821ee025076d4f3165a2	PE32	2022-02-17 17:47:59	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/IP YRP/contentis_base64 YRP/network_irc YRP/network_tcp_socket YRP/network_dns YRP/keylogger YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library
139793698fe367532051df589bfede7ea17f455f2846c73d9e5ac0ce220e3267	PE32	2022-02-17 16:47:01	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/network_irc YRP/network_tcp_socket YRP/network_dns YRP/keylogger YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library
a4071b0fade05eff63a08eeb3d92cefa2f2e265c0c2ac0c4e0192cd5708bacd8	PE32	2022-02-17 15:56:25	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/IP YRP/contentis_base64 YRP/network_irc YRP/network_tcp_socket YRP/network_dns YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library
4156f5673c612bab82771ff2de8c10222015ed75fa80470f6131c60f603b37ed	PE32	2022-02-17 15:33:59	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/contentis_base64 YRP/network_tcp_socket YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API FlorianRoth/DragonFly_APT_Sep17_3
624ac6fa1a3bb7869839b91478d0faf068da271fc49e8544490cd1dd813ffb81	PE32	2022-02-17 15:14:50	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/network_irc YRP/network_tcp_socket YRP/network_dns YRP/keylogger YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library
7947e75896fab71432529ed73432b5e9f30bebcf99e358803cf7c9212dd267cf	MS-DOS	2022-02-17 14:45:37	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/IsBeyondImageSize YRP/ImportTableIsBad YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/network_tcp_socket YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library FlorianRoth/DragonFly_APT_Sep17_3
b8e402ceaed41e2f59405d33608c798ea7308af0119a84861b6b5466b4b6fd30	PE32	2022-02-17 13:10:34	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/network_tcp_socket YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API FlorianRoth/DragonFly_APT_Sep17_3
5fb272d52b6ae4b3ec586bc68f98d41f1663d26294dada736b26c2044dcf8d7d	PE32	2022-02-17 12:56:52	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/network_tcp_socket YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library
c18d889f5a545ab7e22f4475110c155331bb9a9d139f1c74388fdd8aa80f657a	PE32	2022-02-17 12:49:02	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/network_irc YRP/network_tcp_socket YRP/network_dns YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library
166389803dd48e9e91f1cce12243007abed18ffeda22532ace56340a71a7e7d7	PE32	2022-02-17 12:35:28	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/network_irc YRP/network_tcp_socket YRP/network_dns YRP/keylogger YRP/win_mutex YRP/win_files_operation YRP/Str_Win32_Winsock2_Library
2b83357bfaeadf1807c9586c8c7e1317ce008eb6a50c5f1299860fb0dc8858d9	PE32	2022-02-17 12:12:51	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/network_irc YRP/network_tcp_socket YRP/network_dns YRP/keylogger YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library
43e6e1f927d8d1292db158eb65283adfb3f7331af75713133fdd9e79f7cb5bcc	PE32	2022-02-17 12:01:43	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/url YRP/contentis_base64 YRP/Dropper_Strings YRP/network_udp_sock YRP/network_tcp_listen YRP/network_irc YRP/network_tcp_socket YRP/network_dns YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API FlorianRoth/DragonFly_APT_Sep17_3
732334aae253445aff3f7f0324efcaa7da6bb81941834799d95bf5401d72fc4d	PE32	2022-02-17 10:33:34	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/network_irc YRP/network_tcp_socket YRP/network_dns YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library
ff7ec3a0fda2b21dbf18b7ccae28e9770e3d0363cae3b21381f88a5bcd9d674c	MS-DOS	2022-02-17 10:20:22	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/network_tcp_socket YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library FlorianRoth/DragonFly_APT_Sep17_3
98450533b98e8c3cd3c4476b240fdc51a2ca1a63e3ac3cdfff8157806a975dc1	PE32	2022-02-17 07:53:58	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/network_irc YRP/network_tcp_socket YRP/network_dns YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library
2a6351b7fdbe1bba603d1fbea8cdf844cafccbb2e12bbce578a1c85757fd5612	PE32	2022-02-17 02:36:59	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/_v10_additional [+] YRP/LCC_Win32_v1x YRP/_v10_ YRP/IsPE32 YRP/IsConsole YRP/HasOverlay YRP/domain YRP/contentis_base64 YRP/Browsers YRP/inject_thread YRP/create_service FlorianRoth/DragonFly_APT_Sep17_3
d71c2a36e87d2d76ae6f64512a6b5e10c6be8aa28832d2c760a2301ddf85d81b	PE32	2022-02-17 01:32:29	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/network_tcp_socket YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API FlorianRoth/DragonFly_APT_Sep17_3
7d2d1562381038ac17661e0ff2be4c3c217a72280e64611b0a9b731611d2f9bd	MS-DOS	2022-02-16 21:24:55	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/network_tcp_socket YRP/win_mutex YRP/win_files_operation YRP/Str_Win32_Winsock2_Library FlorianRoth/DragonFly_APT_Sep17_3
90aa7d27b339e3018e812887479d1e1fbb30eca40ac751c9cd2c562459b9c119	PE32	2022-02-16 20:38:32	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/url YRP/contentis_base64 YRP/Dropper_Strings YRP/network_udp_sock YRP/network_tcp_listen YRP/network_irc YRP/network_tcp_socket YRP/network_dns YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API FlorianRoth/DragonFly_APT_Sep17_3
0dee50d6bf53d40e3d2028be17b2b022c388323f7b6181f580f12bd198debfee	PE32	2022-02-16 20:33:54	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsConsole YRP/HasOverlay YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Dropper_Strings YRP/network_udp_sock YRP/network_tcp_listen YRP/network_irc YRP/network_tcp_socket YRP/network_dns YRP/keylogger YRP/win_registry YRP/Str_Win32_Winsock2_Library
93d11d59d1a049c6cc3fbd3d15302da6257386ed6fe3d54b709f7019c6976227	PE32	2022-02-16 18:26:24	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/domain YRP/contentis_base64 YRP/System_Tools YRP/screenshot YRP/win_files_operation YRP/Big_Numbers0 YRP/CRC32_poly_Constant
40b7fc4ec291e2696765f7fee11727c11776808a6462dabce8fef854c4ce677e	PE32	2022-02-16 16:05:28	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/network_tcp_socket YRP/network_dns YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library
4af0099b015c852cabb273904055f333f3a287a979f05d832b81d466a3e7fc20	PE32	2022-02-16 14:59:45	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/domain YRP/contentis_base64 YRP/network_tcp_socket YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/UPX YRP/suspicious_packer_section
696eaf342691ecc06ade88804f2d6e4487183042a6a0a3ebd38b03bfa1720827	PE32	2022-02-16 10:16:38	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/network_irc YRP/network_tcp_socket YRP/network_dns YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library
7b0eb99e3d56335f489123c105b30acaeb348ef131255a9da18e11cb8495b9d6	PE32	2022-02-16 07:50:02	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/contentis_base64 YRP/System_Tools YRP/Antivirus YRP/network_tcp_socket YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API FlorianRoth/DragonFly_APT_Sep17_3
01d95a990b227b7f549300cfe75b1effef4468e9f105988f751bd128b78950a9	PE32	2022-02-16 07:23:48	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/contentis_base64 YRP/network_tcp_socket YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API FlorianRoth/DragonFly_APT_Sep17_3
e8560d79bdf816cf63e0dba17342e0cff6a9e47fe6b9a32ec0c699a7e33e98ec	PE32	2022-02-16 07:14:43	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/Obfuscated_Strings YRP/inject_thread YRP/escalate_priv YRP/win_token YRP/win_files_operation FlorianRoth/DragonFly_APT_Sep17_3
5baccd48e68136f990e1bcf925a1c6d1c2365f0fe3983b2c3fba241a88711190	PE32	2022-02-16 07:13:40	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/network_irc YRP/network_tcp_socket YRP/network_dns YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library
62e625f362a0aeb56c09583126d76fc09b565be1a6330433442aa3a077583b57	PE32	2022-02-16 06:33:09	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/contentis_base64 YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/win_registry YRP/win_files_operation YRP/MD5_Constants YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API
6f39b64e27bbe502af2022a0799b5554a97466629e3ec2f9772ac0a287e2861d	PE32	2022-02-16 05:17:30	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/_v10_additional [+] YRP/LCC_Win32_v1x YRP/_v10_ YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/contentis_base64 YRP/Dropper_Strings YRP/network_irc YRP/network_dropper YRP/network_tcp_socket YRP/network_dns YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library FlorianRoth/DragonFly_APT_Sep17_3
3ebe014aa5935163b9fb12d7623be2ba4c5313c5fdbcc5119cf90cdbcaf43e11	PE32	2022-02-16 02:50:34	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/network_irc YRP/network_tcp_socket YRP/network_dns YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library
ae4fe771049d02c18e2eba9bffe33dff672d69f57458a593935bdeed498e85d3	PE32	2022-02-16 02:08:53	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/IP YRP/contentis_base64 YRP/Dropper_Strings YRP/network_udp_sock YRP/network_tcp_listen YRP/network_irc YRP/network_tcp_socket YRP/network_dns YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API
431d7a01febd77e9b4460512af402581a622d1abb86ec744fb6bd818e0bcb7f9	PE32	2022-02-16 01:08:59	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/network_irc YRP/network_tcp_socket YRP/network_dns YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library
df68afe8c5c4a11db82051a78cbf2816aed265ab64eb1fbb0293596ccbe73057	PE32	2022-02-15 22:57:33	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/IP YRP/contentis_base64 YRP/network_irc YRP/network_tcp_socket YRP/network_dns YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library
61d695bacbbc4e2155c3fad470878df1cd37d73233692270eca9cc5bcd141fd2	PE32	2022-02-15 21:13:23	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/url YRP/contentis_base64 YRP/Antivirus YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/SEH__vba YRP/network_udp_sock YRP/network_tcp_listen YRP/network_irc YRP/network_http YRP/network_tcp_socket YRP/network_dns YRP/keylogger YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/Beastdoor_Backdoor
9d3aea5038e06acbd3e3d0d901df9794324bf3ff5846d66dac3b716e76f0aca2	PE32	2022-02-15 21:04:25	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/contentis_base64 YRP/Antivirus YRP/Dropper_Strings YRP/network_tcp_listen YRP/network_irc YRP/network_tcp_socket YRP/network_dns YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API FlorianRoth/DragonFly_APT_Sep17_3
e23ea710b409bd5c06a676eb48016d2745185a6ea71afd14cdbf95a83a03a8dc	MS-DOS	2022-02-15 20:30:19	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/Upackv039finalDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/Dropper_Strings YRP/inject_thread YRP/create_service YRP/escalate_priv YRP/win_mutex YRP/win_registry YRP/win_token YRP/CRC32_poly_Constant YRP/CRC32_table YRP/suspicious_packer_section
dd0a86d4f0bcbad3d0d6d2274413aca57c0b4853d9010f4ad8ed46afdcf835f7	PE32	2021-06-09 12:09:57	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/contentis_base64 YRP/network_tcp_listen YRP/network_irc YRP/network_tcp_socket YRP/network_dns YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API FlorianRoth/DragonFly_APT_Sep17_3
9921168567810408de7864fc661a85a3087811b0ccd4cbc206182a63f10073a0	PE32	2020-08-15 20:51:22	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/domain YRP/contentis_base64 FlorianRoth/DragonFly_APT_Sep17_3
57aa48f676dbc0894b2180a7d67f96c27bd337ec3fc17ad07008112b25a70ced	PE32	2020-08-15 20:50:52	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/IP YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Misc_Suspicious_Strings YRP/network_tcp_socket YRP/escalate_priv YRP/cred_local YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/CRC32_poly_Constant YRP/CRC32_table YRP/Str_Win32_Winsock2_Library
0b375adf8ac91eb030208b0ae48f345d2cc273011794087b9e4b43beace789f1	PE32	2020-06-30 17:54:18	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/IsBeyondImageSize YRP/domain YRP/IP YRP/contentis_base64 YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/network_udp_sock YRP/network_tcp_listen YRP/network_irc YRP/network_tcp_socket YRP/network_dns YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API FlorianRoth/DragonFly_APT_Sep17_3
114fecaab3fa50e29eddb9cd4ec2b31ecf21672301d900f9e4ab113bb24592f5	PE32	2020-06-30 15:55:34	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/without_images YRP/without_attachments YRP/without_urls YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/network_udp_sock YRP/network_smtp_raw YRP/network_tcp_socket YRP/network_dns YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library
11c2d238b6d7b6b2477f5b8e9adb79aa6dd135cb47e97f25f6c8d8b971127943	PE32	2020-06-30 07:13:38	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/url YRP/contentis_base64 YRP/Dropper_Strings YRP/network_dropper YRP/win_registry YRP/win_files_operation YRP/MD5_Constants YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API
118b0be244ba3b1a100d9ae4f5eb94416d61c07a5820b3e995ba68802b479eb4	PE32	2020-06-29 17:59:02	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/IP YRP/contentis_base64 YRP/Dropper_Strings YRP/network_udp_sock YRP/network_tcp_listen YRP/network_irc YRP/network_http YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API
bfe46423c668533b0e96ea22dbeb6181e74e91f20571d99c207205e8d3b90053	PE32	2020-06-29 15:15:24	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/IsBeyondImageSize YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Misc_Suspicious_Strings YRP/hijack_network YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/UPX YRP/suspicious_packer_section
119a7edf86ba14200e969c927a1f7a4332665e685b15f84e95e7bebda8e712cd	PE32	2020-06-29 09:13:05	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsConsole YRP/HasOverlay YRP/without_images YRP/without_attachments YRP/without_urls YRP/domain YRP/contentis_base64 YRP/network_smtp_raw YRP/network_tcp_socket YRP/network_dns YRP/keylogger YRP/Str_Win32_Winsock2_Library FlorianRoth/DragonFly_APT_Sep17_3
116b4d22ac64e3cec329c86ba54f6a90d0c166d82857e0cee38964d7fe293387	PE32	2020-06-29 03:15:53	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/with_images YRP/without_urls YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/contentis_base64 YRP/System_Tools YRP/Dropper_Strings YRP/network_udp_sock YRP/network_tcp_listen YRP/network_smtp_raw YRP/network_tcp_socket YRP/network_dns YRP/win_registry YRP/win_files_operation YRP/CRC32_poly_Constant YRP/BASE64_table YRP/Str_Win32_Winsock2_Library FlorianRoth/DragonFly_APT_Sep17_3
5e22169dae7458b71c01f04bd1ee210a35b49b765ffa45ab77a1a2c7ecd43d95	PE32	2020-06-29 01:35:39	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/contentis_base64 YRP/Antivirus YRP/Dropper_Strings YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/win_mutex YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library
117482447cacbb937dbf27547e771bf11e26407c020186b1cee511c264dff280	PE32	2020-06-27 19:39:19	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Browsers YRP/Antivirus YRP/Misc_Suspicious_Strings YRP/network_irc YRP/network_tcp_socket YRP/network_dns YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/android_meterpreter YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API FlorianRoth/DragonFly_APT_Sep17_3
1172d3b571876c33b8b93bcadee9812136b313ae67fb8db30d409cf9174522c1	PE32	2020-06-27 19:36:29	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/_v10_additional [+] YRP/LCC_Win32_v1x YRP/_v10_ YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Dropper_Strings YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API FlorianRoth/DragonFly_APT_Sep17_3
117a9a8d8e7a8453323a77872b81615f41dcc15d648b57e4d7fd3298ecff8f6c	PE32	2020-06-27 17:46:27	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/IP YRP/contentis_base64 YRP/System_Tools YRP/Misc_Suspicious_Strings YRP/network_udp_sock YRP/network_tcp_listen YRP/network_irc YRP/network_tcp_socket YRP/network_dns YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library
117a7eb15bff2c24b38fa6cbc6b2a41ffde098935a1d316afabd5d748db775d3	PE32	2020-06-27 17:42:31	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/url YRP/contentis_base64 YRP/Dropper_Strings YRP/disable_taskmanager YRP/network_dropper YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API FlorianRoth/DragonFly_APT_Sep17_3
380e74c174c7b023ea0e21716aea9095664cbe2666d1b77748b1285ffcc6ff54	PE32	2020-06-27 12:57:44	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/IsBeyondImageSize YRP/domain YRP/url YRP/contentis_base64 YRP/Browsers YRP/Dropper_Strings YRP/network_irc YRP/Str_Win32_Wininet_Library
11b222ed6de17046ef392c9a2d8fa10fdbeee8784d0adc72bd24e079280869ac	PE32	2020-06-27 11:38:38	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/System_Tools YRP/Misc_Suspicious_Strings YRP/network_tcp_listen YRP/network_irc YRP/network_tcp_socket YRP/network_dns YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library FlorianRoth/DragonFly_APT_Sep17_3
11343946f702e41b6f3dae688434db89bc7115b2b388e39c7058b7e437af42c4	PE32	2020-06-27 07:45:44	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Antivirus YRP/Dropper_Strings YRP/network_udp_sock YRP/network_tcp_listen YRP/network_irc YRP/network_http YRP/network_tcp_socket YRP/network_dns YRP/win_registry YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API
1131b76530187370db056d8a1822d966ea2a2e10d024a555e17e15e64ac66782	PE32	2020-06-27 06:08:48	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsConsole YRP/HasOverlay YRP/domain YRP/contentis_base64 FlorianRoth/DragonFly_APT_Sep17_3
11287925e16d6e24b1035cfcc0bb4a51c3eefd53788c6aa2d539a6db72c5114a	PE32	2020-06-27 03:50:48	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDebugData YRP/domain YRP/url YRP/contentis_base64 YRP/win_registry FlorianRoth/DragonFly_APT_Sep17_3
112fda19886954d4e05fb7552094a3165c1350bbe6ff654435d0ce949d3b19f7	PE32	2020-06-26 23:18:49	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/contentis_base64 YRP/Dropper_Strings YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/win_registry YRP/Str_Win32_Winsock2_Library
6f504d93513575afd191d1022f290ec871fd79e9e650974c2593923d69e8f6cc	PE32	2020-06-26 21:31:23	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/network_tcp_socket YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library FlorianRoth/DragonFly_APT_Sep17_3
111bcc62973f0897cbf1849fc047fbe58f67056cee1a938f90565cb2bb49ef36	PE32	2020-06-26 20:52:07	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/IP YRP/contentis_base64 YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/network_udp_sock YRP/network_tcp_listen YRP/network_irc YRP/network_tcp_socket YRP/network_dns YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API FlorianRoth/DragonFly_APT_Sep17_3
11111c3e19e26852adc8541c691910d427f2448822050b813c463fac484022af	PE32	2020-06-26 20:49:20	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/url YRP/contentis_base64 YRP/Dropper_Strings YRP/network_udp_sock YRP/network_tcp_listen YRP/network_irc YRP/network_tcp_socket YRP/network_dns YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API FlorianRoth/DragonFly_APT_Sep17_3
1113d615d1705ee09fc932b1603ed139d317bb445c8d8f13c7a9facd0c4af0a2	PE32	2020-06-26 20:38:21	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/domain YRP/contentis_base64 YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library FlorianRoth/DragonFly_APT_Sep17_3
d27023630bdd1c7591939d254525a469c8994df22580b6d95a725ad06ebbed9c	PE32	2020-06-03 01:12:35	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/IsBeyondImageSize YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/screenshot YRP/win_files_operation YRP/Advapi_Hash_API YRP/Str_Win32_Winsock2_Library
21ed9c7fb47c0b01cf24398e99de53f6e48df5ad5c1ce2897aa5cd1059a408ae	PE32	2020-04-08 01:19:33	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/screenshot YRP/sniff_audio YRP/win_files_operation
e5752e681e1ad20c81fba4fa9c930e1a6179f70194aa8cbdebded6cf019f0e81	PE32	2020-03-25 02:17:39	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/IsBeyondImageSize YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/screenshot YRP/win_files_operation YRP/Advapi_Hash_API YRP/Str_Win32_Winsock2_Library
53b82a340f922218e060d373a3f2403d93ebd180219dbf596e59e5a58a895ae1	PE32	2020-01-22 02:02:13	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/IsBeyondImageSize YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/screenshot YRP/sniff_audio YRP/win_files_operation

Recent Searches
yrp/lcc_win32_v1x
yrp/zacosmall_php
yrp/_bitchin_threads_
yrp/rootshell_php
yrp/malware_msupdater_string_in_exe
yrp/trojan_win32_plainst
yrp/bypassuac_9
yrp/apt1_tarsip_eclipse
yrp/ransom_cryptxxx_dropper
yrp/lightdart_apt1

Search

Recent Searches