MalShare

SHA256 Hash	File type	Added	Source	Yara Hits
3128f680652ac5990b3c0678b82705c38415b564690cfcde07f893277289e2b6	MS-DOS	2022-02-24 19:06:20	User Submission	YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_C_20 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasModified_DOS_Message YRP/FASM YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/Big_Numbers1 YRP/Big_Numbers3 YRP/suspicious_packer_section
acd6334573c36fa597a0ed8bfd567b56b0cc86265ba85b0e7ad2b63e16af00cb	PE32	2022-02-24 12:28:05	User Submission	YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_Cpp_30_old_crap YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_Cpp_30_old_crap_additional [+] YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/disable_dep YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API
619408d2844c34d0009b60a71b4422b5c65403cd442aef0bf4e850924310cfc8	PE32	2022-02-24 06:35:37	User Submission	YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_C_20 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/Big_Numbers1 YRP/Big_Numbers3 FlorianRoth/DragonFly_APT_Sep17_3
8790c155c6336428a2bcd4ac6056838aa2fe4034f8f8e8394a4d139f302d61af	PE32	2022-02-24 04:09:22	User Submission	YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_C_20 YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 [+] YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/IP YRP/contentis_base64 YRP/Big_Numbers3 YRP/suspicious_packer_section
de0c9e36c9f50ed36295e23dad230332f064be45a295048afe03f54cfbfa5cf2	PE32	2022-02-24 00:46:46	User Submission	YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_Cpp_30_old_crap YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_Cpp_30_old_crap_additional [+] YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Antivirus YRP/Dropper_Strings YRP/BITS_CLSID YRP/DebuggerCheck__QueryInfo YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/inject_thread YRP/network_dropper YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/CRC32_poly_Constant YRP/VC8_Random YRP/Str_Win32_Wininet_Library YRP/GlassesCode YRP/Glasses
05da524d8f0260d8b2c42afaf837f934115f0b088cd11ce5164883144acb2429	PE32	2022-02-23 21:19:49	User Submission	YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_C_20 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/domain YRP/IP YRP/contentis_base64 YRP/Big_Numbers1 YRP/Big_Numbers3
1ed37a0890cb1c7d0e968e8b7e1c4d1f80862624b256e01c066a4990e87724fc	PE32	2022-02-23 19:17:23	User Submission	YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_C_20 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/Big_Numbers1 YRP/Big_Numbers3
af9b97943504bfc40e181d8a000d8a58268e557684e06ff7e0b9859d46bbd054	PE32	2022-02-23 17:13:35	User Submission	YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_Cpp_30_old_crap YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_Cpp_30_old_crap_additional [+] YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation
0dafde83f76783775112d4c0b1a3685b139ba98dad0a1b0e432b184245bb3025	PE32	2022-02-23 00:32:13	User Submission	YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_Cpp_30_old_crap YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_Cpp_30_old_crap_additional [+] YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/antisb_threatExpert YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/CRC32_poly_Constant YRP/CRC32_table
cb4058f589621adc7926acf19c47a301f674793417ecea8ebdea19eaaeb00867	PE32	2022-02-23 00:20:17	User Submission	YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_C_20 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/domain YRP/IP YRP/contentis_base64 YRP/Big_Numbers3
8e1ce4882d3ab61bb06be799ec0d36c41bdfceebdaee5e6b8d4d3a1d9773e9fb	PE32	2022-02-22 23:47:28	User Submission	YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_C_20 YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 [+] YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/IP YRP/contentis_base64 YRP/Big_Numbers3 YRP/suspicious_packer_section
0ced57ddb5d7a267ca9d28038bc4a64a1d3163c15b15b42b7abe67812a086dfc	MS-DOS	2022-02-22 23:32:04	User Submission	YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_C_20 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasModified_DOS_Message YRP/FASM YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/Big_Numbers1 YRP/Big_Numbers3 YRP/suspicious_packer_section
436b656ae5587f13763508c725326c072bed1a9848ce1665d285b58342f21bee	PE32	2022-02-22 23:01:25	User Submission	YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_C_20 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/Big_Numbers1 YRP/Big_Numbers3 FlorianRoth/DragonFly_APT_Sep17_3
d9da7534fafb18dc5c260437bc33031e49c9034e00f9ba95a9238c620d36ddc9	MS-DOS	2022-02-22 21:10:24	User Submission	YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_C_20 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasModified_DOS_Message YRP/FASM YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/contentis_base64 YRP/Big_Numbers1 YRP/Big_Numbers3 YRP/suspicious_packer_section
d7e4b51ac25f5d08d4fa014da3e7e5544e23b69fce273812582ec5e5e3619c8d	PE32	2022-02-22 20:28:10	User Submission	YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_C_20 YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 [+] YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/IP YRP/contentis_base64 YRP/Big_Numbers3 YRP/suspicious_packer_section
2bff42a455e7de6afd9fffb1d1a0d8dfbbc3c07715ba9284ac32967a605cc132	MS-DOS	2022-02-22 15:28:59	User Submission	YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_C_20 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasModified_DOS_Message YRP/FASM YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/Big_Numbers1 YRP/Big_Numbers3 YRP/suspicious_packer_section
691ca8fb829a2c83a68739ee126ee1f9abdcf740150746e6f03df417ccc00898	PE32	2022-02-22 15:18:13	User Submission	YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_C_20 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/domain YRP/IP YRP/contentis_base64 YRP/Big_Numbers1 YRP/Big_Numbers3
72ddd536800c473b85f0ba419af9f86cbf4e77d16bccb5c370fbcc9cb6ee6172	PE32	2022-02-22 09:51:02	User Submission	YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_C_20 YRP/IsPE32 YRP/IsConsole [+] YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Dropper_Strings YRP/win_registry YRP/Advapi_Hash_API YRP/RijnDael_AES_CHAR YRP/RijnDael_AES_LONG FlorianRoth/DragonFly_APT_Sep17_3
ba68bfe48b3689af508358fe1b33acc5daf8ad3132e443ff047b45188f8a19c2	PE32	2022-02-22 08:45:42	User Submission	YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_Cpp_30_old_crap YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_Cpp_30_old_crap_additional [+] YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/UPXv20MarkusLaszloReiser YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/UPX20030XMarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/UPX YRP/suspicious_packer_section
de2ac0953e938fb9e1f7b19253ad5858e9b4b0c41381035ab2f04826e41fc016	PE32	2022-02-21 21:38:34	User Submission	YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_Cpp_30_old_crap YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_Cpp_30_old_crap_additional [+] YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDebugData YRP/domain YRP/contentis_base64 YRP/Browsers YRP/Antivirus YRP/VM_Generic_Detection YRP/Dropper_Strings YRP/check_patchlevel YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation
2d7c17a5c55ff877c70aef85df34f7fbc01a7ce982e8ac64fffb301374f97472	PE32	2022-02-18 06:08:49	User Submission	YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_Cpp_30_old_crap YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_Cpp_30_old_crap_additional [+] YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/contentis_base64 YRP/screenshot YRP/rat_webcam YRP/win_registry YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library
20464d0bbffb62bde82bba0053f977ac7bb74bf333ef9a2e080097e863da0f4b	PE32	2022-02-17 21:38:14	User Submission	YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_Cpp_30_old_crap YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_Cpp_30_old_crap_additional [+] YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/domain YRP/contentis_base64 YRP/screenshot YRP/rat_webcam YRP/win_registry YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library
8be29fb1098321024f96a09a22d2bbdf0ab17842e81c4e48d781a513ca163735	PE32	2022-02-17 19:30:47	User Submission	YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_Cpp_30_old_crap YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_Cpp_30_old_crap_additional [+] YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/domain YRP/url YRP/contentis_base64 YRP/win_registry YRP/win_files_operation
d3d6bc34de932a7c4a6a9d5ca021953e3b7bd650d193d09c7fd36e734cc04da2	PE32	2022-02-17 17:06:20	User Submission	YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_Cpp_30_old_crap YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_Cpp_30_old_crap_additional [+] YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/domain YRP/contentis_base64 YRP/win_registry YRP/win_files_operation FlorianRoth/DragonFly_APT_Sep17_3
d0f01fb82bfa1cc8bb4e3e2b02115299517ff4aecc2718c409fb476b0c63375c	PE32	2022-02-17 10:00:43	User Submission	YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_Cpp_v42 YRP/Microsoft_Visual_Cpp_42_2 YRP/Microsoft_Visual_C_20_additional [+] YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/IP YRP/contentis_base64 YRP/screenshot YRP/Big_Numbers0
ee4f6a596b7050f183c9f079f68cbb112ba3257160b64722e91e5e51ccac9243	PE32	2022-02-17 08:05:26	User Submission	YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_Cpp_30_old_crap YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_Cpp_30_old_crap_additional [+] YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/maldoc_getEIP_method_1 YRP/domain YRP/url YRP/contentis_base64 YRP/win_registry YRP/win_files_operation
d46d5ed1681ad03e3ef3436583f087eba204dfafcef220b859f044f8f246a041	PE32	2022-02-17 06:52:47	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_Cpp_30_old_crap YRP/Microsoft_Visual_C_20_additional [+] YRP/Microsoft_Visual_Cpp_30_old_crap_additional YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/IsPE32 YRP/IsConsole YRP/domain YRP/url YRP/contentis_base64 YRP/win_files_operation FlorianRoth/DragonFly_APT_Sep17_3
3f367585d851d2a97fc364c37e1bed08e531c942f4be86a99364bf61d74531a9	PE32	2022-02-16 23:18:06	User Submission	YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_Cpp_30_old_crap YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_Cpp_30_old_crap_additional [+] YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/domain YRP/IP YRP/contentis_base64 YRP/Dropper_Strings YRP/network_smtp_raw YRP/network_irc YRP/network_tcp_socket YRP/screenshot YRP/win_registry YRP/win_files_operation YRP/Big_Numbers0 YRP/Str_Win32_Winsock2_Library
824453b7e9430a1cfd423e98906ed1a0743d470479d98a901d0eaa739db21271	PE32	2022-02-16 20:16:50	User Submission	YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_Cpp_30_old_crap YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_Cpp_30_old_crap_additional [+] YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/domain YRP/contentis_base64 YRP/screenshot YRP/rat_webcam YRP/win_registry YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library
5c7579be1abe222974c55d91201a0f9600fadc1c7615233ba6c23f7daa2d19de	PE32	2022-02-16 16:27:50	User Submission	YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_Cpp_30_old_crap YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_Cpp_30_old_crap_additional [+] YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/domain YRP/url YRP/contentis_base64 YRP/win_registry YRP/win_files_operation
c58e283fe2926fc0879920d00299e3b20a77a5d20f2438cd4bfcc75ee2039f5c	PE32	2022-02-16 13:43:16	User Submission	YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_Cpp_30_old_crap YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_Cpp_30_old_crap_additional [+] YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/IsBeyondImageSize YRP/domain YRP/contentis_base64
68e37d840cd9254b1ee2b06544165cdd1b1d1e6568c84c736d7facc6de3561c4	PE32	2022-02-15 21:29:13	User Submission	YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_Cpp_30_old_crap YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_Cpp_30_old_crap_additional [+] YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/url YRP/contentis_base64 YRP/screenshot YRP/rat_webcam YRP/win_registry YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library YRP/UPX YRP/suspicious_packer_section
b561d8c0537324de3b4ac644d649c9aa07f6a629ca16eb6bf7f42d11e764a6c7	PE32	2022-02-15 19:07:20	User Submission	YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_Cpp_30_old_crap YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_Cpp_30_old_crap_additional [+] YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/domain YRP/url YRP/contentis_base64 YRP/win_registry YRP/win_files_operation
86c17a8cdd911f4a0a0629c6c3c53f20c1e40cd04ab247961e7473a13bbe8423	PE32	2021-10-25 18:00:36	User Submission	YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_Cpp_30_old_crap YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_Cpp_30_old_crap_additional [+] YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/domain YRP/contentis_base64 YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library
44d9fb3b4faeb07506a95eaf45e7d9d40dac2830f2004bb6ca061167aa9a67e4	PE32	2021-09-28 12:06:14	User Submission	YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_Cpp_30_old_crap YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_Cpp_30_old_crap_additional [+] YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/android_meterpreter YRP/Big_Numbers0 YRP/Big_Numbers1
0ddf428756e68f4fb903b40f73afc58888854f177ab080888903e2ed48b254d2	PE32	2021-08-31 16:28:50	User Submission	YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_Cpp_30_old_crap YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_Cpp_30_old_crap_additional [+] YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/IsBeyondImageSize YRP/domain YRP/contentis_base64 YRP/screenshot YRP/win_registry YRP/win_private_profile YRP/win_files_operation
4f0f59d29b8ce7b3c6a1fa9e85b96db0be28177a84ee7870b45cc3c63703d95e	PE32	2021-03-31 02:45:49	User Submission	YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_Cpp_30_old_crap YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_Cpp_30_old_crap_additional [+] YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/IP YRP/contentis_base64 YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/CRC32_poly_Constant YRP/CRC32_table
6ac711e5ec171307d37529100b2a980246401435566c6790ef5411d913a87a9d	PE32	2020-07-07 22:46:03	User Submission	YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_Cpp_30_old_crap YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_Cpp_30_old_crap_additional [+] YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/domain YRP/contentis_base64 YRP/screenshot YRP/win_files_operation
1dee7a85bda09069d781f63696444a68fbedbc98b15037c611364f8b08ff1d27	PE32	2020-07-07 11:02:19	User Submission	YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_Cpp_v42 YRP/Microsoft_Visual_Cpp_42_2 YRP/Microsoft_Visual_C_20_additional [+] YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/domain YRP/contentis_base64 YRP/Str_Win32_Winsock2_Library FlorianRoth/DragonFly_APT_Sep17_3
6a138bcdc1f5c9446e5e6cfa2faf1d2777a63bec34470726289567d9e9ef9dc0	PE32	2020-06-30 18:11:55	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_Cpp_30_old_crap YRP/Microsoft_Visual_C_20_additional [+] YRP/Microsoft_Visual_Cpp_30_old_crap_additional YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/IsPE32 YRP/IsConsole YRP/HasOverlay YRP/HasDebugData YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/SEH__v4 YRP/win_files_operation FlorianRoth/DragonFly_APT_Sep17_3
6a12bb2c76398c10741af6905906c0b3a1b542c6ac672f105ab0961026eb461a	PE32	2020-06-30 17:37:17	User Submission	YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_Cpp_30_old_crap YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_Cpp_30_old_crap_additional [+] YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/contentis_base64 YRP/win_registry YRP/win_private_profile YRP/win_files_operation FlorianRoth/DragonFly_APT_Sep17_3
1147e34c4c3ec6f7464ce611008d8cbcd99624a405074f55e37d42b3f34affc2	PE32	2020-06-30 15:11:03	User Submission	YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional [+] YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/contentis_base64 YRP/screenshot YRP/Big_Numbers1
118f4ed954627a75f6dcbb86cbb7d25931316de997e75ff8c0bc6cd23f75a95e	PE32	2020-06-29 19:38:20	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_C_20 [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/domain YRP/contentis_base64 YRP/win_files_operation
118cf5a8edcc3fbcef9280f5d91863a8e0230b45ec2894fd5ca34985e99886f3	PE32	2020-06-29 17:56:12	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_Cpp_30_old_crap YRP/Microsoft_Visual_C_20_additional [+] YRP/Microsoft_Visual_Cpp_30_old_crap_additional YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/IsPE32 YRP/IsConsole YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/Dropper_Strings YRP/create_service YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/win_mutex YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/TEAN YRP/Str_Win32_Winsock2_Library
1192d048842c1459839ab71cfa9f3240952588b9fb810393d11ebdf4c6bfb8c9	PE32	2020-06-29 09:09:28	User Submission	YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_Cpp_30_old_crap YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_Cpp_30_old_crap_additional [+] YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/domain YRP/contentis_base64 YRP/win_files_operation FlorianRoth/DragonFly_APT_Sep17_3
1169c6595844ac8f0972e8da545dd845dd0d1f6bf4dc0e22d5f1e5c5200ea1cd	PE32	2020-06-29 02:09:18	User Submission	YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_Cpp_30_old_crap YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_Cpp_30_old_crap_additional [+] YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/domain YRP/contentis_base64 YRP/screenshot YRP/win_registry YRP/win_private_profile YRP/win_files_operation
11edbd480b24b70676385b3a2812fc4652242b22a77ab3e33602db505a41b55a	PE32	2020-06-28 18:40:22	User Submission	YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_Cpp_30_old_crap YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_Cpp_30_old_crap_additional [+] YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/domain YRP/contentis_base64 YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_files_operation
11768c4a75b17120a605986d3f34c93b23dadb209d0d3090c9d2c1ab00f9c577	PE32	2020-06-27 19:51:02	User Submission	YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_Cpp_30_old_crap YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_Cpp_30_old_crap_additional [+] YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/domain YRP/contentis_base64 YRP/win_files_operation
11d0adcee908dd465e7185b5aa4203acfc6bc9e0c1c6347307c15a3ebc092e46	PE32	2020-06-27 14:53:23	User Submission	YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_Cpp_30_old_crap YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_Cpp_30_old_crap_additional [+] YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/contentis_base64 YRP/win_registry YRP/win_private_profile YRP/win_files_operation FlorianRoth/DragonFly_APT_Sep17_3
11d3859810b5ddb5a223b9356507264a690791bec9cd924b2880b8f3a4f9b5ca	PE32	2020-06-27 14:31:18	User Submission	YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_Cpp_30_old_crap YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_Cpp_30_old_crap_additional [+] YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/contentis_base64 YRP/screenshot FlorianRoth/DragonFly_APT_Sep17_3
112ebc3d27d7f263ca272483b0e5874f569e0c51e228da62e3e2c201d567e776	PE32	2020-06-27 03:49:37	User Submission	YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_Cpp_30_old_crap YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_Cpp_30_old_crap_additional [+] YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/win_mutex YRP/win_files_operation YRP/Str_Win32_Winsock2_Library FlorianRoth/DragonFly_APT_Sep17_3
b20dca55ff3b03c20da8b316759c8012efe2f5e7c4406b00e2415d24c8e6b056	PE32	2020-05-08 01:22:33	User Submission	YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_Cpp_v42 YRP/Microsoft_Visual_Cpp_42_2 YRP/Microsoft_Visual_C_20_additional [+] YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasDebugData YRP/IsBeyondImageSize YRP/domain YRP/contentis_base64 YRP/win_registry FlorianRoth/DragonFly_APT_Sep17_3
6f9a6f7ae2531cb6eba5602ebcdc296719c68d7b0a554361cc756d08f1ea6ab1	PE32	2020-05-08 01:22:31	User Submission	YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_Cpp_v42 YRP/Microsoft_Visual_Cpp_42_2 YRP/Microsoft_Visual_C_20_additional [+] YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/IsPE32 YRP/IsConsole YRP/HasDebugData YRP/domain YRP/contentis_base64 YRP/win_mutex FlorianRoth/DragonFly_APT_Sep17_3
0116eea477a5f5c181bf816953296c1f09cd1bf828f89f970c77332dd84ab518	PE32	2020-05-08 01:22:30	User Submission	YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_C_20 YRP/IsPE32 YRP/IsDLL [+] YRP/IsConsole YRP/HasDebugData YRP/IsBeyondImageSize YRP/domain YRP/contentis_base64 YRP/win_mutex YRP/win_registry
447364ca34bda52bf8a70ad695d494228fd4afb94d15c6945564c4370311d118	PE32	2020-05-08 01:22:16	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_Cpp_30_old_crap YRP/Microsoft_Visual_C_20_additional [+] YRP/Microsoft_Visual_Cpp_30_old_crap_additional YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/IsBeyondImageSize YRP/domain YRP/contentis_base64 YRP/System_Tools YRP/Browsers YRP/win_registry YRP/win_files_operation
b6cde1842e9b0ee6f9d4991b449518fd22701924c4a8b9ee6e25df4cca38c965	PE32	2020-01-15 15:42:57	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_Cpp_30_old_crap YRP/Microsoft_Visual_C_20_additional [+] YRP/Microsoft_Visual_Cpp_30_old_crap_additional YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/IsPE32 YRP/IsConsole YRP/domain YRP/contentis_base64 YRP/DebuggerHiding__Active YRP/anti_dbg YRP/inject_thread YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation FlorianRoth/DragonFly_APT_Sep17_3
130b1f98b45359adab4aa27b7e3c6d306ac9a8f1b99d60d46142b310f13cafa1	PE32	2020-01-15 14:05:47	User Submission	YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_Cpp_30_old_crap YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_Cpp_30_old_crap_additional [+] YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/domain YRP/contentis_base64 YRP/screenshot YRP/keylogger YRP/win_files_operation YRP/win_hook YRP/CRC32_poly_Constant YRP/CRC32_table
06555070080a173b391ea4d00276217d82bed8ffdc8c89be22238d728df9ae32	PE32	2020-01-15 11:23:24	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_Cpp_30_old_crap YRP/Microsoft_Visual_C_20_additional [+] YRP/Microsoft_Visual_Cpp_30_old_crap_additional YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/IsPE32 YRP/IsConsole YRP/domain YRP/contentis_base64 YRP/network_tcp_socket YRP/win_files_operation YRP/Str_Win32_Winsock2_Library FlorianRoth/DragonFly_APT_Sep17_3
b5bc154b4fd011e7d7b78942e52c08acccd1f367442afea560aec1fd85845aba	PE32	2020-01-15 10:11:52	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_C_20 [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/IsBeyondImageSize YRP/domain YRP/contentis_base64 YRP/win_files_operation
d42607c8acec613c46d5f2e6babe10c9d3bb32c0f003f6449b8ac2e308a57654	PE32	2020-01-13 21:20:33	User Submission	YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_C_20 YRP/IsPE32 YRP/IsConsole [+] YRP/HasDebugData YRP/IsBeyondImageSize YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/contentis_base64 YRP/Dropper_Strings YRP/win_registry YRP/CRC32_poly_Constant YRP/Str_Win32_Winsock2_Library FlorianRoth/DragonFly_APT_Sep17_3
8f8ecd644dfa2362c698420e6949e02c8ed9056b2b6945b36cfe6c4a8c73ac89	PE32	2020-01-13 13:31:54	User Submission	YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_Cpp_30_old_crap YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_Cpp_30_old_crap_additional [+] YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/domain YRP/url YRP/contentis_base64 YRP/screenshot YRP/win_registry YRP/win_files_operation YRP/CRC32_poly_Constant YRP/CRC32_table
ebd33d96518436e1291b2ee6f54955caea4d51ed93de84174652d57b7a2f9394	PE32	2020-01-13 12:25:00	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_Cpp_30_old_crap YRP/Microsoft_Visual_C_20_additional [+] YRP/Microsoft_Visual_Cpp_30_old_crap_additional YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/IsPE32 YRP/IsConsole YRP/domain YRP/contentis_base64 YRP/win_registry YRP/win_token YRP/win_files_operation FlorianRoth/DragonFly_APT_Sep17_3
349bca1a3f7a305efd7d7deb83a146154fd520b974fb4f8720c65857686fc066	PE32	2020-01-13 12:23:04	User Submission	YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_Cpp_v42 YRP/Microsoft_Visual_Cpp_42_2 YRP/Microsoft_Visual_C_20_additional [+] YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/contentis_base64 FlorianRoth/DragonFly_APT_Sep17_3
b46b7bb999cdbbf377b50de003d6eb088aaa3d626f3dd82f29da54a233ac697e	PE32	2020-01-13 12:22:52	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_Cpp_30_old_crap YRP/Microsoft_Visual_C_20_additional [+] YRP/Microsoft_Visual_Cpp_30_old_crap_additional YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/IsPE32 YRP/IsConsole YRP/IsBeyondImageSize YRP/domain YRP/contentis_base64 YRP/DebuggerException__SetConsoleCtrl YRP/network_irc YRP/network_tcp_socket YRP/win_files_operation YRP/Str_Win32_Winsock2_Library FlorianRoth/DragonFly_APT_Sep17_3
ab58081d968ac2972282dc99e39c0fba7058843be5c518bc63fa569213f240fb	PE32	2020-01-13 12:22:37	User Submission	YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_Cpp_v42 YRP/Microsoft_Visual_Cpp_42_2 YRP/Microsoft_Visual_C_20_additional [+] YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/IsBeyondImageSize YRP/domain YRP/contentis_base64 YRP/Str_Win32_Winsock2_Library FlorianRoth/DragonFly_APT_Sep17_3
d85ac52788e1da29649089fbd3bcf93e3f639290546f357844e2a37c31a72dd7	PE32	2020-01-13 12:22:35	User Submission	YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_Cpp_v42 YRP/Microsoft_Visual_Cpp_42_2 YRP/Microsoft_Visual_C_20_additional [+] YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/domain YRP/contentis_base64 YRP/Antivirus YRP/Str_Win32_Winsock2_Library FlorianRoth/DragonFly_APT_Sep17_3
33b1b90f462c4be7a1cc1c80ea5da230b4e1f959ade4b6932226ad1debc0ae6e	PE32	2020-01-13 12:22:34	User Submission	YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_Cpp_v42 YRP/Microsoft_Visual_Cpp_42_2 YRP/Microsoft_Visual_C_20_additional [+] YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/IsBeyondImageSize YRP/domain YRP/contentis_base64 YRP/Str_Win32_Winsock2_Library FlorianRoth/DragonFly_APT_Sep17_3
0f532c663edf4304dc0f317ec24501283325283130327d1bae6e5c952baee834	PE32	2020-01-13 12:19:34	User Submission	YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_Cpp_30_old_crap YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_Cpp_30_old_crap_additional [+] YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Antivirus YRP/win_registry YRP/win_files_operation YRP/android_meterpreter
4b2f4aefd798a07578b6027bbafb4441b2c56a686203c6d215bb7301f44bb9a4	PE32	2019-12-02 19:16:54	User Submission	YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_Cpp_30_old_crap YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_Cpp_30_old_crap_additional [+] YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/IsBeyondImageSize YRP/domain YRP/contentis_base64 YRP/win_files_operation FlorianRoth/DragonFly_APT_Sep17_3
c184df037ff3dd757f7f393358309a9051174065d8143a967d6332d0cc3d4c75	PE32	2019-12-02 17:56:35	User Submission	YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_Cpp_30_old_crap YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_Cpp_30_old_crap_additional [+] YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/network_udp_sock YRP/network_tcp_socket YRP/network_dns YRP/screenshot YRP/keylogger YRP/win_private_profile YRP/win_files_operation YRP/Str_Win32_Winsock2_Library
2c2b60487af73d7caee35c5f2d4fcd1a35e9e295045b3777a909e81f1eb2d3fc	PE32	2019-12-02 17:11:37	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_Cpp_30_old_crap YRP/Microsoft_Visual_C_20_additional [+] YRP/Microsoft_Visual_Cpp_30_old_crap_additional YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/IsPE32 YRP/IsConsole YRP/HasDebugData YRP/IsBeyondImageSize YRP/domain YRP/contentis_base64 YRP/escalate_priv YRP/win_token YRP/win_files_operation FlorianRoth/DragonFly_APT_Sep17_3
66174c071eb41b04e987ce0629d127a1a6ee887ceb2d513f4024f4fb26e3b1c6	PE32	2019-11-24 11:08:59	User Submission	YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_Cpp_30_old_crap YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_Cpp_30_old_crap_additional [+] YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/domain YRP/url YRP/contentis_base64 YRP/screenshot YRP/win_registry YRP/win_files_operation YRP/CRC32_poly_Constant YRP/CRC32_table
8b2562a5b2531952a924a399913521aa1211d4067befbfc6caa3770b6f13400b	PE32	2019-11-24 11:08:09	User Submission	YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_Cpp_30_old_crap YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_Cpp_30_old_crap_additional [+] YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/domain YRP/url YRP/contentis_base64 YRP/screenshot YRP/win_registry YRP/win_files_operation YRP/CRC32_poly_Constant YRP/CRC32_table
bd8b521f7167328f954367835cab1be923f88500f54655d2cfe1c2834339eb3d	PE32	2019-11-24 10:40:29	User Submission	YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_Cpp_30_old_crap YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_Cpp_30_old_crap_additional [+] YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/without_images YRP/without_attachments YRP/without_urls YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/network_smtp_raw YRP/network_tcp_socket YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library
fe2a5c9507d142720cbfa0a974d3704a372b512c598af4977ca5262c0b5f7d11	PE32	2019-11-24 10:39:12	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_Cpp_30_old_crap YRP/Microsoft_Visual_C_20_additional [+] YRP/Microsoft_Visual_Cpp_30_old_crap_additional YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/IsPE32 YRP/IsConsole YRP/domain YRP/contentis_base64 YRP/win_files_operation YRP/Str_Win32_Winsock2_Library FlorianRoth/DragonFly_APT_Sep17_3
55673175561cb2cabc72346349b9dd9ce77d1e6b06585f27fbbe2fea827fe0c5	PE32	2019-11-24 10:37:55	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_Cpp_30_old_crap YRP/Microsoft_Visual_C_20_additional [+] YRP/Microsoft_Visual_Cpp_30_old_crap_additional YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/IsPE32 YRP/IsConsole YRP/domain YRP/contentis_base64 YRP/network_tcp_socket YRP/win_files_operation YRP/Str_Win32_Winsock2_Library FlorianRoth/DragonFly_APT_Sep17_3
a5c8ee76cd44950d507da632033f4bd0f56590f95c9c1dfd9ed6a5edda3dde81	PE32	2019-11-24 10:26:27	User Submission	YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_Cpp_30_old_crap YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_Cpp_30_old_crap_additional [+] YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/domain YRP/contentis_base64 YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/win_hook
4c9f2fa2e2b2e75579943895c3f658d831ed39d83d63fec76617519f9935adc2	PE32	2019-11-24 09:48:01	User Submission	YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_Cpp_30_old_crap YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_Cpp_30_old_crap_additional [+] YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/domain YRP/contentis_base64 YRP/win_private_profile YRP/CRC32_poly_Constant YRP/CRC32_table
f615a06894da64d72b714068a862a217345a8b224aa07a2d986440674c071e91	PE32	2019-07-17 12:15:24	http://69.64.43.224/notepad.exe	YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_Cpp_30_old_crap YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_Cpp_30_old_crap_additional [+] YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDebugData YRP/domain YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/DebuggerException__SetConsoleCtrl YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_files_operation
e122d91eb62a33c8b4ef56b2299caf2f58fd4e48694c97e06c92f858497cf860	PE32	2018-11-14 04:24:20	User Submission	YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_C_20 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/domain YRP/IP YRP/contentis_base64 YRP/Big_Numbers3 FlorianRoth/DragonFly_APT_Sep17_3
06c65a259d7c96000fcec97a7d8c5b6c4d0c8b8e52ed1d45c934a50d0369b3eb	PE32	2018-11-14 04:21:54	User Submission	YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_C_20 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/domain YRP/IP YRP/contentis_base64 YRP/Big_Numbers3 FlorianRoth/DragonFly_APT_Sep17_3
79a50327843a8ccf58147971d1c86945f9a40cd0d4ee35084b8af26c9f5ab210	PE32	2018-11-14 04:20:49	User Submission	YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_C_20 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/domain YRP/IP YRP/contentis_base64 YRP/Big_Numbers3
00ec08ef5187e493452e8168ee7f33191fd4673ce09cbd9e21d18104b00d6e55	PE32	2018-10-06 13:51:28	User Submission	CuckooSandbox/vmdetect YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_Cpp_v42 YRP/Microsoft_Visual_Cpp_42_2 [+] YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/Borland YRP/D1S1Gv11betaD1N YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature YRP/borland_delphi_dll YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/maldoc_OLE_file_magic_number YRP/VMWare_Detection YRP/Dropper_Strings YRP/vmdetect YRP/disable_antivirus YRP/network_tcp_listen YRP/network_tcp_socket YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_files_operation YRP/win_hook YRP/MD5_Constants YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/suspicious_packer_section
087e757a8a18f110b6af3898abdd408031d463596c8f04f07677efed0e87c3d2	PE32	2018-09-07 12:57:07	User Submission	YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_Cpp_30_old_crap YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_Cpp_30_old_crap_additional [+] YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/screenshot YRP/win_registry YRP/win_private_profile YRP/win_files_operation
36201e877c95e2f87196ed4ce9e649da2e5bd108006dde974788ad78bd29c717	PE32	2018-06-23 12:43:04	User Submission	YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_Cpp_30_old_crap YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_Cpp_30_old_crap_additional [+] YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/android_meterpreter YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API
6b6eb4cc4aa8e3d71a97a8657ffcd27d2bd12466faf3b1f7fcbcd274a4b9561c	PE32	2018-06-22 22:43:43	User Submission	YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_C_20 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/domain YRP/IP YRP/contentis_base64 YRP/Big_Numbers3
5773241fa95d9a954f755e70a43dd04d4a74a48a7b1e9a028c545c75aa1f0a64	PE32	2018-05-15 01:12:28	http://www.accessclub.jp/file/samplefile/acce...	YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_C_20 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasOverlay YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/win_files_operation
3e96894609819ae3d595ff6e0fbe9ce6c9ac17bdeda256b994831992f668cb99	PE32	2018-03-07 07:31:44	http://103.68.190.250/Sources//Advance/WndRec...	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_Cpp_30_old_crap YRP/Microsoft_Visual_C_20_additional [+] YRP/Microsoft_Visual_Cpp_30_old_crap_additional YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/IsPE32 YRP/IsConsole YRP/HasDebugData YRP/IsBeyondImageSize YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/win_files_operation
a4bc61a4b1b5cbfa25ae56d0fcf94424893a60abcb68aad2c0321f99e5d7b520	PE32	2018-03-07 00:49:21	http://94.130.104.170/Original//dd207384b31d1...	YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_C_20 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsBeyondImageSize YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64
dc276b0113694ecc62913311e2580857754aa890173dfaa9d95afad6396bb741	PE32	2018-03-07 00:49:08	http://94.130.104.170/Original//999bc5e16312d...	YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_C_20 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsBeyondImageSize YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64
90ab5ca086330937e672093d2d82f862655dad2fb5460591a4183a55c14a3799	PE32	2018-02-24 07:36:27	User Submission	YRP/Microsoft_Visual_Cpp_v4x YRP/Microsoft_Visual_Cpp_30_old_crap YRP/Microsoft_Visual_C_20_additional YRP/Microsoft_Visual_Cpp_30_old_crap_additional [+] YRP/Microsoft_Visual_Cpp_v42_additional YRP/Microsoft_Visual_Cpp_v4x_additional YRP/Microsoft_Visual_Cpp_42 YRP/Microsoft_Visual_C_20 YRP/Microsoft_Visual_Cpp_42_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/domain YRP/contentis_base64 YRP/win_registry YRP/win_files_operation FlorianRoth/DragonFly_APT_Sep17_3

Recent Searches
yrp/microsoft_visual_c_20
yrp/packmanv10brandonlacombe
yrp/hyingspearmor075exehyingccg
yrp/pespin_v13_cyberbob
yrp/microsoft_visual_cpp_70_dll
yrp/microsoft_visual_cpp_80
yrp/pecompact_2xx_slim_loader_bitsum_technologies
yrp/dev_cpp_v4
yrp/pebundlev244
yrp/dbpe_v233_ding_boy

Search

Recent Searches