MalShare

SHA256 Hash	File type	Added	Source	Yara Hits
4d1268f3ccdb6a665d85a0865785feed90bd775070d5f7365b3ef27a36c49279	PE32	2022-03-11 04:04:26	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsDLL [+] YRP/IsWindowsGUI YRP/IsBeyondImageSize YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/Antivirus YRP/Dropper_Strings YRP/anti_dbg YRP/network_tcp_socket YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library
951a5ad944adeb50396875be19de6124ae3c29df4b9093fec4a015c9d1e6fb7a	PE32	2022-03-08 02:36:46	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/escalate_priv YRP/screenshot YRP/win_registry YRP/win_token YRP/win_files_operation
d91bf8741fd6adcf75ed456b8fbcbd82d713a038530a3e14b2dafb2c61d89984	PE32	2022-03-05 02:10:15	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/escalate_priv YRP/win_registry YRP/win_token YRP/win_files_operation
86b1504f6406590e019d0a2f16d178e765be52000a3b5ab602db8d70be66fede	PE32	2022-02-24 20:05:38	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/NETexecutableMicrosoft YRP/IsPE32 [+] YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Dropper_Strings YRP/DebuggerException__ConsoleCtrl YRP/DebuggerException__SetConsoleCtrl YRP/anti_dbg YRP/antisb_threatExpert YRP/disable_dep YRP/escalate_priv YRP/screenshot YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/android_meterpreter YRP/Big_Numbers0 YRP/Big_Numbers1 YRP/CRC32_poly_Constant YRP/CRC32_table YRP/BASE64_table YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/suspicious_packer_section
ee48e6c259e55529fff26a0c43b48be8f4acd3ee5b65b12d27cf0d43ccabf59c	PE32	2022-02-24 19:42:46	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsConsole [+] YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/ppaction YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/WMI_strings YRP/anti_dbg YRP/network_tcp_listen YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/Big_Numbers1 YRP/Big_Numbers5 YRP/Advapi_Hash_API
8305df26fccd6f31190b669a482cfee55538469018de955f1471afab9aa5802c	PE32	2022-02-24 19:01:56	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsConsole [+] YRP/HasOverlay YRP/domain YRP/IP YRP/contentis_base64
4fbd32829f0077fc413d4ed468dfe4d4a891ee85734df6dcb497d852ad682436	PE32	2022-02-24 18:08:03	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/DebuggerException__ConsoleCtrl YRP/DebuggerException__SetConsoleCtrl YRP/anti_dbg YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Advapi_Hash_API YRP/CRC32_poly_Constant YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API
aa1001b0550fec605a26b70908567152b37563f8dc25306fd2947251842bb8a9	PE32	2022-02-24 17:55:35	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/maldoc_find_kernel32_base_method_1 YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Browsers YRP/DebuggerCheck__QueryInfo YRP/anti_dbg YRP/inject_thread YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Advapi_Hash_API YRP/CRC32_poly_Constant YRP/RIPEMD160_Constants YRP/SHA1_Constants YRP/Str_Win32_Http_API
c99b0e468e637f98257349c3f671c3b9cb4469890fc94a2c5385a8785331f473	PE32	2022-02-24 17:50:01	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsBeyondImageSize YRP/HasRichSignature YRP/domain YRP/suspicious_packer_section
6dafc7e080b9e38af48b6610ab55a3642d929b9622aee8758c04bb28ec395908	PE32	2022-02-24 15:47:08	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/SEH__vba
1ddc0c913ccb80beb864097e64c80dde66656139f20fa02080f955552f67c78a	PE32	2022-02-24 15:41:57	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/NETexecutableMicrosoft YRP/IsPE32 [+] YRP/IsConsole YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature YRP/maldoc_find_kernel32_base_method_1 YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Browsers YRP/Dropper_Strings YRP/SEH__vba YRP/anti_dbg YRP/disable_dep YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers5 YRP/Prime_Constants_char YRP/Advapi_Hash_API YRP/CRC32_poly_Constant YRP/MD5_Constants YRP/RIPEMD160_Constants YRP/SHA1_Constants
86a60b938ca9eab82ea12017f3587f756f4c8109c668a673ac5e5ade3cb80403	PE32	2022-02-24 13:57:01	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/NETexecutableMicrosoft YRP/IsPE32 [+] YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/DebuggerException__ConsoleCtrl YRP/DebuggerException__SetConsoleCtrl YRP/anti_dbg YRP/network_dropper YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers1 YRP/Advapi_Hash_API YRP/CRC32_poly_Constant YRP/CRC32_table YRP/MD5_Constants YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API
478c6fd0ed4f69a7957408f65c3386a9e0f277406a10255c625432fe074d7f94	PE32	2022-02-24 13:55:18	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsConsole [+] YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/ppaction YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Browsers YRP/anti_dbg YRP/network_tcp_listen YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Big_Numbers1
1c7c0b44468a3942c2f504a80842c5596b274314bf7706579a84f25af271db8d	PE32+	2022-02-24 11:52:14	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE64 YRP/IsWindowsGUI [+] YRP/HasDebugData YRP/HasRichSignature YRP/domain FlorianRoth/DragonFly_APT_Sep17_3
2c72568342d38343c0b2a9b9691f1f7512cb95e30fe93579f3a31858e3a4f48b	PE32	2022-02-24 11:41:19	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/NETexecutableMicrosoft YRP/IsPE32 [+] YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Dropper_Strings YRP/DebuggerException__ConsoleCtrl YRP/DebuggerException__SetConsoleCtrl YRP/anti_dbg YRP/antisb_threatExpert YRP/create_service YRP/network_dropper YRP/escalate_priv YRP/screenshot YRP/spreading_file YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Big_Numbers0 YRP/Big_Numbers1 YRP/Advapi_Hash_API YRP/CRC32_poly_Constant YRP/CRC32_table YRP/BASE64_table YRP/Str_Win32_Wininet_Library
279d18ed72f35392a7b6868d6a81ec736b6bf60d168742bbc405803c2369ce86	PE32	2022-02-24 10:56:46	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/RE_Tools YRP/SEH__vba
b3b825f9729e86dea6d3b3e4ba1f7d2699bff40902798d1106b69f759f00095c	PE32	2022-02-24 09:16:54	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/NETexecutableMicrosoft YRP/IsPE32 [+] YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/maldoc_find_kernel32_base_method_1 YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Dropper_Strings YRP/DebuggerCheck__QueryInfo YRP/DebuggerException__ConsoleCtrl YRP/DebuggerException__SetConsoleCtrl YRP/ThreadControl__Context YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers1
bbb551a42703550e814f8a7a2d0b4d6aab17cbc110fbd1bb7d7070c791e6b433	PE32	2022-02-24 09:04:38	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasDebugData YRP/IsBeyondImageSize YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/anti_dbg YRP/disable_dep YRP/win_registry YRP/MD5_Constants YRP/RIPEMD160_Constants YRP/SHA1_Constants
9fa84fa70ece4ec9aa3f78ad885bca74258046d7b2c76b20cb68a726eba0461c	PE32	2022-02-24 08:41:42	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/UPXv20MarkusLaszloReiser YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser [+] YRP/UPX20030XMarkusOberhumerLaszloMolnarJohnReiser YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Antivirus YRP/Dropper_Strings YRP/BITS_CLSID YRP/anti_dbg YRP/disable_dep YRP/create_service YRP/network_dropper YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/CRC32_poly_Constant YRP/CRC32_table YRP/VC8_Random YRP/Str_Win32_Wininet_Library YRP/UPX YRP/suspicious_packer_section
00ab63738378676e8b49314b671a50edf040a50cfa9567711696e04a89c387e7	PE32	2022-02-24 08:23:40	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/SEH__vba YRP/suspicious_packer_section
fb98165056c7cde0d09a8ccc30e37ae1d2035a083103a105d04678627ebfad55	PE32	2022-02-24 06:17:08	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/NETexecutableMicrosoft YRP/IsPE32 [+] YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Browsers YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/DebuggerException__ConsoleCtrl YRP/DebuggerException__SetConsoleCtrl YRP/anti_dbg YRP/antisb_threatExpert YRP/create_service YRP/network_dropper YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers0 YRP/Big_Numbers1 YRP/Big_Numbers5 YRP/Advapi_Hash_API YRP/CRC32_poly_Constant YRP/CRC32_table YRP/BASE64_table
ce1703f5b2a4b345ecb4c79fec743ae29fa6ed79d1ce0ffe56c14908ebe03e4b	PE32	2022-02-23 23:24:10	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/DebuggerException__ConsoleCtrl YRP/DebuggerException__SetConsoleCtrl YRP/anti_dbg YRP/win_registry YRP/win_files_operation YRP/CRC32_poly_Constant YRP/CRC32_table
cf5abcdda4a6c4dacb7652566f4a2c60e9b87f02974930c33ccb1b36e6ba781a	PE32	2022-02-23 23:17:53	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/anti_dbg YRP/disable_dep YRP/network_dropper YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/CRC32_poly_Constant YRP/CRC32_table YRP/Str_Win32_Wininet_Library YRP/suspicious_packer_section
4b65f50c63f8cbe574cb6bb20acbd2afa6b84fb59cfddb802a4dc7fb606b4aef	PE32	2022-02-23 21:34:25	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Dropper_Strings YRP/WMI_strings YRP/BITS_CLSID YRP/DebuggerCheck__QueryInfo YRP/anti_dbg YRP/antisb_threatExpert YRP/network_http YRP/network_dga YRP/escalate_priv YRP/screenshot YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/android_meterpreter YRP/Advapi_Hash_API YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API
4d47a334e18a0f88d0429154316d0d1893b4b421534595c6ddd27e83f68cee90	PE32	2022-02-23 20:55:52	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/WMI_strings YRP/DebuggerCheck__QueryInfo YRP/anti_dbg YRP/antisb_threatExpert YRP/network_http YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API
db039bbe28768cdf39973eaed317a00a583ba2a6a899383d71a34d4b07465cce	PE32	2022-02-23 18:26:14	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/anti_dbg YRP/disable_dep YRP/network_tcp_listen YRP/network_http YRP/network_dropper YRP/network_tcp_socket YRP/screenshot YRP/keylogger YRP/spreading_share YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/CRC32_poly_Constant YRP/CRC32_table YRP/MD5_Constants YRP/BASE64_table YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/suspicious_packer_section
a63c1f83fc95c1b88c9a5ad9ac8644ce7270f319f5f8c7813fab0a593458ad1a	PE32	2022-02-23 15:28:09	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/SEH__vba YRP/suspicious_packer_section
4587c08cd7e31996081ddf7038aa325558fd93e09810f4a60e9eea161c821bdb	PE32	2022-02-23 12:44:55	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/maldoc_OLE_file_magic_number YRP/SEH__vba YRP/suspicious_packer_section
251eb4117f33cb8802ed89d4bf69eee3c30d03f27fcf5563daed9f369749d10a	PE32	2022-02-23 12:19:17	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/SEH__vba YRP/suspicious_packer_section
70992893831d08d28ea5c98dc31298d8f26c543ebfd831e3c473eb8c39dededc	PE32	2022-02-23 11:36:12	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsConsole [+] YRP/HasOverlay YRP/HasDigitalSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/UPX YRP/suspicious_packer_section
3e3fac6e1374e85a4b6e2fa771de304022a09ed3d06185ff6067d75523ad1b0e	PE32	2022-02-23 11:31:36	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/NETexecutableMicrosoft YRP/IsPE32 [+] YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/maldoc_find_kernel32_base_method_1 YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/DebuggerException__ConsoleCtrl YRP/DebuggerException__SetConsoleCtrl YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Advapi_Hash_API YRP/CRC32_poly_Constant YRP/CRC32_table YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API
a8997f30401edc11fdda0e900f6961c642a490a8f5e0f1c1d44e696e90eb07f4	PE32	2022-02-23 11:22:32	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsBeyondImageSize YRP/HasRichSignature YRP/domain YRP/suspicious_packer_section
622cedbb14a4a20218c569f44787538f4be39f23109b6f890c55160839b96c4d	PE32	2022-02-23 09:08:27	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/SEH__vba
8d53deb0a1ccbf8b15a86910b9c79e7016a9908d855baa4602b4bc870651af9e	PE32	2022-02-23 08:37:10	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsBeyondImageSize YRP/HasRichSignature YRP/domain YRP/suspicious_packer_section
39cd9053cde6d72b5314be64ec45ea5162ac9c24abbaf16a6f9e69acc1da4f8a	PE32	2022-02-23 07:39:45	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/NETexecutableMicrosoft YRP/IsPE32 [+] YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/ppaction YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Browsers YRP/VM_Generic_Detection YRP/anti_dbg YRP/disable_dep YRP/network_tcp_listen YRP/network_http YRP/network_tcp_socket YRP/network_dga YRP/escalate_priv YRP/screenshot YRP/spreading_share YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Big_Numbers1 YRP/Advapi_Hash_API YRP/CRC32_poly_Constant YRP/MD5_Constants YRP/BASE64_table YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API
dce01b73e4ef3cdbef0263e57e5b7256ff5c9dbe91925057b166d55bfdbf2a12	PE32	2022-02-23 03:52:18	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/NETexecutableMicrosoft YRP/IsPE32 [+] YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/ppaction YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/VM_Generic_Detection YRP/anti_dbg YRP/disable_dep YRP/network_tcp_listen YRP/network_http YRP/network_tcp_socket YRP/spreading_file YRP/spreading_share YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/Big_Numbers1 YRP/MD5_Constants YRP/BASE64_table YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API
dab75de72d8218f28997228b73c1cc39c3e980a159ff904fc784e6331adca572	PE32	2022-02-23 03:13:37	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/SEH__vba YRP/suspicious_packer_section
718598d09e5b58e9ba62abc746f0b648c09fc190750e586b77f3d88db6bbccfd	PE32	2022-02-23 02:40:09	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsBeyondImageSize YRP/HasRichSignature YRP/domain YRP/suspicious_packer_section
fe2b4410ab16396b7b586701e026125824cb99b8ff7f8ccdcc3fa0e7d17ea7ef	PE32	2022-02-23 02:33:08	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/anti_dbg YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/Big_Numbers1
6dd5491caa60d1fd420bbb00e930aa16171f2d4c15873e483e6b760be2609b77	PE32	2022-02-23 02:22:40	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/DebuggerException__ConsoleCtrl YRP/DebuggerException__SetConsoleCtrl YRP/anti_dbg YRP/win_registry YRP/win_files_operation
b58ea9e872c38f85ef78e86f03a5a4d89066e108dffcc22cea80b93b4ee7b12d	PE32	2022-02-22 20:56:59	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/UPXv20MarkusLaszloReiser YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser [+] YRP/UPX20030XMarkusOberhumerLaszloMolnarJohnReiser YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Antivirus YRP/Dropper_Strings YRP/BITS_CLSID YRP/anti_dbg YRP/disable_dep YRP/create_service YRP/network_dropper YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/CRC32_poly_Constant YRP/CRC32_table YRP/VC8_Random YRP/Str_Win32_Wininet_Library YRP/UPX YRP/suspicious_packer_section
ff8e73ca593fc2a4443d50e57cd45da8078dd0c8d55fb2ba256205273683c570	PE32	2022-02-22 20:19:01	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsConsole [+] YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature YRP/maldoc_find_kernel32_base_method_1 YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Dropper_Strings YRP/BITS_CLSID YRP/DebuggerException__ConsoleCtrl YRP/DebuggerException__SetConsoleCtrl YRP/anti_dbg YRP/disable_dep YRP/network_http YRP/network_dga YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/android_meterpreter YRP/Advapi_Hash_API YRP/CRC32_poly_Constant YRP/CRC32_table YRP/MD5_Constants YRP/BASE64_table YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/suspicious_packer_section
29ba13f0b11d75d8ea8cb200f9d992ab84b6352685587d7050ec05898a46e80e	PE32	2022-02-22 18:05:46	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/DebuggerException__ConsoleCtrl YRP/DebuggerException__SetConsoleCtrl YRP/anti_dbg
e8bde6ddcac684bb2fc50a1587a22e151cf900ef976c8b76e9dab67029886b2f	PE32	2022-02-22 17:36:12	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Browsers YRP/DebuggerException__SetConsoleCtrl YRP/anti_dbg YRP/antisb_threatExpert YRP/disable_dep YRP/inject_thread YRP/network_tcp_listen YRP/network_tcp_socket YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers1 YRP/Big_Numbers5 YRP/CRC32_poly_Constant YRP/CRC32_table YRP/CRC32b_poly_Constant YRP/MD5_Constants YRP/SHA1_Constants YRP/Str_Win32_Winsock2_Library
b35ee0cda303a740b63291fa05a14d74b8b420b9072010afe6a13e155321f16e	PE32	2022-02-22 14:27:10	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/NETexecutableMicrosoft YRP/IsPE32 [+] YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/DebuggerException__ConsoleCtrl YRP/DebuggerException__SetConsoleCtrl YRP/anti_dbg YRP/antisb_threatExpert YRP/create_service YRP/network_dropper YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers0 YRP/Big_Numbers1 YRP/Advapi_Hash_API YRP/CRC32_poly_Constant YRP/CRC32_table YRP/BASE64_table YRP/Str_Win32_Internet_API
5c9dfa1a71869f613482033d8665d84a511493022c5326fc04eb43e90be3fde1	PE32	2022-02-22 14:13:44	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsBeyondImageSize YRP/HasRichSignature YRP/domain YRP/suspicious_packer_section
557d9461047735f8dd9d6cd8a29d350b37a4df76a9bbcc0b6102caec3db1c743	PE32	2022-02-22 08:16:32	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsBeyondImageSize YRP/HasRichSignature YRP/domain YRP/suspicious_packer_section
6f55f8d4f012077d31e6464428b9a8a8a4a7fcd6cf77e73f8c0a8304718800c6	PE32	2022-02-22 07:01:33	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsConsole [+] YRP/HasOverlay YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Dropper_Strings YRP/Big_Numbers1 YRP/SharedStrings
a86c2f9728c2cda727b67c8453b492fa4f48456e4f4d7e05d8888ca6851152bf	PE32	2022-02-22 05:13:38	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/DebuggerException__ConsoleCtrl YRP/DebuggerException__SetConsoleCtrl YRP/anti_dbg
c98de8e399503480b6cc0200cb5ab1c3164dbc4adc7e404a64516624a22bfc27	PE32	2022-02-22 04:37:00	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/domain YRP/IP YRP/contentis_base64
9ff5d80996dab755be255e29810e52548834675546194c78946ab402dcfbf46a	PE32	2022-02-22 04:22:34	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/domain YRP/IP YRP/contentis_base64
cce231787685d8d8b9102b378ddeda7c4fbcf7ab9c6e44aab0d5ac4a068ee5fb	PE32	2022-02-21 02:05:02	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/escalate_priv YRP/keylogger YRP/win_registry YRP/win_token YRP/win_files_operation
9a2d1e8ed47ff294547d4066fb68c5592b39d477631706c38a2c41d043374aa5	PE32	2022-02-20 02:08:48	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/escalate_priv YRP/keylogger YRP/win_registry YRP/win_token YRP/win_files_operation
5fcb59e12b3916ffc52f7cc67a000f8a46c3a7af314fc99b0adb70e62f8dff10	PE32	2022-02-19 16:29:16	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/win_mutex YRP/win_files_operation
44adfc00626b20d231cbb8a96c2db1cb748e13a1e3a56dfda049f40ab72852e4	PE32	2022-02-19 09:00:18	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/domain YRP/IP YRP/contentis_base64
90536e60873f41a645a321b5c798832f0fa18b4332e0e147d871a4a77c5d7d64	PE32	2022-02-18 12:02:01	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsConsole [+] YRP/HasOverlay YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Dropper_Strings YRP/SharedStrings
cf2f3cef1a45f8016f3132b59780fed6fa4a08511746a89fbf25375cbc2fac2d	PE32	2022-02-18 05:47:41	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Browsers YRP/Dropper_Strings YRP/win_registry YRP/win_files_operation
91e497386ebfc9c32bd18fbdccd3600eac1f01818309ec0f3f4a87b5214f3c30	PE32	2022-02-18 02:17:40	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/domain FlorianRoth/DragonFly_APT_Sep17_3
db2162c009ca2058adbf5c46eda4d095fddd0fe387a9ce11597b0e9e5d5d0383	PE32	2022-02-18 02:15:40	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsConsole [+] YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/VM_Generic_Detection YRP/Dropper_Strings YRP/win_files_operation
5560bb7f406dc5d70dc0c8947a83ffcb5b0e59ee2c9f62c8e80b26a312dd5d17	PE32	2022-02-18 02:02:22	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasRichSignature YRP/domain FlorianRoth/DragonFly_APT_Sep17_3
1a0d52f81c855d5d026a5d3ef9154297dbce18ac7febe9da5d4f842223bf01ef	PE32	2022-02-18 01:08:45	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/Borland YRP/IsPE32 [+] YRP/IsWindowsGUI YRP/borland_delphi YRP/domain YRP/IP YRP/contentis_base64 YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/Delphi_Random YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/Str_Win32_Winsock2_Library
ea20856d7725f0f31994cbd9bf84e2159397266c47cbca989e2adbd478387b90	PE32	2022-02-18 00:11:15	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/IsBeyondImageSize YRP/HasModified_DOS_Message YRP/HasRichSignature YRP/domain YRP/contentis_base64 FlorianRoth/DragonFly_APT_Sep17_3
1c3be8782fcdb2ae40d018fc570aa7958de2b5a7b692eed50ab1c0d882d49b3b	PE32	2022-02-17 23:43:49	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasRichSignature YRP/maldoc_find_kernel32_base_method_1 YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/win_mutex YRP/win_files_operation YRP/Big_Numbers0
f55abc8165127936bd480217cd1dc42d3a4ba107d96f9960c9d45b9539094104	PE32	2022-02-17 23:42:16	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasRichSignature YRP/domain FlorianRoth/DragonFly_APT_Sep17_3
8ed73ad8868cd0a279c558afd8da19f37dd9cef781062b31c64c4e43372b377e	PE32	2022-02-17 23:28:50	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasOverlay YRP/domain YRP/contentis_base64
791037143f5e3ade8afe3670c1c5cd6c8b33218cbf828a5f3518b6cc07115ec9	PE32	2022-02-17 23:14:25	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/Borland YRP/UPXProtectorv10x2 [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/domain YRP/contentis_base64 YRP/screenshot YRP/rat_webcam YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/UPX YRP/suspicious_packer_section
197e4c35fa5410dc8631134b92b62610457648ab79ef8a3275b6bd63f2b2cc91	PE32	2022-02-17 22:06:02	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasOverlay YRP/IsBeyondImageSize YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/SEH__vba
b48741bd483bb282f196bcbe602ef40e1f35037e98164c3bc14dcc068c54e29c	PE32	2022-02-17 21:42:26	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/MD5_Constants YRP/Str_Win32_Wininet_Library YRP/suspicious_packer_section
5b41ccad12e5edba9c20ff556361cdd9b87f86a8dfbd69de0953e7641e3c6a84	PE32	2022-02-17 21:27:15	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/VM_Generic_Detection YRP/Dropper_Strings YRP/win_files_operation
2f0301f9a1baf1ac02ca2ae6463fc63a0d6a057588ec3359eb0dc850b194ede4	PE32	2022-02-17 21:04:49	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/IsBeyondImageSize YRP/HasRichSignature YRP/domain FlorianRoth/DragonFly_APT_Sep17_3
8ff468cc6ea1228555d42016ad461be1f238b9d683d6529034d6160277b87511	MS-DOS	2022-02-17 20:25:30	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/mew_11_xx YRP/IsPE32 [+] YRP/IsWindowsGUI YRP/IsBeyondImageSize YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/Obfuscated_Strings YRP/network_dropper YRP/escalate_priv YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section
348063b4e4448a064c2db6d55a1f3f93d67c5c37af516a12553cccf99254a085	PE32	2022-02-17 20:17:31	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasOverlay YRP/domain YRP/contentis_base64 FlorianRoth/DragonFly_APT_Sep17_3
98b94b8f2144251995e62fd3fd4cd916d5c249e88230bd5693f4f0ae83d687b9	PE32	2022-02-17 19:31:31	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/domain
09fad44bd3edea7be99e2ce9e1b87c0e6eae878e282c35a5791398191775b89a	PE32	2022-02-17 19:17:56	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsDLL [+] YRP/IsWindowsGUI YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section
195d2149205262c1c381bbdbd579d2c62df10c0299c57f1d2e5f585f0f847fd2	PE32	2022-02-17 19:01:33	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Obfuscated_Strings YRP/UPX YRP/suspicious_packer_section
262ac036c90387ce1ac27636c3f10782d1681163c3e168184e694832c53d41d1	PE32	2022-02-17 18:15:50	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/VM_Generic_Detection YRP/Dropper_Strings YRP/escalate_priv YRP/win_registry YRP/win_files_operation
b8da779855062d030721661fd62ae6ec57b7a9131ba697718b0750c9e92fcdaf	PE32	2022-02-17 17:27:17	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsConsole [+] YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/VM_Generic_Detection YRP/Dropper_Strings YRP/escalate_priv YRP/win_registry YRP/win_private_profile YRP/win_files_operation
5f8495f866ebf2e31a2c9656c48c12bb5669bb8d8dbee05908395fc45765980f	PE32	2022-02-17 16:21:20	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Dropper_Strings
721016d549bbfa6fdda7bc0df2e195ce566ded61bde34a9f340143d805afccd5	PE32	2022-02-17 16:02:50	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasRichSignature YRP/domain
ab2bbc634e81c538380912da36dea384474caa2169e769b79f891a8499472563	PE32	2022-02-17 15:38:39	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/SEH__vba
57f16e3a6ed4bdd95a2d2cf559e8e9984829f78b4b8183dbc3f821da41cd30a3	PE32	2022-02-17 15:07:17	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/contentis_base64 YRP/CookieTools YRP/suspicious_packer_section
50369567b5f1ec91602a174d6b4fb1e373351aa65f03fdfa18b9d51ee5157ec8	PE32	2022-02-17 15:05:11	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/Borland YRP/IsPE32 [+] YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/domain YRP/contentis_base64 YRP/win_registry YRP/UPX YRP/suspicious_packer_section FlorianRoth/DragonFly_APT_Sep17_3
a8926b2266d4a91cbdb52eb1e448b8505ea899d17e23548848a59a2438d69507	PE32	2022-02-17 14:33:17	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasRichSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/contentis_base64 YRP/Dropper_Strings YRP/Obfuscated_Strings YRP/Misc_Suspicious_Strings YRP/DebuggerException__ConsoleCtrl YRP/DebuggerException__SetConsoleCtrl YRP/network_udp_sock YRP/network_tcp_listen YRP/network_dyndns YRP/network_smtp_raw YRP/network_irc YRP/network_http YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/spreading_share YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/android_meterpreter YRP/Big_Numbers1 YRP/CRC32_poly_Constant YRP/CRC32_table YRP/BASE64_table YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API
7d629e3c56f2bb38768b75d29160b8ff88e7b0fee077a3b07d6968d101025f9e	PE32	2022-02-17 14:23:31	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/SEH__vba
120acb7cd3e8e4da607d38988fe7df8771b8e3e867db315798492b661ab78bd9	PE32	2022-02-17 13:07:03	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/domain FlorianRoth/DragonFly_APT_Sep17_3
6aa8637ad446e579b680a2c8377f9f48ea93373d1c9c3a98cd2fcec4377473c4	PE32	2022-02-17 12:47:38	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Browsers YRP/Dropper_Strings YRP/win_registry YRP/win_files_operation
716b4c00732fef98778520993bd5dfb9d8b081c226d47110ae30823db5c795c6	PE32	2022-02-17 12:12:06	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/Borland YRP/IsPE32 [+] YRP/IsWindowsGUI YRP/borland_delphi YRP/domain YRP/contentis_base64 YRP/Delphi_Random YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate
71bd812ee2dfdd42b2bb5a555b19e06721b43b7ece3249f56c467b0ec2bb23b9	PE32	2022-02-17 12:10:30	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/VM_Generic_Detection YRP/Dropper_Strings YRP/escalate_priv YRP/win_registry YRP/win_files_operation
a2582f9f5bee7de250e5b050a83e6caf2a95cd6052f60c994feed60cac712a55	PE32	2022-02-17 10:11:58	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/IsBeyondImageSize YRP/HasRichSignature YRP/domain YRP/contentis_base64
a00a31c7c90cfdc767ab2a52aa69968f677817ba47c5502cbc59cbfd9ab49391	PE32	2022-02-17 09:35:11	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasRichSignature YRP/domain YRP/SHA1_Constants
11e33ca1a51dae17b822f867fb0a33ff4c1a09ff6af121af3078348eaa319c06	PE32	2022-02-17 07:51:19	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasRichSignature YRP/domain FlorianRoth/DragonFly_APT_Sep17_3
7a26cff285138b65e3b4ff8f6d4af69ba5c543c97f49c85e852b416016117ce4	PE32	2022-02-17 07:42:06	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasRichSignature YRP/domain FlorianRoth/DragonFly_APT_Sep17_3
dd1090c7495a70d1865eacac484fad6cbb1944d2c2b6ee05dfa41b966efa6856	PE32	2022-02-17 05:24:56	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasOverlay YRP/domain YRP/contentis_base64
1ea96592f9aa21ab2736d06d540229be89e19ebf69eb7d8b925f1a389156a5cd	PE32	2022-02-17 03:11:49	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/domain FlorianRoth/DragonFly_APT_Sep17_3
dc488573fef71559c611fe093e34de133c39494cc9b05a0cc95999e0bc392571	PE32	2022-02-17 03:01:05	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasOverlay YRP/domain YRP/contentis_base64 FlorianRoth/DragonFly_APT_Sep17_3
99ec02107aedacdc7ae57a75c67eba61d639204576045d24f1302dfecf1a602a	PE32	2022-02-17 02:40:28	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasOverlay YRP/domain YRP/contentis_base64 FlorianRoth/DragonFly_APT_Sep17_3
ea9fe8e90d49d474a168fd32389ba68b62a34d1672fab9ff38939d63630230dc	PE32	2022-02-17 02:28:47	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/domain FlorianRoth/DragonFly_APT_Sep17_3
b6e6cfd6a9f9d0e3ae5bdf44542a2c041d766bbaaca6289fec5523580a76bca9	PE32	2022-02-17 01:11:16	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/win_registry YRP/win_token YRP/win_files_operation YRP/suspicious_packer_section
d814e98f4e2186cbb8888832793abf7dace60d0cb1c1c2f307296bf4f9f95651	PE32	2022-02-16 22:37:12	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/SEH__vba
9c61924e5ee18512e0f0092b93f6872336c320deda951a7962656db4d070d42c	PE32	2022-02-16 21:28:09	User Submission	YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/Dropper_Strings YRP/SEH__vba YRP/win_registry

Recent Searches
yrp/microsoft_visual_cpp_8_additional
yrp/fiveeyes_querty_malwaresig_20121_cmddef
yrp/pearmor07600765hying
yrp/opcleaver_pvz_in
yrp/webshell_jsp_k81
yrp/trojan_win32_plaplex
yrp/naikonstrings
yrp/casper_systeminformation_output
yrp/csh_php_php
yrp/webshell_dev_core

Search

Recent Searches