MalShare

SHA256 Hash	File type	Added	Source	Yara Hits
62ea588943c1f5bfbaf5250f809759003d1d3cf19d68fd5a5a3d23a18908e4e1	PE32	2022-02-17 16:06:05	User Submission	YRP/PE_Diminisher_V01_Teraphy YRP/CICompress_v10_additional YRP/PE_Diminisher_01_Teraphy_Phrozen_Crew YRP/PE_Diminisher_v01_Teraphy_additional [+] YRP/PE_Diminisher_v01 YRP/PE_Diminisher_V01_Teraphy_additional YRP/PE_Diminisher_v01_Teraphy YRP/PECompact_v2x YRP/PEDiminisherv01 YRP/PEDiminisherV01Teraphy YRP/PEDiminisherv01Teraphy YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64
8e28c470958462f85a7dc759022e2d5d137bf935c3395d01c6f41c45d1b5a4d7	PE32	2022-02-17 11:44:01	User Submission	YRP/PE_Diminisher_V01_Teraphy YRP/PE_Diminisher_V01_Teraphy_additional YRP/Borland YRP/UPXv20MarkusLaszloReiser [+] YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/PEDiminisherV01Teraphy YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/maldoc_find_kernel32_base_method_1 YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/contentis_base64 YRP/win_registry YRP/CRC32_poly_Constant YRP/suspicious_packer_section
b9290d418cffdd8f2a05a83e8e47bd6b01820bf92be0bdce53ab2ef5edf1c0bc	PE32	2022-02-16 18:43:41	User Submission	YRP/PE_Diminisher_V01_Teraphy YRP/CICompress_v10_additional YRP/PE_Diminisher_01_Teraphy_Phrozen_Crew YRP/PE_Diminisher_v01_Teraphy_additional [+] YRP/PE_Diminisher_v01 YRP/PE_Diminisher_V01_Teraphy_additional YRP/PE_Diminisher_v01_Teraphy YRP/PECompact_v2x YRP/PEDiminisherv01 YRP/PEDiminisherV01Teraphy YRP/PEDiminisherv01Teraphy YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/IsBeyondImageSize YRP/HasRichSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64
bd3b5ea5b1db47246cc6b33a58ca59285937aedb5f29aac9ddce8d06a5efe841	PE32	2022-02-16 16:35:26	User Submission	YRP/PE_Diminisher_V01_Teraphy YRP/PE_Diminisher_V01_Teraphy_additional YRP/Borland YRP/PEDiminisherV01Teraphy [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/maldoc_OLE_file_magic_number YRP/Browsers YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/ThreadControl__Context YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/inject_thread YRP/create_service YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/sniff_audio YRP/spreading_share YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Delphi_Random YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/CookieTools
c7282168c1221966799c7d0db634131951d8c7577b65317b2867964f0b3adba8	PE32	2022-02-16 07:01:35	User Submission	YRP/PE_Diminisher_V01_Teraphy YRP/CICompress_v10_additional YRP/PE_Diminisher_01_Teraphy_Phrozen_Crew YRP/PE_Diminisher_v01_Teraphy_additional [+] YRP/PE_Diminisher_v01 YRP/PE_Diminisher_V01_Teraphy_additional YRP/PE_Diminisher_v01_Teraphy YRP/PECompact_v2x YRP/PEDiminisherv01 YRP/PEDiminisherV01Teraphy YRP/PEDiminisherv01Teraphy YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64
6a138ed2e96aea055f63786613b28358fba2ce4be60019e1bc29efd1a5e9db95	PE32	2020-06-30 17:43:47	User Submission	YRP/PE_Diminisher_V01_Teraphy YRP/PE_Diminisher_V01_Teraphy_additional YRP/PEDiminisherV01Teraphy YRP/IsPE32 [+] YRP/IsConsole YRP/IsPacked YRP/HasOverlay YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/win_files_operation
118f918eb58db22032a660fa01df2f0a12e554aae404ab5d1e32df17190087b3	PE32	2020-06-29 17:06:36	User Submission	YRP/PE_Diminisher_V01_Teraphy YRP/PE_Diminisher_V01_Teraphy_additional YRP/Armadillo_v4x YRP/PEDiminisherV01Teraphy [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/contentis_base64 YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/anti_dbg YRP/network_tcp_listen YRP/network_dropper YRP/network_tcp_socket YRP/escalate_priv YRP/screenshot YRP/win_registry YRP/win_token YRP/win_files_operation YRP/android_meterpreter YRP/CRC32_poly_Constant YRP/CRC32_table YRP/Str_Win32_Winsock2_Library YRP/nAspyUpdateStrings YRP/nAspyUpdate YRP/apt_c16_win_memory_pcclient YRP/IronTiger_NBDDos_Gh0stvariant_dropper
117a1009e08df84cb9ff2a420f6e7736dded571e6e1ef4fcaa0e48baa0fe2251	PE32	2020-06-27 16:50:45	User Submission	YRP/PE_Diminisher_V01_Teraphy YRP/CICompress_v10_additional YRP/PE_Diminisher_01_Teraphy_Phrozen_Crew YRP/PE_Diminisher_v01_Teraphy_additional [+] YRP/PE_Diminisher_v01 YRP/PE_Diminisher_V01_Teraphy_additional YRP/PE_Diminisher_v01_Teraphy YRP/PECompact_v2x YRP/PEDiminisherv01 YRP/PEDiminisherV01Teraphy YRP/PEDiminisherv01Teraphy YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64
d81b55c7e33c486920d5301543aa50c17986b714af7e9521ed0413c8340ee8b7	PE32	2020-01-15 12:58:10	User Submission	YRP/PE_Diminisher_V01_Teraphy YRP/PE_Diminisher_V01_Teraphy_additional YRP/PEDiminisherV01Teraphy YRP/IsPE32 [+] YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 FlorianRoth/DragonFly_APT_Sep17_3
0217386bdaf2658e8bdf206764ec1c0687d8b6a792bff066eb5064d73d3e5650	PE32	2020-01-15 10:36:14	User Submission	YRP/PE_Diminisher_V01_Teraphy YRP/CICompress_v10_additional YRP/PE_Diminisher_01_Teraphy_Phrozen_Crew YRP/PE_Diminisher_v01_Teraphy_additional [+] YRP/PE_Diminisher_v01 YRP/PE_Diminisher_V01_Teraphy_additional YRP/PE_Diminisher_v01_Teraphy YRP/PECompact_v2x YRP/PEDiminisherv01 YRP/PEDiminisherV01Teraphy YRP/PEDiminisherv01Teraphy YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64
e498d97201f21d89dc468d6a3923d71facebc7d2b0e1ab07c7c7be079e34dc65	PE32	2020-01-15 10:36:06	User Submission	YRP/PE_Diminisher_V01_Teraphy YRP/CICompress_v10_additional YRP/PE_Diminisher_01_Teraphy_Phrozen_Crew YRP/PE_Diminisher_v01_Teraphy_additional [+] YRP/PE_Diminisher_v01 YRP/PE_Diminisher_V01_Teraphy_additional YRP/PE_Diminisher_v01_Teraphy YRP/PECompact_v2x YRP/PEDiminisherv01 YRP/PEDiminisherV01Teraphy YRP/PEDiminisherv01Teraphy YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64
2aa3da52eb09ec38dd05e8fbf9c6ceca9a01954bc7c372de1c4d9c8fb4213ecd	PE32	2020-01-13 14:54:33	User Submission	YRP/PE_Diminisher_V01_Teraphy YRP/CICompress_v10_additional YRP/PE_Diminisher_01_Teraphy_Phrozen_Crew YRP/PE_Diminisher_v01_Teraphy_additional [+] YRP/PE_Diminisher_v01 YRP/PE_Diminisher_V01_Teraphy_additional YRP/PE_Diminisher_v01_Teraphy YRP/PECompact_v2x YRP/PEDiminisherv01 YRP/PEDiminisherV01Teraphy YRP/PEDiminisherv01Teraphy YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 FlorianRoth/DragonFly_APT_Sep17_3
56e2c385ceaa2408ae2c15451c5342895eda6711bc7e7fdd228496a6bd84ad8c	PE32	2020-01-13 14:26:44	User Submission	YRP/PE_Diminisher_V01_Teraphy YRP/PE_Diminisher_V01_Teraphy_additional YRP/Armadillo_v4x YRP/PEDiminisherV01Teraphy [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/contentis_base64 YRP/Antivirus YRP/network_dropper YRP/network_dns YRP/escalate_priv YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Str_Win32_Winsock2_Library
fc495197c16ce2c6fc75ed1c19b48becf2a0dcf77027b5d4fe64c7855a6baaa1	PE32	2019-11-24 11:57:53	User Submission	YRP/PE_Diminisher_V01_Teraphy YRP/CICompress_v10_additional YRP/PE_Diminisher_01_Teraphy_Phrozen_Crew YRP/PE_Diminisher_v01_Teraphy_additional [+] YRP/PE_Diminisher_v01 YRP/PE_Diminisher_V01_Teraphy_additional YRP/PE_Diminisher_v01_Teraphy YRP/PECompact_v2x YRP/PEDiminisherv01 YRP/PEDiminisherV01Teraphy YRP/PEDiminisherv01Teraphy YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/win_registry YRP/win_files_operation FlorianRoth/DragonFly_APT_Sep17_3
5c13187ad5cefae1cd6fd0afd41cd5618bfcd8358da9ca9b5eebd56d678681f8	PE32	2019-11-24 11:21:50	User Submission	YRP/PE_Diminisher_V01_Teraphy YRP/PE_Diminisher_V01_Teraphy_additional YRP/PEDiminisherV01Teraphy YRP/IsPE32 [+] YRP/IsDLL YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64
d7820612afeeadf41bdd9a171ce3a785e408874ff651bedfcd56b641b8bce220	PE32	2019-11-24 11:21:32	User Submission	YRP/PE_Diminisher_V01_Teraphy YRP/PE_Diminisher_V01_Teraphy_additional YRP/PEDiminisherV01Teraphy YRP/IsPE32 [+] YRP/IsDLL YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64
a0157e980a6962a9ee6a3a2729964bd6b257e87da40f1a258e91defed5a0af2b	PE32	2019-11-24 10:47:34	User Submission	YRP/PE_Diminisher_V01_Teraphy YRP/CICompress_v10_additional YRP/PE_Diminisher_01_Teraphy_Phrozen_Crew YRP/PE_Diminisher_v01_Teraphy_additional [+] YRP/PE_Diminisher_v01 YRP/PE_Diminisher_V01_Teraphy_additional YRP/PE_Diminisher_v01_Teraphy YRP/PECompact_v2x YRP/PEDiminisherv01 YRP/PEDiminisherV01Teraphy YRP/PEDiminisherv01Teraphy YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 FlorianRoth/DragonFly_APT_Sep17_3

Recent Searches
yrp/pediminisherv01teraphy
yrp/pseudosigner_02_borland_cpp_dll_method_2_anorganix
yrp/_pseudosigner_02_borland_cpp_dll_method_2_anorganix
yrp/petite_v20_ian_luck
yrp/petite_v20_additional
yrp/pe_diminisher_v01_teraphy
yrp/pe_diminisher_01_teraphy_phrozen_crew
yrp/petitev20
yrp/fsg_v110_eng_dulekxt_microsoft_visual_c_basic_net
yrp/borland_delphi

Search

Recent Searches