MalShare

SHA256 Hash	File type	Added	Source	Yara Hits
fff5b7ef7d51640b6d9c3ed53eaba07964528c0e52e91fe70a66ea2c364cca42	PE32	2022-02-24 14:00:51	User Submission	YRP/Borland_Delphi_40_additional YRP/Borland_Delphi_v60_v70_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_v50_KOL [+] YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/BobSoft_Mini_Delphi_BoB_BobSoft_additional YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/Upackv029Betav031BetaDwing YRP/BobSoftMiniDelphiBoBBobSoft YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasModified_DOS_Message YRP/borland_delphi_dll YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Browsers YRP/Misc_Suspicious_Strings YRP/ThreadControl__Context YRP/anti_dbg YRP/inject_thread YRP/network_tcp_socket YRP/network_dns YRP/keylogger YRP/spreading_file YRP/win_registry YRP/win_files_operation YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section
634a2ce1636e6faf9eb07be0d4a48668546d94049220aa59af5cbca25dcbdfeb	PE32	2022-02-24 12:09:56	User Submission	YRP/Upack_024_beta_Dwing YRP/Upack_v024_v028_Alpha_Dwing YRP/Upack_024_027_beta_028_alpha_Dwing_ YRP/Upack_024_027_beta_028_alpha_Dwing [+] YRP/Upack_02x_Dwing YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_02x_beta_Dwing YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_v024_v028alpha_Sign_by_hot_UNP_additional YRP/Upack_v024_v028alpha_Sign_by_hot_UNP YRP/Upack_01x_020_021_024_beta_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upack_024_beta_Dwing_additional YRP/Upackv024v028AlphaDwing YRP/Upackv029Betav031BetaDwing YRP/Upack024027beta028alphaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasModified_DOS_Message YRP/domain YRP/IP YRP/contentis_base64 YRP/anti_dbg YRP/suspicious_packer_section FlorianRoth/DragonFly_APT_Sep17_3
f2accd26ad02bdf9e8ecbfd5bb9f6ae404eeb3f4bdadcb3387addd8ef7e40353	PE32	2022-02-24 08:27:46	User Submission	YRP/Borland_Delphi_40_additional YRP/Borland_Delphi_v60_v70_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_v50_KOL [+] YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/BobSoft_Mini_Delphi_BoB_BobSoft_additional YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/Upackv029Betav031BetaDwing YRP/BobSoftMiniDelphiBoBBobSoft YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasModified_DOS_Message YRP/borland_delphi_dll YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Browsers YRP/Misc_Suspicious_Strings YRP/ThreadControl__Context YRP/anti_dbg YRP/inject_thread YRP/network_tcp_socket YRP/network_dns YRP/screenshot YRP/keylogger YRP/spreading_file YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/win_hook YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Str_Win32_Winsock2_Library YRP/GlassesCode YRP/Glasses YRP/suspicious_packer_section
9b589e3b232ab0d717dbb235865f5bec45b44aa83423c96b12c77ef9848609ff	PE32	2022-02-23 19:06:53	User Submission	YRP/Upackv029Betav031BetaDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/HasDebugData [+] YRP/IsBeyondImageSize YRP/HasRichSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/url YRP/contentis_base64 YRP/Antivirus YRP/anti_dbg YRP/win_registry YRP/suspicious_packer_section
6710a3081a2788f2b0b3b4edb85380debf72e954cf8f16c32d644fe24f6aa328	PE32	2022-02-23 13:13:34	User Submission	YRP/Upack_024_beta_Dwing YRP/Upack_v024_v028_Alpha_Dwing YRP/Upack_024_027_beta_028_alpha_Dwing_ YRP/Upack_024_027_beta_028_alpha_Dwing [+] YRP/Upack_02x_Dwing YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_02x_beta_Dwing YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_v024_v028alpha_Sign_by_hot_UNP_additional YRP/Upack_v024_v028alpha_Sign_by_hot_UNP YRP/Upack_01x_020_021_024_beta_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upack_024_beta_Dwing_additional YRP/Upackv024v028AlphaDwing YRP/Upackv029Betav031BetaDwing YRP/Upack024027beta028alphaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasModified_DOS_Message YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Dropper_Strings YRP/DebuggerException__SetConsoleCtrl YRP/anti_dbg YRP/create_service YRP/network_tcp_listen YRP/network_tcp_socket YRP/escalate_priv YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section
075cea6bc357ffc3211b0d8adf449b97c3f1bf0250f6f384c29f6bc8dcc391f8	PE32	2022-02-23 12:36:12	User Submission	YRP/Upack_024_beta_Dwing YRP/Upack_v024_v028_Alpha_Dwing YRP/Upack_024_027_beta_028_alpha_Dwing_ YRP/Upack_024_027_beta_028_alpha_Dwing [+] YRP/Upack_02x_Dwing YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_02x_beta_Dwing YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_v024_v028alpha_Sign_by_hot_UNP_additional YRP/Upack_v024_v028alpha_Sign_by_hot_UNP YRP/Upack_01x_020_021_024_beta_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upack_024_beta_Dwing_additional YRP/Upackv024v028AlphaDwing YRP/Upackv029Betav031BetaDwing YRP/Upack024027beta028alphaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/IP YRP/contentis_base64 YRP/suspicious_packer_section FlorianRoth/DragonFly_APT_Sep17_3
c61c5e21a27329541536cf7b50e562fab3e9e901ffcaeee6d75fe5457938d529	PE32	2022-02-23 10:55:58	User Submission	YRP/Borland_Delphi_40_additional YRP/Borland_Delphi_v60_v70_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_v50_KOL [+] YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/BobSoft_Mini_Delphi_BoB_BobSoft_additional YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/Upackv029Betav031BetaDwing YRP/BobSoftMiniDelphiBoBBobSoft YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasModified_DOS_Message YRP/borland_delphi_dll YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Browsers YRP/Misc_Suspicious_Strings YRP/ThreadControl__Context YRP/anti_dbg YRP/inject_thread YRP/network_tcp_socket YRP/network_dns YRP/screenshot YRP/keylogger YRP/spreading_file YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Delphi_Random YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section
5351d05b3ae0cfc16347d803f58768c34c2af637ff0303cb63461eaf7cc4f9a1	PE32	2022-02-23 07:46:40	User Submission	YRP/Borland_Delphi_40_additional YRP/Borland_Delphi_v60_v70_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_v50_KOL [+] YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/BobSoft_Mini_Delphi_BoB_BobSoft_additional YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/Upackv029Betav031BetaDwing YRP/BobSoftMiniDelphiBoBBobSoft YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasModified_DOS_Message YRP/borland_delphi_dll YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Browsers YRP/Misc_Suspicious_Strings YRP/ThreadControl__Context YRP/anti_dbg YRP/disable_dep YRP/inject_thread YRP/network_tcp_socket YRP/network_dns YRP/keylogger YRP/spreading_file YRP/win_registry YRP/win_files_operation YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section
c8cfa8a38f58dfff83c1c27fe7ccfb7580b5333da272d70994975ed855479199	PE32	2022-02-23 06:36:39	User Submission	YRP/Upack_024_beta_Dwing YRP/Upack_v024_v028_Alpha_Dwing YRP/Upack_024_027_beta_028_alpha_Dwing_ YRP/Upack_024_027_beta_028_alpha_Dwing [+] YRP/Upack_02x_Dwing YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_02x_beta_Dwing YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_v024_v028alpha_Sign_by_hot_UNP_additional YRP/Upack_v024_v028alpha_Sign_by_hot_UNP YRP/Upack_01x_020_021_024_beta_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upack_024_beta_Dwing_additional YRP/Upackv024v028AlphaDwing YRP/Upackv029Betav031BetaDwing YRP/Upack024027beta028alphaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasModified_DOS_Message YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/VM_Generic_Detection YRP/screenshot YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/CRC32_poly_Constant YRP/suspicious_packer_section
0aa7bafbcd1fca376e4d7cd906b1561c8aab78dd27c65b31fce73a9a85940768	PE32	2022-02-23 05:50:42	User Submission	YRP/Upack_024_beta_Dwing YRP/Upack_v024_v028_Alpha_Dwing YRP/Upack_024_027_beta_028_alpha_Dwing_ YRP/Upack_024_027_beta_028_alpha_Dwing [+] YRP/Upack_02x_Dwing YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_02x_beta_Dwing YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_v024_v028alpha_Sign_by_hot_UNP_additional YRP/Upack_v024_v028alpha_Sign_by_hot_UNP YRP/Upack_01x_020_021_024_beta_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upack_024_beta_Dwing_additional YRP/Upackv024v028AlphaDwing YRP/Upackv029Betav031BetaDwing YRP/Upack024027beta028alphaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/IP YRP/contentis_base64 YRP/suspicious_packer_section FlorianRoth/DragonFly_APT_Sep17_3
e73a332118981d6b6ac09c9cdf0fb0012bb59772038361d5cff79aac26744b45	PE32	2022-02-23 01:35:10	User Submission	YRP/Upack_024_beta_Dwing YRP/Upack_v024_v028_Alpha_Dwing YRP/Upack_024_027_beta_028_alpha_Dwing_ YRP/Upack_024_027_beta_028_alpha_Dwing [+] YRP/Upack_02x_Dwing YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_02x_beta_Dwing YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_v024_v028alpha_Sign_by_hot_UNP_additional YRP/Upack_v024_v028alpha_Sign_by_hot_UNP YRP/Upack_01x_020_021_024_beta_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upack_024_beta_Dwing_additional YRP/Borland YRP/Upackv024v028AlphaDwing YRP/Upackv029Betav031BetaDwing YRP/Upack024027beta028alphaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasModified_DOS_Message YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Delphi_Random YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/suspicious_packer_section
e587deb6fbea3cfac436a5c95b60bd754b31345a499113bd57b6b6ad093f0d72	PE32	2022-02-23 01:22:44	User Submission	YRP/Upack_024_beta_Dwing YRP/Upack_v024_v028_Alpha_Dwing YRP/Upack_024_027_beta_028_alpha_Dwing_ YRP/Upack_024_027_beta_028_alpha_Dwing [+] YRP/Upack_02x_Dwing YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_02x_beta_Dwing YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_v024_v028alpha_Sign_by_hot_UNP_additional YRP/Upack_v024_v028alpha_Sign_by_hot_UNP YRP/Upack_01x_020_021_024_beta_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upack_024_beta_Dwing_additional YRP/Upackv024v028AlphaDwing YRP/Upackv029Betav031BetaDwing YRP/Upack024027beta028alphaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasModified_DOS_Message YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/anti_dbg YRP/suspicious_packer_section
ad765bd7cf97e6f988201c6c3413c8d09454a13508ebcb1e53810e0a0e436fa9	PE32	2022-02-23 00:33:23	User Submission	YRP/Upack_024_beta_Dwing YRP/Upack_v024_v028_Alpha_Dwing YRP/Upack_024_027_beta_028_alpha_Dwing_ YRP/Upack_024_027_beta_028_alpha_Dwing [+] YRP/Upack_02x_Dwing YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_02x_beta_Dwing YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_v024_v028alpha_Sign_by_hot_UNP_additional YRP/Upack_v024_v028alpha_Sign_by_hot_UNP YRP/Upack_01x_020_021_024_beta_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upack_024_beta_Dwing_additional YRP/Upackv024v028AlphaDwing YRP/Upackv029Betav031BetaDwing YRP/Upack024027beta028alphaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasModified_DOS_Message YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/anti_dbg YRP/suspicious_packer_section
ffa9c8e85c68cd1a561931f7cdf3989f982c625f035375c9a92b8ff993ac4529	PE32	2022-02-22 23:14:13	User Submission	YRP/Upack_024_beta_Dwing YRP/Upack_v024_v028_Alpha_Dwing YRP/Upack_024_027_beta_028_alpha_Dwing_ YRP/Upack_024_027_beta_028_alpha_Dwing [+] YRP/Upack_02x_Dwing YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_02x_beta_Dwing YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_v024_v028alpha_Sign_by_hot_UNP_additional YRP/Upack_v024_v028alpha_Sign_by_hot_UNP YRP/Upack_01x_020_021_024_beta_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upack_024_beta_Dwing_additional YRP/Upackv024v028AlphaDwing YRP/Upackv029Betav031BetaDwing YRP/Upack024027beta028alphaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/IP YRP/contentis_base64 YRP/suspicious_packer_section FlorianRoth/DragonFly_APT_Sep17_3
c9b302fcb213eb1ca8cc57bdde44953b9f32f6ce3df25ce652b3c520dff7c42c	PE32	2022-02-22 22:30:06	User Submission	YRP/Upack_024_beta_Dwing YRP/Upack_v024_v028_Alpha_Dwing YRP/Upack_024_027_beta_028_alpha_Dwing_ YRP/Upack_024_027_beta_028_alpha_Dwing [+] YRP/Upack_02x_Dwing YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_02x_beta_Dwing YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_v024_v028alpha_Sign_by_hot_UNP_additional YRP/Upack_v024_v028alpha_Sign_by_hot_UNP YRP/Upack_01x_020_021_024_beta_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upack_024_beta_Dwing_additional YRP/Upackv024v028AlphaDwing YRP/Upackv029Betav031BetaDwing YRP/Upack024027beta028alphaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasModified_DOS_Message YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/anti_dbg YRP/spreading_file YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section
94be6dde755f74f5f1b83034384d82d65b4ff6f202c01e7c1e9676a130a046ce	PE32	2022-02-22 21:59:33	User Submission	YRP/Upack_024_beta_Dwing YRP/Upack_v024_v028_Alpha_Dwing YRP/Upack_024_027_beta_028_alpha_Dwing_ YRP/Upack_024_027_beta_028_alpha_Dwing [+] YRP/Upack_02x_Dwing YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_02x_beta_Dwing YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_v024_v028alpha_Sign_by_hot_UNP_additional YRP/Upack_v024_v028alpha_Sign_by_hot_UNP YRP/Upack_01x_020_021_024_beta_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upack_024_beta_Dwing_additional YRP/Upackv024v028AlphaDwing YRP/Upackv029Betav031BetaDwing YRP/Upack024027beta028alphaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasModified_DOS_Message YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/anti_dbg YRP/suspicious_packer_section
326ca53998bfd9e0462231fcb0edd1522ab6af9366693520cd601cc579c5c7ab	PE32	2022-02-22 20:28:58	User Submission	YRP/Upack_024_beta_Dwing YRP/Upack_v024_v028_Alpha_Dwing YRP/Upack_024_027_beta_028_alpha_Dwing_ YRP/Upack_024_027_beta_028_alpha_Dwing [+] YRP/Upack_02x_Dwing YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_02x_beta_Dwing YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_v024_v028alpha_Sign_by_hot_UNP_additional YRP/Upack_v024_v028alpha_Sign_by_hot_UNP YRP/Upack_01x_020_021_024_beta_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upack_024_beta_Dwing_additional YRP/Upackv024v028AlphaDwing YRP/Upackv029Betav031BetaDwing YRP/Upack024027beta028alphaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasModified_DOS_Message YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/anti_dbg YRP/suspicious_packer_section
294cc87defd992eb46608e5468cd0412536646e4b019561eed78c898910869da	PE32	2022-02-22 19:36:13	User Submission	YRP/Upack_024_beta_Dwing YRP/Upack_v024_v028_Alpha_Dwing YRP/Upack_024_027_beta_028_alpha_Dwing_ YRP/Upack_024_027_beta_028_alpha_Dwing [+] YRP/Upack_02x_Dwing YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_02x_beta_Dwing YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_v024_v028alpha_Sign_by_hot_UNP_additional YRP/Upack_v024_v028alpha_Sign_by_hot_UNP YRP/Upack_01x_020_021_024_beta_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upack_024_beta_Dwing_additional YRP/Upackv024v028AlphaDwing YRP/Upackv029Betav031BetaDwing YRP/Upack024027beta028alphaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasModified_DOS_Message YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/anti_dbg YRP/screenshot YRP/suspicious_packer_section
3970ad0733610a1df7855f6f9c7caed817330d482b0a05f576f9da359d12ffdd	PE32	2022-02-22 18:20:32	User Submission	YRP/Upack_024_beta_Dwing YRP/Upack_v024_v028_Alpha_Dwing YRP/Upack_024_027_beta_028_alpha_Dwing_ YRP/Upack_024_027_beta_028_alpha_Dwing [+] YRP/Upack_02x_Dwing YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_02x_beta_Dwing YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_v024_v028alpha_Sign_by_hot_UNP_additional YRP/Upack_v024_v028alpha_Sign_by_hot_UNP YRP/Upack_01x_020_021_024_beta_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upack_024_beta_Dwing_additional YRP/Upackv024v028AlphaDwing YRP/Upackv029Betav031BetaDwing YRP/Upack024027beta028alphaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasModified_DOS_Message YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/win_hook YRP/suspicious_packer_section
5c1b653c41887dc8b93c4e2e303a5b6c3c042132aff191abcfe0ab6691066477	PE32	2022-02-22 17:09:03	User Submission	YRP/Borland_Delphi_40_additional YRP/Borland_Delphi_v60_v70_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_v50_KOL [+] YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/BobSoft_Mini_Delphi_BoB_BobSoft_additional YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/Upackv029Betav031BetaDwing YRP/BobSoftMiniDelphiBoBBobSoft YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasModified_DOS_Message YRP/borland_delphi_dll YRP/domain YRP/url YRP/contentis_base64 YRP/Browsers YRP/Misc_Suspicious_Strings YRP/ThreadControl__Context YRP/inject_thread YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/keylogger YRP/spreading_file YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section
1e8a6f48fc68e5754bc0df80c70b1a5c93ae40c13deb7b4596e7f1eba58e711b	PE32	2022-02-22 14:40:15	User Submission	YRP/Upack_024_beta_Dwing YRP/Upack_v024_v028_Alpha_Dwing YRP/Upack_024_027_beta_028_alpha_Dwing_ YRP/Upack_024_027_beta_028_alpha_Dwing [+] YRP/Upack_02x_Dwing YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_02x_beta_Dwing YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_v024_v028alpha_Sign_by_hot_UNP_additional YRP/Upack_v024_v028alpha_Sign_by_hot_UNP YRP/Upack_01x_020_021_024_beta_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upack_024_beta_Dwing_additional YRP/Borland YRP/Upackv024v028AlphaDwing YRP/Upackv029Betav031BetaDwing YRP/Upack024027beta028alphaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasModified_DOS_Message YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/anti_dbg YRP/network_dropper YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Delphi_Random YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Str_Win32_Wininet_Library YRP/suspicious_packer_section
b3fea5464c7d3e94de9d9bc746ab0ca18cffefcd701376dcfb669cb7d0203300	PE32	2022-02-22 14:11:13	User Submission	YRP/Upack_024_beta_Dwing YRP/Upack_v024_v028_Alpha_Dwing YRP/Upack_024_027_beta_028_alpha_Dwing_ YRP/Upack_024_027_beta_028_alpha_Dwing [+] YRP/Upack_02x_Dwing YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_02x_beta_Dwing YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_v024_v028alpha_Sign_by_hot_UNP_additional YRP/Upack_v024_v028alpha_Sign_by_hot_UNP YRP/Upack_01x_020_021_024_beta_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upack_024_beta_Dwing_additional YRP/Upackv024v028AlphaDwing YRP/Upackv029Betav031BetaDwing YRP/Upack024027beta028alphaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasModified_DOS_Message YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/anti_dbg YRP/suspicious_packer_section
bcd8dffcd7f8b5227f15906d0ae768e67061746c982ec0e7d196f1aa5bcee672	PE32	2022-02-22 13:54:43	User Submission	YRP/Borland_Delphi_40_additional YRP/Borland_Delphi_v60_v70_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_v50_KOL [+] YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/BobSoft_Mini_Delphi_BoB_BobSoft_additional YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/Upackv029Betav031BetaDwing YRP/BobSoftMiniDelphiBoBBobSoft YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasModified_DOS_Message YRP/borland_delphi_dll YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Browsers YRP/Misc_Suspicious_Strings YRP/DebuggerException__ConsoleCtrl YRP/DebuggerException__SetConsoleCtrl YRP/ThreadControl__Context YRP/anti_dbg YRP/inject_thread YRP/network_tcp_socket YRP/network_dns YRP/keylogger YRP/spreading_file YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section
1773efc242ad1cd65ee19f2403f1183fc99e1069418e2745e17a66e9509f3b01	PE32	2022-02-22 12:54:25	User Submission	YRP/Borland_Delphi_40_additional YRP/Borland_Delphi_v60_v70_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_v50_KOL [+] YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/BobSoft_Mini_Delphi_BoB_BobSoft_additional YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/Upackv029Betav031BetaDwing YRP/BobSoftMiniDelphiBoBBobSoft YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasModified_DOS_Message YRP/borland_delphi_dll YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Browsers YRP/Misc_Suspicious_Strings YRP/ThreadControl__Context YRP/anti_dbg YRP/inject_thread YRP/network_tcp_socket YRP/network_dns YRP/keylogger YRP/spreading_file YRP/win_registry YRP/win_files_operation YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section
85126f48ee5316ca497babe18c452ece972038785f64dd75b2afbac993447b39	PE32	2022-02-18 06:04:21	User Submission	YRP/Upack_024_beta_Dwing YRP/Upack_v024_v028_Alpha_Dwing YRP/Upack_024_027_beta_028_alpha_Dwing_ YRP/Upack_024_027_beta_028_alpha_Dwing [+] YRP/Upack_02x_Dwing YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_02x_beta_Dwing YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_v024_v028alpha_Sign_by_hot_UNP_additional YRP/Upack_v024_v028alpha_Sign_by_hot_UNP YRP/Upack_01x_020_021_024_beta_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upack_024_beta_Dwing_additional YRP/Upackv024v028AlphaDwing YRP/Upackv029Betav031BetaDwing YRP/Upack024027beta028alphaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section
d7ad82c401d05598cfd0611fe4aa72851622513419899ac99c45c91f8963e5d0	PE32	2022-02-18 03:58:35	User Submission	YRP/PeCompact_v208_Bitsum_Technologiessignature_by_loveboom YRP/PECompact_2x_Jeremy_Collake YRP/PECompact_20x_Heuristic_Mode_Jeremy_Collake YRP/PECompact_2xx_BitSum_Technologies [+] YRP/PECompact_v2xx YRP/PECompact_V2X_Bitsum_Technologies_additional YRP/PECompact_V2X_Bitsum_Technologies YRP/PECompact_v20_additional YRP/PeCompact_2xx_BitSum_Technologies YRP/PeCompact_253_DLL_BitSum_Technologies_additional YRP/PECompact_v20 YRP/PeCompact_253_DLL_BitSum_Technologies YRP/PECompact_v2xx_additional YRP/PECompactV2XBitsumTechnologies YRP/PECompact2xxBitSumTechnologies YRP/Upackv029Betav031BetaDwing YRP/PECompactv2xx YRP/NsPackv31NorthStar YRP/pecompact2 YRP/IsPE32 YRP/IsWindowsGUI YRP/HasModified_DOS_Message YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/network_dropper YRP/keylogger YRP/rat_webcam YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/suspicious_packer_section
4b6889e2626d86202f68fd54393a65338630cd72535b52a71f6d777fb4d05228	PE32	2022-02-18 03:11:02	User Submission	YRP/Upack_024_beta_Dwing YRP/Upack_v024_v028_Alpha_Dwing YRP/Upack_024_027_beta_028_alpha_Dwing_ YRP/Upack_024_027_beta_028_alpha_Dwing [+] YRP/Upack_02x_Dwing YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_02x_beta_Dwing YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_v024_v028alpha_Sign_by_hot_UNP_additional YRP/Upack_v024_v028alpha_Sign_by_hot_UNP YRP/Upack_01x_020_021_024_beta_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upack_024_beta_Dwing_additional YRP/Upackv024v028AlphaDwing YRP/Upackv029Betav031BetaDwing YRP/Upack024027beta028alphaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/IP YRP/contentis_base64 YRP/suspicious_packer_section
d0c78208ae74d655df989a465059f36af6df72a2c3d3f63e6f9d38c30fc99233	PE32	2022-02-18 03:04:59	User Submission	YRP/WinUpack_v030_beta_By_Dwing_h_additional YRP/ASProtect_v132 YRP/Upack_v031_beta_Dwing YRP/Upack_v031_beta_Dwing_additional [+] YRP/WinUpack_v030_beta_By_Dwing YRP/WinUpack_v030_beta_By_Dwing_h YRP/WinUpack_v030_beta_By_Dwing_ YRP/WinUpack_v030_beta_By_Dwing_additional YRP/WinUpackv030betaByDwing YRP/Upackv031betaDwing YRP/Upackv029Betav031BetaDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section
e30a703176815a0df1661f3b158460fa9f1afe298ebf4bea983ba03f9bf56c0d	PE32	2022-02-18 02:46:44	User Submission	YRP/Upack_024_beta_Dwing YRP/Upack_v024_v028_Alpha_Dwing YRP/Upack_024_027_beta_028_alpha_Dwing_ YRP/Upack_024_027_beta_028_alpha_Dwing [+] YRP/Upack_02x_Dwing YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_02x_beta_Dwing YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_v024_v028alpha_Sign_by_hot_UNP_additional YRP/Upack_v024_v028alpha_Sign_by_hot_UNP YRP/Upack_01x_020_021_024_beta_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upack_024_beta_Dwing_additional YRP/Upackv024v028AlphaDwing YRP/Upackv029Betav031BetaDwing YRP/Upack024027beta028alphaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section FlorianRoth/DragonFly_APT_Sep17_3
a73e98e24f475768fdb7e5af3dca39c026f4e126f81342d62139e6d05b6410e0	PE32	2022-02-18 02:23:32	User Submission	YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 [+] YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upackv029Betav031BetaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section FlorianRoth/DragonFly_APT_Sep17_3
67ffb3ac975784bc7c51e9e6305e4e82cf7012cc7a91e9b22d0d1c6c3d96d501	PE32	2022-02-17 23:41:32	User Submission	YRP/Upack_024_beta_Dwing YRP/Upack_v024_v028_Alpha_Dwing YRP/Upack_024_027_beta_028_alpha_Dwing_ YRP/Upack_024_027_beta_028_alpha_Dwing [+] YRP/Upack_02x_Dwing YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_02x_beta_Dwing YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_v024_v028alpha_Sign_by_hot_UNP_additional YRP/Upack_v024_v028alpha_Sign_by_hot_UNP YRP/Upack_01x_020_021_024_beta_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upack_024_beta_Dwing_additional YRP/Upackv024v028AlphaDwing YRP/Upackv029Betav031BetaDwing YRP/Upack024027beta028alphaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section
63650498aa92d0d370051ae7b56190d97d76e7d286b10fa52aca85cd5a096ffe	PE32	2022-02-17 22:21:28	User Submission	YRP/WinUpack_v030_beta_By_Dwing_h_additional YRP/Upack_v029_beta_Dwing_additional YRP/ASProtect_v132 YRP/Upack_v029_beta_Dwing [+] YRP/WinUpack_v030_beta_By_Dwing YRP/WinUpack_v030_beta_By_Dwing_h YRP/WinUpack_v030_beta_By_Dwing_ YRP/WinUpack_v030_beta_By_Dwing_additional YRP/WinUpackv030betaByDwing YRP/Upackv029Betav031BetaDwing YRP/Upackv029betaDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section FlorianRoth/DragonFly_APT_Sep17_3
f444b12c9a266291651102ad18b6f1c70da85ac64b0c91f0bfd7eafbfea067c8	PE32	2022-02-17 19:32:59	User Submission	YRP/Upack_024_beta_Dwing YRP/Upack_v024_v028_Alpha_Dwing YRP/Upack_024_027_beta_028_alpha_Dwing_ YRP/Upack_024_027_beta_028_alpha_Dwing [+] YRP/Upack_02x_Dwing YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_02x_beta_Dwing YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_v024_v028alpha_Sign_by_hot_UNP_additional YRP/Upack_v024_v028alpha_Sign_by_hot_UNP YRP/Upack_01x_020_021_024_beta_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upack_024_beta_Dwing_additional YRP/Upackv024v028AlphaDwing YRP/Upackv029Betav031BetaDwing YRP/Upack024027beta028alphaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section
fe677fd98b91930ddeaed1837fa299d90e33bd1afb6db27083489634e4b22972	PE32	2022-02-17 19:21:01	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/Upackv029Betav031BetaDwing YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/inject_thread YRP/create_service YRP/escalate_priv YRP/win_token YRP/win_files_operation YRP/suspicious_packer_section
98e7e81116f63a402f8a19db22caf829e5020c413364353053d6ca6e4e789911	PE32	2022-02-17 18:30:04	User Submission	YRP/Upack_024_beta_Dwing YRP/Upack_v024_v028_Alpha_Dwing YRP/Upack_024_027_beta_028_alpha_Dwing_ YRP/Upack_024_027_beta_028_alpha_Dwing [+] YRP/Upack_02x_Dwing YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_02x_beta_Dwing YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_v024_v028alpha_Sign_by_hot_UNP_additional YRP/Upack_v024_v028alpha_Sign_by_hot_UNP YRP/Upack_01x_020_021_024_beta_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upack_024_beta_Dwing_additional YRP/Upackv024v028AlphaDwing YRP/Upackv029Betav031BetaDwing YRP/Upack024027beta028alphaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section
93ecbe93753de092133b275826c68c53d3f42ea0ef963011cde6b94abb926fef	PE32	2022-02-17 16:39:07	User Submission	YRP/Upack_024_beta_Dwing YRP/Upack_v024_v028_Alpha_Dwing YRP/Upack_024_027_beta_028_alpha_Dwing_ YRP/Upack_024_027_beta_028_alpha_Dwing [+] YRP/Upack_02x_Dwing YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_02x_beta_Dwing YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_v024_v028alpha_Sign_by_hot_UNP_additional YRP/Upack_v024_v028alpha_Sign_by_hot_UNP YRP/Upack_01x_020_021_024_beta_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upack_024_beta_Dwing_additional YRP/Upackv024v028AlphaDwing YRP/Upackv029Betav031BetaDwing YRP/Upack024027beta028alphaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasModified_DOS_Message YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/contentis_base64 YRP/System_Tools YRP/Dropper_Strings YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/Big_Numbers0 YRP/suspicious_packer_section
685438c9a8165756b994478e323918e836860df3747c2a97dfec14331200dea2	PE32	2022-02-17 16:05:21	User Submission	YRP/Upack_024_beta_Dwing YRP/Upack_v024_v028_Alpha_Dwing YRP/Upack_024_027_beta_028_alpha_Dwing_ YRP/Upack_024_027_beta_028_alpha_Dwing [+] YRP/Upack_02x_Dwing YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_02x_beta_Dwing YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_v024_v028alpha_Sign_by_hot_UNP_additional YRP/Upack_v024_v028alpha_Sign_by_hot_UNP YRP/Upack_01x_020_021_024_beta_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upack_024_beta_Dwing_additional YRP/Upackv024v028AlphaDwing YRP/Upackv029Betav031BetaDwing YRP/Upack024027beta028alphaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasModified_DOS_Message YRP/domain YRP/IP YRP/contentis_base64 YRP/android_meterpreter YRP/Tools_scan YRP/suspicious_packer_section FlorianRoth/Tools_scan
c0d4ec584879f46294c9d5f7804d8d0a942e76c3b912452496155a43e3775678	PE32	2022-02-17 15:12:24	User Submission	YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 [+] YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upackv029Betav031BetaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section
449e0903abbe998318585cb5271e6809eacd932468edf9dd6afaa0578f441ead	PE32	2022-02-17 12:11:57	User Submission	YRP/Upack_024_beta_Dwing YRP/Upack_v024_v028_Alpha_Dwing YRP/Upack_024_027_beta_028_alpha_Dwing_ YRP/Upack_024_027_beta_028_alpha_Dwing [+] YRP/Upack_02x_Dwing YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_02x_beta_Dwing YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_v024_v028alpha_Sign_by_hot_UNP_additional YRP/Upack_v024_v028alpha_Sign_by_hot_UNP YRP/Upack_01x_020_021_024_beta_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upack_024_beta_Dwing_additional YRP/Upackv024v028AlphaDwing YRP/Upackv029Betav031BetaDwing YRP/Upack024027beta028alphaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasModified_DOS_Message YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/VM_Generic_Detection YRP/win_mutex YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/suspicious_packer_section
28baca26dd38407a1474207f4be14f8e4f9fd94f3d27acbd83a4068310bc4897	PE32	2022-02-17 08:59:57	User Submission	YRP/WinUpack_v030_beta_By_Dwing_h_additional YRP/ASProtect_v132 YRP/Upack_v031_beta_Dwing YRP/Upack_v031_beta_Dwing_additional [+] YRP/WinUpack_v030_beta_By_Dwing YRP/WinUpack_v030_beta_By_Dwing_h YRP/WinUpack_v030_beta_By_Dwing_ YRP/WinUpack_v030_beta_By_Dwing_additional YRP/WinUpackv030betaByDwing YRP/Upackv031betaDwing YRP/Upackv029Betav031BetaDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section
b95ae1d4e1bd7d8c1a9637e42a93209e637cfab44f70627671d68fda13a46780	PE32	2022-02-17 04:49:38	User Submission	YRP/Upack_024_beta_Dwing YRP/Upack_v024_v028_Alpha_Dwing YRP/Upack_024_027_beta_028_alpha_Dwing_ YRP/Upack_024_027_beta_028_alpha_Dwing [+] YRP/Upack_02x_Dwing YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_02x_beta_Dwing YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_v024_v028alpha_Sign_by_hot_UNP_additional YRP/Upack_v024_v028alpha_Sign_by_hot_UNP YRP/Upack_01x_020_021_024_beta_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upack_024_beta_Dwing_additional YRP/Upackv024v028AlphaDwing YRP/Upackv029Betav031BetaDwing YRP/Upack024027beta028alphaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section
e9b013dc18d35a64e74ccff6819617458a8c1747adc9f7215bee53640c3461fd	PE32	2022-02-17 04:38:49	User Submission	YRP/WinUpack_v030_beta_By_Dwing_h_additional YRP/Upack_v029_beta_Dwing_additional YRP/ASProtect_v132 YRP/Upack_v029_beta_Dwing [+] YRP/WinUpack_v030_beta_By_Dwing YRP/WinUpack_v030_beta_By_Dwing_h YRP/WinUpack_v030_beta_By_Dwing_ YRP/WinUpack_v030_beta_By_Dwing_additional YRP/WinUpackv030betaByDwing YRP/Upackv029Betav031BetaDwing YRP/Upackv029betaDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section FlorianRoth/DragonFly_APT_Sep17_3
49452e0aee54827e04b3e6ca55be32cff319cdaecb80d0b31c0ce36d1579de38	PE32	2022-02-17 03:13:56	User Submission	YRP/Upack_024_beta_Dwing YRP/Upack_v024_v028_Alpha_Dwing YRP/Upack_024_027_beta_028_alpha_Dwing_ YRP/Upack_024_027_beta_028_alpha_Dwing [+] YRP/Upack_02x_Dwing YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_02x_beta_Dwing YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_v024_v028alpha_Sign_by_hot_UNP_additional YRP/Upack_v024_v028alpha_Sign_by_hot_UNP YRP/Upack_01x_020_021_024_beta_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upack_024_beta_Dwing_additional YRP/Upackv024v028AlphaDwing YRP/Upackv029Betav031BetaDwing YRP/Upack024027beta028alphaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section FlorianRoth/DragonFly_APT_Sep17_3
048aba67cdbd60179f11c7c1de6f05a6804282b3bf7a2ae382f47c56209948a1	PE32	2022-02-17 01:00:48	User Submission	YRP/Upack_024_beta_Dwing YRP/Upack_v024_v028_Alpha_Dwing YRP/Upack_024_027_beta_028_alpha_Dwing_ YRP/Upack_024_027_beta_028_alpha_Dwing [+] YRP/Upack_02x_Dwing YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_02x_beta_Dwing YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_v024_v028alpha_Sign_by_hot_UNP_additional YRP/Upack_v024_v028alpha_Sign_by_hot_UNP YRP/Upack_01x_020_021_024_beta_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upack_024_beta_Dwing_additional YRP/Upackv024v028AlphaDwing YRP/Upackv029Betav031BetaDwing YRP/Upack024027beta028alphaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section FlorianRoth/DragonFly_APT_Sep17_3
985ae21e9b7e7a7c45fa786956ebae9455836a81feb5e865ec35b0bdff577c3b	PE32	2022-02-16 23:56:03	User Submission	YRP/WinUpack_v030_beta_By_Dwing_h_additional YRP/ASProtect_v132 YRP/Upack_v031_beta_Dwing YRP/Upack_v031_beta_Dwing_additional [+] YRP/WinUpack_v030_beta_By_Dwing YRP/WinUpack_v030_beta_By_Dwing_h YRP/WinUpack_v030_beta_By_Dwing_ YRP/WinUpack_v030_beta_By_Dwing_additional YRP/WinUpackv030betaByDwing YRP/Upackv031betaDwing YRP/Upackv029Betav031BetaDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section FlorianRoth/DragonFly_APT_Sep17_3
39c09ba1dff3a02cdfa1396c25c83223f8d7ba39c2295d5695dcd83f8634cbc9	PE32	2022-02-16 23:37:30	User Submission	YRP/WinUpack_v030_beta_By_Dwing_h_additional YRP/Upack_v029_beta_Dwing_additional YRP/ASProtect_v132 YRP/Upack_v029_beta_Dwing [+] YRP/WinUpack_v030_beta_By_Dwing YRP/WinUpack_v030_beta_By_Dwing_h YRP/WinUpack_v030_beta_By_Dwing_ YRP/WinUpack_v030_beta_By_Dwing_additional YRP/WinUpackv030betaByDwing YRP/Upackv029Betav031BetaDwing YRP/Upackv029betaDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section FlorianRoth/DragonFly_APT_Sep17_3
342fcd90838ad7affb4cb7b6a2250c2f9c850e2a51f102a05806c2e51b237402	PE32	2022-02-16 23:30:14	User Submission	YRP/Upack_024_beta_Dwing YRP/Upack_v024_v028_Alpha_Dwing YRP/Upack_024_027_beta_028_alpha_Dwing_ YRP/Upack_024_027_beta_028_alpha_Dwing [+] YRP/Upack_02x_Dwing YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_02x_beta_Dwing YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_v024_v028alpha_Sign_by_hot_UNP_additional YRP/Upack_v024_v028alpha_Sign_by_hot_UNP YRP/Upack_01x_020_021_024_beta_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upack_024_beta_Dwing_additional YRP/Upackv024v028AlphaDwing YRP/Upackv029Betav031BetaDwing YRP/Upack024027beta028alphaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section FlorianRoth/DragonFly_APT_Sep17_3
d2c8f0c4d35fd3a52d2386ab02df2eb02028dbdce19a0c57097046419b1bf550	PE32	2022-02-16 19:22:42	User Submission	YRP/Upack_024_beta_Dwing YRP/Upack_v024_v028_Alpha_Dwing YRP/Upack_024_027_beta_028_alpha_Dwing_ YRP/Upack_024_027_beta_028_alpha_Dwing [+] YRP/Upack_02x_Dwing YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_02x_beta_Dwing YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_v024_v028alpha_Sign_by_hot_UNP_additional YRP/Upack_v024_v028alpha_Sign_by_hot_UNP YRP/Upack_01x_020_021_024_beta_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upack_024_beta_Dwing_additional YRP/Upackv024v028AlphaDwing YRP/Upackv029Betav031BetaDwing YRP/Upack024027beta028alphaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section
45863db79ee7e8f0a370f7294356a12a1367dd6b05f25793328fc8a1481676fc	PE32	2022-02-16 15:59:42	User Submission	YRP/Upack_024_beta_Dwing YRP/Upack_v024_v028_Alpha_Dwing YRP/Upack_024_027_beta_028_alpha_Dwing_ YRP/Upack_024_027_beta_028_alpha_Dwing [+] YRP/Upack_02x_Dwing YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_02x_beta_Dwing YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_v024_v028alpha_Sign_by_hot_UNP_additional YRP/Upack_v024_v028alpha_Sign_by_hot_UNP YRP/Upack_01x_020_021_024_beta_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upack_024_beta_Dwing_additional YRP/Upackv024v028AlphaDwing YRP/Upackv029Betav031BetaDwing YRP/Upack024027beta028alphaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/IP YRP/contentis_base64 YRP/suspicious_packer_section FlorianRoth/DragonFly_APT_Sep17_3
8d325aaafda4750adc157a37e1a5569926dda7687df064d4a28907d6a5fc2940	PE32	2022-02-16 15:27:24	User Submission	YRP/WinUpack_v030_beta_By_Dwing_h_additional YRP/Upack_v029_beta_Dwing_additional YRP/ASProtect_v132 YRP/Upack_v029_beta_Dwing [+] YRP/WinUpack_v030_beta_By_Dwing YRP/WinUpack_v030_beta_By_Dwing_h YRP/WinUpack_v030_beta_By_Dwing_ YRP/WinUpack_v030_beta_By_Dwing_additional YRP/WinUpackv030betaByDwing YRP/Upackv029Betav031BetaDwing YRP/Upackv029betaDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section FlorianRoth/DragonFly_APT_Sep17_3
955faecf2c035f588b3bfa0f6264f6ff46109e6900e15ce69f750a0d896508fd	PE32	2022-02-16 13:49:36	User Submission	YRP/Upack_024_beta_Dwing YRP/Upack_v024_v028_Alpha_Dwing YRP/Upack_024_027_beta_028_alpha_Dwing_ YRP/Upack_024_027_beta_028_alpha_Dwing [+] YRP/Upack_02x_Dwing YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_02x_beta_Dwing YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_v024_v028alpha_Sign_by_hot_UNP_additional YRP/Upack_v024_v028alpha_Sign_by_hot_UNP YRP/Upack_01x_020_021_024_beta_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upack_024_beta_Dwing_additional YRP/Upackv024v028AlphaDwing YRP/Upackv029Betav031BetaDwing YRP/Upack024027beta028alphaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/IP YRP/contentis_base64 YRP/suspicious_packer_section FlorianRoth/DragonFly_APT_Sep17_3
8b6d3cbaef5e2e74596e2be2bcd00bb9ceea68b5560b120acf4075ede9cef3ed	PE32	2022-02-16 11:27:40	User Submission	YRP/Upack_024_beta_Dwing YRP/Upack_v024_v028_Alpha_Dwing YRP/Upack_024_027_beta_028_alpha_Dwing_ YRP/Upack_024_027_beta_028_alpha_Dwing [+] YRP/Upack_02x_Dwing YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_02x_beta_Dwing YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_v024_v028alpha_Sign_by_hot_UNP_additional YRP/Upack_v024_v028alpha_Sign_by_hot_UNP YRP/Upack_01x_020_021_024_beta_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upack_024_beta_Dwing_additional YRP/Upackv024v028AlphaDwing YRP/Upackv029Betav031BetaDwing YRP/Upack024027beta028alphaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section
00f37940c2c9f63098cdd3ccb83fcda364f1f78e5db019b5bfe10c085fb536a0	PE32	2022-02-16 08:14:10	User Submission	YRP/Upack_024_beta_Dwing YRP/Upack_v024_v028_Alpha_Dwing YRP/Upack_024_027_beta_028_alpha_Dwing_ YRP/Upack_024_027_beta_028_alpha_Dwing [+] YRP/Upack_02x_Dwing YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_02x_beta_Dwing YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_v024_v028alpha_Sign_by_hot_UNP_additional YRP/Upack_v024_v028alpha_Sign_by_hot_UNP YRP/Upack_01x_020_021_024_beta_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upack_024_beta_Dwing_additional YRP/Upackv024v028AlphaDwing YRP/Upackv029Betav031BetaDwing YRP/Upack024027beta028alphaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasModified_DOS_Message YRP/domain YRP/url YRP/contentis_base64 YRP/suspicious_packer_section FlorianRoth/DragonFly_APT_Sep17_3
9f96fc1171daa5d1588a57af1f4775252561f5bbb9c238c619c8c6298c8b4e41	PE32	2022-02-16 05:37:58	User Submission	YRP/Upack_024_beta_Dwing YRP/Upack_v024_v028_Alpha_Dwing YRP/Upack_024_027_beta_028_alpha_Dwing_ YRP/Upack_024_027_beta_028_alpha_Dwing [+] YRP/Upack_02x_Dwing YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_02x_beta_Dwing YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_v024_v028alpha_Sign_by_hot_UNP_additional YRP/Upack_v024_v028alpha_Sign_by_hot_UNP YRP/Upack_01x_020_021_024_beta_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upack_024_beta_Dwing_additional YRP/Upackv024v028AlphaDwing YRP/Upackv029Betav031BetaDwing YRP/Upack024027beta028alphaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasModified_DOS_Message YRP/domain YRP/IP YRP/contentis_base64 YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/suspicious_packer_section
7b9d3b5bc45d826f85d89a3927d0548810cfb302e05db42ae50d87fc14294e9f	PE32	2022-02-15 20:44:41	User Submission	YRP/WinUpack_v030_beta_By_Dwing_h_additional YRP/Upack_v029_beta_Dwing_additional YRP/ASProtect_v132 YRP/Upack_v029_beta_Dwing [+] YRP/WinUpack_v030_beta_By_Dwing YRP/WinUpack_v030_beta_By_Dwing_h YRP/WinUpack_v030_beta_By_Dwing_ YRP/WinUpack_v030_beta_By_Dwing_additional YRP/WinUpackv030betaByDwing YRP/Upackv029Betav031BetaDwing YRP/Upackv029betaDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section FlorianRoth/DragonFly_APT_Sep17_3
119c89a32759f8a1f03ec11b67739cd5bf457d3113f783536cc53a1efbb38bb4	PE32	2020-06-29 15:37:42	User Submission	YRP/Upack_024_beta_Dwing YRP/Upack_v024_v028_Alpha_Dwing YRP/Upack_024_027_beta_028_alpha_Dwing_ YRP/Upack_024_027_beta_028_alpha_Dwing [+] YRP/Upack_02x_Dwing YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_02x_beta_Dwing YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_v024_v028alpha_Sign_by_hot_UNP_additional YRP/Upack_v024_v028alpha_Sign_by_hot_UNP YRP/Upack_01x_020_021_024_beta_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upack_024_beta_Dwing_additional YRP/Upackv024v028AlphaDwing YRP/Upackv029Betav031BetaDwing YRP/Upack024027beta028alphaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasModified_DOS_Message YRP/domain YRP/url YRP/contentis_base64 YRP/BASE64_table YRP/suspicious_packer_section
1163aaec67b9540db1ca096a55b4b6cf7ab8f88e476cd996758960ce27f6ef14	PE32	2020-06-29 05:01:58	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_40 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 [+] YRP/Microsoft_Visual_Basic_v50_additional YRP/Microsoft_Visual_Basic_v50v60_additional YRP/Upackv029Betav031BetaDwing YRP/PolyCryptPE214b215JLabSoftwareCreationshsigned YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/contentis_base64 YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/SEH__vba YRP/inject_thread YRP/network_smtp_raw YRP/network_tcp_socket YRP/network_dns YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/BASE64_table YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section
1163d84318f3185a50cb189263fb0dd5639d5a56d5960e912ab27f393847c46b	PE32	2020-06-28 22:20:44	User Submission	YRP/Upack_024_beta_Dwing YRP/Upack_v024_v028_Alpha_Dwing YRP/Upack_024_027_beta_028_alpha_Dwing_ YRP/Upack_024_027_beta_028_alpha_Dwing [+] YRP/Upack_02x_Dwing YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_02x_beta_Dwing YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_v024_v028alpha_Sign_by_hot_UNP_additional YRP/Upack_v024_v028alpha_Sign_by_hot_UNP YRP/Upack_01x_020_021_024_beta_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upack_024_beta_Dwing_additional YRP/Upackv024v028AlphaDwing YRP/Upackv029Betav031BetaDwing YRP/Upack024027beta028alphaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section
110697b2a67136a63363d2162f8a44c768ee4a897f81d639d54d7f35023bed02	PE32	2020-06-28 02:30:49	User Submission	YRP/Upack_024_beta_Dwing YRP/Upack_v024_v028_Alpha_Dwing YRP/Upack_024_027_beta_028_alpha_Dwing_ YRP/Upack_024_027_beta_028_alpha_Dwing [+] YRP/Upack_02x_Dwing YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_02x_beta_Dwing YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_v024_v028alpha_Sign_by_hot_UNP_additional YRP/Upack_v024_v028alpha_Sign_by_hot_UNP YRP/Upack_01x_020_021_024_beta_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upack_024_beta_Dwing_additional YRP/Upackv024v028AlphaDwing YRP/Upackv029Betav031BetaDwing YRP/Upack024027beta028alphaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section FlorianRoth/DragonFly_APT_Sep17_3
1101b0e6edbbe2b0e6fcabd3dee13ff05ed12c575c0e20a7f6047aa08827d04d	PE32	2020-06-28 01:18:34	User Submission	YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ [+] YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/Upackv029Betav031BetaDwing YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/borland_delphi_dll YRP/domain YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/ThreadControl__Context YRP/inject_thread YRP/network_tcp_socket YRP/network_dns YRP/keylogger YRP/win_registry YRP/win_files_operation YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Str_Win32_Winsock2_Library
1179469d2f22750e47066ace50149720100a45742737762411f88249a5327ff6	PE32	2020-06-27 19:55:17	User Submission	YRP/Upackv029Betav031BetaDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/IsBeyondImageSize YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section
11752c6170472788137e73edae2f7417ed5bb73d4671e542ece5ac60274ed308	PE32	2020-06-27 18:41:44	User Submission	YRP/Upack_024_beta_Dwing YRP/Upack_v024_v028_Alpha_Dwing YRP/Upack_024_027_beta_028_alpha_Dwing_ YRP/Upack_024_027_beta_028_alpha_Dwing [+] YRP/Upack_02x_Dwing YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_02x_beta_Dwing YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_v024_v028alpha_Sign_by_hot_UNP_additional YRP/Upack_v024_v028alpha_Sign_by_hot_UNP YRP/Upack_01x_020_021_024_beta_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upack_024_beta_Dwing_additional YRP/Upackv024v028AlphaDwing YRP/Upackv029Betav031BetaDwing YRP/Upack024027beta028alphaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasModified_DOS_Message YRP/domain YRP/IP YRP/contentis_base64 YRP/Dropper_Strings YRP/screenshot YRP/win_registry YRP/suspicious_packer_section
11b4e3f91a3b8f567307e1b7145d728e01e1a1f69a7e6803d8db959592b2135e	PE32	2020-06-27 13:32:22	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Upackv029Betav031BetaDwing YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/Dropper_Strings YRP/ThreadControl__Context YRP/inject_thread YRP/win_mutex YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/suspicious_packer_section
113fd78091bac5ab01d656b7d3c4a40089ce39d5f80a3204445ce3aec903c399	PE32	2020-06-27 10:09:40	User Submission	YRP/Upack_024_beta_Dwing YRP/Upack_v024_v028_Alpha_Dwing YRP/Upack_024_027_beta_028_alpha_Dwing_ YRP/Upack_024_027_beta_028_alpha_Dwing [+] YRP/Upack_02x_Dwing YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_02x_beta_Dwing YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_v024_v028alpha_Sign_by_hot_UNP_additional YRP/Upack_v024_v028alpha_Sign_by_hot_UNP YRP/Upack_01x_020_021_024_beta_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upack_024_beta_Dwing_additional YRP/Upackv024v028AlphaDwing YRP/Upackv029Betav031BetaDwing YRP/Upack024027beta028alphaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section
1138bf329e34bfb0ca91288940678764031fd4c6a2e44959451bec8dfa6c6777	PE32	2020-06-27 08:58:18	User Submission	YRP/Upack_024_beta_Dwing YRP/Upack_v024_v028_Alpha_Dwing YRP/Upack_024_027_beta_028_alpha_Dwing_ YRP/Upack_024_027_beta_028_alpha_Dwing [+] YRP/Upack_02x_Dwing YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_02x_beta_Dwing YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_v024_v028alpha_Sign_by_hot_UNP_additional YRP/Upack_v024_v028alpha_Sign_by_hot_UNP YRP/Upack_01x_020_021_024_beta_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upack_024_beta_Dwing_additional YRP/Upackv024v028AlphaDwing YRP/Upackv029Betav031BetaDwing YRP/Upack024027beta028alphaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section
1134eec61c87f6e9cd75c30e589ede76175a8a0a929e06c640d55f027416138c	PE32	2020-06-27 07:20:40	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Upackv029Betav031BetaDwing YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/win_files_operation YRP/suspicious_packer_section
113998eacec6580d19c384c4a67707929c5af3c9fceae254d3b277cd23928b61	PE32	2020-06-27 06:41:21	User Submission	YRP/Upack_024_beta_Dwing YRP/Upack_v024_v028_Alpha_Dwing YRP/Upack_024_027_beta_028_alpha_Dwing_ YRP/Upack_024_027_beta_028_alpha_Dwing [+] YRP/Upack_02x_Dwing YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_02x_beta_Dwing YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_v024_v028alpha_Sign_by_hot_UNP_additional YRP/Upack_v024_v028alpha_Sign_by_hot_UNP YRP/Upack_01x_020_021_024_beta_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upack_024_beta_Dwing_additional YRP/Upackv024v028AlphaDwing YRP/Upackv029Betav031BetaDwing YRP/Upack024027beta028alphaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section
1120acd3a4510243ee035a0bfd1d3c49d171bd5c251188865ee3365da47e969e	PE32	2020-06-27 03:56:13	User Submission	YRP/Upack_024_beta_Dwing YRP/Upack_v024_v028_Alpha_Dwing YRP/Upack_024_027_beta_028_alpha_Dwing_ YRP/Upack_024_027_beta_028_alpha_Dwing [+] YRP/Upack_02x_Dwing YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_02x_beta_Dwing YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_v024_v028alpha_Sign_by_hot_UNP_additional YRP/Upack_v024_v028alpha_Sign_by_hot_UNP YRP/Upack_01x_020_021_024_beta_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upack_024_beta_Dwing_additional YRP/Upackv024v028AlphaDwing YRP/Upackv029Betav031BetaDwing YRP/Upack024027beta028alphaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasModified_DOS_Message YRP/domain YRP/url YRP/contentis_base64 YRP/suspicious_packer_section
112d0c2ee767308b4ea0bc87bf192e6f33c09ea4cdeb2b91d9cad851c720aeda	PE32	2020-06-27 02:38:19	User Submission	YRP/Upack_024_beta_Dwing YRP/Upack_v024_v028_Alpha_Dwing YRP/Upack_024_027_beta_028_alpha_Dwing_ YRP/Upack_024_027_beta_028_alpha_Dwing [+] YRP/Upack_02x_Dwing YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_02x_beta_Dwing YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_v024_v028alpha_Sign_by_hot_UNP_additional YRP/Upack_v024_v028alpha_Sign_by_hot_UNP YRP/Upack_01x_020_021_024_beta_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upack_024_beta_Dwing_additional YRP/Upackv024v028AlphaDwing YRP/Upackv029Betav031BetaDwing YRP/Upack024027beta028alphaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section
11132b013321603d4655db8e60bb1d12bc7dc64920b3beae03b48b844a35ef93	PE32	2020-06-26 18:25:37	User Submission	YRP/Upack_024_beta_Dwing YRP/Upack_v024_v028_Alpha_Dwing YRP/Upack_024_027_beta_028_alpha_Dwing_ YRP/Upack_024_027_beta_028_alpha_Dwing [+] YRP/Upack_02x_Dwing YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_02x_beta_Dwing YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_v024_v028alpha_Sign_by_hot_UNP_additional YRP/Upack_v024_v028alpha_Sign_by_hot_UNP YRP/Upack_01x_020_021_024_beta_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upack_024_beta_Dwing_additional YRP/Upackv024v028AlphaDwing YRP/Upackv029Betav031BetaDwing YRP/Upack024027beta028alphaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section
0b7348d4b2a5b245067e19bc759ebe870ca242c3bb4b5670f960482fccbc2a20	PE32	2020-01-15 15:45:21	User Submission	YRP/WinUpackv030betaByDwing YRP/Upackv029Betav031BetaDwing YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section
b02946ede828cd621cdbbc0062e2501e28e5f9a6806a1b51fcb8a489c3c733ff	PE32	2020-01-15 13:49:19	User Submission	YRP/WinUpack_v030_beta_By_Dwing_h_additional YRP/Upack_v029_beta_Dwing_additional YRP/ASProtect_v132 YRP/Upack_v029_beta_Dwing [+] YRP/WinUpack_v030_beta_By_Dwing YRP/WinUpack_v030_beta_By_Dwing_h YRP/WinUpack_v030_beta_By_Dwing_ YRP/WinUpack_v030_beta_By_Dwing_additional YRP/WinUpackv030betaByDwing YRP/Upackv029Betav031BetaDwing YRP/Upackv029betaDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section FlorianRoth/DragonFly_APT_Sep17_3
cfa321b2364a3d8d2e109b93d225a085a2bfddc3fa2b95ab26164fe221b16a75	PE32	2020-01-15 13:37:02	User Submission	YRP/Upack_024_beta_Dwing YRP/Upack_v024_v028_Alpha_Dwing YRP/Upack_024_027_beta_028_alpha_Dwing_ YRP/Upack_024_027_beta_028_alpha_Dwing [+] YRP/Upack_02x_Dwing YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_02x_beta_Dwing YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_v024_v028alpha_Sign_by_hot_UNP_additional YRP/Upack_v024_v028alpha_Sign_by_hot_UNP YRP/Upack_01x_020_021_024_beta_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upack_024_beta_Dwing_additional YRP/Upackv024v028AlphaDwing YRP/Upackv029Betav031BetaDwing YRP/Upack024027beta028alphaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section FlorianRoth/DragonFly_APT_Sep17_3
52b02c46c978e0cf44ce7d79f5786c288ddaee191022596962fbd93ac67a8693	PE32	2020-01-15 13:36:40	User Submission	YRP/Upack_024_beta_Dwing YRP/Upack_v024_v028_Alpha_Dwing YRP/Upack_024_027_beta_028_alpha_Dwing_ YRP/Upack_024_027_beta_028_alpha_Dwing [+] YRP/Upack_02x_Dwing YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_02x_beta_Dwing YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_v024_v028alpha_Sign_by_hot_UNP_additional YRP/Upack_v024_v028alpha_Sign_by_hot_UNP YRP/Upack_01x_020_021_024_beta_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upack_024_beta_Dwing_additional YRP/Upackv024v028AlphaDwing YRP/Upackv029Betav031BetaDwing YRP/Upack024027beta028alphaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section FlorianRoth/DragonFly_APT_Sep17_3
8a0b12b37b75337adfb4b83802f6e323fc5cab2f2184decca16cb1584815dd4d	PE32	2020-01-15 13:34:35	User Submission	YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ [+] YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/BobSoft_Mini_Delphi_BoB_BobSoft_additional YRP/Borland_Delphi_v60_v70 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/Upackv029Betav031BetaDwing YRP/BobSoftMiniDelphiBoBBobSoft YRP/IsPE32 YRP/IsWindowsGUI YRP/HasModified_DOS_Message YRP/domain YRP/url YRP/contentis_base64 YRP/network_http YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_files_operation YRP/win_hook YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/suspicious_packer_section
cd0b4f0facf1809252b6a0ab5b0f6fc7c6c9441340f368e554894a827779d15d	PE32	2020-01-15 13:09:05	User Submission	YRP/Upack_024_beta_Dwing YRP/Upack_v024_v028_Alpha_Dwing YRP/Upack_024_027_beta_028_alpha_Dwing_ YRP/Upack_024_027_beta_028_alpha_Dwing [+] YRP/Upack_02x_Dwing YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_02x_beta_Dwing YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_v024_v028alpha_Sign_by_hot_UNP_additional YRP/Upack_v024_v028alpha_Sign_by_hot_UNP YRP/Upack_01x_020_021_024_beta_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upack_024_beta_Dwing_additional YRP/Upackv024v028AlphaDwing YRP/Upackv029Betav031BetaDwing YRP/Upack024027beta028alphaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section
6469790b833e8278792a5b3af998ddc686ccf7299e164cd823efbdb50fa0ae75	PE32	2020-01-15 12:58:51	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Microsoft_Visual_Cpp YRP/Upackv029Betav031BetaDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/HasModified_DOS_Message YRP/domain YRP/url YRP/contentis_base64 YRP/Browsers YRP/inject_thread YRP/network_dropper YRP/escalate_priv YRP/win_token YRP/suspicious_packer_section
2cc75192452e4ebeda904cbf26f2d3a1cdd0d0cd32605c55e7a1c73a4238b890	PE32	2020-01-15 12:20:12	User Submission	YRP/ASProtect_v132 YRP/Upackv029Betav031BetaDwing YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64
46de6a83dd2085ec818ad4e3fbf37eeac64e4c9a6bfbd7547a51d8839deab048	PE32	2020-01-15 11:14:07	User Submission	YRP/Upack_024_beta_Dwing YRP/Upack_v024_v028_Alpha_Dwing YRP/Upack_024_027_beta_028_alpha_Dwing_ YRP/Upack_024_027_beta_028_alpha_Dwing [+] YRP/Upack_02x_Dwing YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_02x_beta_Dwing YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_v024_v028alpha_Sign_by_hot_UNP_additional YRP/Upack_v024_v028alpha_Sign_by_hot_UNP YRP/Upack_01x_020_021_024_beta_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upack_024_beta_Dwing_additional YRP/Upackv024v028AlphaDwing YRP/Upackv029Betav031BetaDwing YRP/Upack024027beta028alphaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section FlorianRoth/DragonFly_APT_Sep17_3
55b6b38e6b1339721e3b1f03edd6aacc5cc5a0b6c3839cdbad4ca51524a91c35	PE32	2020-01-15 10:44:45	User Submission	YRP/ASProtect_v132 YRP/Upackv029Betav031BetaDwing YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section
e02eb30537107ffa3714201756c55dcca17134d25e668279339819f5891e3499	PE32	2020-01-15 09:22:47	User Submission	YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 [+] YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upackv029Betav031BetaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section FlorianRoth/DragonFly_APT_Sep17_3
6acbe8413eab448e7dbfbd459473d94f2c6dee2a1f9b593bf3a8dc49d67c6005	PE32	2020-01-15 08:20:27	User Submission	YRP/Upack_024_beta_Dwing YRP/Upack_v024_v028_Alpha_Dwing YRP/Upack_024_027_beta_028_alpha_Dwing_ YRP/Upack_024_027_beta_028_alpha_Dwing [+] YRP/Upack_02x_Dwing YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_02x_beta_Dwing YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_v024_v028alpha_Sign_by_hot_UNP_additional YRP/Upack_v024_v028alpha_Sign_by_hot_UNP YRP/Upack_01x_020_021_024_beta_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upack_024_beta_Dwing_additional YRP/Upackv024v028AlphaDwing YRP/Upackv029Betav031BetaDwing YRP/Upack024027beta028alphaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section FlorianRoth/DragonFly_APT_Sep17_3
d40b2e86f08226a0264d2ff3d621c9c46a5f6dcc61ccb1d2215f7bc69fa01ae4	PE32	2020-01-13 21:35:00	User Submission	YRP/Upack_024_beta_Dwing YRP/Upack_v024_v028_Alpha_Dwing YRP/Upack_024_027_beta_028_alpha_Dwing_ YRP/Upack_024_027_beta_028_alpha_Dwing [+] YRP/Upack_02x_Dwing YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_02x_beta_Dwing YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_v024_v028alpha_Sign_by_hot_UNP_additional YRP/Upack_v024_v028alpha_Sign_by_hot_UNP YRP/Upack_01x_020_021_024_beta_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upack_024_beta_Dwing_additional YRP/Upackv024v028AlphaDwing YRP/Upackv029Betav031BetaDwing YRP/Upack024027beta028alphaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/win_mutex YRP/BASE64_table YRP/suspicious_packer_section
675829fe806db7ba780203177904bffc7a0b21259622a8701a8cc18179b605a8	PE32	2020-01-13 21:34:55	User Submission	YRP/Upack_024_beta_Dwing YRP/Upack_v024_v028_Alpha_Dwing YRP/Upack_024_027_beta_028_alpha_Dwing_ YRP/Upack_024_027_beta_028_alpha_Dwing [+] YRP/Upack_02x_Dwing YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_02x_beta_Dwing YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_v024_v028alpha_Sign_by_hot_UNP_additional YRP/Upack_v024_v028alpha_Sign_by_hot_UNP YRP/Upack_01x_020_021_024_beta_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upack_024_beta_Dwing_additional YRP/Upackv024v028AlphaDwing YRP/Upackv029Betav031BetaDwing YRP/Upack024027beta028alphaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasModified_DOS_Message YRP/domain YRP/IP YRP/contentis_base64 YRP/win_registry YRP/UPX YRP/suspicious_packer_section
3b066b527bc41aa4047edad51254901326def9784b31ade41c2109c86717309c	PE32	2020-01-13 21:34:31	User Submission	YRP/Upack_024_beta_Dwing YRP/Upack_v024_v028_Alpha_Dwing YRP/Upack_024_027_beta_028_alpha_Dwing_ YRP/Upack_024_027_beta_028_alpha_Dwing [+] YRP/Upack_02x_Dwing YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_02x_beta_Dwing YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_v024_v028alpha_Sign_by_hot_UNP_additional YRP/Upack_v024_v028alpha_Sign_by_hot_UNP YRP/Upack_01x_020_021_024_beta_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upack_024_beta_Dwing_additional YRP/Upackv024v028AlphaDwing YRP/Upackv029Betav031BetaDwing YRP/Upack024027beta028alphaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section FlorianRoth/DragonFly_APT_Sep17_3
ac30ff9d0183a090efd9f10f2cfa7cbc0ea23685b0e73e94b331340f03430107	PE32	2020-01-13 21:34:24	User Submission	YRP/Upack_024_beta_Dwing YRP/Upack_v024_v028_Alpha_Dwing YRP/Upack_024_027_beta_028_alpha_Dwing_ YRP/Upack_024_027_beta_028_alpha_Dwing [+] YRP/Upack_02x_Dwing YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_02x_beta_Dwing YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_v024_v028alpha_Sign_by_hot_UNP_additional YRP/Upack_v024_v028alpha_Sign_by_hot_UNP YRP/Upack_01x_020_021_024_beta_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upack_024_beta_Dwing_additional YRP/Upackv024v028AlphaDwing YRP/Upackv029Betav031BetaDwing YRP/Upack024027beta028alphaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section FlorianRoth/DragonFly_APT_Sep17_3
c046ec2ed65d0861c264427f6e6d45fd49d3bbd855905cfd4885b902aebedffc	PE32	2020-01-13 21:23:54	User Submission	YRP/PESpin_v11_Cyberbob YRP/PESpin_03_cyberbob YRP/PESpin_0b_01_CyberBob YRP/PESpin_v11_Cyberbob_h [+] YRP/PESpin_11_Cyberbob_h YRP/PESpin_v11_Cyberbob_ YRP/PESpin_v11_by_cyberbob_additional YRP/PESpin_V11_cyberbobnbsp_nbsp_SignByfly_20080311 YRP/FSG_v110_Eng_dulekxt_Microsoft_Visual_Cpp_70 YRP/PESpin_V11_cyberbob YRP/FSG_v110_Eng_dulekxt_ YRP/PESPin_13_Cyberbob_h_additional YRP/PESpin_V11_cyberbob_additional YRP/PESpin_v11_Cyberbob_h_additional YRP/PESpin_V071_cyberbob_additional YRP/PESpin_V11_cyberbob_20080311 YRP/PE_Spin_v04x YRP/PESpin_v11_by_cyberbob YRP/WinUpackv030betaByDwing YRP/PESpinv04x YRP/PESpinV11cyberbob YRP/Upackv029Betav031BetaDwing YRP/PESpinv11Cyberbob YRP/mew_11_xx YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section
48fb159b5327998e613627fd4d17d20182bdda53cbac28916bc024a786251b1a	PE32	2020-01-13 20:03:31	User Submission	YRP/Upack_024_beta_Dwing YRP/Upack_v024_v028_Alpha_Dwing YRP/Upack_024_027_beta_028_alpha_Dwing_ YRP/Upack_024_027_beta_028_alpha_Dwing [+] YRP/Upack_02x_Dwing YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_02x_beta_Dwing YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_v024_v028alpha_Sign_by_hot_UNP_additional YRP/Upack_v024_v028alpha_Sign_by_hot_UNP YRP/Upack_01x_020_021_024_beta_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upack_024_beta_Dwing_additional YRP/Upackv024v028AlphaDwing YRP/Upackv029Betav031BetaDwing YRP/Upack024027beta028alphaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section FlorianRoth/DragonFly_APT_Sep17_3
088f61926e5aeccf13de52c2fc22c536d86ce20c75b33cf872f8fdd1381d37f4	PE32	2020-01-13 16:10:13	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/Upackv029Betav031BetaDwing YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/Dropper_Strings YRP/ThreadControl__Context YRP/inject_thread YRP/win_mutex YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/suspicious_packer_section
f5f141d0af50a2b1c978483b84aef36072a69b11db1321d4400323e78d56dc95	PE32	2020-01-13 16:01:42	User Submission	YRP/Upack_024_beta_Dwing YRP/Upack_v024_v028_Alpha_Dwing YRP/Upack_024_027_beta_028_alpha_Dwing_ YRP/Upack_024_027_beta_028_alpha_Dwing [+] YRP/Upack_02x_Dwing YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_02x_beta_Dwing YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_v024_v028alpha_Sign_by_hot_UNP_additional YRP/Upack_v024_v028alpha_Sign_by_hot_UNP YRP/Upack_01x_020_021_024_beta_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upack_024_beta_Dwing_additional YRP/Upackv024v028AlphaDwing YRP/Upackv029Betav031BetaDwing YRP/Upack024027beta028alphaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section FlorianRoth/DragonFly_APT_Sep17_3
7a9dbb50c9a6da3a4c36ee2c651e545d072b91d6565b4ef6bdf054b058eae611	PE32	2020-01-13 16:01:08	User Submission	YRP/Upack_024_beta_Dwing YRP/Upack_v024_v028_Alpha_Dwing YRP/Upack_024_027_beta_028_alpha_Dwing_ YRP/Upack_024_027_beta_028_alpha_Dwing [+] YRP/Upack_02x_Dwing YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_02x_beta_Dwing YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_v024_v028alpha_Sign_by_hot_UNP_additional YRP/Upack_v024_v028alpha_Sign_by_hot_UNP YRP/Upack_01x_020_021_024_beta_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upack_024_beta_Dwing_additional YRP/Upackv024v028AlphaDwing YRP/Upackv029Betav031BetaDwing YRP/Upack024027beta028alphaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section FlorianRoth/DragonFly_APT_Sep17_3
8e73aaaf169c8ee501d8f17f20f270113d6b1a9248c0fd149f23e19bc2f025d8	PE32	2020-01-13 16:00:28	User Submission	YRP/Upack_024_beta_Dwing YRP/Upack_v024_v028_Alpha_Dwing YRP/Upack_024_027_beta_028_alpha_Dwing_ YRP/Upack_024_027_beta_028_alpha_Dwing [+] YRP/Upack_02x_Dwing YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_02x_beta_Dwing YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_v024_v028alpha_Sign_by_hot_UNP_additional YRP/Upack_v024_v028alpha_Sign_by_hot_UNP YRP/Upack_01x_020_021_024_beta_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upack_024_beta_Dwing_additional YRP/Upackv024v028AlphaDwing YRP/Upackv029Betav031BetaDwing YRP/Upack024027beta028alphaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section FlorianRoth/DragonFly_APT_Sep17_3
a7a6cdda1cf681d13dbce84af600ef658fd108747e7a8e596b389bbe74b92b73	PE32	2020-01-13 16:00:22	User Submission	YRP/Upack_024_beta_Dwing YRP/Upack_v024_v028_Alpha_Dwing YRP/Upack_024_027_beta_028_alpha_Dwing_ YRP/Upack_024_027_beta_028_alpha_Dwing [+] YRP/Upack_02x_Dwing YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_02x_beta_Dwing YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_v024_v028alpha_Sign_by_hot_UNP_additional YRP/Upack_v024_v028alpha_Sign_by_hot_UNP YRP/Upack_01x_020_021_024_beta_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upack_024_beta_Dwing_additional YRP/Upackv024v028AlphaDwing YRP/Upackv029Betav031BetaDwing YRP/Upack024027beta028alphaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section FlorianRoth/DragonFly_APT_Sep17_3
b898593f3412512ffb48121b2a59934afaf79598001cd9c88dc073eab3587d1c	PE32	2020-01-13 15:59:47	User Submission	YRP/Upack_024_beta_Dwing YRP/Upack_v024_v028_Alpha_Dwing YRP/Upack_024_027_beta_028_alpha_Dwing_ YRP/Upack_024_027_beta_028_alpha_Dwing [+] YRP/Upack_02x_Dwing YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_02x_beta_Dwing YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_v024_v028alpha_Sign_by_hot_UNP_additional YRP/Upack_v024_v028alpha_Sign_by_hot_UNP YRP/Upack_01x_020_021_024_beta_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upack_024_beta_Dwing_additional YRP/Upackv024v028AlphaDwing YRP/Upackv029Betav031BetaDwing YRP/Upack024027beta028alphaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section
1feef6985e98c504a3b67cbf1ac82d65e1f36e27305544b7d651f637d961f252	PE32	2020-01-13 15:58:25	User Submission	YRP/Upack_024_beta_Dwing YRP/Upack_v024_v028_Alpha_Dwing YRP/Upack_024_027_beta_028_alpha_Dwing_ YRP/Upack_024_027_beta_028_alpha_Dwing [+] YRP/Upack_02x_Dwing YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_02x_beta_Dwing YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_v024_v028alpha_Sign_by_hot_UNP_additional YRP/Upack_v024_v028alpha_Sign_by_hot_UNP YRP/Upack_01x_020_021_024_beta_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upack_024_beta_Dwing_additional YRP/Upackv024v028AlphaDwing YRP/Upackv029Betav031BetaDwing YRP/Upack024027beta028alphaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section FlorianRoth/DragonFly_APT_Sep17_3
fac44131f32c79b2e7d6cd519be43dcd3618543f72ea33d7df9cd6123539b228	PE32	2020-01-13 15:55:49	User Submission	YRP/Upack_024_beta_Dwing YRP/Upack_v024_v028_Alpha_Dwing YRP/Upack_024_027_beta_028_alpha_Dwing_ YRP/Upack_024_027_beta_028_alpha_Dwing [+] YRP/Upack_02x_Dwing YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_02x_beta_Dwing YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_v024_v028alpha_Sign_by_hot_UNP_additional YRP/Upack_v024_v028alpha_Sign_by_hot_UNP YRP/Upack_01x_020_021_024_beta_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upack_024_beta_Dwing_additional YRP/Upackv024v028AlphaDwing YRP/Upackv029Betav031BetaDwing YRP/Upack024027beta028alphaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section
e9d9648a768e34ce327705a4d39461e403a59cfc887ad036031f387a3018524a	PE32	2020-01-13 15:00:01	User Submission	YRP/WinUpack_v030_beta_By_Dwing_h_additional YRP/Upack_v029_beta_Dwing_additional YRP/ASProtect_v132 YRP/Upack_v029_beta_Dwing [+] YRP/WinUpack_v030_beta_By_Dwing YRP/WinUpack_v030_beta_By_Dwing_h YRP/WinUpack_v030_beta_By_Dwing_ YRP/WinUpack_v030_beta_By_Dwing_additional YRP/WinUpackv030betaByDwing YRP/Upackv029Betav031BetaDwing YRP/Upackv029betaDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section FlorianRoth/DragonFly_APT_Sep17_3
a824c710cf048baead90edea28e98bbb052c3c58d68c0c8aa5be33058a560ffb	PE32	2020-01-13 14:15:02	User Submission	YRP/WinUpack_v030_beta_By_Dwing_h_additional YRP/ASProtect_v132 YRP/Upack_v031_beta_Dwing YRP/Upack_v031_beta_Dwing_additional [+] YRP/WinUpack_v030_beta_By_Dwing YRP/WinUpack_v030_beta_By_Dwing_h YRP/WinUpack_v030_beta_By_Dwing_ YRP/WinUpack_v030_beta_By_Dwing_additional YRP/WinUpackv030betaByDwing YRP/Upackv031betaDwing YRP/Upackv029Betav031BetaDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section FlorianRoth/DragonFly_APT_Sep17_3
57d1ba202195ae8227afa681c724a65c51b263376fc763db031959af5da583fe	PE32	2020-01-13 13:24:57	User Submission	YRP/WinUpack_v030_beta_By_Dwing_h_additional YRP/ASProtect_v132 YRP/Upack_v031_beta_Dwing YRP/Upack_v031_beta_Dwing_additional [+] YRP/WinUpack_v030_beta_By_Dwing YRP/WinUpack_v030_beta_By_Dwing_h YRP/WinUpack_v030_beta_By_Dwing_ YRP/WinUpack_v030_beta_By_Dwing_additional YRP/WinUpackv030betaByDwing YRP/Upackv031betaDwing YRP/Upackv029Betav031BetaDwing YRP/ProtectSharewareV11eCompservCMS YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section
86618823e7329191731634adcfed313cee19806bb106b0563b7fbbfaddd77b43	PE32	2020-01-13 12:40:11	User Submission	YRP/WinUpack_v030_beta_By_Dwing_h_additional YRP/Upack_v029_beta_Dwing_additional YRP/ASProtect_v132 YRP/Upack_v029_beta_Dwing [+] YRP/WinUpack_v030_beta_By_Dwing YRP/WinUpack_v030_beta_By_Dwing_h YRP/WinUpack_v030_beta_By_Dwing_ YRP/WinUpack_v030_beta_By_Dwing_additional YRP/WinUpackv030betaByDwing YRP/Upackv029Betav031BetaDwing YRP/Upackv029betaDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section FlorianRoth/DragonFly_APT_Sep17_3

Recent Searches
yrp/upackv029betav031betadwing
yrp/combos_apt1
yrp/sysocmgr
yrp/_pseudosigner_02_borland_cpp_dll_method_2_anorganix
yrp/crc32_table
yrp/pestuboepv1x
yrp/marcher1
yrp/debuggerexception__setconsolectrl
yrp/armadillo_v4x
yrp/ispacked

Search

Recent Searches