MalShare

SHA256 Hash	File type	Added	Source	Yara Hits
dff0bf7c85f01cf94f21c7bdd224fe0b3d73dcad9cb38fa40eef4685c9bc63ab	PE32	2022-03-20 14:36:34	User Submission	YRP/possible_includes_base64_packed_functions YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional [+] YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/win_files_operation YRP/CRC32b_poly_Constant YRP/MD5_Constants YRP/RijnDael_AES_CHAR YRP/RijnDael_AES_LONG YRP/BASE64_table YRP/VC6_Random
d0ab0ec64ef0580b7f2eb96d6c8445a0997427a7b98d29629c7d5cc0c924f222	PE32	2022-03-14 05:07:08	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/win_files_operation YRP/VC6_Random
e553cd52869e3b567b93b2bf342007fff35c58a7f1a50fd45620257f364a80bf	PE32	2022-03-06 02:58:24	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/disable_antivirus YRP/escalate_priv YRP/screenshot YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/CRC32_poly_Constant YRP/CRC32_table YRP/VC6_Random
c33beaba130f8b740dddb9980fe9012f9322ac6e94f36a6aa6086851c51b98de	PE32	2022-02-28 11:02:16	User Submission	YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay [+] YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/screenshot YRP/win_registry YRP/VC6_Random
1535e2199756cb854d6a72d1c339b967c8b54be16298634173cbac684b4c5a13	PE32	2022-02-25 00:26:11	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/screenshot YRP/keylogger YRP/win_private_profile YRP/win_files_operation YRP/BLOWFISH_Constants YRP/VC6_Random
1d0a79c0f53145db25d3e380707e6d190cc9e7b73ed02f0084a57e3307ce7214	PE32	2022-02-24 20:13:47	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Installer_VISE_Custom_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional [+] YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Installer_VISE_Custom YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Browsers YRP/Dropper_Strings YRP/DebuggerException__SetConsoleCtrl YRP/anti_dbg YRP/escalate_priv YRP/win_registry YRP/win_token YRP/win_files_operation YRP/VC6_Random YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section
3b08e59262b56d7aeeff408a1c4161df3188c296ae8ff3d0eefc5eb57e7eb024	PE32	2022-02-24 17:18:41	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Installer_VISE_Custom_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional [+] YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Installer_VISE_Custom YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Browsers YRP/Dropper_Strings YRP/DebuggerException__SetConsoleCtrl YRP/anti_dbg YRP/escalate_priv YRP/win_registry YRP/win_token YRP/win_files_operation YRP/VC6_Random YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section
49e0d0f761777fdead9b75c980956f0d76687471823c7eb0b3d534f836d88ec6	PE32	2022-02-24 14:28:06	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Installer_VISE_Custom_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional [+] YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Installer_VISE_Custom YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Browsers YRP/Antivirus YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/DebuggerCheck__QueryInfo YRP/anti_dbg YRP/network_tcp_socket YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers0 YRP/Big_Numbers1 YRP/MD5_Constants YRP/VC6_Random YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section
15b2aac326dfe7bd64fb17dc273966b0404fe26c69c7b65d2e7a8f6fd5821f30	PE32	2022-02-24 12:10:26	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Installer_VISE_Custom_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional [+] YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Installer_VISE_Custom YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/network_tcp_socket YRP/network_dns YRP/win_mutex YRP/win_files_operation YRP/Big_Numbers1 YRP/Big_Numbers3 YRP/VC6_Random YRP/Str_Win32_Winsock2_Library
2092296018bdcf16fbbcfbc80271aed07037f54bab605b12715933136ad08dce	PE32	2022-02-24 04:34:14	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Installer_VISE_Custom_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional [+] YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Installer_VISE_Custom YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/network_tcp_socket YRP/network_dns YRP/win_mutex YRP/win_files_operation YRP/Big_Numbers3 YRP/VC6_Random YRP/Str_Win32_Winsock2_Library
11c61996796523b27d7e811d0a7d29a5eeba69574f0fc27df25d8903f021b6da	PE32	2022-02-24 00:34:22	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Installer_VISE_Custom_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional [+] YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Installer_VISE_Custom YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/Antivirus YRP/network_tcp_socket YRP/network_dns YRP/win_mutex YRP/win_files_operation YRP/Big_Numbers1 YRP/Big_Numbers3 YRP/VC6_Random YRP/Str_Win32_Winsock2_Library
bd53c54f33b5dccaf300c9dd244a57c3e3b0137b6b58a80ab2398160c888df71	PE32	2022-02-23 18:25:01	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Installer_VISE_Custom_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional [+] YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Installer_VISE_Custom YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Browsers YRP/Dropper_Strings YRP/escalate_priv YRP/win_registry YRP/win_token YRP/win_files_operation YRP/VC6_Random YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section
5102617904344caaf757ba7fe5b9b5eb04b571e3b3662ecea96cd3ba06018334	PE32	2022-02-23 17:27:33	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Installer_VISE_Custom_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional [+] YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Installer_VISE_Custom YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Browsers YRP/Antivirus YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/DebuggerCheck__QueryInfo YRP/anti_dbg YRP/network_tcp_socket YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers0 YRP/Big_Numbers1 YRP/MD5_Constants YRP/VC6_Random YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section
57c12e552c3007d0bcaea25a779e37cd0d2e4830417131791389616416cbeeb4	PE32	2022-02-23 16:59:50	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Installer_VISE_Custom_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional [+] YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Installer_VISE_Custom YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Browsers YRP/Dropper_Strings YRP/escalate_priv YRP/keylogger YRP/win_registry YRP/win_token YRP/win_files_operation YRP/CRC32_poly_Constant YRP/VC6_Random YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section
24c84d11baee766d2caafc2d07ca1b37e14eb0e763f20104eb050592847790d8	PE32	2022-02-23 16:40:25	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Installer_VISE_Custom_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional [+] YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Installer_VISE_Custom YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/network_tcp_socket YRP/network_dns YRP/win_mutex YRP/win_files_operation YRP/Big_Numbers1 YRP/Big_Numbers3 YRP/VC6_Random YRP/Str_Win32_Winsock2_Library
2035cd1aca5c32b7e04978469ec871e5a942ccbc08ba873c6016a59b1fea3171	PE32	2022-02-23 12:56:48	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Installer_VISE_Custom_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional [+] YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Installer_VISE_Custom YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/network_tcp_socket YRP/network_dns YRP/win_mutex YRP/win_files_operation YRP/Big_Numbers1 YRP/Big_Numbers3 YRP/VC6_Random YRP/Str_Win32_Winsock2_Library
846efecbbde8c8e6b069ce80a19beadfc192c5f8ba9e18057a0ea538ab872f5d	PE32	2022-02-23 08:26:51	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/win_files_operation YRP/VC6_Random
7e3c8ad7ab07ea836569db58d5d0b83e62b038db72d7dd836e18fcba913e3ea5	PE32	2022-02-23 02:50:33	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/win_files_operation YRP/VC6_Random
e43446b77d3786dcd22c0f9d5121326c2fa692e233cfa07099f98b987be21170	PE32	2022-02-22 22:32:03	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Installer_VISE_Custom_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional [+] YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Installer_VISE_Custom YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Browsers YRP/Dropper_Strings YRP/DebuggerException__SetConsoleCtrl YRP/anti_dbg YRP/escalate_priv YRP/win_registry YRP/win_token YRP/win_files_operation YRP/VC6_Random YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section
8cc955d8a021b13f92fdaa5e5e363f646220b1fc2d3e44a46bc5891cb1c74549	PE32	2022-02-22 21:30:05	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Installer_VISE_Custom_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional [+] YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Installer_VISE_Custom YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Browsers YRP/Dropper_Strings YRP/DebuggerException__SetConsoleCtrl YRP/anti_dbg YRP/escalate_priv YRP/win_registry YRP/win_token YRP/win_files_operation YRP/VC6_Random YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section
d8c08f268baa9dc7e1f5901e04778d742aad706e0e2952d8812dde143f00d4e4	PE32	2022-02-22 20:48:45	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/win_files_operation YRP/VC6_Random
fad4dea08ed4d063b6f1fa856d381e39ac799d8a2678fb3b81a48c58108890dc	PE32	2022-02-22 19:55:07	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/hijack_network YRP/screenshot YRP/win_registry YRP/win_files_operation YRP/CRC32_poly_Constant YRP/BLOWFISH_Constants YRP/VC6_Random YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API
2d90ce2e746c998cfe9e7d308c43872bb72a2bd0564d9302012d21070ca5f6f0	PE32	2022-02-22 16:55:57	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/screenshot YRP/win_registry YRP/win_files_operation YRP/Big_Numbers0 YRP/Big_Numbers1 YRP/Big_Numbers2 YRP/VC6_Random
03c7cf5d6aafaf3c25a8d9a3bfef68039f508dee23b3aa06c9408e2b4f11c960	PE32	2022-02-22 16:19:20	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Installer_VISE_Custom_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional [+] YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Installer_VISE_Custom YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/System_Tools YRP/network_tcp_socket YRP/network_dns YRP/win_mutex YRP/win_files_operation YRP/Big_Numbers1 YRP/Big_Numbers3 YRP/VC6_Random YRP/Str_Win32_Winsock2_Library
83f3c1cfc965ea8ab76a916fa0d8edd5dbec054e2707fe6ae03d1dfc274065d0	PE32	2022-02-22 14:38:40	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Installer_VISE_Custom_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional [+] YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Installer_VISE_Custom YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/maldoc_find_kernel32_base_method_1 YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Browsers YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/DebuggerException__SetConsoleCtrl YRP/anti_dbg YRP/escalate_priv YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Big_Numbers0 YRP/CRC32_poly_Constant YRP/CRC32_table YRP/VC6_Random YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section
9fc1ec60ec8c01d653e7ec56c58c703a2c7fc126f0c1c3eb65b7d06b86f4593d	PE32	2022-02-22 14:12:53	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Installer_VISE_Custom_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional [+] YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Installer_VISE_Custom YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/network_tcp_socket YRP/network_dns YRP/win_mutex YRP/win_files_operation YRP/Big_Numbers1 YRP/Big_Numbers3 YRP/VC6_Random YRP/Str_Win32_Winsock2_Library
fd76fd597e26215cb31b0319352f92d87908034506c4e0b631df49d3795813d3	PE32	2022-02-22 11:03:47	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/hijack_network YRP/screenshot YRP/win_registry YRP/win_files_operation YRP/CRC32_poly_Constant YRP/BLOWFISH_Constants YRP/VC6_Random YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API
0391bf505abdca53bcb1134502302cde85576a9fb15e90f01329d87bdeaf0c57	PE32	2022-02-22 09:11:09	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Installer_VISE_Custom_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional [+] YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Installer_VISE_Custom YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/Antivirus YRP/network_tcp_socket YRP/network_dns YRP/win_mutex YRP/win_files_operation YRP/Big_Numbers1 YRP/Big_Numbers3 YRP/VC6_Random YRP/Str_Win32_Winsock2_Library
5d46b98fcf939827800c531f1d5d529983df02e564de374d9d01f862ba13c2a2	PE32	2022-02-22 06:35:21	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Installer_VISE_Custom_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional [+] YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Installer_VISE_Custom YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Browsers YRP/Dropper_Strings YRP/escalate_priv YRP/keylogger YRP/win_registry YRP/win_token YRP/win_files_operation YRP/CRC32_poly_Constant YRP/VC6_Random YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section
41220549274428abee7267d72987c00f3d970518cce8d47ee5c82d148bf44ae3	PE32	2022-02-21 22:22:43	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/network_smtp_raw YRP/escalate_priv YRP/win_registry YRP/win_token YRP/win_files_operation YRP/VC6_Random YRP/Str_Win32_Winsock2_Library
82379c6a61d0409c33986176f7eb2b7aaf3b05086f571decde67e6fa1927750d	PE32	2022-02-21 22:16:57	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/VIRUS_I_WormKLEZ YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional [+] YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/VIRUS_I_WormKLEZ_additional YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/VIRUSIWormKLEZ YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/network_smtp_raw YRP/escalate_priv YRP/win_registry YRP/win_token YRP/win_files_operation YRP/VC6_Random YRP/Str_Win32_Winsock2_Library
5e77eee9704e619b68e37829c5f2099c52d22b170087c9953cbcabd7a21500ba	PE32	2022-02-21 19:31:40	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsConsole YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/DebuggerException__SetConsoleCtrl YRP/network_tcp_socket YRP/win_files_operation YRP/VC6_Random YRP/Str_Win32_Winsock2_Library
27fef6c50b802c440a95695cb1acbcefa5fd30b54f53b205bdacaee00fab4ee9	PE32	2022-02-19 14:31:55	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Antivirus YRP/Dropper_Strings YRP/Obfuscated_Strings YRP/Misc_Suspicious_Strings YRP/DebuggerException__ConsoleCtrl YRP/DebuggerException__SetConsoleCtrl YRP/network_udp_sock YRP/network_tcp_listen YRP/network_irc YRP/network_http YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/spreading_share YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/CRC32_poly_Constant YRP/CRC32_table YRP/VC6_Random YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API
390e75d970543f6ddac4eab7b133db1de383f3c3bde95017f96ebfd404ca33ef	PE32	2022-02-19 13:06:35	User Submission	YRP/Microsoft_Visual_Basic_v50 YRP/PureBasic_4x_Neil_Hodgson_additional YRP/PureBasic_4x_Neil_Hodgson YRP/UPXv20MarkusLaszloReiser [+] YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/UPX20030XMarkusOberhumerLaszloMolnarJohnReiser YRP/PureBasic4xNeilHodgson YRP/IsPE32 YRP/IsWindowsGUI YRP/PureBasic YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_ssl YRP/escalate_priv YRP/keylogger YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Advapi_Hash_API YRP/CRC32_poly_Constant YRP/CRC32_table YRP/MD5_Constants YRP/BASE64_table YRP/VC6_Random YRP/Str_Win32_Winsock2_Library YRP/UPX YRP/suspicious_packer_section
7a3f9608d4a4d1fe15bc1ba1c7ab9d5041552a4c4574f60d9d112891527ebff4	PE32	2022-02-19 12:49:18	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/VM_Generic_Detection YRP/Dropper_Strings YRP/network_irc YRP/network_dropper YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/VC6_Random YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API
3465a02112fc887de260e6b4910dd6f1c4de9f4031358a068d002a67667052d8	PE32	2022-02-19 09:07:42	User Submission	YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasModified_DOS_Message [+] YRP/maldoc_find_kernel32_base_method_1 YRP/domain YRP/contentis_base64 YRP/escalate_priv YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/VC6_Random
4f459de6d033db5d52278585d15f01dc612d80fc021c6ac94fb02cdc6c6d5009	PE32	2022-02-18 06:00:53	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsConsole YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/win_files_operation YRP/VC6_Random
44b2847eecabb55f353d1a8239bbaf0a5ec1bce95f559b55b53504a66c641b7c	PE32	2022-02-18 04:43:03	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Installer_VISE_Custom_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional [+] YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Installer_VISE_Custom YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/win_files_operation YRP/VC6_Random YRP/Str_Win32_Winsock2_Library FlorianRoth/DragonFly_APT_Sep17_3
0139c6e539184802eeb7b20d3f2cd6048e64e6d1a6d308cc592bd6ca09f063f5	PE32	2022-02-18 03:58:27	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/maldoc_getEIP_method_4 YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Dropper_Strings YRP/Obfuscated_Strings YRP/Misc_Suspicious_Strings YRP/network_udp_sock YRP/network_tcp_listen YRP/network_smtp_raw YRP/network_irc YRP/network_http YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/spreading_share YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/android_meterpreter YRP/Big_Numbers1 YRP/CRC32_poly_Constant YRP/CRC32_table YRP/BASE64_table YRP/VC6_Random YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API
0b98e9b22f0515b69e808d0241282920b862b48854e04de88c77aa49489314c2	PE32	2022-02-18 00:42:14	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/IsBeyondImageSize YRP/HasRichSignature YRP/domain YRP/VC6_Random FlorianRoth/DragonFly_APT_Sep17_3
fcfcbef0c3c8fe38a894e3c83fe4b46b58fc0611165e8ad0b8c44ca7653785bd	PE32	2022-02-18 00:10:47	User Submission	CuckooSandbox/vmdetect YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional [+] YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/VMWare_Detection YRP/Misc_Suspicious_Strings YRP/vmdetect YRP/network_tcp_socket YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Big_Numbers1 YRP/CRC32_poly_Constant YRP/MD5_Constants YRP/DES_sbox YRP/VC6_Random YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API
38879b6bdc989ae06a904c3bba21a120af9fee071e65300098c85b964e04e7cd	PE32	2022-02-17 23:47:44	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/IsBeyondImageSize YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/Dropper_Strings YRP/screenshot YRP/win_registry YRP/win_files_operation YRP/Big_Numbers0 YRP/VC6_Random YRP/Str_Win32_Winsock2_Library
43fd307fd5bd69fbc44775236e680ffe2cd7e1bd2ded303206365c4e16940820	PE32	2022-02-17 22:48:13	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsConsole YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_ssl YRP/win_files_operation YRP/VC6_Random YRP/Str_Win32_Winsock2_Library YRP/Dos_NC
b8b32c052e5827e8c8455766157c265ef86f947eb512c96ed4b9a258915aa0e1	PE32	2022-02-17 22:24:58	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/VM_Generic_Detection YRP/Dropper_Strings YRP/network_irc YRP/network_dropper YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/VC6_Random YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API
f862ead5269c7964eff2eef137bdb8ff534c15a2c337736f0f6c659c7e3f251d	PE32	2022-02-17 21:36:52	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsConsole YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/VC6_Random YRP/Str_Win32_Winsock2_Library FlorianRoth/DragonFly_APT_Sep17_3
9673e4d10f872e37900bc35fc4b45e6bde1ccf860d0b9238f280680a2f385865	PE32	2022-02-17 20:36:34	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 [+] YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Obfuscated_Strings YRP/Misc_Suspicious_Strings YRP/escalate_priv YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/VC6_Random
82f555f2b966d96bc9125dfda05e7557846243ee12a541c7e7722550213436c1	PE32	2022-02-17 20:26:39	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Dropper_Strings YRP/create_service YRP/network_http YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/BLOWFISH_Constants YRP/VC6_Random YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API
0658c9f2cf30e439ffa4a6577633573c25135094d4623f9007f02fa5a254b557	PE32	2022-02-17 20:02:20	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 [+] YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Obfuscated_Strings YRP/escalate_priv YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/VC6_Random
46235f4b1c92554ca4d0dfbcb1486a408b10191f67e1c30a769312e809291c3e	PE32	2022-02-17 19:30:15	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/Dropper_Strings YRP/network_irc YRP/win_registry YRP/win_files_operation YRP/Big_Numbers1 YRP/BASE64_table YRP/VC6_Random YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API
5d5ca030a93351a597b06fdaeeb1b6ebef65ce9479afd96b1146dd30f4585d3d	PE32	2022-02-17 17:54:42	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/win_files_operation YRP/CRC32_poly_Constant YRP/CRC32_table YRP/VC6_Random
91ccf8998cfe2797a02c6a64e12ebbf750c3ba2afe4768704e3df15a99677ed1	PE32	2022-02-17 17:42:09	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Installer_VISE_Custom_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional [+] YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Installer_VISE_Custom YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Dropper_Strings YRP/network_irc YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/VC6_Random YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API
0142b24d303a400c9176f6fc0760a5359bcf3a22b0fb8af0afc15bd474a4542e	PE32	2022-02-17 16:51:07	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Installer_VISE_Custom_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional [+] YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Installer_VISE_Custom YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/win_files_operation YRP/VC6_Random YRP/Str_Win32_Winsock2_Library FlorianRoth/DragonFly_APT_Sep17_3
33bfec57473e57db8b8cf05fd4121b94aa36c2869d81c1f73aed1341f5763433	PE32	2022-02-17 16:39:29	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsConsole YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/DebuggerException__SetConsoleCtrl YRP/network_irc YRP/win_mutex YRP/win_files_operation YRP/VC6_Random YRP/Str_Win32_Winsock2_Library
020fbc39b2fc7a6970d23195709b575d73f39db53a0150c6f0692519fcb1741a	PE32	2022-02-17 15:59:27	User Submission	YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain [+] YRP/contentis_base64 YRP/win_registry YRP/win_files_operation YRP/VC6_Random
92d62246fdfd3345a17c5100c8886088184340f788712f2340c3506a82b9b938	PE32	2022-02-17 15:36:48	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/Setup2GoInstallerStub YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Big_Numbers1 YRP/CRC32_poly_Constant YRP/CRC32_table YRP/MD5_Constants YRP/VC6_Random YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/UPX YRP/suspicious_packer_section
880a70ab982eaf8bd58a38ffbc22abcc3bd524ba23db5c2a321a9a5a0ec2761e	PE32	2022-02-17 15:17:39	User Submission	CuckooSandbox/vmdetect YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional [+] YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/System_Tools YRP/Antivirus YRP/VMWare_Detection YRP/Misc_Suspicious_Strings YRP/vmdetect YRP/escalate_priv YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Big_Numbers1 YRP/MD5_Constants YRP/DES_sbox YRP/VC6_Random YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API
1a1282e5d0da744669684eba8a231123860a0947859362883ace3432e9a08e72	PE32	2022-02-17 14:52:25	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsConsole YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/win_token YRP/win_files_operation YRP/VC6_Random
57dcf85eeb87dbf30cb28a3bea8dd7085d3c2e57c9a728c9a11fafa9143e6861	PE32	2022-02-17 14:48:30	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Dropper_Strings YRP/network_irc YRP/escalate_priv YRP/win_registry YRP/win_token YRP/win_files_operation YRP/VC6_Random YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library
9d86d42eef113038e774657076080637bd1eca0572f2062da97036a03fe25948	PE32	2022-02-17 13:42:19	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/Dropper_Strings YRP/network_udp_sock YRP/network_tcp_listen YRP/network_http YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/spreading_share YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/CRC32_poly_Constant YRP/CRC32_table YRP/VC6_Random YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API
fb324a917b7d4c342a348c371532763adb285b0742e2aa946c4e840cecc9b7ac	PE32	2022-02-17 12:01:20	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Installer_VISE_Custom_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional [+] YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Installer_VISE_Custom YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Big_Numbers1 YRP/CRC32_poly_Constant YRP/MD5_Constants YRP/VC6_Random YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API
aae5fa68176e308a3721810de182ecd4c512614c53ff40192637483ecf8d5e0c	PE32	2022-02-17 10:25:45	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 [+] YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Obfuscated_Strings YRP/Misc_Suspicious_Strings YRP/escalate_priv YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/VC6_Random
580b9ad877232e65d23638a69439a44f071e9d5f98a2dca566407e46d7686ff0	PE32	2022-02-17 09:02:23	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Installer_VISE_Custom_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional [+] YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Installer_VISE_Custom YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/Dropper_Strings YRP/network_irc YRP/escalate_priv YRP/win_registry YRP/win_token YRP/win_files_operation YRP/VC6_Random YRP/Str_Win32_Winsock2_Library
e07e650dca2e81909cec17a1f7d53dc27ea3ffb5e78e8042183649cd18143bba	PE32	2022-02-17 07:50:14	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsConsole YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/network_irc YRP/win_registry YRP/win_files_operation YRP/VC6_Random YRP/Str_Win32_Winsock2_Library
1e41248fc4253fa3df1bbbae3f3f2d515655e00247c08cad50fbfd26b4f0c66e	PE32	2022-02-17 04:15:00	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Install_Shield_2000 YRP/Armadillo_v171_additional YRP/Microsoft_Visual_Cpp YRP/InstallShield_2000_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/network_http YRP/win_files_operation YRP/Big_Numbers1 YRP/BASE64_table YRP/VC6_Random YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API
06d02546c0f065ae4d16a6c6257711e2e95dc0dfc911ea9a9617e8cb781b9899	PE32	2022-02-17 03:41:24	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/network_dropper YRP/win_registry YRP/win_files_operation YRP/VC6_Random YRP/VC8_Random YRP/Str_Win32_Wininet_Library
a89d6f258e46045bab292d6b69d026bd84b6e8061c8a911e833119f046b98412	PE32	2022-02-17 02:48:19	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/Dropper_Strings YRP/network_irc YRP/network_tcp_socket YRP/win_registry YRP/win_files_operation YRP/VC6_Random YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API
38663233140f988baacbf9eb0c62a4b2983745f14351ccbc8f9e47454207d98c	PE32	2022-02-17 02:35:31	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/network_tcp_listen YRP/network_irc YRP/network_http YRP/win_files_operation YRP/Big_Numbers1 YRP/MD5_Constants YRP/VC6_Random YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API
412cdb08f677e27590aaf181c2dabb17262e1fd37ec400487feb86381424c294	PE32	2022-02-17 01:53:36	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/create_service YRP/network_http YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/BLOWFISH_Constants YRP/VC6_Random YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API
d65474a5a0f440ad85bd3e0bfe2138ca9b600d8c540ef1e32de11f9212306d4d	PE32	2022-02-17 01:48:26	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/disable_firewall YRP/inject_thread YRP/network_http YRP/escalate_priv YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Big_Numbers1 YRP/CRC32_poly_Constant YRP/CRC32_table YRP/BASE64_table YRP/VC6_Random YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/UPX YRP/suspicious_packer_section
db8f27698c6d5d8b57f78e50356cf80d6fec2b1b7000f9f41d71c07d7aa57a2e	PE32	2022-02-17 01:39:18	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/Dropper_Strings YRP/hijack_network YRP/network_irc YRP/win_registry YRP/win_files_operation YRP/Big_Numbers1 YRP/BLOWFISH_Constants YRP/MD5_Constants YRP/VC6_Random YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library
5b2cd7e0cf3ce50631bcba836b46aea04c371819f70e65933ce440b582f0f8ee	PE32	2022-02-17 00:19:02	User Submission	YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature [+] YRP/domain YRP/contentis_base64 YRP/Obfuscated_Strings YRP/Misc_Suspicious_Strings YRP/escalate_priv YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/VC6_Random
ff87de6f6324804dd5f4ad284b86e6b7f59585fd26f3efe2351d92968e444b09	PE32	2022-02-16 23:58:42	User Submission	YRP/Armadillo_v1xx_v2xx_additional YRP/Microsoft_Visual_Cpp_v70_DLL YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_60_DLL_Debug [+] YRP/Armadillo_v1xx_v2xx YRP/Microsoft_Visual_Cpp_v60_DLL YRP/Microsoft_Visual_Cpp_60 YRP/Armadillov1xxv2xx YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/System_Tools YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/network_irc YRP/network_http YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Big_Numbers1 YRP/BASE64_table YRP/VC6_Random YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/suspicious_packer_section
099eb7b95afffa000dcfc3e72a9e9dba7a14e2cfbf90e06eb11eb8ed9cec3540	PE32	2022-02-16 22:39:54	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Installer_VISE_Custom_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional [+] YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Installer_VISE_Custom YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/System_Tools YRP/keylogger YRP/win_registry YRP/win_files_operation YRP/VC6_Random
1708a9237dd9918f902e4d387ec27d3b39bac7869597318ae09b7cca9034f8b0	PE32	2022-02-16 22:27:57	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsConsole YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/win_token YRP/win_files_operation YRP/VC6_Random
04856c60efde1fb3646f6ee3bd3baa35110fa9b408ebe60ebbd5a0cc449a6d1d	PE32	2022-02-16 21:58:24	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Installer_VISE_Custom_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional [+] YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Installer_VISE_Custom YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/win_files_operation YRP/VC6_Random YRP/Str_Win32_Winsock2_Library FlorianRoth/DragonFly_APT_Sep17_3
d81dd86beaa00a63a0b29cb3fc331bc82ea4d4f3b27261389fc0f129288b750e	PE32	2022-02-16 21:24:16	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Installer_VISE_Custom_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional [+] YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Installer_VISE_Custom YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/Browsers YRP/VM_Generic_Detection YRP/Dropper_Strings YRP/ThreadControl__Context YRP/anti_dbg YRP/inject_thread YRP/network_dropper YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/VC6_Random YRP/Str_Win32_Winsock2_Library FlorianRoth/ZxShell_Related_Malware_CN_Group_Jul17_2 FlorianRoth/Backdoor_Nitol_Jun17
2a22c636b0530623a29003648407c73302f429dc682ad254c19477bf1d4d18de	PE32	2022-02-16 20:21:04	User Submission	CuckooSandbox/vmdetect YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional [+] YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/maldoc_getEIP_method_4 YRP/domain YRP/IP YRP/contentis_base64 YRP/System_Tools YRP/Antivirus YRP/VMWare_Detection YRP/Misc_Suspicious_Strings YRP/vmdetect YRP/escalate_priv YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Big_Numbers1 YRP/MD5_Constants YRP/DES_sbox YRP/VC6_Random YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API
6a3505fb48e461ed3c121571d08f3cbdfb4b178941337a15a57d84e145ca9241	PE32	2022-02-16 18:31:29	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/Dropper_Strings YRP/DebuggerException__SetConsoleCtrl YRP/screenshot YRP/win_registry YRP/win_files_operation YRP/VC6_Random YRP/Str_Win32_Winsock2_Library
572ff00d4911da51ea046e3854c6ef6fdca8b2a188e09c9ef32457555b731788	PE32	2022-02-16 18:09:52	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Dropper_Strings YRP/disable_firewall YRP/network_irc YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/VC6_Random YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API
104ba519313b2068b56295b97225dfc3fd945590e96d38e7fcd9a1eb9d904715	PE32	2022-02-16 16:45:32	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Installer_VISE_Custom_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional [+] YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Installer_VISE_Custom YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/UPXv20MarkusLaszloReiser YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/UPX20030XMarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Browsers YRP/disable_antivirus YRP/network_dropper YRP/win_registry YRP/win_files_operation YRP/VC6_Random YRP/UPX YRP/suspicious_packer_section
f1661a9300b8739dd74d91dfc579eec9f61949cc974d9545c6e5576d0619a9e8	MS-DOS	2022-02-16 16:13:31	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasModified_DOS_Message YRP/domain YRP/IP YRP/contentis_base64 YRP/Browsers YRP/VM_Generic_Detection YRP/Dropper_Strings YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/VC6_Random YRP/Str_Win32_Winsock2_Library FlorianRoth/Backdoor_Nitol_Jun17
fea1b629fcd87def50441b4a2bf5146b9b886577fc037a1589381fb7eb6b3a99	PE32	2022-02-16 14:45:09	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/win_files_operation YRP/CRC32_poly_Constant YRP/CRC32_table YRP/VC6_Random
e04a555af42919aa80e5e9393646ba841156da5ca99d9e6e3f2f39020c5aae6b	PE32	2022-02-16 14:38:23	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/win_files_operation YRP/android_meterpreter YRP/CRC32_poly_Constant YRP/CRC32_table YRP/VC6_Random
f857d1c68283728f591bc40316b0ccc8856b4da5ac987e753ea44149b0ea0663	PE32	2022-02-16 14:28:25	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Browsers YRP/VM_Generic_Detection YRP/Dropper_Strings YRP/network_tcp_listen YRP/network_dropper YRP/network_tcp_socket YRP/screenshot YRP/win_mutex YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/VC6_Random YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API
346162df154898ab8930346b66957b4404e9cf7304b23b55221a5a7681169b7a	PE32	2022-02-16 13:56:04	User Submission	CuckooSandbox/vmdetect YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional [+] YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/maldoc_find_kernel32_base_method_1 YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/contentis_base64 YRP/VirtualPC_Detection YRP/WMI_strings YRP/vmdetect YRP/antivm_vmware YRP/escalate_priv YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/CRC32_poly_Constant YRP/CRC32_table YRP/VC6_Random YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library
0c40be50b84d8a3c49dc0277ce19f1a2694191854491a4144f554c88cf3ed533	PE32	2022-02-16 11:31:56	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsConsole YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/network_tcp_socket YRP/win_files_operation YRP/VC6_Random YRP/Str_Win32_Winsock2_Library YRP/Ncat_Hacktools_CN
70eb5f8fa1e6b69d944ef8feee153f3a03d0a948c4d06ab8f3393c636cf60dbd	PE32	2022-02-16 10:59:35	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/win_files_operation YRP/Big_Numbers0 YRP/CRC32_poly_Constant YRP/CRC32_table YRP/VC6_Random
766f7ac639f685a9049778c4988b10399dd670b88bc03f5dec31a68065223ff0	PE32	2022-02-16 10:15:08	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/inject_thread YRP/escalate_priv YRP/win_token YRP/win_files_operation YRP/Advapi_Hash_API YRP/CRC32_poly_Constant YRP/CRC32_table YRP/BASE64_table YRP/VC6_Random YRP/GenerateTLSClientHelloPacket_Test
2b2c0b73e54f69111976a991c77d3dc688cf44db3a9f83cd2cbfa7c3fd109831	PE32	2022-02-16 09:47:03	User Submission	CuckooSandbox/vmdetect YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/Browsers YRP/VirtualPC_Detection YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/vmdetect YRP/antivm_vmware YRP/network_http YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/VC6_Random YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API
6a198e1203b5e2b1064459cebde99d73c0a3c053967ebe338684f23407d5b840	PE32	2022-02-16 09:09:53	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/win_files_operation YRP/CRC32_poly_Constant YRP/CRC32_table YRP/VC6_Random
a1d09a16bf20f490b8aeb8499d8bf4cef8923ab73782832ed66d8ac244a8d38e	PE32	2022-02-16 06:33:30	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/win_files_operation YRP/CRC32_poly_Constant YRP/CRC32_table YRP/VC6_Random
80bd978d3c7a54fd838d2a32f4d0779b81d6333b5895730a05033888a267b044	PE32	2022-02-16 05:04:28	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Installer_VISE_Custom_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional [+] YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Installer_VISE_Custom YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/Dropper_Strings YRP/win_registry YRP/win_files_operation YRP/VC6_Random YRP/Str_Win32_Winsock2_Library
bf0f694a03d69d9d3861da4b47391084ffb0a4f4df1faa8b2ab5052977ff9293	PE32	2022-02-16 03:15:21	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/win_files_operation YRP/CRC32_poly_Constant YRP/CRC32_table YRP/VC6_Random
cb08a08eb7fb60b6db99b92c99c683f9be135b24b2e23cc186919fe09ed9b103	PE32	2022-02-16 02:05:08	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/win_files_operation YRP/Big_Numbers1 YRP/BASE64_table YRP/VC6_Random YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API
608957894aeb3a80f46f74376990cee5965497f112749bb6fbb58a5f585db79f	PE32	2022-02-16 02:02:52	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Big_Numbers1 YRP/MD5_Constants YRP/VC6_Random YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API
514fc0ef3dfe6af6aa5a9fe354c69600847218be863be889852b9da31c7b19f3	PE32	2022-02-16 01:51:20	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Installer_VISE_Custom_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional [+] YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Installer_VISE_Custom YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/keylogger YRP/win_registry YRP/win_files_operation YRP/VC6_Random
0ecbfe73b4b197b2c4d9a345c375285483ca0e0c89b17c6940cb1d01f7f18931	PE32	2022-02-16 00:26:48	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Installer_VISE_Custom_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional [+] YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Installer_VISE_Custom YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/IsBeyondImageSize YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/win_files_operation YRP/VC6_Random
8de3f647a727c84b90ae5f42e1060ee83fab5d6ac57cfb6f8b47dda7189f3336	PE32	2022-02-16 00:20:04	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/network_dropper YRP/win_registry YRP/win_files_operation YRP/VC6_Random YRP/VC8_Random YRP/Str_Win32_Wininet_Library
c217ed00f1766a276f6f6e416cfc5cc108bdadead2f5e0e0272d57d18376e33a	PE32	2022-02-16 00:04:04	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Dropper_Strings YRP/network_irc YRP/win_registry YRP/win_files_operation YRP/VC6_Random YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API
afeb176be7e6c42bb1718ff86652935b91d0286d48cd2a2058009678ac196f82	PE32	2022-02-15 23:41:31	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/win_files_operation YRP/VC6_Random

Recent Searches
yrp/vc6_random
yrp/upx293300lzmamarkusoberhumerlaszlomolnarjohnreiser
yrp/fsg_v110_eng_dulekxt_microsoft_visual_cpp_70
yrp/webshell_000_403_807_a_c5_config_css_dm_he1p_xxx
yrp/darkspy105
yrp/webshell_simple_cmd
yrp/eqgrp_extrabacon
yrp/stelth_pe_101_bgcorp
yrp/execryptor2223compressedcodewwwstrongbitcom
yrp/webshell_r57shell127_r57_ifx_r57_kartal_r57_antichat

Search

Recent Searches