MalShare

SHA256 Hash	File type	Added	Source	Yara Hits
78b8d4d2defbf8bec04909d2b789897c90da231306604d16eb5577b94be2dfc4	PE32	2022-02-24 19:04:28	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasModified_DOS_Message YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Big_Numbers1 YRP/Big_Numbers3 FlorianRoth/DragonFly_APT_Sep17_3
25feb67950acb996302cd798ff895b202cf53f346d3c1f05cbe3ad9f34639a81	PE32	2022-02-24 11:07:24	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasModified_DOS_Message YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Big_Numbers1 YRP/Big_Numbers3
27c92f6f57406a9a60285c8e3277a4b7fe061d5cc83860ae3ea32c66aa99de34	PE32	2022-02-24 08:29:36	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasModified_DOS_Message YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Big_Numbers1 YRP/Big_Numbers3 FlorianRoth/DragonFly_APT_Sep17_3
0ee4f15cd8bade83443e83f1bf06822b9677abc9144a9c15fcd6df1974ae328a	PE32	2022-02-24 03:54:05	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasModified_DOS_Message YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Big_Numbers1 YRP/Big_Numbers3 FlorianRoth/DragonFly_APT_Sep17_3
b2800f59479c248f70961fe8163db0abb195503254523caebdae19a1213bd492	PE32	2022-02-23 10:35:44	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasModified_DOS_Message YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Big_Numbers3 FlorianRoth/DragonFly_APT_Sep17_3
e3a3d0a090ea13afda381669223edebc4f0d367ec061d2de9e7b39e49752bbc0	PE32	2022-02-23 08:17:33	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasOverlay YRP/HasModified_DOS_Message YRP/maldoc_getEIP_method_1 YRP/domain FlorianRoth/Sality_Malware_Oct16
3027132f8ff64bbd22fd10a43722ea9920fc967d0635ff1a41612185b6e869b3	PE32	2022-02-23 05:52:13	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasModified_DOS_Message YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Big_Numbers1 YRP/Big_Numbers3 FlorianRoth/DragonFly_APT_Sep17_3
d70ef0a55f97694f89628a5c895914d2458ffbf824ba0e14d6b8d6885b7622c7	PE32	2022-02-22 23:53:53	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasModified_DOS_Message YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/Big_Numbers1 YRP/Big_Numbers3 FlorianRoth/DragonFly_APT_Sep17_3
3dd1ce1b883705eeb3f1d58e9695ccbc584e3ed11c9d92ab94e7e249ca72c197	PE32	2022-02-22 23:23:30	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasModified_DOS_Message YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Big_Numbers1 YRP/Big_Numbers3
ee4bc9f99a160089d4e8c00d610bbfabc4983c6955b614d614c560ebf3bf7a11	PE32	2022-02-22 21:29:39	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasModified_DOS_Message YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Big_Numbers1 YRP/Big_Numbers3 FlorianRoth/DragonFly_APT_Sep17_3
1e3e196d530bf124c9290d2c7a9ed3c5b6efe841663f9087e225991a4518cf84	PE32	2022-02-22 19:51:21	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasModified_DOS_Message YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Big_Numbers1 YRP/Big_Numbers3
668833ec93e479a5f262a3a01596964dbd00edea269b4bc666d9a4195ab3aa99	PE32	2022-02-22 19:45:20	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasOverlay YRP/HasModified_DOS_Message YRP/maldoc_getEIP_method_1 YRP/domain FlorianRoth/Sality_Malware_Oct16
e27ef573be637f589eab90b4e1d9f4881a470c5b8ebd99ded06755e6f530599c	PE32	2022-02-22 14:28:37	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasModified_DOS_Message YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Big_Numbers1 YRP/Big_Numbers3 FlorianRoth/DragonFly_APT_Sep17_3
1e5dc47c4fbee0de854df88c80b15a4e0d3ac84e7cf479e18f9cf195c411a7c7	PE32	2022-02-22 14:17:38	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasModified_DOS_Message YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Big_Numbers1 YRP/Big_Numbers3 FlorianRoth/DragonFly_APT_Sep17_3
e213616ca28761b973048c476e71da2a7ede114915e5c4e400e39b173a425667	PE32	2022-02-22 13:16:19	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasModified_DOS_Message YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Big_Numbers1 YRP/Big_Numbers3 FlorianRoth/DragonFly_APT_Sep17_3
da78af884b54baa78a6ff1f3983f72652d7709cffd5440c94457b8c53dafba48	PE32	2022-02-22 04:31:20	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasModified_DOS_Message YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Big_Numbers1 YRP/Big_Numbers3 FlorianRoth/DragonFly_APT_Sep17_3
bcd9d37c4365a6d64025224ac46e77e53ca6376a3526ee434b288494c59ad9f7	PE32	2022-02-18 07:09:25	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/keylogger YRP/rat_webcam YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API
3b2fc62c4162b758dedb47162e1bbbac057f5217b34e58e9c8ec2f132cc85281	PE32	2022-02-18 07:05:27	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasModified_DOS_Message YRP/domain YRP/IP YRP/contentis_base64 YRP/keylogger YRP/win_registry YRP/Big_Numbers0
cb56b2258a6099a71664f05a2ad62cb050f1b9fe4242a9e90b09a178a984bc26	PE32	2022-02-18 06:25:26	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/android_meterpreter
f5a7c0bd5cc442127d2ccf045751512c0555096e6b43fb0844bcfed17cbb7443	PE32	2022-02-18 05:53:52	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64
c985ff6648b48e4c12f0f1e3ca55d20ea95e1245d9797043d1bc644603a032a6	PE32	2022-02-18 05:24:36	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasOverlay YRP/HasModified_DOS_Message YRP/maldoc_getEIP_method_1 YRP/domain FlorianRoth/Sality_Malware_Oct16
f056cf61fae6190aefde9a6d1a276b019c75f08fba573fdeb41098868a93080a	PE32	2022-02-18 05:10:08	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/keylogger YRP/rat_webcam YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API
cbcdb120fd77094e41c443aee5b7a3347c3d2a288fde4da2b6d96d0839c44cd3	MS-DOS	2022-02-18 05:09:36	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasModified_DOS_Message YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section
c1f48f42f5c6a6b532807da724d277d80ec69cfa80dba305bf02cc53a9ddbfce	PE32	2022-02-18 04:32:26	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/IsBeyondImageSize YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/escalate_priv YRP/win_token YRP/Str_Win32_Winsock2_Library
b63aeae2a0cb01568d5a9ba8100ecf7237f0ed99809c23c203db6bebd852a66e	PE32	2022-02-18 03:50:03	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/Borland YRP/IsPE32 [+] YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/network_dropper YRP/keylogger YRP/rat_webcam YRP/win_registry YRP/CRC32_poly_Constant YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API
a7f824b8f33bc8aeb716f6ea0aab335693291f98585010dd35d592a71679f1f2	PE32	2022-02-18 03:31:35	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasOverlay YRP/HasModified_DOS_Message YRP/maldoc_getEIP_method_1 YRP/domain FlorianRoth/Sality_Malware_Oct16
31f219e61bfeb86125cbd8728b5e15ad412e301066248f6dd41d7705e9979a4b	PE32	2022-02-18 03:23:53	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/Borland YRP/IsPE32 [+] YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/borland_delphi YRP/borland_delphi_dll YRP/domain YRP/IP YRP/contentis_base64 YRP/Browsers YRP/Dropper_Strings YRP/DebuggerCheck__QueryInfo YRP/anti_dbg YRP/create_service YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/sniff_audio YRP/spreading_share YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers1 YRP/CRC32_poly_Constant YRP/CRC32_table YRP/Delphi_Random YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API
1488559d3e0169e7f22d332656cba48b63c427a5660026259d730af3acf80df5	MS-DOS	2022-02-18 03:00:00	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasModified_DOS_Message YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 FlorianRoth/DragonFly_APT_Sep17_3
2174f8fb1298d3d32b68e3bd9c6abb7516340cd4d8912763ed93d8e04571c2e7	MS-DOS	2022-02-18 01:53:05	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/Borland YRP/IsPE32 [+] YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasModified_DOS_Message YRP/domain YRP/url YRP/contentis_base64 YRP/keylogger YRP/rat_webcam YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API
7d2305fc195edb424ee649ae5bd7268a2265e1b594499550232f7d7684e11e71	PE32	2022-02-18 01:31:50	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasModified_DOS_Message YRP/domain YRP/url YRP/contentis_base64 YRP/screenshot YRP/rat_webcam YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API
54ab72ea3235bc33fd1a8d1055a3e2291d34f0ab7cd63130a523085732e6ca2b	PE32	2022-02-18 01:09:59	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/win_registry
97375010db133018350c4bc271f92eec57364fb481e71130219b6f091f9f4990	PE32	2022-02-18 00:10:16	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64
b94769ac9b9e7f34ad995da99c86f52c5b7f0f053ed20cadf9653438f5a3dd38	PE32	2022-02-18 00:02:05	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasOverlay YRP/HasModified_DOS_Message YRP/maldoc_getEIP_method_1 YRP/domain FlorianRoth/Sality_Malware_Oct16
95afa501e5e054add132afd1d7ea4e57d06b1d43e40d20a82ab585b5fd55b0eb	MS-DOS	2022-02-17 23:11:40	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/keylogger YRP/win_registry YRP/Str_Win32_Winsock2_Library
f1e90540969736bd477dafbdebfbe998c6c9dbb61441894043024b31e06d2255	PE32	2022-02-17 22:54:49	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/IP YRP/contentis_base64 YRP/keylogger YRP/win_registry YRP/CRC32_poly_Constant
6b498809b731cbdcb6435122c52d64963c3ed8c88c5aa8cda03c0e2cbb30d86c	PE32	2022-02-17 22:49:02	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/Armadillo_v4x YRP/IsPE32 [+] YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64
a795d2e63dd2421e9034393ecf6dff21d76585efbaa0a54b4c19927ddf4675fb	PE32	2022-02-17 22:36:53	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasModified_DOS_Message YRP/domain YRP/url YRP/contentis_base64
484ddbe0a57f7e939ab089819aecf07759150ff349352f757d216f7f2c51bfb4	PE32	2022-02-17 22:11:43	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/win_registry
62c941eb76ff643a16fa57e7f9e48f2e3a882b0308fe846c8da55880201cfecf	MS-DOS	2022-02-17 22:11:33	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasModified_DOS_Message YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/keylogger YRP/rat_webcam YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API
d2ab549a9ef8cb370c39515c6913134274d02cbee00ed8050e5bbb3dea91ae14	PE32	2022-02-17 22:09:44	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasModified_DOS_Message YRP/maldoc_getEIP_method_1 YRP/domain FlorianRoth/Sality_Malware_Oct16
0d0b324b07921e8d408f7f63425a68a788a9010d67d454c6fac685c245546ddd	PE32	2022-02-17 22:00:52	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasModified_DOS_Message YRP/domain YRP/url YRP/contentis_base64 YRP/screenshot YRP/rat_webcam YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API
72c1f3c0619c0eba03d7dc02504d1b127a9758c32ea10b17818fdebd0d466925	PE32	2022-02-17 21:59:54	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasModified_DOS_Message YRP/domain YRP/url YRP/contentis_base64 YRP/keylogger YRP/rat_webcam YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API
0fc79d985ef6ab29132970f9d59033b8c280b1621f65fee065e286cc5bb6b790	PE32	2022-02-17 21:43:42	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasOverlay YRP/HasModified_DOS_Message YRP/maldoc_getEIP_method_1 YRP/domain FlorianRoth/Sality_Malware_Oct16
9a3558aea194ea2e39315f5d51fae7f74bd2e6b064680fb83fa0302cb36028b1	PE32	2022-02-17 20:43:33	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain
48a4b2a7856610af53c9d148b4ce8cef515122aa008995038336eabd80a91cc4	PE32	2022-02-17 20:17:22	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasModified_DOS_Message YRP/domain YRP/url YRP/contentis_base64 YRP/keylogger YRP/rat_webcam YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API
d8f431723213a481a1d2cb8840bdbdb2876a409381205ead9ce297207df65916	PE32	2022-02-17 19:15:34	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/win_registry
810b3f7a53a4879a572e970e3fa5970fa21f8ba51aeee79c72e9e3ecbfba4f26	PE32	2022-02-17 19:10:15	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/screenshot YRP/rat_webcam YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API
21ee44f8ba4d0f79cb705677e56e7db90ead7a353494b2cf81084105a45a3d2f	PE32	2022-02-17 18:01:28	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasOverlay YRP/HasModified_DOS_Message YRP/maldoc_getEIP_method_1 YRP/domain FlorianRoth/Sality_Malware_Oct16
2438dc2fde1918bd9edc0ee2376ea1df451b2ed4b8a0fdbd742c08c4633efb67	PE32	2022-02-17 17:54:45	User Submission	YRP/PackerAspack_v212_wwwaspackcom YRP/Aspack_v212_wwwaspackcom_additional YRP/Safeguard_103_Simonzh YRP/Aspack_v212_wwwaspackcom [+] YRP/ZProtect_v144_lifeengines YRP/PESpinv04x YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/domain YRP/contentis_base64 YRP/keylogger YRP/rat_webcam YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/suspicious_packer_section
c7f4a33670be0b9764b2220c2571ccc6c5e7edbed418a47b2d15e168c3856d94	PE32	2022-02-17 17:37:26	User Submission	YRP/PackerAspack_v212_wwwaspackcom YRP/Aspack_v212_wwwaspackcom_additional YRP/Safeguard_103_Simonzh YRP/Aspack_v212_wwwaspackcom [+] YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section
d4532f9816d156d59c374aa7caa24232510c37714b9f2f7e78f5799ef69f9ad4	PE32	2022-02-17 17:31:52	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/url YRP/contentis_base64 YRP/screenshot YRP/rat_webcam YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API
849a7d05a30d669ca3cb75ee188d42eda82f7c5f51854d5fb67019a9ae639b9b	MS-DOS	2022-02-17 17:13:47	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/Borland YRP/IsPE32 [+] YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/borland_delphi YRP/domain YRP/IP YRP/contentis_base64 YRP/Browsers YRP/ThreadControl__Context YRP/network_udp_sock YRP/network_tcp_listen YRP/network_dropper YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/sniff_audio YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/CRC32_poly_Constant YRP/CRC32_table YRP/Delphi_Random YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/CookieTools YRP/suspicious_packer_section
d51ad1b01da4554e914d06c146122da4a82fa6e4d27c6e92a069dac731b4886b	PE32	2022-02-17 16:44:01	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/keylogger YRP/rat_webcam YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API
01289ce5ede92888f441675d169ac6a8c3ffd561acedaa44a1a2fa4ee00541a4	MS-DOS	2022-02-17 16:25:10	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasModified_DOS_Message YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/keylogger YRP/rat_webcam YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API
0b96fa81ce96c644633a6d7d87d484dd9a3a1db7c805d521fefc6a6af95920ef	PE32	2022-02-17 15:53:13	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasOverlay YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64
945948652796ec34548000a548d34c47680c38c2342ad60a453f76ecfb710c51	PE32	2022-02-17 15:42:52	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/keylogger YRP/rat_webcam YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API
074c86a52e4128355c3cafbeaa788fc7ad6da5d00cc9d27d3a27e1778bb285f5	PE32	2022-02-17 14:58:35	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/url YRP/contentis_base64 YRP/screenshot YRP/rat_webcam YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API
9f2cd0f2ce393cc690385770195a5f171d0a49b9ea35a13385d5bfd654f1df50	PE32	2022-02-17 14:00:46	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/screenshot YRP/rat_webcam YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API
87a009ff4173407bc1e56d1a79dfb9d0ea9a89f506a2c33ad11df167f2cb8df3	PE32	2022-02-17 13:50:37	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasOverlay YRP/HasModified_DOS_Message YRP/maldoc_getEIP_method_1 YRP/domain FlorianRoth/Sality_Malware_Oct16
1bef73684b2080d46024ccb46d24e63e897f998bb4af32356eadfddd70b9e289	PE32	2022-02-17 13:32:28	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/screenshot YRP/rat_webcam YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API
bb7ec606e31e681e5efbd5f057cd84f82edaf11fa4604b3ec0f66d7584cbcb00	PE32	2022-02-17 13:06:36	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Big_Numbers1 YRP/MD5_Constants YRP/VC8_Random YRP/Str_Win32_Winsock2_Library
3a3ae20f3768b5c488841c1244f5433d033e0786fcecdc150c72a22b798e8948	PE32	2022-02-17 13:04:28	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasOverlay YRP/HasModified_DOS_Message YRP/maldoc_getEIP_method_1 YRP/domain FlorianRoth/Sality_Malware_Oct16
2f0d3724068296ea6e28d68106dcc7197a54d44df4a8b8aebc03b02e31e2fafc	PE32	2022-02-17 12:35:56	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/IP YRP/contentis_base64 YRP/win_registry
e3012ad1d0f6ee14acca6282da5b1b061a21a60b2c6e2cb8e313b8a2cb8b3c34	PE32	2022-02-17 10:51:01	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasOverlay YRP/HasModified_DOS_Message YRP/maldoc_getEIP_method_1 YRP/domain FlorianRoth/Sality_Malware_Oct16
651728eee2c3c7a12e3bb4e76f11cbef0e163edede846f15e058cdf8a35f47aa	PE32	2022-02-17 10:47:54	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64
7920c5351c323c02b91ff6ba6805d9c7c2c8b4ba1c608befde71a81bfc44691e	PE32	2022-02-17 10:30:57	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/keylogger YRP/rat_webcam YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API
8976a4b9877017dd969e348d9bc6ff6adfedec34a02a68a1f8ff02ae0b9bb804	PE32	2022-02-17 10:19:44	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/Borland YRP/IsPE32 [+] YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/borland_delphi YRP/domain YRP/IP YRP/contentis_base64 YRP/Browsers YRP/VM_Generic_Detection YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/ThreadControl__Context YRP/inject_thread YRP/create_service YRP/network_udp_sock YRP/network_tcp_listen YRP/network_dropper YRP/network_tcp_socket YRP/network_dns YRP/network_ssl YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/sniff_audio YRP/rat_rdp YRP/rat_webcam YRP/check_patchlevel YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/BASE64_table YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/Str_Win32_Winsock2_Library YRP/CookieTools
54c535956f239de41cf8f98409fa34e2e245b012022aa8e044e17a61c669f15b	MS-DOS	2022-02-17 10:00:49	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasModified_DOS_Message YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/contentis_base64 YRP/keylogger YRP/win_registry
5df4df6205f21fffeead53dbe5a307f6c7ffb56755e847fcbe8299a4751528d8	PE32	2022-02-17 09:58:49	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasOverlay YRP/HasModified_DOS_Message YRP/maldoc_getEIP_method_1 YRP/domain FlorianRoth/Sality_Malware_Oct16
1311afb65e55acd2ec8c18da903711f8f118eaa7ed81484317729927d6db668c	PE32	2022-02-17 09:46:47	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/keylogger YRP/rat_webcam YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/suspicious_packer_section
51dc6fa2998217657183debb179274b4b5291278922e5b56dc81455b8d94b703	PE32	2022-02-17 09:40:17	User Submission	YRP/PackerAspack_v212_wwwaspackcom YRP/Aspack_v212_wwwaspackcom_additional YRP/Safeguard_103_Simonzh YRP/Aspack_v212_wwwaspackcom [+] YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/domain YRP/IP YRP/contentis_base64 YRP/keylogger YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/suspicious_packer_section
1e40cd5bb53e67de19a9232496692a838a9abd912b307d858214844c321caa79	PE32	2022-02-17 08:34:12	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/network_dropper YRP/keylogger YRP/rat_webcam YRP/win_registry YRP/CRC32_poly_Constant YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API
61bd6dd17f07817268fb32c93569198f3684fb1278c253702f765124eb602fad	PE32	2022-02-17 08:21:14	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/keylogger YRP/rat_webcam YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API
2e6a8ef1d4a85e84cba60d1f20e767aef8b87a633d7ce35a0a796c0c841fd4b6	PE32	2022-02-17 06:09:47	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/D1S1Gv11betaD1N YRP/IsPE32 [+] YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64
482d271df3b70e8bf50c22726b5419b498a69c64959803f29c0ec7a7d41016da	PE32	2022-02-17 05:54:29	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/url YRP/contentis_base64
edec2b6cf960376165bbd170dcc2e74375a8396cc7b2db7ebddab77d2576569d	PE32	2022-02-17 05:17:59	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasModified_DOS_Message YRP/domain YRP/IP YRP/url YRP/contentis_base64
e46a4e220ac6aa9920dd0614abebde2f769949152af771194ad87b14ec868fb4	MS-DOS	2022-02-17 03:29:05	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasModified_DOS_Message YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/network_dropper YRP/keylogger YRP/rat_webcam YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API
72680d2966f0871307130299e4a1fefde6dac97e4a5b5a827fd8db6cfdadbd36	PE32	2022-02-17 00:59:21	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasModified_DOS_Message YRP/domain YRP/url YRP/contentis_base64 YRP/screenshot YRP/rat_webcam YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API
7f2011f09e97e7d45a3b3ca180dc121063f522410ffb2e5d3a39065898f183ce	PE32	2022-02-17 00:55:24	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasOverlay YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/Obfuscated_Strings
c5a8e248c34fa88cc4b4f0afc41fbfc09669691486db4ab8a062e65cfb145fe7	PE32	2022-02-17 00:37:04	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/keylogger YRP/rat_webcam YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API
c605cb9478a16cc9952948523a3163fb223f1c1f40569fb3f9b5d459c333e05b	PE32	2022-02-17 00:24:54	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/ASProtectv12AlexeySolodovnikovh1 YRP/IsPE32 [+] YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/win_registry YRP/MD5_Constants YRP/RIPEMD160_Constants YRP/SHA1_Constants
dadcb7ef39456341ee687d9f8c17a378a18c8ba7057c7a82cc6c87685766f2ee	PE32	2022-02-16 22:01:40	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasOverlay YRP/HasModified_DOS_Message YRP/maldoc_getEIP_method_1 YRP/domain FlorianRoth/Sality_Malware_Oct16
2d2cad605c763464cbc98bebc5745db5d0240d55f4f6c5e68cbb4df66cc82d28	PE32	2022-02-16 21:21:54	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64
a002edd5627919ac588c0417109cacc3accb0cb2b097997bca8f050cf9d4832e	PE32	2022-02-16 20:58:44	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section
3c40aa2b05c62034b35e7d95b6cd1e100b5795687323851d9d60f91e7c500353	PE32	2022-02-16 19:51:26	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/IP YRP/contentis_base64
3fa6b41fd4012872a6d7d77f08c737fabf9472d1082a03c00fdf0d065b466d45	PE32	2022-02-16 19:31:53	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/IP YRP/contentis_base64 YRP/win_registry YRP/CRC32_poly_Constant YRP/MD5_Constants YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library
46d6563ab3e3f2715c92498eecadd99c92b97dccc183669d2bc4cd8f683b7f16	PE32	2022-02-16 19:17:25	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasModified_DOS_Message YRP/maldoc_getEIP_method_1 YRP/domain FlorianRoth/Sality_Malware_Oct16
f276f9d77d7ecdda9eccbf4883c4ffc7a2ff536bac0ec0586ba4ac55a8185cb5	MS-DOS	2022-02-16 18:56:11	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasModified_DOS_Message YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/contentis_base64
9beda9d220f480dc951a7942ab48a3d302a44352e05b6dcc5aeb0bd3da8b5b91	MS-DOS	2022-02-16 16:13:24	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasModified_DOS_Message YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/contentis_base64 YRP/keylogger YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API
31ac76d91a2a32fe555371f1614d2f71b1458a7cc42fa34cf56adf7d2f9ff422	MS-DOS	2022-02-16 15:51:11	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasModified_DOS_Message YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/contentis_base64 YRP/keylogger YRP/win_registry
0b9928f598eccde05eb74ceb1d4f73d676134eafa6e5b673e7b45247cdfaecc9	PE32	2022-02-16 15:48:59	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/keylogger YRP/rat_webcam YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API
baca36827f11476f276a6288f4351ece9e883f66af7838c8496bcb3146d8042b	PE32	2022-02-16 15:04:08	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64
50fe6f8cf174dc0d535416d56d85b7e2f244e2e4481c1be708fa006002ee3dc0	PE32	2022-02-16 13:50:09	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasOverlay YRP/HasModified_DOS_Message YRP/maldoc_getEIP_method_1 YRP/domain FlorianRoth/Sality_Malware_Oct16
8e7d4b6fc01960f4764a006ba498b2274e55f1d1c538580cd9ec1b16dee1e686	PE32	2022-02-16 13:40:18	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/keylogger YRP/rat_webcam YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API
0479872becf5513dbe14d2fd7876125a2d3082bde6e68ec789defa579ad80acf	PE32	2022-02-16 13:30:21	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasOverlay YRP/HasModified_DOS_Message YRP/maldoc_getEIP_method_1 YRP/domain FlorianRoth/Sality_Malware_Oct16
648e00efa73b08331d5ffde8d72df03137822f25e51642596ae132e5dfb6a00a	PE32	2022-02-16 13:15:09	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasOverlay YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64
2a2a3885c6217265bb772177c561ee646a2413426d49433ed8ff0a3a7f6bc0d8	MS-DOS	2022-02-16 13:00:27	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasModified_DOS_Message YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/contentis_base64
bdbcce2465279270f7088397e2c79397b73ac2b5b42d6fd72b1fdc324a4ce80d	PE32	2022-02-16 12:44:08	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/keylogger YRP/rat_webcam YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API
1baca25c9f309057775ff330641bfa27dee52da11a0b0a9400ec12f1c6245928	PE32	2022-02-16 12:30:45	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasOverlay YRP/HasModified_DOS_Message YRP/maldoc_getEIP_method_1 YRP/domain FlorianRoth/Sality_Malware_Oct16
b4670cac92d27e2f391166bae55a6f26ec5d7bfe9e89ccc653859fe71b9e82cf	PE32	2022-02-16 12:14:33	User Submission	YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64

Recent Searches
yrp/zprotect_v144_lifeengines
yrp/hacktool_samples
yrp/darkrat
yrp/implant_3_v1
yrp/svchostdll
yrp/yodas_protector_v1032_by_ashkbiz_danehkar
yrp/zhmimikatz
yrp/sig_238_xsniff
yrp/php_include_w_shell_php
yrp/webshell_php_webshells_myshell

Search

Recent Searches