MalShare

SHA256 Hash	File type	Added	Source	Yara Hits
c7a41760765b72d1047f807c30074f8a890cfd4d2323e27610a26ddcdf4c8f08	PE32	2022-03-14 11:01:53	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Njrat YRP/win_exe_njRAT FlorianRoth/DragonFly_APT_Sep17_3
20d66e306814d82ade08c97dc4bb992394830d32b0231b16d6af3878cf082ec0	PE32	2022-03-07 13:02:09	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Njrat YRP/win_exe_njRAT FlorianRoth/DragonFly_APT_Sep17_3
3b4ab455fbefd45b36c42f6d2052f655ae73e90355c5b4f9b52d8d8f709443a0	PE32	2022-03-04 21:00:28	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Njrat YRP/win_exe_njRAT FlorianRoth/DragonFly_APT_Sep17_3
89a78c3f2ccfbdfb0413e0d0a193263f2963761a2d817831a56aab4528bb1caa	PE32	2022-02-16 22:01:31	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDebugData YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/Njrat YRP/win_exe_njRAT
0118c478a14f4aaca063a96f857bb3f64c1799939e1af5c0e8a44df72e6de1c0	PE32	2022-02-14 13:00:13	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Njrat YRP/win_exe_njRAT FlorianRoth/DragonFly_APT_Sep17_3
c9330854f74a85349ca59082448bc7983a1a01d1e335a83a41ffe9dd0c740971	PE32	2022-02-12 22:00:12	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/HasDebugData YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/Njrat YRP/win_exe_njRAT
d2faf41b411f92bb4d000a8fa21e9aa57a9837a66d76cbacd090103e6b32789b	PE32	2022-02-07 23:34:16	User Submission	YRP/NETDLLMicrosoft YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE [+] YRP/IsWindowsGUI YRP/IsPacked YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/VM_Generic_Detection YRP/VMWare_Detection YRP/Sandboxie_Detection YRP/WMI_strings YRP/Misc_Suspicious_Strings YRP/DebuggerCheck__QueryInfo YRP/DebuggerCheck__RemoteAPI YRP/anti_dbg YRP/network_dns YRP/keylogger YRP/rat_webcam YRP/win_hook YRP/CRC32_poly_Constant YRP/Njrat YRP/win_exe_njRAT YRP/suspicious_packer_section
d98f7369d100d06a87551064769f0578a8470354c7392b6a83161cf075af7cc5	PE32	2022-02-07 22:37:28	User Submission	YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/IsPacked [+] YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/VM_Generic_Detection YRP/VMWare_Detection YRP/Sandboxie_Detection YRP/WMI_strings YRP/Misc_Suspicious_Strings YRP/DebuggerCheck__QueryInfo YRP/DebuggerCheck__RemoteAPI YRP/anti_dbg YRP/network_dns YRP/keylogger YRP/rat_webcam YRP/win_hook YRP/CRC32_poly_Constant YRP/Njrat YRP/win_exe_njRAT YRP/suspicious_packer_section
1ec669154e69456fe39c3b54e74cec3695e1ac2ded7770f385062f95be3dbc2b	PE32	2022-02-06 18:00:11	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/HasDebugData YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/Njrat YRP/win_exe_njRAT
08dd5907b25f93be9300016865aae429318e00969a1b875bfabe2018403ebd40	PE32	2022-01-12 02:02:21	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Njrat YRP/win_exe_njRAT FlorianRoth/DragonFly_APT_Sep17_3
7ac6a1cb532419ac9bb9601f6eaaa0dce71aa039b0c0ae0d230f6f190adbde1f	PE32	2021-12-18 22:01:48	User Submission	YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/IsPacked [+] YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/VMWare_Detection YRP/Sandboxie_Detection YRP/Dropper_Strings YRP/WMI_strings YRP/DebuggerCheck__QueryInfo YRP/DebuggerCheck__RemoteAPI YRP/anti_dbg YRP/win_mutex YRP/Big_Numbers3 YRP/CRC32_poly_Constant YRP/Njrat YRP/win_exe_njRAT
134aa7e1391420b804024d431ed1e7b512112857a6bea67e11e91b42970e0195	PE32	2021-12-01 11:01:59	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Njrat YRP/win_exe_njRAT FlorianRoth/DragonFly_APT_Sep17_3
647b62057e0fce41fd1b3d7f4c99a834da671e36f4c72eb03bec9e7a34b24b35	PE32	2021-10-03 19:01:17	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Njrat YRP/win_exe_njRAT FlorianRoth/DragonFly_APT_Sep17_3
66908b88f14927076d89349a19c0aec3d840a5ce0d6d139ff95ce7f27c35c4f1	PE32	2021-09-29 08:03:28	User Submission	YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/domain [+] YRP/IP YRP/url YRP/contentis_base64 YRP/VMWare_Detection YRP/Sandboxie_Detection YRP/WMI_strings YRP/DebuggerCheck__QueryInfo YRP/DebuggerCheck__RemoteAPI YRP/anti_dbg YRP/CRC32_poly_Constant YRP/Njrat YRP/win_exe_njRAT YRP/suspicious_packer_section
820f2381fe1860a8b6f9e66032ac4bb79ac6b7b9269264c547e4c63151593df0	PE32	2021-09-21 09:03:28	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland YRP/NETexecutableMicrosoft YRP/mpress_2_xx_net [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/borland_delphi YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Browsers YRP/VM_Generic_Detection YRP/VMWare_Detection YRP/Sandboxie_Detection YRP/Dropper_Strings YRP/WMI_strings YRP/Misc_Suspicious_Strings YRP/DebuggerCheck__RemoteAPI YRP/ThreadControl__Context YRP/anti_dbg YRP/disable_antivirus YRP/inject_thread YRP/hijack_network YRP/create_service YRP/network_udp_sock YRP/network_tcp_listen YRP/network_http YRP/network_dropper YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/sniff_audio YRP/spreading_share YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/MD5_Constants YRP/Delphi_Random YRP/Delphi_FormShow YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Njrat YRP/win_exe_njRAT YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/DarkComet_1 YRP/DarkComet_3 YRP/DarkComet_4 FlorianRoth/RAT_DarkComet KevTheHermit/DarkComet BAMFDetect/DarkComet
751f66bf226c6773d41ee1b16788dc509d64af36206785fd9edb39eaf6028982	PE32	2021-09-14 12:19:52	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/SEH__vba YRP/disable_dep YRP/network_tcp_listen YRP/network_dns YRP/screenshot YRP/keylogger YRP/win_registry YRP/android_meterpreter YRP/Big_Numbers1 YRP/Nanocore_RAT_Gen_2 YRP/Njrat YRP/njrat1 YRP/win_exe_njRAT YRP/NanoCore FlorianRoth/RAT_NanoCore FlorianRoth/Nanocore_RAT_Gen_2 KevTheHermit/NanoCore BAMFDetect/NanoCore BAMFDetect/njrat
72d887a35b475ca748e3fdda767ad82fa12d80936c6d0c0c4a895fa6e0318be3	PE32	2021-09-13 09:04:44	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/DebuggerCheck__QueryInfo YRP/DebuggerCheck__RemoteAPI YRP/anti_dbg YRP/network_dns YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_token YRP/win_hook YRP/Big_Numbers1 YRP/Advapi_Hash_API YRP/CRC32_poly_Constant YRP/Njrat YRP/win_exe_njRAT YRP/Str_Win32_Internet_API YRP/CAP_HookExKeylogger
04c164391efcedd93b5c04dc137e8b80336265246fa15318a67d4b2d20bf257f	PE32	2021-09-11 07:00:13	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland YRP/NETexecutableMicrosoft YRP/IsPE32 [+] YRP/IsWindowsGUI YRP/borland_delphi YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Browsers YRP/VM_Generic_Detection YRP/VMWare_Detection YRP/Sandboxie_Detection YRP/Dropper_Strings YRP/WMI_strings YRP/Misc_Suspicious_Strings YRP/DebuggerCheck__RemoteAPI YRP/ThreadControl__Context YRP/anti_dbg YRP/disable_antivirus YRP/inject_thread YRP/hijack_network YRP/create_service YRP/network_udp_sock YRP/network_tcp_listen YRP/network_http YRP/network_dropper YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/sniff_audio YRP/spreading_share YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers3 YRP/MD5_Constants YRP/Delphi_Random YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Njrat YRP/win_exe_njRAT YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/DarkComet_1 YRP/DarkComet_3 YRP/DarkComet_4 FlorianRoth/RAT_DarkComet KevTheHermit/DarkComet BAMFDetect/DarkComet
aa7f9b8320520317dc7dd19fdbfe55121327dbf070d4a434b4e510c16be41ddd	PE32	2021-09-08 23:00:46	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Big_Numbers3 YRP/Njrat YRP/win_exe_njRAT FlorianRoth/DragonFly_APT_Sep17_3
5046403f44884fe6aa062f9d2f92037136305305ef195d4c213c279e2466ec1f	PE32	2021-09-08 15:05:26	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Njrat YRP/win_exe_njRAT FlorianRoth/DragonFly_APT_Sep17_3
c2eafe4533db528fe305b4a3077b18be3409fdf9bbc655f0626ee550fc00c6c1	PE32	2021-09-08 15:01:59	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Njrat YRP/win_exe_njRAT FlorianRoth/DragonFly_APT_Sep17_3
5a6b088643fc4c4d916c2074d19b64d1759f623ef62900dedcd4ab4f494a2de0	PE32	2021-09-07 07:08:56	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/IP YRP/contentis_base64 YRP/disable_dep YRP/keylogger YRP/TEAN YRP/Njrat YRP/win_exe_njRAT FlorianRoth/DragonFly_APT_Sep17_3
3d3f1d0f77021d4b8d94e2bb4fd056e56d2ec5cd8b6beccabea1453af52c1f38	PE32	2021-09-06 07:02:01	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/network_udp_sock YRP/keylogger YRP/Big_Numbers1 YRP/Njrat YRP/njrat1 YRP/win_exe_njRAT BAMFDetect/njrat
7dceeafd535e43788a701ef74adb6ecdc57cd56533ff3117ddc10b15569e0f1e	PE32	2021-09-02 16:00:16	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Njrat YRP/win_exe_njRAT FlorianRoth/DragonFly_APT_Sep17_3
ce3f49f552210c00b360845000a735879ec0e2e2a3abe6999d7ff0b6774530e0	PE32	2021-09-02 00:01:29	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Njrat YRP/win_exe_njRAT FlorianRoth/DragonFly_APT_Sep17_3
13fd9beb2f246f8e3fc91bc1a34d8cc8959f8d3aab66aa0d4936de8fee95c5c7	PE32	2021-08-31 07:12:53	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/IsPacked YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/anti_dbg YRP/disable_dep YRP/escalate_priv YRP/keylogger YRP/win_token YRP/Big_Numbers1 YRP/CRC32_poly_Constant YRP/CRC32_table YRP/Njrat YRP/win_exe_njRAT
057b1f10b7a4eef0aec4aca0de4717c1b15d21f43278cbb5d8c99c6c3e31b882	PE32	2021-08-31 07:07:20	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Njrat YRP/njrat1 YRP/win_exe_njRAT FlorianRoth/RAT_njRat KevTheHermit/njRat BAMFDetect/njrat
d1ba1d69d33b85c02ffbcff820ee417439c0433c52e2c2ecbb47de9840017025	PE32	2021-08-31 07:04:10	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Njrat YRP/njrat1 YRP/win_exe_njRAT FlorianRoth/RAT_njRat KevTheHermit/njRat BAMFDetect/njrat
c3bef104d99fc5433009d8fd1cc31d510d847e4c94bb536ac487a689d081decc	PE32	2021-08-30 01:01:05	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Njrat YRP/win_exe_njRAT FlorianRoth/DragonFly_APT_Sep17_3
04f1fd44b9c0d0974dfde693551f08ce5bf2749c3acb9bac9bfc8d7e2cb74670	PE32	2021-08-25 01:00:24	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Njrat YRP/win_exe_njRAT FlorianRoth/DragonFly_APT_Sep17_3
75c24172fad5dcee8c4a92b183d17b5da430fce1354536124a6183f27d043754	PE32	2021-08-22 16:34:29	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Njrat YRP/win_exe_njRAT FlorianRoth/DragonFly_APT_Sep17_3
3eb2cb23d9aa44b1587b2bee60549a56fee805655eaafaefe09dc651fa6d2ab3	PE32	2021-08-10 16:38:06	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Njrat YRP/win_exe_njRAT FlorianRoth/DragonFly_APT_Sep17_3
eb688e9d721c561fe334147c66679bbd988da10c06704a15f048b97a9f6b0f7f	PE32	2021-08-05 19:05:06	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/HasDebugData YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Njrat YRP/win_exe_njRAT FlorianRoth/DragonFly_APT_Sep17_3
5d52f58a75bbe7519bbcae8333e91b5dbcc8459bb23bb01d077d5c51954c0ef8	PE32	2021-08-05 19:04:54	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/HasDebugData YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Njrat YRP/win_exe_njRAT FlorianRoth/DragonFly_APT_Sep17_3
1dab360111d8a0f59674bc5c725b88edac598dd7e0171ab7c3bc5416d45e6e89	PE32	2021-08-05 19:04:09	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/HasDebugData YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Njrat YRP/win_exe_njRAT FlorianRoth/DragonFly_APT_Sep17_3
8e3f04d34dfb35e685f6785c406ab5ffdad15ba376c8ac584bf25c7a7b3b547a	PE32	2021-08-05 19:04:05	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/HasDebugData YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Njrat YRP/win_exe_njRAT FlorianRoth/DragonFly_APT_Sep17_3
a8768e632a5c8fbb7c7b201f1e6df6362ed48d77efa74c62eaa900e0e73eebee	PE32	2021-08-05 19:03:23	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/HasDebugData YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Njrat YRP/win_exe_njRAT FlorianRoth/DragonFly_APT_Sep17_3
7d6822107e82ad3fee7b901e4e74bc9f885892da1a1378e63f8cdeaf651b4f49	PE32	2021-08-05 19:03:02	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/HasDebugData YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Njrat YRP/win_exe_njRAT FlorianRoth/DragonFly_APT_Sep17_3
76b5f9aa537f6d48961c685ff3e10c6b754218198ed2700cf256fcc64f1adf9c	PE32	2021-07-23 01:01:09	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Njrat YRP/win_exe_njRAT FlorianRoth/DragonFly_APT_Sep17_3
4f0e5aa77c0e9894c311e8ba4daadeeb5d8b7a6f583cf087a5c90547cfe54708	PE32	2021-07-21 09:06:06	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/disable_dep YRP/keylogger YRP/Njrat YRP/win_exe_njRAT
8eb3881ba7d320c0760042529414e8ee87b8bfc648c34d87dd36ed854b0c8b7b	PE32	2021-07-19 19:00:45	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland YRP/NETexecutableMicrosoft YRP/IsPE32 [+] YRP/IsWindowsGUI YRP/borland_delphi YRP/domain YRP/IP YRP/contentis_base64 YRP/System_Tools YRP/Browsers YRP/VM_Generic_Detection YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/ThreadControl__Context YRP/disable_antivirus YRP/disable_dep YRP/inject_thread YRP/hijack_network YRP/create_service YRP/network_udp_sock YRP/network_tcp_listen YRP/network_dropper YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/sniff_audio YRP/spreading_share YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/MD5_Constants YRP/Delphi_Random YRP/Delphi_FormShow YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Njrat YRP/win_exe_njRAT YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/DarkComet_1 YRP/DarkComet_3 YRP/DarkComet_4 FlorianRoth/RAT_DarkComet KevTheHermit/DarkComet BAMFDetect/DarkComet
92a80b053f4276ced8cdd30ef3e2e38026cb69ae081b24faf5a69a909074bb39	PE32	2021-06-29 07:00:49	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Antivirus YRP/VMWare_Detection YRP/Dropper_Strings YRP/WMI_strings YRP/Misc_Suspicious_Strings YRP/DebuggerCheck__RemoteAPI YRP/anti_dbg YRP/network_tcp_socket YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Big_Numbers1 YRP/Big_Numbers3 YRP/CRC32_poly_Constant YRP/CRC32_table YRP/MD5_Constants YRP/VC8_Random YRP/Njrat YRP/win_exe_njRAT YRP/Str_Win32_Winsock2_Library
4bc2d84d15ae45ccbb03aa55b17d1a03fdf2f55efe3540d7e1762d4b58a538c9	PE32	2021-06-09 22:24:44	User Submission	YRP/ASProtect_v132 YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI [+] YRP/IsPacked YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VM_Generic_Detection YRP/Dropper_Strings YRP/WMI_strings YRP/Misc_Suspicious_Strings YRP/DebuggerCheck__QueryInfo YRP/DebuggerCheck__RemoteAPI YRP/anti_dbg YRP/network_dns YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_token YRP/win_hook YRP/Big_Numbers1 YRP/Advapi_Hash_API YRP/CRC32_poly_Constant YRP/Njrat YRP/win_exe_njRAT YRP/Str_Win32_Internet_API YRP/suspicious_packer_section YRP/CAP_HookExKeylogger
f829bd45e12075c0d95bc76b14ea211f59772e2bf05ecbe32ff336cb6d0ea284	PE32	2021-06-07 06:04:10	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland YRP/NETexecutableMicrosoft YRP/IsPE32 [+] YRP/IsWindowsGUI YRP/borland_delphi YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Browsers YRP/VM_Generic_Detection YRP/Dropper_Strings YRP/WMI_strings YRP/Misc_Suspicious_Strings YRP/anti_dbg YRP/disable_dep YRP/disable_taskmanager YRP/hijack_network YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/network_ssl YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_files_operation YRP/win_hook YRP/Big_Numbers1 YRP/CRC32_poly_Constant YRP/CRC32_table YRP/BASE64_table YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/Njrat YRP/win_exe_njRAT YRP/Str_Win32_Winsock2_Library YRP/CookieTools
f4e19ee47b081915a855cad65d4b573e39ca81ac27b163e2cc914e3445cfee4e	PE32	2021-06-01 18:00:51	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Njrat YRP/win_exe_njRAT FlorianRoth/DragonFly_APT_Sep17_3
78aa25ab94b4131859051344fed4ba950f47b29dea9123e6b3dbbce8ff9bc453	PE32	2021-05-27 22:01:17	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Njrat YRP/win_exe_njRAT FlorianRoth/DragonFly_APT_Sep17_3
b4c3db556f3786d1841ce9b01a2e6505855fadb00287290b1e7bdfe5b8c11174	PE32	2021-05-04 01:59:51	http://159.69.142.67/new/cdsjnhuiiiiiiiiiii.e...	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Njrat YRP/win_exe_njRAT FlorianRoth/DragonFly_APT_Sep17_3
4bbc9e9c30eeb6d7289ac1bf5315b125d1b15f260f5b3237c02259328a22a2be	PE32	2021-02-26 17:24:41	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Njrat YRP/win_exe_njRAT FlorianRoth/DragonFly_APT_Sep17_3
576eb01b09d8a2d7e8b8bb65bd23c237f80e70bb89ff03636574442c8414b271	PE32	2021-02-25 18:40:35	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/HasDebugData YRP/powershell YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Big_Numbers1 YRP/Njrat YRP/win_exe_njRAT FlorianRoth/DragonFly_APT_Sep17_3
c9fc0dc75db7bfd852fbb9030712c5bf2a572bc0881442d1bdce98ee47e4480b	PE32	2021-01-04 18:00:28	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Big_Numbers1 YRP/Njrat YRP/win_exe_njRAT FlorianRoth/DragonFly_APT_Sep17_3
64762e87fc9c42a35758e080c9cfcad78143c9f19f4952239c068cfaf861016d	PE32	2020-11-27 20:52:04	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Njrat YRP/win_exe_njRAT FlorianRoth/DragonFly_APT_Sep17_3
a172942eeb9bf20dd17fab6b08514f211abda02510bd57cdfd8aefc31c3e9e85	PE32	2020-10-26 16:04:09	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Big_Numbers1 YRP/Njrat YRP/win_exe_njRAT FlorianRoth/DragonFly_APT_Sep17_3
b4d6caae79da0b44a757a594b9a3b2e7b71f5ec3e5ffe42bcc0b40a206da8c31	PE32	2020-08-03 18:22:01	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/HasDebugData YRP/domain YRP/IP YRP/contentis_base64 YRP/Browsers YRP/Big_Numbers1 YRP/Njrat YRP/win_exe_njRAT FlorianRoth/DragonFly_APT_Sep17_3
fc1d2554281f1e54b56fe4a31e12cb4c1ff6e12293054108a5850b763ea1c7ce	PE32	2020-07-10 22:49:30	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/IP YRP/contentis_base64 YRP/disable_dep YRP/keylogger YRP/TEAN YRP/Njrat YRP/win_exe_njRAT
f6bc405db3da4e4df654329c7f4edadffc03a033f29d645ac786bf05e28f5735	PE32	2020-07-10 22:13:47	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/network_udp_sock YRP/keylogger YRP/Big_Numbers1 YRP/Njrat YRP/njrat1 YRP/win_exe_njRAT BAMFDetect/njrat
d8455765b29707a6474cdcac1c99c869301f1a36f7c1cf42edca9aeefa3d4a1a	PE32	2020-07-10 19:46:52	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/VM_Generic_Detection YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/cred_local YRP/win_registry YRP/win_hook YRP/Advapi_Hash_API YRP/Njrat YRP/win_exe_njRAT YRP/Str_Win32_Wininet_Library YRP/SpyGate YRP/CAP_HookExKeylogger FlorianRoth/RAT_SpyGate KevTheHermit/SpyGate
d7dd8e9fd6df14a7fe0bd6bc01c453105676db1932d1c26497a20c44d99a77e9	PE32	2020-07-10 19:45:29	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/IP YRP/contentis_base64 YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Big_Numbers1 YRP/Njrat YRP/njrat1 YRP/win_exe_njRAT FlorianRoth/RAT_njRat KevTheHermit/njRat BAMFDetect/njrat
b8f183207a4f0c7454d4be808e08e39b17a46fa57a0068da5a586827f88ab50e	PE32	2020-07-10 17:19:02	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Antivirus YRP/VM_Generic_Detection YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/cred_local YRP/win_registry YRP/win_hook YRP/Advapi_Hash_API YRP/Njrat YRP/win_exe_njRAT YRP/Str_Win32_Wininet_Library YRP/SpyGate YRP/CAP_HookExKeylogger FlorianRoth/RAT_SpyGate KevTheHermit/SpyGate
792cf57b246b40dce0f2043a9912824331ec8ce8422b1d6c5521d75733e0379a	PE32	2020-07-08 16:24:49	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/VM_Generic_Detection YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/cred_local YRP/win_registry YRP/win_hook YRP/Advapi_Hash_API YRP/Njrat YRP/win_exe_njRAT YRP/Str_Win32_Wininet_Library YRP/SpyGate YRP/CAP_HookExKeylogger FlorianRoth/RAT_SpyGate KevTheHermit/SpyGate
5cb1c07a56ce3bd1a4b3828f508c5aaba1aebd1dab0bd9566f41603481827876	PE32	2020-07-07 20:54:22	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Big_Numbers1 YRP/Njrat YRP/njrat1 YRP/win_exe_njRAT BAMFDetect/njrat
f599c851b9806e253d16441eb0d52f20dc666d3f5ac2c29751d771b2034c5f0d	PE32	2020-07-07 11:01:36	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/disable_dep YRP/keylogger YRP/TEAN YRP/Njrat YRP/win_exe_njRAT FlorianRoth/DragonFly_APT_Sep17_3
11ce71108770b2cdbc535cd4b109940087b7860d5b387e20049aabd734371b74	PE32	2020-06-30 09:38:36	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Big_Numbers1 YRP/Njrat YRP/njrat1 YRP/win_exe_njRAT FlorianRoth/RAT_njRat FlorianRoth/DragonFly_APT_Sep17_3 KevTheHermit/njRat BAMFDetect/njrat
118328daa24d0f1fc9795bdce9bee707e91dbe3c99f1d6fc9e2bdff62ebec2a1	PE32	2020-06-30 01:23:21	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Big_Numbers1 YRP/Njrat YRP/njrat1 YRP/win_exe_njRAT BAMFDetect/njrat
28524e880d6039ddd21a8e2d8d35fc2c4e22bc56f9abebfb82548cb4a8fd98ed	PE32	2020-06-29 15:47:12	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Big_Numbers1 YRP/Njrat YRP/win_exe_njRAT FlorianRoth/DragonFly_APT_Sep17_3
8e9a300c57074786d7c5cb0d00a9a2399b62b7671d75213dc0aa1b7cf05d5cee	PE32	2020-06-29 15:46:50	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Njrat YRP/win_exe_njRAT FlorianRoth/DragonFly_APT_Sep17_3
119369ec6c90d9e055b6e1b618a155d5ecf31f95cb36ad6287a66429e90157d1	PE32	2020-06-29 05:16:55	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Big_Numbers1 YRP/Njrat YRP/njrat1 YRP/win_exe_njRAT BAMFDetect/njrat
11666ecb363a3bc3dbaff4a3519a4811fd6e3c9cad1c49f08d0dfb7b72c3613c	PE32	2020-06-29 04:56:17	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Big_Numbers1 YRP/Njrat YRP/njrat1 YRP/win_exe_njRAT FlorianRoth/RAT_njRat FlorianRoth/DragonFly_APT_Sep17_3 KevTheHermit/njRat BAMFDetect/njrat
11e9e634c7039319c772383860a096c53997ca77bb11a93171fd7017eab97dbe	PE32	2020-06-28 15:28:46	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Big_Numbers1 YRP/Njrat YRP/njrat1 YRP/win_exe_njRAT FlorianRoth/RAT_njRat FlorianRoth/DragonFly_APT_Sep17_3 KevTheHermit/njRat BAMFDetect/njrat
117710cccd8d270dada705023dec892c0aff7770d09312d74bbd811e2375d0d3	PE32	2020-06-27 20:08:26	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Big_Numbers1 YRP/Njrat YRP/njrat1 YRP/win_exe_njRAT BAMFDetect/njrat
11d1d82129969f3823d6637e5e88c6cb8fb2c954cd004db15fc72c5fc0442c25	PE32	2020-06-27 15:50:17	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Big_Numbers1 YRP/Njrat YRP/njrat1 YRP/win_exe_njRAT FlorianRoth/RAT_njRat FlorianRoth/DragonFly_APT_Sep17_3 KevTheHermit/njRat BAMFDetect/njrat
11dd6e7698814617f80cec85f4229447568466c91eaba8e54abece4c53bb7fd4	PE32	2020-06-27 14:32:38	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Big_Numbers1 YRP/Njrat YRP/njrat1 YRP/win_exe_njRAT FlorianRoth/RAT_njRat KevTheHermit/njRat BAMFDetect/njrat
11be8c4366b63d5649cd439bf4a2a04dda38da1dd23eaecb4920166aaf43394c	PE32	2020-06-27 12:58:08	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Big_Numbers1 YRP/Njrat YRP/njrat1 YRP/win_exe_njRAT FlorianRoth/RAT_njRat FlorianRoth/DragonFly_APT_Sep17_3 KevTheHermit/njRat BAMFDetect/njrat
11b3415874def467b684fcdd95a246c37e12cf7b094c65f832bf79592bae3fd3	PE32	2020-06-27 11:40:15	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/Big_Numbers1 YRP/Njrat YRP/njrat1 YRP/win_exe_njRAT FlorianRoth/RAT_njRat FlorianRoth/DragonFly_APT_Sep17_3 KevTheHermit/njRat BAMFDetect/njrat
113eac7d35ae2dddb578889833b1d05c84fca0de755242e2495b67912cfeffa0	PE32	2020-06-27 07:55:30	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/IsPacked YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Big_Numbers1 YRP/Njrat YRP/njrat1 YRP/win_exe_njRAT BAMFDetect/njrat
11259b90fd393631ef4d8beed771846a241fe883d1ce8af83544bb11613885a1	PE32	2020-06-27 03:39:59	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Big_Numbers1 YRP/Njrat YRP/njrat1 YRP/win_exe_njRAT BAMFDetect/njrat
1120ccc2b3ba56b387f11ace417a60ab84043642a154afd2b08e4f77e36782ea	PE32	2020-06-26 22:54:15	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Big_Numbers1 YRP/Njrat YRP/njrat1 YRP/win_exe_njRAT FlorianRoth/RAT_njRat KevTheHermit/njRat BAMFDetect/njrat
111c095085cbe7eb8a9f7fed3d425593deea0b7ed063549bb861f154c3955465	PE32	2020-06-26 18:38:22	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Big_Numbers1 YRP/Njrat YRP/njrat1 YRP/win_exe_njRAT BAMFDetect/njrat
111e4548aa982ddb9cba11847c255a6f2ab063dc45814e876c6e3c685a181717	PE32	2020-06-26 18:38:08	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Big_Numbers1 YRP/Njrat YRP/njrat1 YRP/win_exe_njRAT FlorianRoth/RAT_njRat FlorianRoth/DragonFly_APT_Sep17_3 KevTheHermit/njRat BAMFDetect/njrat
698f345d3fe6d5c46450f9960d215367646a66b86197376ab85d9f7e24f1418a	PE32	2020-06-12 20:49:00	http://43.229.151.135:80/nyan.exe	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/IsBeyondImageSize YRP/domain YRP/IP YRP/contentis_base64 YRP/WMI_strings YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Njrat YRP/win_exe_njRAT FlorianRoth/DragonFly_APT_Sep17_3
539f942a5bce329fe2ac1e94d152416495956e7f2372b2a5a0ff6ece478772f7	PE32	2020-06-12 20:48:31	http://43.229.151.135:80/Loader.exe	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/IsBeyondImageSize YRP/domain YRP/IP YRP/contentis_base64 YRP/WMI_strings YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Njrat YRP/win_exe_njRAT FlorianRoth/DragonFly_APT_Sep17_3
4491800d6a253f2f66806ae3c608e9a9100de527b0ccfaefaf698c8a5f0bf32e	PE32	2020-06-12 19:19:46	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Njrat YRP/win_exe_njRAT FlorianRoth/DragonFly_APT_Sep17_3
0d6b74a83ee26ac65db1386bdba9f6f1c9e62137d71b1147b16517b3bf8ac9ce	PE32	2020-06-12 19:19:30	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Njrat YRP/win_exe_njRAT FlorianRoth/DragonFly_APT_Sep17_3
0e2821a2518ddfba5c461b6ebcd30d0226c92cfbf9bc31d1b848502dc0fb89df	PE32	2020-03-26 17:43:57	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/WMI_strings YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Njrat YRP/win_exe_njRAT FlorianRoth/DragonFly_APT_Sep17_3
18496999237fe988a8e877106965058e55ba3cf24fa6e9a18e244589434d4a20	PE32	2019-09-14 12:01:44	http://51.15.252.204/51/222.exe	YRP/IsPE32 YRP/IsWindowsGUI YRP/IsBeyondImageSize YRP/domain [+] YRP/IP YRP/url YRP/contentis_base64 YRP/VM_Generic_Detection YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/cred_local YRP/win_registry YRP/win_hook YRP/Advapi_Hash_API YRP/Njrat YRP/win_exe_njRAT YRP/Str_Win32_Wininet_Library YRP/CAP_HookExKeylogger
801c5d2fe872de0ebdf9b23af32ea4097c2f68622a6675d8378186e5fce8e7cb	PE32	2019-03-14 19:47:08	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/VM_Generic_Detection YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/cred_local YRP/win_registry YRP/win_hook YRP/Advapi_Hash_API YRP/Njrat YRP/win_exe_njRAT YRP/Str_Win32_Wininet_Library YRP/SpyGate YRP/CAP_HookExKeylogger FlorianRoth/RAT_SpyGate KevTheHermit/SpyGate
6e0b61bc78636b233c267884e33f5bf08427247876fb649eccc3df0a3dc0bef7	PE32	2019-02-15 01:03:00	http://a0277166.xsph.ru/file/Win_update1.exe	YRP/IsPE32 YRP/IsWindowsGUI YRP/IsBeyondImageSize YRP/domain [+] YRP/contentis_base64 YRP/keylogger YRP/win_hook YRP/Njrat YRP/win_exe_njRAT
f252264723bb52fb2e2a8f7b12d8d2a29bac681affedcc9b9ad6f5bbfd752d96	PE32	2018-11-13 09:07:32	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Big_Numbers1 YRP/Njrat YRP/njrat1 YRP/win_exe_njRAT BAMFDetect/njrat
2b12086db44c78fe68e444b90173684302b9b7786e49c4f68108237ccd930ab4	PE32	2018-09-07 11:47:29	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/VM_Generic_Detection YRP/Dropper_Strings YRP/WMI_strings YRP/Misc_Suspicious_Strings YRP/keylogger YRP/win_hook YRP/Njrat YRP/win_exe_njRAT YRP/CAP_HookExKeylogger
8ad782220a6db0ea00b61e134650b6d0bb0431313e425aa7eb5be37394e4c77c	PE32	2018-09-07 10:22:32	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Big_Numbers1 YRP/Njrat YRP/njrat1 YRP/win_exe_njRAT BAMFDetect/njrat
c267aeb3f4ebdc01077cd257cb867c38a92fd7df619591a912f1678129b22ac2	PE32	2018-08-20 13:32:04	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Big_Numbers1 YRP/Njrat YRP/njrat1 YRP/win_exe_njRAT BAMFDetect/njrat
edaa21b6bb8986c207d51db3a3bc9af4a794d15a7e25805998ce9bc437e68e97	PE32	2018-08-19 09:49:57	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VM_Generic_Detection YRP/Dropper_Strings YRP/WMI_strings YRP/Misc_Suspicious_Strings YRP/DebuggerCheck__QueryInfo YRP/SEH__vba YRP/WMI_VM_Detect YRP/anti_dbg YRP/disable_dep YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/sniff_audio YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers1 YRP/Big_Numbers3 YRP/Advapi_Hash_API YRP/MD5_API YRP/Njrat YRP/win_exe_njRAT YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/CAP_HookExKeylogger
9c1b0a03c1f7e4b5c23238a986479f9b5577d25f0df702ef9fa537c99a1db385	PE32	2018-07-24 11:41:15	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/SEH__vba YRP/disable_dep YRP/keylogger YRP/Big_Numbers1 YRP/Njrat YRP/njrat1 YRP/win_exe_njRAT BAMFDetect/njrat
41285b9a3a00b9e44bdd7eb4abe21455e2070ee8abc0512473bb37edc8a97cfe	PE32	2018-06-23 10:07:42	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Big_Numbers1 YRP/Njrat YRP/njrat1 YRP/win_exe_njRAT BAMFDetect/njrat
840ae96877b9ca606befcd38404e885ec881dd389c17114b28a4f624751d74ad	PE32	2018-06-23 10:07:06	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Big_Numbers1 YRP/Njrat YRP/njrat1 YRP/win_exe_njRAT BAMFDetect/njrat
cb30abd9ac1c425df8c1792e214aec1ac06c355563209f3adee6002c908c0d5d	PE32	2018-06-23 10:04:52	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Big_Numbers1 YRP/Njrat YRP/njrat1 YRP/win_exe_njRAT BAMFDetect/njrat
da8b1b25ab1be6b8d689917b47f303f01fd4821c9e7e420644a1aa738099ffab	PE32	2018-06-23 10:04:40	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Big_Numbers1 YRP/Njrat YRP/njrat1 YRP/win_exe_njRAT BAMFDetect/njrat
c88ff2843939179665b7ae54d0fd29937cdacae500fedc76e05e6f6682390daa	PE32	2018-06-23 10:04:02	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/Browsers YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Big_Numbers1 YRP/Njrat YRP/njrat1 YRP/win_exe_njRAT BAMFDetect/njrat
37c22fae8bebfb0c22908ea35f602b6fe2ad13c307590434a62b955c1a9f3337	PE32	2018-06-23 10:02:48	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Big_Numbers1 YRP/Njrat YRP/njrat1 YRP/win_exe_njRAT BAMFDetect/njrat
a253a2614bf85268caadce7a0f4de24d5c74f2674b3d16bcf10e71e0c941f290	PE32	2018-06-23 10:02:36	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Big_Numbers1 YRP/Njrat YRP/njrat1 YRP/win_exe_njRAT BAMFDetect/njrat
ed87c99769ce45c3703556bb38125f0e5d33e752e115e25918be3b9492b31648	PE32	2018-06-23 10:02:00	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Big_Numbers1 YRP/Njrat YRP/njrat1 YRP/win_exe_njRAT BAMFDetect/njrat

Recent Searches
yrp/win_exe_njrat
yrp/fgint_fgintmodexp
yrp/ransom_alpha
yrp/maskpev20yzkzero
yrp/ccrewdownloader2
yrp/apt1_webc2_head
yrp/scieron
yrp/blackhole2_htm8
yrp/misc_pos
yrp/simplepack1xmethod2bagie

Search

Recent Searches