MD5 Hash File type Added Source Yara Hits
84e3ad0d62d21739d632d2106864e79e ELF 2017-10-16 01:20:43 CuckooSandbox/shellcode CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api CuckooSandbox/vmdetect [+]
b3d26632c4077e731ef2da329974519d ELF 2017-10-16 01:33:40 CuckooSandbox/shellcode CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api CuckooSandbox/vmdetect [+]
24734ef952fe363415cd4c2f7322276f ELF 2017-10-16 01:37:29 CuckooSandbox/shellcode CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api CuckooSandbox/vmdetect [+]
d8f090ceb56b5506d9a54cac55d0289d Zip 2018-03-18 03:06:51 CuckooSandbox/shellcode YRP/davivienda YRP/powershell YRP/domain [+]
6870ef8a016f15c6f021116e25a9b3ba PE32+ 2018-05-10 14:37:26 YRP/Microsoft_Visual_Cpp_80_DLL YRP/IsPE64 YRP/IsWindowsGUI YRP/IsBeyondImageSize [+]
f901c645188f9c80afa8f49174f065ce PE32+ 2018-05-24 00:58:05 CuckooSandbox/vmdetect YRP/webshell_iMHaPFtp_2 YRP/webshell_caidao_shell_guo YRP/webshell_cihshell_fix [+]
84ed039803aa646d72e0b0881dd701a3 Zip 2018-06-08 15:08:32 CuckooSandbox/shellcode YRP/davivienda YRP/powershell YRP/domain [+]
1c929f4bbe1f64d313ad29df1ab4f08d ASCII 2018-06-08 15:10:00 YRP/powershell YRP/domain YRP/contentis_base64 YRP/Misc_Suspicious_Strings [+]
698fb3f2dadbf9c4496912f76d3dc6df ASCII 2018-06-08 15:10:00 YRP/powershell YRP/domain YRP/contentis_base64 YRP/Misc_Suspicious_Strings [+]
4820f1624ca56094432ee05dac72803e HTML 2018-06-20 12:30:58http://lecap-services.fr/wiB9s/ YRP/domain YRP/url YRP/contentis_base64 YRP/Misc_Suspicious_Strings [+]
8912dece9689a7477e463e5104254098 Composite 2018-07-12 09:08:41 CuckooSandbox/shellcode CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api YRP/domain [+]