MD5 Hash File type Added Source Yara Hits
84e3ad0d62d21739d632d2106864e79e ELF 2017-10-16 01:20:43User Submission CuckooSandbox/shellcode CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api CuckooSandbox/vmdetect [+]
b3d26632c4077e731ef2da329974519d ELF 2017-10-16 01:33:40User Submission CuckooSandbox/shellcode CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api CuckooSandbox/vmdetect [+]
24734ef952fe363415cd4c2f7322276f ELF 2017-10-16 01:37:29User Submission CuckooSandbox/shellcode CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api CuckooSandbox/vmdetect [+]
bcab7e2aa3391fd71b48dfa807773900 Composite 2018-03-08 11:36:19User Submission YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
01aba404d2c25cd84fcab7d242ef03c6 Composite 2018-05-02 12:48:58User Submission YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
35f71d3a921d7c4579aebb3f15e9f21b Composite 2018-05-10 10:37:15User Submission YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
544d3cd33bfccde66edae3acd52ea056 Composite 2018-05-15 16:44:32User Submission YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
8d1e5288b871a1a8b94986811dec0fcc Composite 2018-05-16 17:40:56User Submission YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
f901c645188f9c80afa8f49174f065ce PE32+ 2018-05-24 00:58:05User Submission CuckooSandbox/vmdetect YRP/webshell_iMHaPFtp_2 YRP/webshell_caidao_shell_guo YRP/webshell_cihshell_fix [+]
02cffecb2f3bb744309429849737a097 Composite 2018-06-21 15:45:53User Submission YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
8ace23b97a066b755f83198991e25249 Composite 2018-06-21 15:46:44User Submission YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
d3f0bf59eb3c00210459272b0af8f78b Composite 2018-06-22 10:56:33User Submission YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Office_AutoOpen_Macro YRP/Contains_VBA_macro_code [+]
8eacad78846439b1ba997ea260216a25 Composite 2018-06-22 13:18:18User Submission YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
39f7a650251a4c42bd4ae304e65335da Composite 2018-06-22 22:06:58User Submission YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
752e8131e4f2f3ed83657af4ce5d725d Composite 2018-06-23 01:58:57User Submission YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
40c4c02d1e506a5ffc2939ec0ee8e105 Composite 2018-06-23 08:05:26User Submission YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
8e46550f26cf1259b9c07967f2b767d4 Composite 2018-06-23 12:54:43User Submission YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
92547721a4b03da2496e4c276acdac54 Composite 2018-07-02 14:28:30User Submission YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
0f7773073467e71ffe8f10cfba0b2367 Composite 2018-07-06 12:57:13http://172.81.134.47/statement_130986.doc YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
36d65dbe39a16893a8fc408c0aa50c1c Composite 2018-07-07 01:17:51http://172.81.134.47/statement_130986.doc YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
1b06095990a9bfb3e265c8c5e9a940c3 Composite 2018-07-13 07:52:01User Submission YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
23c982cd033934dd1f173e4e6bcd8c0b Composite 2018-07-13 08:36:40User Submission YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
1ff61c5c9f8dbc5e2550bdd14e790321 Composite 2018-07-13 08:42:07User Submission YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
5d8ac5de73987cebef993da78f1e5773 Composite 2018-07-13 09:55:41User Submission YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
f69dbd05e72baff642f4c9b19df65b8a Composite 2018-07-13 10:00:54User Submission YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
2e484b49460e9f1b5cbcaebca66df72c Composite 2018-07-24 09:18:51User Submission YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
76392af855e84ba97ace0f20e0730972 Composite 2018-07-24 09:28:50User Submission YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
e1f852fcf7d8afb89786f7b8d8f00b5c Composite 2018-07-24 09:43:29User Submission YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
56e8759c0919eeb931d9aed8aa8ac2ce Composite 2018-07-24 10:00:40User Submission YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
e21e18a2e5ae56797accaf46fe0d85c6 Composite 2018-07-25 00:46:48User Submission YRP/possible_includes_base64_packed_functions YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code [+]
d77a30343e57e344943dada272c20739 Composite 2018-07-27 00:45:06https://downloads.intercomcdn.com/i/o/6936256... YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
8a9416e30c8d74c971ef7abfe5fbbfce Composite 2018-08-20 09:57:42User Submission YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
fc88e48ac0de5e46b0008c1b6cc345ca Composite 2018-08-20 10:01:31User Submission YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
e8b43367978d919d09ad11d6e20ac081 Composite 2018-08-20 10:01:43User Submission YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
5e981208e038859d666c869f8440b3ff Composite 2018-08-20 11:45:48User Submission YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
d24568ce040b2c305603e10ac4f3d2a6 Composite 2018-08-20 12:14:41User Submission YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
0d31b267e5e3e4c2cbaa0d6e61787211 Composite 2018-08-20 13:57:12User Submission YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
7110b6c10cf42c7d36df173fc239b50c Composite 2018-08-22 00:45:24User Submission YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
606bad19483efa1f18483fa630cddb6a Composite 2018-08-28 14:39:31User Submission CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api YRP/Contains_UserForm_Object YRP/office_document_vba [+]
ab279f04808fb7362adc08e02383e82c Composite 2018-08-29 14:19:48User Submission CuckooSandbox/shellcode CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api YRP/Contains_UserForm_Object [+]
1a4ca144e38496fd377f65a854a5a164 Composite 2018-08-30 14:40:12User Submission CuckooSandbox/shellcode CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api YRP/Contains_UserForm_Object [+]
963c7472691ae08ea958e97095b213d5 Composite 2018-09-04 16:01:10User Submission CuckooSandbox/shellcode CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api YRP/Contains_UserForm_Object [+]
a15041cd0316c1bac84d04f1fa595cc4 Composite 2018-09-06 16:34:16User Submission CuckooSandbox/shellcode CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api YRP/Contains_UserForm_Object [+]
1741c2bdf250d8ea48bfe2f4a95183f0 Composite 2018-09-07 09:48:20User Submission CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api YRP/Contains_UserForm_Object YRP/office_document_vba [+]
e12b96177f08e70e5a3649326eb44b98 Composite 2018-09-07 09:55:38User Submission YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
e57d44fd470e7364a235353ded942f0f Composite 2018-09-07 10:09:16User Submission CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api YRP/NETDLLMicrosoft YRP/Contains_UserForm_Object [+]
82a5b24fddc40006396f5e1e453dc256 Composite 2018-09-07 13:00:45User Submission YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
50597e436876e9c69996ac3147571733 Composite 2018-10-04 00:57:30https://protect-us.mimecast.com/s/qki9C73WXju... YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Office_AutoOpen_Macro YRP/Contains_VBA_macro_code [+]
45230efa2ac42b1da4f5dd95bbfded37 Composite 2018-10-10 14:40:14User Submission CuckooSandbox/embedded_win_api YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code [+]
3a1333aafe6bbd2b6e4eb971b19a0529 Composite 2018-11-13 08:07:17User Submission YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
da225e81738e681b0e91f306c7cce2ab Composite 2018-11-13 09:25:06User Submission YRP/Contains_UserForm_Object YRP/powershell YRP/office_document_vba YRP/Contains_VBA_macro_code [+]
dcc53b3285f08291c36a001b3a4487eb Composite 2018-11-13 11:28:13User Submission CuckooSandbox/shellcode CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api YRP/Contains_UserForm_Object [+]
864bc5cfba574400353cb30efad9e033 Composite 2018-11-13 16:09:27User Submission CuckooSandbox/shellcode CuckooSandbox/embedded_win_api YRP/Contains_UserForm_Object YRP/office_document_vba [+]
70f45f6bb81da3259b1145a4be78f398 Composite 2018-11-13 16:14:21User Submission YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
2d3983af7aa8b535601bc4a6bb3756d1 Composite 2018-11-13 21:49:36User Submission YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
f1f1842f8961dc459a5eeb7e66dd409f Composite 2018-11-14 01:34:41User Submission YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
3d6c6fdab60268575ccc6b786168ad1b Composite 2018-11-14 07:59:10User Submission YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Office_AutoOpen_Macro YRP/Contains_VBA_macro_code [+]
d37ef76c88342274d78909c7309d6de0 Composite 2018-11-14 09:56:27User Submission CuckooSandbox/shellcode CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api YRP/Contains_UserForm_Object [+]
c84b1f9e1676ab7b0e7ec50c8e0d8446 Composite 2018-11-14 10:49:59User Submission YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
2af42543ef5bbca28333456215f0a808 Composite 2018-11-14 11:18:12User Submission YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
8cc78ee9eb6b9a5d34067a4294903f01 Composite 2018-11-14 16:11:32User Submission CuckooSandbox/shellcode CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api YRP/Contains_UserForm_Object [+]
7ea8e50ce884dab89a13803ccebea26e Composite 2018-11-14 16:50:18User Submission YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
b8cf70aff3134c3a4e1213d0726ae47c Composite 2018-11-14 17:08:42User Submission YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
7d13b6c0d2d8195dcb9316ed86536041 Composite 2018-11-14 17:36:20User Submission YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Office_AutoOpen_Macro YRP/Contains_VBA_macro_code [+]
187d20d7bb1b84445587a7072202d8d0 Composite 2018-11-14 18:06:05User Submission CuckooSandbox/embedded_win_api YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code [+]
eb69fb45feb97af81c2f306564acc2da Composite 2018-11-14 18:10:11User Submission YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
7d54a816119f26953f47faf74645fca6 Composite 2018-11-14 19:41:21User Submission YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Office_AutoOpen_Macro YRP/Contains_VBA_macro_code [+]
3e77d48a7ab8bf4b36ecbc6b8556a84b Composite 2018-11-14 22:34:00User Submission CuckooSandbox/embedded_win_api YRP/possible_includes_base64_packed_functions YRP/Contains_UserForm_Object YRP/office_document_vba [+]
0b19eede49b4f7d0aff8c6270caa28d3 Composite 2018-11-15 02:49:33User Submission CuckooSandbox/shellcode CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api YRP/Contains_UserForm_Object [+]
f1ee6f8fdd7d08a3d656bf5353570dd3 Composite 2018-11-15 14:41:18User Submission YRP/Contains_UserForm_Object YRP/powershell YRP/office_document_vba YRP/Contains_VBA_macro_code [+]
b811a63eaa3f6a76d4176a64655c086f Composite 2018-11-15 14:53:52User Submission YRP/Contains_UserForm_Object YRP/powershell YRP/office_document_vba YRP/Contains_VBA_macro_code [+]
dce667bf69831e4db92c5c6530353b40 Composite 2018-11-20 16:30:51User Submission YRP/Contains_UserForm_Object YRP/powershell YRP/office_document_vba YRP/Contains_VBA_macro_code [+]
e130aa3812488a5fb9dee458f2c2e957 Composite 2018-11-20 16:30:57User Submission YRP/Contains_UserForm_Object YRP/powershell YRP/office_document_vba YRP/Contains_VBA_macro_code [+]
9bb72ca28b5057523aefaa6f92d3f1ca Composite 2018-11-20 16:31:03User Submission YRP/Contains_UserForm_Object YRP/powershell YRP/office_document_vba YRP/Contains_VBA_macro_code [+]
03f7e3175439d6a0571d897289f8a9fd Composite 2018-12-11 16:27:55https://baml-secure.com/AuthenticationFramewo... YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
b31b959c7d97b55bd1d49a44ff039dbf Composite 2018-12-25 18:43:42User Submission CuckooSandbox/embedded_win_api YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code [+]
dcebac428a56b42efac5f53b814ee467 Composite 2019-01-02 10:02:52User Submission CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api YRP/Contains_UserForm_Object YRP/office_document_vba [+]
ac0df8e82b59bd3ec15af4a0c6c8823f Composite 2019-04-01 22:42:26User Submission YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
3c2a0d6d0ecf06f1be9ad411d06f7ba8 Composite 2019-04-30 20:59:43User Submission YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
512ddc69f893346ba586158905f5bd1d Composite 2019-05-14 03:04:38User Submission YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
806adc79e7ea3be50ef1d3974a16b7fb Composite 2019-05-24 22:44:19User Submission CuckooSandbox/embedded_macho YRP/Contains_UserForm_Object YRP/powershell YRP/office_document_vba [+]
5c6148619abb10bb3789dcfb32f759a6 Composite 2019-05-24 22:46:17User Submission YRP/Contains_UserForm_Object YRP/powershell YRP/office_document_vba YRP/Contains_VBA_macro_code [+]
09aabd2613d339d90ddbd4b7c09195a9 Composite 2019-05-24 22:49:58User Submission YRP/Contains_UserForm_Object YRP/powershell YRP/office_document_vba YRP/Contains_VBA_macro_code [+]
477e6a9efebdbf54f09d06ef8a29da79 Composite 2019-06-13 13:32:34http://kramerleonard.com/OZ74509374.doc YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
489be83c212e2b7726bc0444b3551014 Composite 2019-06-17 12:57:30User Submission YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
6636330804d32e73e4623fd1ca3b926b Composite 2019-06-18 01:27:04User Submission YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
b207ce6f54d8385c479d0b5a56adfcea Composite 2019-06-18 15:13:19User Submission YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
4124d00fde2477eaa52b432435befa14 Composite 2019-06-19 02:55:40User Submission YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
f161b9b32b610470b0020c4dc419428e Composite 2019-06-20 05:06:18User Submission YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
2a18cfc5f0adc1769f7fe646cc220d4a Composite 2019-06-20 12:01:28User Submission YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
47d5037c4cec73434ceab1d7f85efc56 Composite 2019-06-20 12:01:32User Submission YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
1589d2f560d57a13ae98767b6777b2fa Composite 2019-06-20 12:01:36User Submission YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
987bd2361c0ed6e05400b027c113be44 Composite 2019-06-20 12:17:58http://greenthumbsup.jp/20.06.2019_746.38.doc YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
28e70624588588d256efc162fc17b9b7 Composite 2019-06-21 00:17:49User Submission YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
3265ad2f0a1eaf93fd84f3f5f6f5f7cb Composite 2019-06-21 00:17:53User Submission YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
5437a1c3c6e8459970edcab0d8a177da Composite 2019-06-21 12:50:12User Submission YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
b026a15ac17d443ff37e57567368d9f1 Composite 2019-06-22 01:01:04User Submission YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
80ad0f492753d9f6b823cbab686dfa5b Composite 2019-06-22 14:07:48User Submission YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
bbfc8de401d53d13d42ee36100b3effa Composite 2019-06-22 14:07:52User Submission YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
926dc5200e87eaef7c575dca898c51bb Composite 2019-06-23 02:16:59User Submission YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
e04cccb0b94cdb73b3303fcee250319b Composite 2019-06-23 14:35:20User Submission YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
d6438345c12dd000ff2d55a7a3b8ccb6 Composite 2019-07-29 12:05:11http://fakers.co.jp/25072019_0963.xls YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
5f6c61cccf8cb547a3979e1d49a7ef81 Composite 2019-08-31 00:03:07http://www.ma.mctv.ne.jp/~blanc/25072019_4093... YRP/Contains_UserForm_Object YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/domain [+]
5f87f4670039ad4b653bc90c1327c371 Composite 2019-09-06 00:03:16User Submission YRP/Contains_UserForm_Object YRP/powershell YRP/office_document_vba YRP/Contains_VBA_macro_code [+]
f45f3e4451ca16706231d3e0cfa9b2d5 Composite 2019-09-20 17:09:20User Submission CuckooSandbox/shellcode CuckooSandbox/embedded_pe YRP/Contains_UserForm_Object YRP/office_document_vba [+]
70b917234c16def94f65291769c9a65e Composite 2019-09-20 17:09:38User Submission CuckooSandbox/shellcode CuckooSandbox/embedded_pe YRP/Contains_UserForm_Object YRP/office_document_vba [+]
ddbc838ffd417eb9a0791486464f90ab Composite 2019-09-20 17:09:41User Submission CuckooSandbox/shellcode CuckooSandbox/embedded_pe YRP/Contains_UserForm_Object YRP/office_document_vba [+]
df044714b609ff73666950e265733396 Composite 2019-09-20 17:19:30User Submission CuckooSandbox/shellcode CuckooSandbox/embedded_pe YRP/Contains_UserForm_Object YRP/office_document_vba [+]
6ec50d3a93971c2e95e2f3a4ccd7a6cb Composite 2019-09-20 17:19:38User Submission CuckooSandbox/shellcode CuckooSandbox/embedded_pe YRP/Contains_UserForm_Object YRP/office_document_vba [+]
8caf6a42372e1c564311b7229bfbeb33 Composite 2019-09-20 17:19:41User Submission CuckooSandbox/shellcode CuckooSandbox/embedded_pe YRP/Contains_UserForm_Object YRP/office_document_vba [+]
b538e8d294cd1b30201c833ce5dd4c55 Composite 2019-09-20 17:49:21User Submission CuckooSandbox/shellcode CuckooSandbox/embedded_pe YRP/Contains_UserForm_Object YRP/office_document_vba [+]
fb9250bc8d347c533b89d47b57d2e7f2 Composite 2019-09-20 17:59:21User Submission CuckooSandbox/shellcode CuckooSandbox/embedded_pe YRP/Contains_UserForm_Object YRP/office_document_vba [+]
c14b43a61ed1124306de5bfb0ed65796 Composite 2019-09-20 18:09:21User Submission CuckooSandbox/shellcode CuckooSandbox/embedded_pe YRP/Contains_UserForm_Object YRP/office_document_vba [+]
d2908c197491a8401f4949975e0d5ce4 Composite 2019-09-20 18:19:21User Submission CuckooSandbox/shellcode CuckooSandbox/embedded_pe YRP/Contains_UserForm_Object YRP/office_document_vba [+]
00491ac0bdf6a4427dac625bcce3fca1 Composite 2019-09-23 06:19:23User Submission CuckooSandbox/shellcode CuckooSandbox/embedded_pe YRP/Contains_UserForm_Object YRP/office_document_vba [+]
944cc2e33a38a2cccd4001a2bffddcc7 Composite 2019-09-23 09:09:37User Submission CuckooSandbox/shellcode CuckooSandbox/embedded_pe YRP/Contains_UserForm_Object YRP/office_document_vba [+]
c79b071702d9241fb9d84e837434284e Composite 2019-09-23 19:19:27User Submission CuckooSandbox/shellcode CuckooSandbox/embedded_pe YRP/Contains_UserForm_Object YRP/office_document_vba [+]
676922539240c0d6bd398047c1cbe8d7 Composite 2019-09-24 10:09:44User Submission CuckooSandbox/shellcode CuckooSandbox/embedded_pe YRP/Contains_UserForm_Object YRP/office_document_vba [+]
098c361fd5c4e55796e26e29470a2c01 Composite 2019-09-24 11:29:28User Submission CuckooSandbox/shellcode CuckooSandbox/embedded_pe YRP/Contains_UserForm_Object YRP/office_document_vba [+]
d53f4e5bdba3f109f76f8c09f821634e Composite 2019-09-24 11:29:30User Submission CuckooSandbox/shellcode CuckooSandbox/embedded_pe YRP/possible_includes_base64_packed_functions YRP/Contains_UserForm_Object [+]
cb79af416a2861d607ffd62ef8fe1c9a Composite 2019-09-24 11:29:41User Submission CuckooSandbox/shellcode CuckooSandbox/embedded_pe YRP/Contains_UserForm_Object YRP/office_document_vba [+]
26e21f1c6f4205e8afef4bac3c4f12d6 Composite 2019-09-24 13:29:33User Submission CuckooSandbox/shellcode CuckooSandbox/embedded_pe YRP/Contains_UserForm_Object YRP/office_document_vba [+]
12907cfe454b4b0cdc56204f10a3a64a Composite 2019-09-24 13:29:35User Submission CuckooSandbox/shellcode CuckooSandbox/embedded_pe YRP/Contains_UserForm_Object YRP/office_document_vba [+]
40912de348424ecc37c16d73ea39c326 Composite 2019-09-24 14:30:07User Submission CuckooSandbox/shellcode CuckooSandbox/embedded_pe YRP/Contains_UserForm_Object YRP/office_document_vba [+]
0484df9e5ed37ec4609247513076d069 Composite 2019-09-26 11:21:19User Submission CuckooSandbox/shellcode CuckooSandbox/embedded_pe YRP/Contains_UserForm_Object YRP/office_document_vba [+]
8005bf4ed0e4294e06e2ce668d1147cb Microsoft 2019-09-26 15:34:30User Submission CuckooSandbox/embedded_win_api YRP/possible_includes_base64_packed_functions YRP/docx_macro YRP/Contains_UserForm_Object [+]
dfb4ad5238a35c6879c4e58442429348 Composite 2019-09-26 15:34:33User Submission CuckooSandbox/embedded_win_api YRP/possible_includes_base64_packed_functions YRP/Contains_UserForm_Object YRP/office_document_vba [+]
bffcd7de429220cb8225de11212e0ef8 Composite 2019-09-26 18:40:02User Submission CuckooSandbox/shellcode CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api YRP/Contains_UserForm_Object [+]
1b03404148a3d72ee82fa6613549ad5c Composite 2019-09-27 15:19:42User Submission CuckooSandbox/shellcode CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api YRP/Contains_UserForm_Object [+]
746a77ad399ad485b5b35e9d35733e82 Composite 2019-09-27 15:20:40User Submission CuckooSandbox/shellcode CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api YRP/Contains_UserForm_Object [+]
5035b8956d848289bf5b8a6f830843e0 Composite 2019-09-27 22:50:06User Submission CuckooSandbox/shellcode CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api YRP/Contains_UserForm_Object [+]
df580709d68df472bc7ed2cefadd24b6 Composite 2019-10-01 13:39:46User Submission CuckooSandbox/shellcode CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api YRP/Contains_UserForm_Object [+]
25de0c5b14bcb0c0c5b0ad784e17539c Composite 2019-10-01 13:39:53User Submission CuckooSandbox/shellcode CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api YRP/Contains_UserForm_Object [+]
7bb9e45da9ee4883ba56fc9b8f886259 Composite 2019-10-01 13:49:51User Submission CuckooSandbox/shellcode CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api YRP/Contains_UserForm_Object [+]
37d46a9928f2229b2082c8a7fd886e22 Composite 2019-10-01 15:29:54User Submission CuckooSandbox/shellcode CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api YRP/possible_includes_base64_packed_functions [+]
ab1f2dc54c89ae49afb7004d87e734de Composite 2019-10-02 13:19:47User Submission CuckooSandbox/shellcode CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api YRP/possible_includes_base64_packed_functions [+]
5fd6c9ca842ef4fd97dc05d666b8d2a9 Composite 2019-10-03 20:32:18User Submission CuckooSandbox/shellcode CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api YRP/Contains_UserForm_Object [+]
b66e001229f38b4f47b5b3891be3dc8b Composite 2019-10-07 20:29:51User Submission CuckooSandbox/shellcode CuckooSandbox/embedded_pe YRP/Contains_UserForm_Object YRP/office_document_vba [+]
0f6482fe2d1da3b7bdaad90e3a452a05 Composite 2019-10-08 14:19:53User Submission CuckooSandbox/shellcode CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api YRP/Contains_UserForm_Object [+]
bebe1be1a4fb537cc00ebf8edf4b8f17 Composite 2019-10-09 11:29:54User Submission CuckooSandbox/shellcode CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api YRP/Contains_UserForm_Object [+]
0e8199b87cea34af9d5a919c3152c989 Composite 2019-10-09 14:05:10User Submission CuckooSandbox/shellcode CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api YRP/Contains_UserForm_Object [+]
eaf93578f26f1749526920c1eb92c37c Composite 2019-10-10 07:59:56User Submission CuckooSandbox/shellcode CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api YRP/Contains_UserForm_Object [+]
14a00e94fdc591e69353da90713c6556 Composite 2019-10-10 11:39:55User Submission CuckooSandbox/shellcode CuckooSandbox/embedded_pe YRP/Contains_UserForm_Object YRP/office_document_vba [+]
2dd46db7b5683a3c75716fe6d30d71aa Composite 2019-10-10 15:09:55User Submission CuckooSandbox/shellcode CuckooSandbox/embedded_pe YRP/Contains_UserForm_Object YRP/office_document_vba [+]