MD5 Hash File type Added Source Yara Hits
84e3ad0d62d21739d632d2106864e79e ELF 2017-10-16 01:20:43 CuckooSandbox/shellcode CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api CuckooSandbox/vmdetect [+]
b3d26632c4077e731ef2da329974519d ELF 2017-10-16 01:33:40 CuckooSandbox/shellcode CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api CuckooSandbox/vmdetect [+]
24734ef952fe363415cd4c2f7322276f ELF 2017-10-16 01:37:29 CuckooSandbox/shellcode CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api CuckooSandbox/vmdetect [+]
942231b40dc83fcea08505c19d791012 current 2018-03-07 03:47:02http://103.68.190.250/Sources//Advance/BJWJ/s... CuckooSandbox/embedded_win_api YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 [+]
59f5f5721a5b3b4c9002b439e608e9b7 data 2018-03-07 03:47:04 CuckooSandbox/embedded_win_api YRP/domain YRP/contentis_base64 YRP/DebuggerCheck__GlobalFlags [+]
52eac742fabc7f16c1d5a5811ab2669d data 2018-03-07 03:47:04 CuckooSandbox/embedded_win_api YRP/domain YRP/contentis_base64 YRP/DebuggerCheck__GlobalFlags [+]
657fee08675cdbc534776bd952f47a4e ASCII 2018-03-07 03:51:24http://103.68.190.250/Sources//Advance/BJWJ/s... CuckooSandbox/embedded_win_api YRP/domain YRP/contentis_base64 YRP/DebuggerCheck__GlobalFlags [+]
45aba6fe0e691a18088164f3a9a73275 current 2018-03-07 03:53:33http://103.68.190.250/Sources//Advance/Bootki... CuckooSandbox/embedded_win_api YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 [+]
e6ff5021ab01651407d7e9d7b6586863 PE32 2018-03-07 04:18:33http://103.68.190.250/Sources//Advance/Bootki... YRP/possible_includes_base64_packed_functions YRP/VC8_Microsoft_Corporation YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp_8 [+]
7a649649dcbd67b1d0cf4a94cfeb776f UTF-8 2018-03-18 03:07:00 CuckooSandbox/embedded_win_api CuckooSandbox/vmdetect YRP/domain YRP/url [+]
f901c645188f9c80afa8f49174f065ce PE32+ 2018-05-24 00:58:05 CuckooSandbox/vmdetect YRP/webshell_iMHaPFtp_2 YRP/webshell_caidao_shell_guo YRP/webshell_cihshell_fix [+]