MalShare

SHA256 Hash	File type	Added	Source	Yara Hits
afe63d885189002afc769724d179e239b7ca0f80277c64c89a5c1b5bfe54c3c4	PE32	2022-03-19 07:06:07	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/IsPE32 YRP/IsNET_EXE YRP/IsConsole [+] YRP/IsPacked YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/win_registry YRP/Big_Numbers1 YRP/suspicious_packer_section
e9cb478188108533e821c71dd3dd5483ae1c27f677c7576c5046493321006bac	PE32	2022-03-13 02:00:28	User Submission	CuckooSandbox/vmdetect YRP/FSG_v110_Eng_dulekxt_ YRP/IsPE32 YRP/IsNET_EXE [+] YRP/IsWindowsGUI YRP/maldoc_indirect_function_call_3 YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/VMWare_Detection YRP/vmdetect YRP/spreading_file YRP/Big_Numbers1 YRP/CRC32_poly_Constant YRP/CRC32_table YRP/suspicious_packer_section
05c43ce4725d6680fa764d4b6b561f593198910644b3a4527c64a6c480d404c2	PE32	2022-03-12 01:02:28	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature YRP/borland_delphi_dll YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/DebuggerCheck__QueryInfo YRP/ThreadControl__Context YRP/disable_dep YRP/keylogger YRP/win_registry YRP/win_files_operation YRP/Big_Numbers1 YRP/CRC32_poly_Constant YRP/CRC32_table YRP/BASE64_table YRP/Delphi_Random YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_DecodeDate YRP/Str_Win32_Winsock2_Library
2289cf2583dd3f13440fcab9cd38abd53ba8a9e4dedddca444fc680b9f596270	PE32	2022-03-08 12:04:34	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasModified_DOS_Message YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Big_Numbers0 YRP/Big_Numbers1 YRP/suspicious_packer_section
855b56f447d5bf5bfb4f6e538b351b6e7262faae256917b80e0a945b5c2bd603	PE32	2022-03-06 20:02:51	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/Armadillo_v4x YRP/MoleBoxv20 YRP/IsPE32 [+] YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/screenshot YRP/win_registry YRP/UPX YRP/suspicious_packer_section
341ab6d313ac669a52b01f5078aa0094c22b90b85b2451a7f1ab0969d694ac03	MS-DOS	2022-03-06 03:58:16	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/HasOverlay YRP/HasTaggantSignature YRP/HasDigitalSignature YRP/HasModified_DOS_Message YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/android_meterpreter YRP/Big_Numbers1 YRP/suspicious_packer_section
4c6db804a366a11a3321f87543f03c45e1785fed75a1c5e21ce39b658f6bb5bd	PE32	2022-03-04 13:33:36	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/domain YRP/url YRP/contentis_base64 YRP/Big_Numbers1 YRP/CRC32_poly_Constant
751093c95f43fa8bbb300ba1545ec5f39bc29c6293244bdf620157e80952c73b	PE32	2022-03-03 11:05:11	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI [+] YRP/IsPacked YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/win_registry YRP/Big_Numbers1 YRP/suspicious_packer_section
d511333528a6801417d25c2e0719d62b7886fbc46fa561453babb889df4775c6	PE32	2022-02-24 21:27:41	User Submission	CuckooSandbox/vmdetect YRP/FSG_v110_Eng_dulekxt_ YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/VirtualPC_Detection YRP/vmdetect YRP/Big_Numbers1
c7ad18d74efc0788d086f822c8fed9f06f142939abe947737813db9d02f2183d	PE32+	2022-02-24 01:37:47	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/IsPE64 YRP/IsPacked YRP/HasOverlay [+] YRP/HasDigitalSignature YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/Big_Numbers1 YRP/suspicious_packer_section
d648debc6f54a18505562e9c1d1bbd24ad1e6335630f0ec50933a32793d81627	PE32+	2022-02-23 08:55:36	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/IsPE64 YRP/IsDLL YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasRichSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/url YRP/contentis_base64 YRP/win_registry YRP/Big_Numbers1
f803bbc4f355af508fceb38b59805c9ee7b7009bb8a1463e72e56a20dfa15ad8	PE32+	2022-02-23 08:26:40	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/IsPE64 YRP/IsPacked YRP/HasOverlay [+] YRP/HasDigitalSignature YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/Big_Numbers1 YRP/suspicious_packer_section
748d76d14aca801cc3ebe85ba900217046ad76b36437e95dfa8c5bb0a1e8395a	PE32+	2022-02-22 21:46:47	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/IsPE64 YRP/IsPacked YRP/HasOverlay [+] YRP/HasDigitalSignature YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/Big_Numbers1 YRP/suspicious_packer_section
9aa772e16ceedb46474cc3b77408f801a45bd6280fbed290bb162de7e2d241cb	PE32+	2022-02-22 14:01:28	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/IsPE64 YRP/IsPacked YRP/HasOverlay [+] YRP/HasDigitalSignature YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/Big_Numbers1 YRP/suspicious_packer_section
3faf99846d588414d0c5534b88375591743872c2336f10abb4aa2cf23d18642a	PE32	2022-02-18 19:29:39	User Submission	YRP/The_Best_Cryptor_FsK_SignByfly YRP/The_Best_Cryptor_FsK YRP/FSG_v110_Eng_dulekxt_ YRP/RCryptorv11Vaska [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/contentis_base64 YRP/ThreadControl__Context YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/inject_thread YRP/create_service YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/sniff_audio YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/CookieTools YRP/suspicious_packer_section
b5f259a433a743773422e3c328cd64ebb04b309f741f22df7844b998eff068d6	PE32	2022-02-18 07:57:25	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasModified_DOS_Message YRP/borland_delphi YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/disable_antivirus YRP/create_service YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/sniff_audio YRP/spreading_share YRP/rat_webcam YRP/check_patchlevel YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Big_Numbers1 YRP/CRC32_poly_Constant YRP/CRC32_table YRP/FGint_MontgomeryModExp YRP/FGint_DivMod YRP/FGint_FGIntDestroy YRP/FGint_Base10StringToGInt YRP/FGint_ConvertBase256to64 YRP/FGint_RSAEncrypt YRP/FGint_RsaDecrypt YRP/Delphi_Random YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/suspicious_packer_section
3e9d959dedc0b858440fea4bdac53a393729f202d8acc7d0f338fd34d2f03014	PE32	2022-02-18 07:08:03	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/Armadillo_v4x YRP/UPXv20MarkusLaszloReiser YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser [+] YRP/MoleBoxv20 YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/win_registry YRP/UPX YRP/suspicious_packer_section
5c54010e8fba5f359bd8cdfde7eab9733acf3e00738014439dc6ce0c1f119ce0	PE32	2022-02-18 06:58:35	User Submission	YRP/PESpin_03_cyberbob YRP/PESpin_0b_01_CyberBob YRP/FSG_v110_Eng_dulekxt_Microsoft_Visual_Cpp_70 YRP/FSG_v110_Eng_dulekxt_ [+] YRP/PE_Spin_v04x YRP/PESpinv04x YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64
b8adbf619add06150f8177ed3ca264e2af14343bb50aca0d20e1de2171582217	PE32	2022-02-18 06:31:41	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/borland_delphi YRP/domain YRP/IP YRP/contentis_base64 YRP/Browsers YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/ThreadControl__Context YRP/anti_dbg YRP/inject_thread YRP/create_service YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/sniff_audio YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Delphi_Random YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/CookieTools
1d29113c84142c25e18cb7e5f65b0aa2950eb8352fa7691a692ecad9dcd625e9	PE32	2022-02-18 06:24:27	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Dropper_Strings YRP/inject_thread YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API FlorianRoth/DragonFly_APT_Sep17_3
db5f7588f9e29df057c501a892d5859979b0ae428a8cbe2a3e84e7d7c605480f	PE32	2022-02-18 06:08:14	User Submission	YRP/Obsidium_11114_11115_Obsidium_Software YRP/FSG_v110_Eng_dulekxt_ YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasOverlay YRP/domain
053b6a8a76b0b42dc83e9725c30f19450d70abf91816ca358de16922ccd19b2a	PE32	2022-02-18 05:50:46	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/PrivateexeProtector20SetiSoftTeam YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/DebuggerException__ConsoleCtrl YRP/DebuggerException__SetConsoleCtrl YRP/win_mutex YRP/win_files_operation YRP/CRC32_poly_Constant YRP/CRC32_table YRP/Str_Win32_Winsock2_Library
8967aeee2df37edbe2e70b3e68ceb03ee7f3631b270edeb8d5c5f4676842349f	PE32	2022-02-18 05:46:36	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/borland_delphi YRP/domain YRP/IP YRP/contentis_base64 YRP/Browsers YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/ThreadControl__Context YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/inject_thread YRP/create_service YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/sniff_audio YRP/spreading_share YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Delphi_Random YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/CookieTools
a2b8f3e677d2d4ef1142815796e20918d9fb1b97ec5bae4e6e0cff73dea62e94	PE32	2022-02-18 05:43:09	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/Armadillo_v4x YRP/MoleBoxv20 YRP/IsPE32 [+] YRP/IsWindowsGUI YRP/IsPacked YRP/domain YRP/contentis_base64 YRP/win_registry YRP/suspicious_packer_section
32e79052c509268774200fbe458e8f00e3a06eae57b5bbe6f873837e68aefa9f	MS-DOS	2022-02-18 05:12:43	User Submission	YRP/Obsidium_V1304_Obsidium_Software YRP/Obsidium_V1304_Obsidium_Software_additional YRP/FSG_v110_Eng_dulekxt_ YRP/Obsidium_v1111_additional [+] YRP/FSG_v110_Eng_dulekxt_Microsoft_Visual_C_Basic_NET YRP/ObsidiumV1304ObsidiumSoftware YRP/hmimysProtectv10 YRP/hmimysPacker10hmimys YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64
0240f00b6599a9953a83611b0ac6452d9d0b22d1608af200c8e6b6ddb6d72beb	PE32	2022-02-18 05:10:51	User Submission	YRP/Obsidium_v1304_Obsidium_Software_h_additional YRP/Obsiduim_1304_Obsiduim_Software_additional YRP/Obsidium_v1304_Obsidium_Software_additional YRP/Obsidium_V1304_Obsidium_Software [+] YRP/Obsidium_V1304_Obsidium_Software_additional YRP/Obsiduim_1304_Obsiduim_Software YRP/FSG_v110_Eng_dulekxt_ YRP/Obsidium_v1304_Obsidium_Software_h YRP/Obsidium_v1111_additional YRP/FSG_v110_Eng_dulekxt_Microsoft_Visual_C_Basic_NET YRP/Obsidium_1304_Obsidium_Software_h YRP/Obsidium_v1304_Obsidium_Software YRP/Obsiduim1304ObsiduimSoftware YRP/ObsidiumV1304ObsidiumSoftware YRP/Obsidiumv1304ObsidiumSoftware YRP/obsidium YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/domain
35cae077fb3206f5391419bfbca1ae42b6cb59adb8556cc3de046cde7bfffe88	PE32	2022-02-18 05:08:57	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section
f2af4d3b83453cdc37f4e301a8faedccdbb4ce4532d0a5302ddef0cb89f60b9d	PE32	2022-02-18 04:55:53	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/borland_delphi YRP/domain YRP/IP YRP/contentis_base64 YRP/Browsers YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/ThreadControl__Context YRP/anti_dbg YRP/inject_thread YRP/create_service YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/sniff_audio YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Delphi_Random YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/CookieTools
3e037abb492e9158d0e450ad4db25a63501be362580011f5b79fc30ecd3aed1d	PE32	2022-02-18 04:42:46	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/nSpackV2xLiuXingPing YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasOverlay YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section
d64f7437a52f0be784198f48bef5dbe4a73bf0fc78f5a1c377f6c33a746374c0	PE32	2022-02-18 04:38:30	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/contentis_base64 YRP/CookieTools YRP/suspicious_packer_section
2e5101289a1af9416eebf3806dd8f5fae418ee3b96effa15eae7135931a7b450	PE32	2022-02-18 04:24:59	User Submission	YRP/PESpin_V1304_cyberbobnbsp_nbsp_SignByfly_20080310 YRP/PESpin_v1304_Cyberbob_h YRP/PESpin_v1304_Cyberbob YRP/PESpin_03_cyberbob [+] YRP/PESpin_13beta_Cyberbob_h_additional YRP/PESpin_1304_Cyberbob_h YRP/PESpin_0b_01_CyberBob YRP/PESpin_V1304_cyberbob_20080310 YRP/FSG_v110_Eng_dulekxt_Microsoft_Visual_Cpp_70 YRP/PESpin_v1304_Cyberbob_additional YRP/FSG_v110_Eng_dulekxt_ YRP/PESpin_13x_Cyberbob YRP/PE_Spin_v04x YRP/PESpin_v1304_Cyberbob_h_additional YRP/PESPin_v13_Cyberbob_h_additional YRP/PESpin_v01_Cyberbob_h_additional YRP/PESpinv04x YRP/PESpinv1304Cyberbob YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 FlorianRoth/DragonFly_APT_Sep17_3
3126a5ddeffefb368be347f7c067bb0b94b4793273c496a2caff454c40d71181	PE32	2022-02-18 04:16:27	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/borland_delphi YRP/domain YRP/IP YRP/contentis_base64 YRP/Browsers YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/ThreadControl__Context YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/inject_thread YRP/create_service YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/sniff_audio YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Delphi_Random YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/CookieTools
f71ed1e52721848cd909efa703f07410fb0cb2928767de6e95ed93f87f83ec25	PE32	2022-02-18 04:12:46	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/borland_delphi YRP/domain YRP/IP YRP/contentis_base64 YRP/Browsers YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/ThreadControl__Context YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/inject_thread YRP/create_service YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/sniff_audio YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Delphi_Random YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/CookieTools
83de7cd2a58453c2c9165caee6ceaee1a88e701c45d4b19451a6e3befea4bce3	PE32	2022-02-18 03:41:32	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/borland_delphi YRP/domain YRP/IP YRP/contentis_base64 YRP/Browsers YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/ThreadControl__Context YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/inject_thread YRP/create_service YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/sniff_audio YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Delphi_Random YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/CookieTools
f3c6c489145f4824ae73c7e061c9148451dabc76154998f00d13d0302d7f8b3d	PE32	2022-02-18 03:33:32	User Submission	YRP/PESpin_V13betaX_cyberbobnbsp_nbsp_SignByfly_20080311 YRP/PESpin_v13beta_Cyberbob YRP/PESpin_13x_Cyberbob_additional YRP/PESpin_03_cyberbob [+] YRP/PESpin_0b_01_CyberBob YRP/PESpin_13beta_Cyberbob_h YRP/PESpin_v13beta_Cyberbob_h_additional YRP/FSG_v110_Eng_dulekxt_Microsoft_Visual_Cpp_70 YRP/FSG_v110_Eng_dulekxt_ YRP/PESpin_V13betaX_cyberbob_20080311 YRP/PESpin_v13beta_Cyberbob_h YRP/PESpin_v13beta2_Cyberbob_ YRP/PE_Spin_v0b_additional YRP/PESpin_13x_Cyberbob YRP/PE_Spin_v04x YRP/PESpinv04x YRP/PESpinv13betaCyberbob YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section
f55ff015c5aa69042b9da51647ac7d9fd638a96836b222b20a147b2b78473507	PE32	2022-02-18 03:17:29	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section
67cd628a0035bdd61743a2f39f01b7bcc2a3f00e4cb82f8a1c7a2100065b1447	PE32	2022-02-18 02:41:55	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/PrivateexeProtector20SetiSoftTeam YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/UPX YRP/suspicious_packer_section FlorianRoth/DragonFly_APT_Sep17_3
06ab9c49642bc32693618a4049524213d265519d946f9021c64aa063eeafbda1	PE32	2022-02-18 02:07:05	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/HasOverlay YRP/HasDigitalSignature YRP/ExportTableIsBad YRP/maldoc_getEIP_method_1 YRP/domain YRP/url YRP/contentis_base64 YRP/VMWare_Detection YRP/network_tcp_socket YRP/keylogger YRP/rat_webcam YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API
50cb433f1165f75de8cbf293561d3ddc4a4682df58055634c26d6eb5784934b8	PE32	2022-02-18 02:00:15	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/borland_delphi YRP/domain YRP/IP YRP/contentis_base64 YRP/Browsers YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/ThreadControl__Context YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/inject_thread YRP/create_service YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/sniff_audio YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Delphi_Random YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/CookieTools
658be609d1e85cad1a5d6b21c261b2d30435e960071a263f86c6de729646ff5b	PE32	2022-02-18 01:40:59	User Submission	YRP/The_Best_Cryptor_FsK_SignByfly YRP/The_Best_Cryptor_FsK YRP/FSG_v110_Eng_dulekxt_ YRP/ASProtectSKE21xexeAlexeySolodovnikov [+] YRP/RCryptorv11Vaska YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/ExportTableIsBad YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/CookieTools YRP/suspicious_packer_section
19fb3a6e20a6e343ede61f7441b1ec096924b45d8d51b662b9afccd6ab5ea85f	PE32	2022-02-18 01:38:02	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/borland_delphi YRP/domain YRP/IP YRP/contentis_base64 YRP/Browsers YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/ThreadControl__Context YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/inject_thread YRP/create_service YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/sniff_audio YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Delphi_Random YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/CookieTools
c5f45a67e5257b2ebc3227d0ce7a1f0f4c58460689493b216f9d9153bfe822d8	PE32	2022-02-18 01:27:04	User Submission	YRP/The_Best_Cryptor_FsK_SignByfly YRP/The_Best_Cryptor_FsK YRP/FSG_v110_Eng_dulekxt_ YRP/RCryptorv11Vaska [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/domain YRP/contentis_base64 YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Big_Numbers0 YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section
9c0f15d4b2b716efa114ad27a5e759cc4811c5b8d64cf1b713777dcbd628d326	PE32	2022-02-18 01:16:52	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/Armadillo_v4x YRP/MoleBoxv20 YRP/IsPE32 [+] YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/win_registry YRP/suspicious_packer_section
b31981d716d34abdcda85adc4eb28cddb98c4b7dde4fe33032bd23ee1080ab50	PE32	2022-02-18 01:13:06	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/borland_delphi YRP/domain YRP/IP YRP/contentis_base64 YRP/Browsers YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/ThreadControl__Context YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/inject_thread YRP/create_service YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/sniff_audio YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Delphi_Random YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/CookieTools
9160e691fe1cf7734e98fce3a74ec0614a47147c9760aa5724f200050fd6fb14	MS-DOS	2022-02-18 01:10:58	User Submission	YRP/The_Best_Cryptor_FsK_SignByfly YRP/The_Best_Cryptor_FsK YRP/FSG_v110_Eng_dulekxt_ YRP/RCryptorv11Vaska [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section FlorianRoth/DragonFly_APT_Sep17_3
bc076ce16cf795aa43b074460016050d162f77898a017fb66d779fd91fe92d18	PE32	2022-02-18 01:08:03	User Submission	YRP/PESpin_03_cyberbob YRP/PESpin_0b_01_CyberBob YRP/FSG_v110_Eng_dulekxt_Microsoft_Visual_Cpp_70 YRP/FSG_v110_Eng_dulekxt_ [+] YRP/PESpin_V132_cyberbobnbsp_nbsp_SignByfly_20080310 YRP/PE_Spin_v04x YRP/PESpin_V132_cyberbob_20080310 YRP/PESpinv04x YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64
04bd04fe79445e08b5c06b880f30592737f24fa7c5bcd0d1b165739231e8adf2	MS-DOS	2022-02-18 01:01:48	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/HasOverlay YRP/IsBeyondImageSize YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/ThreadControl__Context YRP/SEH__vba
3606a192944c15ecfa0fd5c6a9ba74d1d5ad541a7fd441ad0ab6c9cd65172d54	PE32	2022-02-18 00:53:34	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/HasOverlay YRP/HasDigitalSignature YRP/IsBeyondImageSize YRP/ExportTableIsBad YRP/maldoc_getEIP_method_1 YRP/domain YRP/url YRP/contentis_base64 YRP/VMWare_Detection YRP/network_tcp_socket YRP/keylogger YRP/rat_webcam YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API
0bc408b079bba8ae73d9b0066825aaf9b7f5613361f11f7b7b9d5eaa0765d4d8	PE32	2022-02-18 00:42:32	User Submission	YRP/Obsidium_v1304_Obsidium_Software_h_additional YRP/Obsiduim_1304_Obsiduim_Software_additional YRP/Obsidium_v1304_Obsidium_Software_additional YRP/Obsidium_V1304_Obsidium_Software [+] YRP/Obsidium_V1304_Obsidium_Software_additional YRP/Obsiduim_1304_Obsiduim_Software YRP/FSG_v110_Eng_dulekxt_ YRP/Obsidium_v1304_Obsidium_Software_h YRP/Obsidium_v1111_additional YRP/FSG_v110_Eng_dulekxt_Microsoft_Visual_C_Basic_NET YRP/Obsidium_1304_Obsidium_Software_h YRP/Obsidium_v1304_Obsidium_Software YRP/Obsiduim1304ObsiduimSoftware YRP/ObsidiumV1304ObsidiumSoftware YRP/Obsidiumv1304ObsidiumSoftware YRP/obsidium YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/domain
fd2b3126b73e1f8a6e6fad01a3d5d31af04602d82fa64b2baeef2d4d71ddd2e1	PE32	2022-02-18 00:36:59	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/borland_delphi YRP/domain YRP/IP YRP/contentis_base64 YRP/Browsers YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/ThreadControl__Context YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/inject_thread YRP/create_service YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/sniff_audio YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Delphi_Random YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/CookieTools
98a28c0af79bc5ce71a931657ab1bd08df935c87bacb0f7a4f44233e8737164e	PE32	2022-02-18 00:27:19	User Submission	CuckooSandbox/vmdetect YRP/FSG_v110_Eng_dulekxt_ YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasOverlay YRP/HasTaggantSignature YRP/HasRichSignature YRP/maldoc_find_kernel32_base_method_1 YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/VirtualPC_Detection YRP/DebuggerCheck__RemoteAPI YRP/DebuggerHiding__Thread YRP/ThreadControl__Context YRP/vmdetect YRP/anti_dbg YRP/escalate_priv YRP/screenshot YRP/rat_webcam YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Big_Numbers1 YRP/RijnDael_AES YRP/Str_Win32_Winsock2_Library
5a88151fba6129c12b42ff228aee8baa442100355d19304d55d851dc63c59275	PE32	2022-02-18 00:16:55	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/borland_delphi YRP/domain YRP/IP YRP/contentis_base64 YRP/Browsers YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/ThreadControl__Context YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/inject_thread YRP/create_service YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/sniff_audio YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Delphi_Random YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/CookieTools
9b62b62ec4588aa1919f4acbf60090485cfcd7bde6777a095316aa026b907e2d	PE32	2022-02-18 00:10:22	User Submission	YRP/PESpin_03_cyberbob YRP/PESpin_0b_01_CyberBob YRP/FSG_v110_Eng_dulekxt_Microsoft_Visual_Cpp_70 YRP/FSG_v110_Eng_dulekxt_ [+] YRP/Armadillo_v4x YRP/PE_Spin_v04x YRP/PESpinv04x YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Misc_Suspicious_Strings
1c5b3ef00a9dece66d2bef11b7cbe9988722a69d466fd9273d9383f83663983f	PE32	2022-02-18 00:08:46	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/ASProtectSKE21xexeAlexeySolodovnikov YRP/RCryptorv11Vaska YRP/IsPE32 [+] YRP/IsWindowsGUI YRP/IsPacked YRP/ExportTableIsBad YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/CookieTools YRP/suspicious_packer_section
0661a5c3f1578bd4213cfb7e187b9b5f1ad8cc578071950505657bc121b30aee	PE32	2022-02-17 23:57:19	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/win_mutex YRP/win_files_operation
81c0e2e0a04962188086c645f49752ad86b49bc2c174d2b88bd4aa9a0dd20359	PE32	2022-02-17 23:45:31	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/Armadillo_v4x YRP/MoleBoxv20 YRP/IsPE32 [+] YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/win_registry YRP/suspicious_packer_section
f5192e0be0afc07562fd74f97602cf7c31cf07b5b6ad909f72c675322b69f3f8	PE32	2022-02-17 23:28:16	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/domain YRP/IP YRP/contentis_base64
4e99ae1346fcccb5c264e3c4e16cf6597c3588b437dfccd31f70da1326e14408	PE32	2022-02-17 23:25:11	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/HasRichSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 FlorianRoth/DragonFly_APT_Sep17_3
8c1a6eb563df876494f27d211bf648e10a9058008f749e7bfca9f485de6f086f	PE32	2022-02-17 23:08:47	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/EnigmaProtector1XSukhovVladimirSergeNMarkin YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasRichSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/win_registry
cb7e081c93d1a1967a5a341dc22aa6b2e524964e631333e4bfaa2f4e30cd9a6d	PE32	2022-02-17 23:08:24	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section
1b21b1c056b34f4d8fd758c002eea3cf3c6b38e2dea46dfcd46ad887e0a4223e	PE32	2022-02-17 22:41:54	User Submission	YRP/The_Best_Cryptor_FsK_SignByfly YRP/The_Best_Cryptor_FsK YRP/FSG_v110_Eng_dulekxt_ YRP/ASProtectSKE21xexeAlexeySolodovnikov [+] YRP/RCryptorv11Vaska YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/ExportTableIsBad YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/CookieTools YRP/suspicious_packer_section
d7ab9da67399168cd1562d177a2c2d51755043dcd584dc24dd7b7587fc82f1e6	PE32	2022-02-17 22:33:18	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/maldoc_find_kernel32_base_method_1 YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section
a22ec523fe4094480a55551032c3c45471c44d14d4aceca2161b4890e3515161	PE32	2022-02-17 22:22:19	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/borland_delphi YRP/domain YRP/IP YRP/contentis_base64 YRP/Browsers YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/ThreadControl__Context YRP/anti_dbg YRP/inject_thread YRP/create_service YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/sniff_audio YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Delphi_Random YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/CookieTools
69e8de324c49a4eaa050878d9f6de9722e674792d8062f83097e4fe692ef523a	PE32	2022-02-17 22:02:14	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/borland_delphi YRP/domain YRP/IP YRP/contentis_base64 YRP/Browsers YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/ThreadControl__Context YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/inject_thread YRP/create_service YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/sniff_audio YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Delphi_Random YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/CookieTools
98cceefdf7da6a2a6cf7bf3918f7b3a3a942669fc2e467dd18a1fdaf08301635	PE32	2022-02-17 21:52:01	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/borland_delphi YRP/domain YRP/IP YRP/contentis_base64 YRP/Browsers YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/ThreadControl__Context YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/inject_thread YRP/create_service YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/sniff_audio YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Delphi_Random YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/CookieTools
27281c8d0b5d8f5a67222beb2e90dd7c176e0f1c4dc4e768e7f6f923c2751daa	PE32	2022-02-17 21:48:26	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/Borland YRP/IsPE32 YRP/IsDLL [+] YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/CRC32_poly_Constant YRP/suspicious_packer_section
7ba1d384276ab68b04984df0aba3f3dfafbab63e73096e7ac050f53a6f2964fb	PE32	2022-02-17 21:36:08	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/RCryptorv11Vaska YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/domain YRP/contentis_base64 YRP/ThreadControl__Context YRP/create_service YRP/network_udp_sock YRP/network_tcp_listen YRP/network_dropper YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/sniff_audio YRP/rat_webcam YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/CookieTools
00abba3de96f07efebd3f0e877fc8d406e466ba11128c08a2b9ec796175e887c	PE32	2022-02-17 21:14:28	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/borland_delphi YRP/domain YRP/IP YRP/contentis_base64 YRP/Browsers YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/ThreadControl__Context YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/inject_thread YRP/create_service YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/sniff_audio YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Delphi_Random YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/CookieTools
2683c0584eee20519e2514c45c281d653594a4df40a468bba00b6dfb5f48b006	PE32	2022-02-17 21:04:29	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/Armadillo_v4x YRP/MoleBoxv20 YRP/IsPE32 [+] YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/win_registry YRP/suspicious_packer_section
db37f546a1109ec3d2e06d4709182dd7e5722aba4712be04313c3fff0405d03a	PE32	2022-02-17 20:58:28	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/borland_delphi YRP/domain YRP/IP YRP/contentis_base64 YRP/Browsers YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/ThreadControl__Context YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/inject_thread YRP/create_service YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/sniff_audio YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Delphi_Random YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/CookieTools
78cce540862d11b72cf7e298b99647429a249d09880ef9ebdde98b065939fa32	PE32	2022-02-17 20:53:18	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasRichSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/url YRP/contentis_base64 YRP/create_service YRP/escalate_priv YRP/cred_local YRP/win_registry YRP/win_token YRP/Big_Numbers1 YRP/Advapi_Hash_API YRP/MD5_API YRP/suspicious_packer_section
4e9905fbe59f10ee78766e004d570ad32efa23fbeac434c142f491f2bf6f1757	PE32	2022-02-17 20:45:58	User Submission	YRP/The_Best_Cryptor_FsK_SignByfly YRP/The_Best_Cryptor_FsK YRP/FSG_v110_Eng_dulekxt_ YRP/ASProtectSKE21xexeAlexeySolodovnikov [+] YRP/RCryptorv11Vaska YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/ExportTableIsBad YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/CookieTools YRP/suspicious_packer_section
080233c51338f57e018b0ed9470bc0f0ef490eb0da7eb10a05e80620982ca04d	PE32	2022-02-17 20:41:53	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/HasOverlay YRP/HasRichSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64
4fedb13097d614766272901fba5c337f61f4fd33c6cd26fc5555f9a3c7a06120	PE32	2022-02-17 20:31:52	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/borland_delphi YRP/domain YRP/IP YRP/contentis_base64 YRP/Browsers YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/ThreadControl__Context YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/inject_thread YRP/create_service YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/sniff_audio YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Delphi_Random YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/CookieTools
b9f604c37e54985bfce1fe45db90709ffeefa46e2afb072e65a6615b7c4b59a3	PE32	2022-02-17 20:12:21	User Submission	YRP/PESpin_03_cyberbob YRP/PESpin_0b_01_CyberBob YRP/FSG_v110_Eng_dulekxt_Microsoft_Visual_Cpp_70 YRP/FSG_v110_Eng_dulekxt_ [+] YRP/PESpin_V132_cyberbobnbsp_nbsp_SignByfly_20080310 YRP/PE_Spin_v04x YRP/PESpin_V132_cyberbob_20080310 YRP/PESpinv04x YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64
bb992bca51b2a33dafa16b0345afc46f33f8c3de6a0984f86355370af8019001	PE32	2022-02-17 20:08:16	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/borland_delphi YRP/domain YRP/IP YRP/contentis_base64 YRP/Browsers YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/ThreadControl__Context YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/inject_thread YRP/create_service YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/sniff_audio YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Delphi_Random YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/CookieTools YRP/suspicious_packer_section
812877448c13d121fde74a53d959fbf6715f85f66d9cd561113a9ed89008847e	PE32	2022-02-17 20:07:32	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/borland_delphi YRP/domain YRP/IP YRP/contentis_base64 YRP/Browsers YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/ThreadControl__Context YRP/anti_dbg YRP/inject_thread YRP/create_service YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/sniff_audio YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Delphi_Random YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/CookieTools
ae5dfcc8bf7c3f1f2fea00605a4da20ea8ef5f435c493b6ce5ac7d5fd264f76e	PE32	2022-02-17 20:04:37	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section
6fedca4ac79effd729f25cf43c0e2a27032d2f500300f10bd4f69183981775d0	PE32	2022-02-17 19:59:55	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/borland_delphi YRP/domain YRP/IP YRP/contentis_base64 YRP/Browsers YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/ThreadControl__Context YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/inject_thread YRP/create_service YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/sniff_audio YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Delphi_Random YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/CookieTools
1c9332371b91414484ef307c63c2d6018ef17460a3115578f0d6a60e6a5ee24f	PE32	2022-02-17 19:36:26	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/ASProtectSKE21xexeAlexeySolodovnikov YRP/RCryptorv11Vaska YRP/IsPE32 [+] YRP/IsWindowsGUI YRP/IsPacked YRP/ExportTableIsBad YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/CookieTools YRP/suspicious_packer_section
95798b6c5d6f62f6cf9de0af3aece1d5e3a080b1c72a368fce465a862fdb45e5	PE32	2022-02-17 19:27:20	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/HasOverlay YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/contentis_base64 YRP/CookieTools YRP/suspicious_packer_section
0a3d864489c73d07a60547267d3ef409dc37efb76c60769b4be4ba8f438a3a24	PE32	2022-02-17 19:26:37	User Submission	YRP/The_Best_Cryptor_FsK_SignByfly YRP/The_Best_Cryptor_FsK YRP/FSG_v110_Eng_dulekxt_ YRP/RCryptorv11Vaska [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/network_dropper YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section
c5998e89bb7fcc7978ad8cd77ee76889e8b26f80296e48c765f84c243f8a3158	PE32	2022-02-17 19:15:05	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/borland_delphi YRP/domain YRP/IP YRP/contentis_base64 YRP/Browsers YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/ThreadControl__Context YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/inject_thread YRP/create_service YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/sniff_audio YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Delphi_Random YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/CookieTools
301bc8010673ffbae5c8f58675180d363b4afe1d7d64699a0bda5ae19d4392c8	PE32	2022-02-17 18:56:02	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/ASProtectSKE21xexeAlexeySolodovnikov YRP/RCryptorv11Vaska YRP/IsPE32 [+] YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/ExportTableIsBad YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/CookieTools YRP/suspicious_packer_section
2d9d2e02e602ceae7379591747ff7abcf06b1cf02ddceb34ccb0a25d26a47090	PE32	2022-02-17 18:41:06	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/HasOverlay YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/keylogger YRP/rat_webcam YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/suspicious_packer_section
c008d492600e4c69999decd2a07abb09ae87ea9644538e02836834b306327cf4	PE32	2022-02-17 18:40:20	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/domain YRP/contentis_base64 YRP/IISPutScannesr FlorianRoth/DragonFly_APT_Sep17_3 FlorianRoth/IISPutScannesr
d313cea3eebefad04865a365970c60ab5d2035635bc7c120f9278612fa8713a7	PE32	2022-02-17 18:11:55	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked [+] YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/contentis_base64 YRP/CookieTools YRP/suspicious_packer_section
a590e7d89df88c3d706373f60ec4254b70b2aab71e9e120213967a4961bb0720	PE32	2022-02-17 18:11:11	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/borland_delphi YRP/domain YRP/IP YRP/contentis_base64 YRP/Browsers YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/ThreadControl__Context YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/inject_thread YRP/create_service YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/sniff_audio YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Delphi_Random YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/CookieTools
d536b571293b257ecb2c8c37734fdcec82c8fadc5253fdc739be8511feeb4d5d	PE32	2022-02-17 17:51:19	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/borland_delphi YRP/domain YRP/IP YRP/contentis_base64 YRP/Browsers YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/ThreadControl__Context YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/inject_thread YRP/create_service YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/sniff_audio YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Delphi_Random YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/CookieTools YRP/suspicious_packer_section
4577b438e9661e0c98b637dd3e87199404134d8e013365cdea608d23ba836e2b	PE32	2022-02-17 17:40:20	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/borland_delphi YRP/domain YRP/IP YRP/contentis_base64 YRP/Browsers YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/ThreadControl__Context YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/inject_thread YRP/create_service YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/sniff_audio YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Delphi_Random YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/CookieTools
38a0c3d82f2bec1b53c93a626f19c8eef65d99f14757c6f3ed7d4f6f5cad3bb5	PE32	2022-02-17 17:38:27	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/ASProtectSKE21xexeAlexeySolodovnikov YRP/RCryptorv11Vaska YRP/IsPE32 [+] YRP/IsWindowsGUI YRP/IsPacked YRP/ExportTableIsBad YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/CookieTools YRP/suspicious_packer_section
af6bb147317fb036fad3ad2c3561b31b95966539fcef84c47c0417e53c56c3d7	PE32	2022-02-17 17:34:06	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/borland_delphi YRP/domain YRP/IP YRP/contentis_base64 YRP/Browsers YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/ThreadControl__Context YRP/anti_dbg YRP/inject_thread YRP/create_service YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/sniff_audio YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Delphi_Random YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/CookieTools
b424d90d9cb393a7a4164cdab2226f8b7d51bd01b6e4dda262c62a9ff9a49d31	PE32	2022-02-17 17:24:49	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/borland_delphi YRP/domain YRP/IP YRP/contentis_base64 YRP/Browsers YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/ThreadControl__Context YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/inject_thread YRP/create_service YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/sniff_audio YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Delphi_Random YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/CookieTools
6c6b552abadf7591c6376a9202ccf71218ef00a260628fb72c5555bfafe8d6ab	PE32	2022-02-17 17:07:43	User Submission	YRP/Obsidium_V1200_Obsidium_Software YRP/FSG_v110_Eng_dulekxt_ YRP/Obsidium_1200_Obsidium_Software YRP/Obsidium1200ObsidiumSoftware [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/domain
2e45fbfca39baf0e9c634b92903e7a64e2194fe2e434c109a2b1dea5347f9e46	PE32	2022-02-17 17:00:16	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/ASProtectSKE21xexeAlexeySolodovnikov YRP/RCryptorv11Vaska YRP/IsPE32 [+] YRP/IsWindowsGUI YRP/IsPacked YRP/ExportTableIsBad YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/CookieTools YRP/suspicious_packer_section
87e0fe9bedb207d0989e9da79177e391a15ef6d6241f6397a628bdcaad22f03c	PE32	2022-02-17 16:36:20	User Submission	YRP/DBPE_v233_Ding_Boy YRP/DBPE_v233 YRP/FSG_v110_Eng_dulekxt_ YRP/DBPE_vxxx [+] YRP/DBPE_vxxx_Ding_Boy YRP/DBPE_v233_additional YRP/DBPE_233 YRP/DBPEv233DingBoy YRP/DBPEvxxxDingBoy YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64
396ac5f9a7940fddfe6c13b3f260ffd7b955ad93bbff9e457606c8f5afe49136	PE32	2022-02-17 16:32:15	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/Armadillo_v4x YRP/MoleBoxv20 YRP/IsPE32 [+] YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Antivirus YRP/win_registry YRP/UPX YRP/suspicious_packer_section
23488ffe4c3af2563df3995af88d64bec546e9493318894dacab4c425a637dc3	PE32	2022-02-17 16:21:17	User Submission	YRP/The_Best_Cryptor_FsK_SignByfly YRP/The_Best_Cryptor_FsK YRP/FSG_v110_Eng_dulekxt_ YRP/RCryptorv11Vaska [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/network_dropper YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section
4e160a9321c695dbed1462033ea57cbd9f515ef1716c4460978343723ccca030	PE32	2022-02-17 16:14:54	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/borland_delphi YRP/domain YRP/IP YRP/contentis_base64 YRP/Browsers YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/ThreadControl__Context YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/inject_thread YRP/create_service YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/sniff_audio YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Delphi_Random YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/CookieTools YRP/suspicious_packer_section
f2352c57771024f28cc09dad7ca8fdd5c05ab98f4dac8dfcbc6f99d350cf353e	PE32	2022-02-17 16:13:12	User Submission	YRP/FSG_v110_Eng_dulekxt_ YRP/eXPressorv13CGSoftLabs YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/CookieTools YRP/suspicious_packer_section

Recent Searches
yrp/fsg_v110_eng_dulekxt_
yrp/sql_php_php
yrp/opcleaver_antivirusdetector
yrp/pestuboepv1x
yrp/naikonstrings
yrp/fasm
yrp/xssshell_save
yrp/expressorv120b
yrp/dmalocker
yrp/installer

Search

Recent Searches