SHA256 Hash File type Added Source Yara Hits
HTML 2022-03-05 23:00:08https://www.advintel.io/post/persist-brick-pr... YRP/possible_includes_base64_packed_functions YRP/powershell YRP/domain YRP/IP [+]
HTML 2022-03-05 11:00:59https://eclypsium.com/2020/12/03/trickbot-now... YRP/powershell YRP/domain YRP/url YRP/contentis_base64 [+]
HTML 2022-03-05 11:00:09https://www.advintel.io/post/persist-brick-pr... YRP/possible_includes_base64_packed_functions YRP/powershell YRP/domain YRP/IP [+]
data 2021-09-04 06:02:03User Submission YRP/domain YRP/contentis_base64 YRP/MALW_trickbot_bankBot
data 2021-09-04 06:01:57User Submission YRP/domain YRP/contentis_base64 YRP/MALW_trickbot_bankBot
data 2021-09-04 06:01:50User Submission CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api YRP/domain YRP/contentis_base64 [+]
data 2021-09-04 06:01:42User Submission CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api YRP/domain YRP/contentis_base64 [+]
data 2021-09-04 06:01:33User Submission CuckooSandbox/embedded_pe YRP/domain YRP/contentis_base64 YRP/win_registry [+]
data 2021-09-04 06:01:26User Submission CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api YRP/domain YRP/contentis_base64 [+]
data 2021-09-04 06:01:19User Submission CuckooSandbox/shellcode CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api YRP/domain [+]
PE32 2021-07-09 17:03:38User Submission YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay [+]
PE32 2020-04-08 18:34:02User Submission YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 [+]
PE32 2020-04-08 17:44:31User Submission YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 [+]
PE32 2020-04-06 18:04:07User Submission YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 [+]
PE32 2020-04-06 17:44:00User Submission YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 [+]
PE32 2020-03-25 19:24:14User Submission YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 [+]
PE32 2020-03-25 18:54:11User Submission YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 [+]
PE32 2020-03-18 20:33:47User Submission YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 [+]
PE32 2020-03-18 19:13:48User Submission YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 [+]
PE32 2020-03-13 19:13:41User Submission YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 [+]
PE32 2020-03-13 19:03:40User Submission YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 [+]
PE32 2020-03-12 19:43:40User Submission YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 [+]
PE32 2020-03-12 18:43:40User Submission YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 [+]
PE32 2020-03-03 18:53:32User Submission YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 [+]
PE32 2020-03-03 18:53:30User Submission YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 [+]
PE32 2020-02-28 20:03:25User Submission YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 [+]
PE32 2020-02-28 19:53:30User Submission YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 [+]
data 2020-02-28 18:53:27User Submission CuckooSandbox/embedded_win_api YRP/possible_includes_base64_packed_functions YRP/powershell YRP/domain [+]
PE32 2020-02-20 17:53:18User Submission YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 [+]
PE32 2020-02-20 17:43:20User Submission YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 [+]
PE32 2020-01-17 20:32:52User Submission YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 [+]
PE32+ 2020-01-17 20:02:57User Submission YRP/IsPE64 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay [+]
PE32 2020-01-17 19:57:11User Submission YRP/Visual_Cpp_2005_DLL_Microsoft YRP/Visual_Cpp_2003_DLL_Microsoft YRP/IsPE32 YRP/IsDLL [+]
PE32+ 2020-01-16 20:37:31User Submission YRP/IsPE64 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay [+]
PE32 2020-01-16 19:54:14User Submission YRP/Visual_Cpp_2005_DLL_Microsoft YRP/Visual_Cpp_2003_DLL_Microsoft YRP/IsPE32 YRP/IsDLL [+]
PE32 2020-01-08 19:22:50User Submission YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 [+]
PE32 2020-01-08 18:42:38User Submission YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 [+]
PE32 2020-01-07 20:12:37User Submission YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 [+]
PE32 2020-01-07 18:42:36User Submission YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 [+]
PE32 2019-12-31 19:32:38User Submission YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 [+]
PE32 2019-12-31 19:22:16User Submission YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 [+]
PE32 2019-12-31 18:52:13User Submission YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 [+]
PE32 2019-12-27 19:22:43User Submission YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 [+]
PE32 2019-12-27 19:22:38User Submission YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 [+]
PE32+ 2019-12-20 20:02:16User Submission YRP/IsPE64 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay [+]
PE32 2019-12-20 19:32:12User Submission YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 [+]
PE32 2019-12-20 19:12:15User Submission YRP/Visual_Cpp_2005_DLL_Microsoft YRP/Visual_Cpp_2003_DLL_Microsoft YRP/IsPE32 YRP/IsDLL [+]
PE32 2019-12-20 19:02:17User Submission YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 [+]
PE32+ 2019-12-13 19:32:03User Submission YRP/IsPE64 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay [+]
PE32 2019-12-13 19:21:49User Submission YRP/Visual_Cpp_2005_DLL_Microsoft YRP/Visual_Cpp_2003_DLL_Microsoft YRP/IsPE32 YRP/IsDLL [+]
PE32 2019-12-13 18:52:09User Submission YRP/Visual_Cpp_2005_DLL_Microsoft YRP/Visual_Cpp_2003_DLL_Microsoft YRP/IsPE32 YRP/IsDLL [+]
PE32+ 2019-12-13 18:52:02User Submission YRP/IsPE64 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay [+]
PE32 2019-12-12 18:52:04User Submission YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 [+]
PE32 2019-12-10 20:12:02User Submission YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 [+]
PE32 2019-12-10 20:01:57User Submission YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 [+]
PE32 2019-12-06 21:12:03User Submission YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 [+]
PE32 2019-12-06 21:01:36User Submission YRP/Visual_Cpp_2005_DLL_Microsoft YRP/Visual_Cpp_2003_DLL_Microsoft YRP/IsPE32 YRP/IsDLL [+]
PE32+ 2019-12-06 20:51:35User Submission YRP/IsPE64 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay [+]
PE32 2019-12-06 20:31:34User Submission YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 [+]
PE32 2019-12-03 02:12:07User Submission YRP/Visual_Cpp_2005_Release_Microsoft YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 [+]
PE32 2019-12-02 22:31:33User Submission YRP/Visual_Cpp_2005_Release_Microsoft YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 [+]
PE32 2019-11-29 19:31:25User Submission YRP/Visual_Cpp_2005_DLL_Microsoft YRP/Visual_Cpp_2003_DLL_Microsoft YRP/IsPE32 YRP/IsDLL [+]
PE32 2019-11-29 19:21:26User Submission YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 [+]
PE32 2019-11-29 19:01:23User Submission YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 [+]
PE32+ 2019-11-29 18:51:27User Submission YRP/IsPE64 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay [+]
PE32 2019-11-28 01:01:22User Submission YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 [+]
PE32 2019-11-28 00:51:22User Submission YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 [+]
PE32 2019-11-25 19:51:46User Submission YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 [+]
PE32 2019-11-25 19:11:31User Submission YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 [+]
PE32 2019-11-21 06:11:20User Submission YRP/Visual_Cpp_2005_Release_Microsoft YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 [+]
PE32 2019-11-20 20:11:32User Submission YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 [+]
PE32 2019-11-20 20:01:17User Submission YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 [+]
PE32+ 2019-11-20 19:21:13User Submission YRP/IsPE64 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay [+]
PE32 2019-11-20 19:01:18User Submission YRP/Visual_Cpp_2005_DLL_Microsoft YRP/Visual_Cpp_2003_DLL_Microsoft YRP/IsPE32 YRP/IsDLL [+]
PE32 2019-11-12 17:30:59User Submission YRP/Visual_Cpp_2005_DLL_Microsoft YRP/Visual_Cpp_2003_DLL_Microsoft YRP/IsPE32 YRP/IsDLL [+]
PE32 2019-11-12 17:21:10User Submission YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 [+]
PE32 2019-11-12 17:11:30User Submission YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 [+]
PE32+ 2019-11-12 17:11:28User Submission YRP/IsPE64 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay [+]
PE32+ 2019-11-07 17:41:11User Submission YRP/IsPE64 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay [+]
PE32 2019-11-07 17:30:37User Submission YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 [+]
PE32 2019-11-07 17:20:46User Submission YRP/Visual_Cpp_2005_DLL_Microsoft YRP/Visual_Cpp_2003_DLL_Microsoft YRP/IsPE32 YRP/IsDLL [+]
PE32 2019-11-07 17:00:51User Submission YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 [+]
PE32 2019-11-06 06:00:40User Submission YRP/Visual_Cpp_2005_Release_Microsoft YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 [+]
ASCII 2019-10-25 04:40:24User Submission CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api YRP/powershell YRP/domain [+]
PE32 2019-10-07 14:49:59User Submission YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature [+]
PE32 2019-10-07 14:49:57User Submission YRP/Visual_Cpp_2005_Release_Microsoft YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 [+]
PE32 2019-10-06 18:29:49User Submission YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature [+]
PE32 2019-10-06 12:49:53User Submission YRP/Visual_Cpp_2005_Release_Microsoft YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 [+]
PE32 2019-10-06 12:49:49User Submission YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature [+]
PE32 2019-10-06 12:09:56User Submission YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature [+]
PE32 2019-10-06 12:09:52User Submission YRP/Visual_Cpp_2005_Release_Microsoft YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 [+]
PE32 2019-10-06 11:30:00User Submission YRP/Visual_Cpp_2005_Release_Microsoft YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 [+]
PE32 2019-10-06 11:29:53User Submission YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature [+]
PE32+ 2019-10-06 11:29:52User Submission YRP/Microsoft_Visual_Cpp_80_DLL YRP/IsPE64 YRP/IsWindowsGUI YRP/HasRichSignature [+]
PE32 2019-10-06 10:50:03User Submission YRP/Visual_Cpp_2005_Release_Microsoft YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 [+]
PE32 2019-10-06 10:49:51User Submission YRP/Visual_Cpp_2005_Release_Microsoft YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 [+]
PE32 2019-10-06 06:20:28User Submission YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature [+]
PE32 2019-10-06 01:49:56User Submission YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature [+]
PE32 2019-10-06 01:49:53User Submission YRP/Visual_Cpp_2005_Release_Microsoft YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 [+]
PE32 2019-10-06 00:29:58User Submission YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature [+]