MalShare

SHA256 Hash	File type	Added	Source	Yara Hits
adeb05d26db7acc1dadcb6184274b54ccab7e4d95da6b48b06126119cb0531af	PE32	2022-02-22 17:17:26	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/win_private_profile YRP/Big_Numbers1
c4e1d81dd32c21270bb756a19768e62ee77e29b4ede602e6e8db3f724c28925f	PE32	2022-02-17 22:10:12	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/win_registry YRP/win_files_operation YRP/BASE64_table YRP/VC8_Random
ab377cb9d679c1187a991dc3462a17657170c11f0d4c874dd0c6b83a6bcab2fd	PE32	2022-02-17 02:34:42	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/keylogger YRP/win_registry YRP/win_files_operation YRP/BASE64_table YRP/VC8_Random YRP/suspicious_packer_section
2bb4eaff50c46029f689a104fcc986f2a215ead5cb94d51de5b08c0c007256c9	PE32	2022-02-17 00:00:20	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_v71_DLL YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional [+] YRP/Microsoft_Visual_Cpp_v60_DLL YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Dropper_Strings YRP/win_registry FlorianRoth/DragonFly_APT_Sep17_3
c6a8f110a759189710d292dc74a6f3752d702c9b3c8d2b21b664a3e28d751e21	PE32	2022-02-16 07:14:48	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/win_registry YRP/win_files_operation YRP/VC8_Random
0445999ddae573d087424bff088fea057fb168898f786bef76cd5811764a9494	PE32	2022-02-15 22:48:26	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasRichSignature YRP/maldoc_find_kernel32_base_method_1 YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/VM_Generic_Detection YRP/Misc_Suspicious_Strings YRP/disable_taskmanager YRP/inject_thread YRP/network_tcp_listen YRP/network_dropper YRP/network_tcp_socket YRP/escalate_priv YRP/screenshot YRP/rat_webcam YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library
2f7cac0d2fe00b19b5bf4405335a7b6144755b9fbabc25e18e19d6983d08c947	PE32	2022-02-15 22:00:52	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/network_tcp_socket YRP/win_files_operation YRP/BLOWFISH_Constants YRP/Str_Win32_Winsock2_Library
5baffe64f0c67db485329efda919a5b2c567b74eb49ff789e9b151bbdf53d749	PE32	2022-02-15 21:20:10	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/win_registry YRP/win_files_operation YRP/BASE64_table YRP/VC8_Random
22908cb95ad205f277ed9e8220d27d5f0166fc0fb924a363559d68f97c90ce9e	PE32	2022-02-15 20:30:53	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/win_registry YRP/win_files_operation YRP/VC8_Random
9a95988dec2cb63b57dd91e92864190df5e6adb1f9bc5daeeeecf789ed7506d0	PE32	2021-05-11 11:54:14	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Dropper_Strings YRP/DebuggerCheck__QueryInfo YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_files_operation
4cbf2f3779111ef6f27649ce10809061ad54cbf779247135f0ff3c40477facb8	PE32	2021-05-11 11:54:11	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Dropper_Strings YRP/DebuggerCheck__QueryInfo YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_files_operation
c56c7c105b9eff9a7e11db29483dc667f7e6a40eb1446a1e74604ae8cb978d61	PE32	2021-05-11 11:54:05	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Dropper_Strings YRP/DebuggerCheck__QueryInfo YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_files_operation
c7565404c2f5eb1eae3cbe4dfcc7c756d13de8fe856f81cbfd8c05bafbf33ee8	PE32	2021-05-11 11:54:01	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Dropper_Strings YRP/DebuggerCheck__QueryInfo YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_files_operation
0a0bc2863deb10251fbf8a9ee723fa65e7697b2b722e0d1cf0a51cd11956bc94	PE32	2021-05-11 11:53:58	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Dropper_Strings YRP/DebuggerCheck__QueryInfo YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_files_operation
75f960c130f555c945df344cc5edd2009866b466b4e7b3297a1069c4d016d594	PE32	2021-05-11 11:53:55	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Dropper_Strings YRP/DebuggerCheck__QueryInfo YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_files_operation
3d99bdb85ea7fd740b09f58e8bffdb9122ba4773baa69f49260d14833c01a512	PE32	2021-05-11 11:53:51	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Dropper_Strings YRP/DebuggerCheck__QueryInfo YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_files_operation
2a5d5f46b6b6e55727d182b917eb30e81bcedb9a53c573015074dad42414bc7e	PE32	2021-05-11 11:53:48	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Dropper_Strings YRP/DebuggerCheck__QueryInfo YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_files_operation
cf17b828de6a27843755ea7f0d46dc5c3f83eb39a81aace0242840c51a291d05	PE32	2021-05-11 11:53:45	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Dropper_Strings YRP/DebuggerCheck__QueryInfo YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_files_operation
b90c1f4d02f399ab26bca7760fb5d26b0c113039becf22572e7d695cb0e27a75	PE32	2021-05-11 11:53:42	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Dropper_Strings YRP/DebuggerCheck__QueryInfo YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_files_operation
46ebd0d001cb8d0b1bf29d5b79199e7ab0890f186a3fa253d3abf34549f4b7a2	PE32	2021-05-11 11:53:39	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Dropper_Strings YRP/DebuggerCheck__QueryInfo YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_files_operation
7890f3de15cf561a26f7e6d4009baada5a727df47ec63a7582477625e94087ed	PE32	2021-05-11 11:53:33	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Dropper_Strings YRP/DebuggerCheck__QueryInfo YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_files_operation
63990b44b94241c29c45ff40f8291c2b4e7a073136be7351c707a1cd3929276a	PE32	2021-05-11 11:53:23	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Dropper_Strings YRP/DebuggerCheck__QueryInfo YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_files_operation
a27f689533732eb9955ef52dc15da9867da0507b59dbe5daa23fffec57bd7385	PE32	2021-05-11 11:53:20	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/DebuggerCheck__QueryInfo YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_files_operation
235221aa2a9bc2ad3a2030063ea093dbee0394275e9b040f07412c7a5937798c	PE32	2021-05-11 11:53:16	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Dropper_Strings YRP/DebuggerCheck__QueryInfo YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_files_operation
574022cdf1adc0d66d370c5e6f01533ec447ac86756cff87218c32749797747f	PE32	2021-05-11 11:53:13	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Dropper_Strings YRP/DebuggerCheck__QueryInfo YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_files_operation
f484cf06e20996e1887b4304b33444f3ee1c03fb912f5ec8d5327c4074a97abb	PE32	2021-05-11 11:53:10	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Dropper_Strings YRP/DebuggerCheck__QueryInfo YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_files_operation
143d7e2a249fea12b8c2c656581bdda6f3c79b6aebd20adddc0398671f73d485	PE32	2021-05-11 11:53:07	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Dropper_Strings YRP/DebuggerCheck__QueryInfo YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_files_operation
62b126cbc8af2988f2ec82a291dbd6f2a65d6ec0af33a83741f87c4d88ccdbd2	PE32	2021-05-11 11:53:04	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Dropper_Strings YRP/DebuggerCheck__QueryInfo YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_files_operation
9935b824d5e525def61515b7ff671b5824cd504823548424b3cc47173ce3021e	PE32	2021-05-11 11:53:01	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Dropper_Strings YRP/DebuggerCheck__QueryInfo YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_files_operation
d239b97d00e6006683d904b5bcb3441b26c255f628316ecfdf75cccaa6ff923e	PE32	2021-05-11 11:52:57	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Dropper_Strings YRP/DebuggerCheck__QueryInfo YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_files_operation
d7b69a3ce4f0171447fc3436cf0b2e0340334dc14bad15f673878f2cbe6b6ce8	PE32	2021-05-11 11:52:54	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Dropper_Strings YRP/DebuggerCheck__QueryInfo YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_files_operation
5f21223a7eb2013e4fa327a152366fd31ba5f1d0a23d5e245a61ba29f14ebb87	PE32	2021-05-11 11:52:51	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Dropper_Strings YRP/DebuggerCheck__QueryInfo YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_files_operation
4e613404fd43d2a8251aeec3e33c90644539fc0e5b7fc38d10e30d5b014bc6c4	PE32	2021-05-11 11:52:46	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Dropper_Strings YRP/DebuggerCheck__QueryInfo YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_files_operation
fe53984d6e23c60b6f8e59e49f1ba4cc9fd18cceafbb42f6f406cf2c6744fead	PE32	2021-03-14 02:05:01	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/win_registry
67bc775cc1a58930201ef247ace86cc5c8569057d4911a8e910ac2263c8eb880	PE32	2020-11-01 18:20:02	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/System_Tools YRP/Misc_Suspicious_Strings YRP/DebuggerCheck__QueryInfo YRP/anti_dbgtools YRP/disable_dep YRP/network_tcp_socket YRP/win_mutex YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/Big_Numbers1 YRP/CRC32b_poly_Constant YRP/Str_Win32_Winsock2_Library YRP/Turla_APT_Malware_Gen1 YRP/Turla_APT_Malware_Gen2 YRP/Turla_APT_Malware_Gen3 YRP/GenerateTLSClientHelloPacket_Test FlorianRoth/Turla_APT_Malware_Gen1 FlorianRoth/Turla_APT_Malware_Gen2 FlorianRoth/Turla_APT_Malware_Gen3
3de0ba77fa2d8b26e4226fd28edc3ab8448434d851f6b2b268ec072c5da92ade	PE32	2020-11-01 18:20:00	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/System_Tools YRP/Misc_Suspicious_Strings YRP/DebuggerCheck__QueryInfo YRP/anti_dbgtools YRP/disable_dep YRP/network_http YRP/network_tcp_socket YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/Big_Numbers1 YRP/CRC32b_poly_Constant YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/Turla_APT_Malware_Gen1 YRP/Turla_APT_Malware_Gen2 YRP/Turla_APT_Malware_Gen3 YRP/GenerateTLSClientHelloPacket_Test FlorianRoth/Turla_APT_Malware_Gen1 FlorianRoth/Turla_APT_Malware_Gen2 FlorianRoth/Turla_APT_Malware_Gen3
61bd32dbe2d08c31a23094dee2a2920c1fc3e9b4fbfbe2d3341b8dfed62cfab4	PE32	2020-11-01 15:23:23	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/Advapi_Hash_API YRP/CRC32b_poly_Constant YRP/BASE64_table YRP/Turla_APT_Malware_Gen1 YRP/Turla_APT_Malware_Gen3 YRP/GenerateTLSClientHelloPacket_Test FlorianRoth/Turla_APT_Malware_Gen1 FlorianRoth/Turla_APT_Malware_Gen3
5d6f586566332d431780ad01140812bfd924be8cf39cbe5b8c0cd9de550d94b4	PE32	2020-11-01 15:22:06	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/Advapi_Hash_API YRP/CRC32b_poly_Constant YRP/BASE64_table YRP/GenerateTLSClientHelloPacket_Test
24395f468853d146cae13a4e529ce75c2d2004601903783f3941636d740ad633	PE32	2020-10-15 01:33:00	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/win_registry YRP/MD5_Constants YRP/RIPEMD160_Constants YRP/SHA1_Constants
fd648e7444431f7a6963155fcee3e4a0ddd0d95411998e15e28f3740f9bcb92d	PE32	2020-10-15 01:32:58	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/screenshot YRP/win_registry YRP/MD5_Constants YRP/RIPEMD160_Constants YRP/SHA1_Constants
369fec3480ed54124dc6574e8c9b3ece347059cfca0fd6bb071fd80578df96d7	PE32	2020-10-15 01:32:54	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/win_registry YRP/MD5_Constants YRP/RIPEMD160_Constants YRP/SHA1_Constants YRP/GenerateTLSClientHelloPacket_Test
4b857911d9c4a5eddeff595efb475ca407ddfe27f34ec8972e204e3fae831d56	PE32	2020-10-15 01:32:53	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/win_registry YRP/MD5_Constants YRP/RIPEMD160_Constants YRP/SHA1_Constants
59cfecab30c01e24256d8f412f93895c52190ec3d747af96a7cd1afcdaa527d2	PE32	2020-10-15 01:32:52	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/win_registry YRP/MD5_Constants YRP/RIPEMD160_Constants YRP/SHA1_Constants YRP/Str_Win32_Winsock2_Library
467c3ad7fa6e5601ffd972491bc8ed7f87c9ce5d408e3f739ae2596da94cd2ca	PE32	2020-10-15 01:32:51	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/win_registry YRP/MD5_Constants YRP/RIPEMD160_Constants YRP/SHA1_Constants YRP/Str_Win32_Winsock2_Library
adb7e48e3ad9f4af3fb55de1675f691bc604a0163670524eaa0493e453bec831	PE32	2020-10-15 01:32:49	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasDebugData YRP/IsBeyondImageSize YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/Dropper_Strings YRP/network_udp_sock YRP/network_tcp_socket YRP/network_dns YRP/win_registry YRP/win_files_operation YRP/BASE64_table YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/suspicious_packer_section
ae6597197313f3e8febb4ba73ffa62aac395a978c0b73f7ba350d095c07a0839	PE32	2020-10-15 01:32:47	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsConsole YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Wininet_Library
e3350346071e345e43acec7370c9aec0b2255f05f98aa5dda3b35773b1c88cc9	PE32	2020-10-15 01:32:41	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/win_registry YRP/MD5_Constants YRP/RIPEMD160_Constants YRP/SHA1_Constants YRP/GenerateTLSClientHelloPacket_Test
a149068b07e4a5f97cf7e243cb5093296b5287868b82630b5e04f5336ca96413	PE32	2020-10-15 01:32:36	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/win_registry YRP/MD5_Constants YRP/RIPEMD160_Constants YRP/SHA1_Constants YRP/GenerateTLSClientHelloPacket_Test
7839ffc8a61348adef890adaf6b02e45a5f63b507c458980eadda215b3702bd3	PE32	2020-10-15 01:32:32	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasDebugData YRP/IsBeyondImageSize YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 FlorianRoth/DragonFly_APT_Sep17_3
c1c3498650e18e449b13b53468064f533ba1bdbd0f03b0b9e6883befe72790c7	PE32	2020-10-15 01:32:32	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/screenshot YRP/win_registry YRP/MD5_Constants YRP/RIPEMD160_Constants YRP/SHA1_Constants YRP/Str_Win32_Wininet_Library
d06cefac4ef1a74831240d4afb6ac8a96c331d08ee1b92153f741e386eaebcbf	PE32	2020-10-15 01:32:31	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasDebugData YRP/IsBeyondImageSize YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/network_http YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API
4a0d10e3cdc9f95b181c0589a93e8be5a68304a1d7e03dc8aa6424e01227e2d8	PE32	2020-10-15 01:32:30	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsConsole YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/network_http YRP/win_registry YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API
b0a5970f26ade7e37855ba813ad1b47976af112b9dab8480934358c7e9782c2e	PE32	2020-10-15 01:32:28	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasDebugData YRP/IsBeyondImageSize YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/screenshot YRP/win_registry YRP/MD5_Constants YRP/RIPEMD160_Constants YRP/SHA1_Constants
e75ca2f02c69ceaf77b6f7b31b68907bd4ba257569c8cd1915494f1c86e35572	PE32	2020-10-15 01:32:28	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/screenshot YRP/win_registry
70391d5d49b99a0dc71835bf331fa4032a85c22f93387e061f518c431b3c060f	PE32	2020-10-15 01:32:27	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/screenshot YRP/win_registry YRP/MD5_Constants YRP/RIPEMD160_Constants YRP/SHA1_Constants
139ff6d348d3d71f21295e544d67a8f5769db647dae88f9e870016b3deb62a0e	PE32	2020-10-15 01:32:26	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasDebugData YRP/IsBeyondImageSize YRP/HasRichSignature YRP/domain YRP/contentis_base64 FlorianRoth/DragonFly_APT_Sep17_3
5961bc9eed7eb13f3befb9511603a6699841c53a48cf65c58448a86e498d5882	PE32	2020-10-15 01:32:23	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/network_http YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/MD5_Constants YRP/RIPEMD160_Constants YRP/SHA1_Constants YRP/DES_Long YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API
f4ed20a3bf828c1ddd189d1360153a102b6a32e9aebfbf738e4958c4a6f611ea	PE32	2020-10-15 01:32:21	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasDebugData YRP/IsBeyondImageSize YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/win_registry YRP/MD5_Constants YRP/RIPEMD160_Constants YRP/SHA1_Constants
8f85bcbcf5f7fe869c0e92ccb7baf0601064ca626843ecb2b05cb07778946e18	PE32	2020-10-15 01:32:20	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/MD5_Constants YRP/RIPEMD160_Constants YRP/SHA1_Constants YRP/DES_Long
1141c0c15d3959ebc14cfea0425e1f61bc9eea32e1ac3c585ee0726445c66965	PE32	2020-06-30 14:55:23	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/win_registry YRP/win_files_operation YRP/BASE64_table YRP/VC8_Random
1186cac86242e21e17a61cadbbde0d25ccb36a5780218f14b93ac28b0ddfcbcf	PE32	2020-06-30 02:06:22	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_v71_DLL YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional [+] YRP/Microsoft_Visual_Cpp_v60_DLL YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/IsPacked YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/keylogger YRP/win_mutex YRP/win_registry
11bff947e27d4716e1aa4a06c006fceab142d9b821a2a096872a44e4f926eb15	PE32	2020-06-27 13:02:04	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsConsole YRP/IsPacked YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/win_files_operation YRP/CRC32_poly_Constant YRP/CRC32_table YRP/CRC16_table
11350535c21525a0b1aed527260395d14899b6bb0bd369fc86c7a2f7209af6b8	PE32	2020-06-27 06:55:51	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/System_Tools YRP/win_hook FlorianRoth/DragonFly_APT_Sep17_3
1135150d1b0bc991b70a6d13cfda93e925c364bf538c22cb6a769fa055b40091	PE32	2020-06-27 05:34:07	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/win_registry YRP/win_files_operation YRP/BASE64_table YRP/VC8_Random YRP/suspicious_packer_section
7fa4482bfbca550ce296d8e791b1091d60d733ea8042167fd0eb853530584452	PE32	2020-03-15 20:05:09	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/System_Tools YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/DebuggerCheck__QueryInfo YRP/anti_dbgtools YRP/inject_thread YRP/escalate_priv YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/CRC32b_poly_Constant YRP/BASE64_table YRP/Turla_APT_Malware_Gen1 YRP/Turla_APT_Malware_Gen2 YRP/Turla_APT_Malware_Gen3 YRP/GenerateTLSClientHelloPacket_Test FlorianRoth/generic_carbon FlorianRoth/carbon_metadata FlorianRoth/Turla_APT_Malware_Gen1 FlorianRoth/Turla_APT_Malware_Gen2 FlorianRoth/Turla_APT_Malware_Gen3
ffb0e35cfab750c8532f7d49deb8a71284fa420660710b8be632dacdd0a5cf45	PE32	2020-03-15 20:05:06	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/System_Tools YRP/Misc_Suspicious_Strings YRP/DebuggerCheck__QueryInfo YRP/anti_dbgtools YRP/disable_dep YRP/inject_thread YRP/network_tcp_socket YRP/escalate_priv YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/CRC32b_poly_Constant YRP/BASE64_table YRP/Str_Win32_Winsock2_Library YRP/Turla_APT_Malware_Gen1 YRP/Turla_APT_Malware_Gen2 YRP/Turla_APT_Malware_Gen3 YRP/GenerateTLSClientHelloPacket_Test FlorianRoth/carbon_metadata FlorianRoth/Turla_APT_Malware_Gen1 FlorianRoth/Turla_APT_Malware_Gen2 FlorianRoth/Turla_APT_Malware_Gen3
02f9501cb01b375e752a9cc4aa5ee084a504944bdc853e1bdfc860dd76e0d198	PE32	2020-03-15 20:04:53	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Turla_APT_srsvc FlorianRoth/Turla_APT_srsvc FlorianRoth/DragonFly_APT_Sep17_3
c3b85bc12c84b8d050e2b9f682df06d93ceaeb4a18480227358baa99f4989e47	PE32	2020-03-15 20:04:41	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/System_Tools YRP/Misc_Suspicious_Strings YRP/DebuggerCheck__QueryInfo YRP/anti_dbgtools YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/Advapi_Hash_API YRP/CRC32b_poly_Constant YRP/BASE64_table YRP/Turla_APT_Malware_Gen1 YRP/Turla_APT_Malware_Gen3 YRP/GenerateTLSClientHelloPacket_Test FlorianRoth/carbon_metadata FlorianRoth/Turla_APT_Malware_Gen1 FlorianRoth/Turla_APT_Malware_Gen3
995d2b3924d5f517a795c0acc392e3d47f07787f58c77bb42ac2248393533f16	PE32	2020-03-15 20:04:37	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/System_Tools YRP/Misc_Suspicious_Strings YRP/DebuggerCheck__QueryInfo YRP/anti_dbgtools YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/Advapi_Hash_API YRP/CRC32b_poly_Constant YRP/BASE64_table YRP/Turla_APT_Malware_Gen1 YRP/Turla_APT_Malware_Gen3 YRP/GenerateTLSClientHelloPacket_Test FlorianRoth/carbon_metadata FlorianRoth/Turla_APT_Malware_Gen1 FlorianRoth/Turla_APT_Malware_Gen3
5cde932b2a8bfedec7631c6160fdd27e7a2cc4d71175968581e7814092b956f5	PE32	2020-01-24 02:06:55	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasDebugData YRP/HasRichSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/Browsers YRP/Antivirus YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/network_http YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API
5bbe96d0b41a31f0954a7e1a1c82dc16053f3fbb3e9a387911e1ec50ff762349	PE32	2020-01-15 15:47:45	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/hijack_network YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Wininet_Library
30e9121651b0a8028bc84a434e6e3b6095045a7997cef58017501dabe18b678d	PE32	2020-01-15 12:47:28	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/win_registry YRP/win_files_operation YRP/VC8_Random
1496a47d2d582762565c5f9f5f80d84a8c27a8f5cffa7a5b907b15b003c69eba	PE32	2020-01-15 12:25:39	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/win_registry YRP/win_files_operation
959e6d8a9c05a916d21c53e659f1d4d86db034b7d2f2411ca007612a104a2112	PE32	2020-01-13 19:58:24	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/network_dropper YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/android_meterpreter
4caa2b1823d4888b05d7205bb7c5b24f63a4de02f543f23f2b58b0fd80894e64	PE32	2020-01-13 17:22:24	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/network_http YRP/network_dropper YRP/win_registry YRP/win_files_operation YRP/Advapi_Hash_API YRP/MD5_Constants YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API
8f61211a9ab473febb3c39b3691c834a985bd273fa06cafd4edcb2965219d366	PE32	2020-01-13 17:05:29	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/win_registry YRP/win_files_operation
04b819f71eb58591d2f07f4b8f26f6e07d4b5fa03bc23feb58127316307c918c	PE32	2020-01-13 17:00:16	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/System_Tools YRP/win_hook FlorianRoth/DragonFly_APT_Sep17_3
c34f4758c08932c9bad687f29c9678dfc5955eea43cb0d0cfa426a0da97f95f1	PE32	2020-01-13 14:16:31	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/win_registry YRP/win_files_operation YRP/VC8_Random
5c74326389888523fdfb3ee4581ceccacafb1caeedd15a9962ea1d403d743528	PE32	2020-01-13 14:16:25	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/win_registry YRP/win_files_operation YRP/VC8_Random
256439faa1a5a5d98c9c4bc03ff41f09708e32e0d5fce316b02ca1d932c1dd2b	PE32	2019-11-24 12:46:29	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Dropper_Strings YRP/win_registry YRP/win_files_operation YRP/VC8_Random YRP/Str_Win32_Winsock2_Library
99b3d1dc6889fbdc638c05f7ab3d069a2ff8d308eda0a2bf3b122164b4eca9dd	PE32	2019-11-24 12:46:25	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_v71_DLL YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional [+] YRP/Microsoft_Visual_Cpp_v60_DLL YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Dropper_Strings YRP/win_registry FlorianRoth/DragonFly_APT_Sep17_3
7c88ccafde06770aad8a2b00b70d07754f3d8c4cde88d85d454a210a0f1eec89	PE32	2019-11-24 11:30:14	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Dropper_Strings YRP/network_http YRP/win_registry YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API
2dc0f9e08bde378e8fe4e408b1b5f4bbbeacb251901009f25189a5a41a53ab47	PE32	2019-06-26 19:38:21	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/System_Tools YRP/Misc_Suspicious_Strings YRP/DebuggerCheck__QueryInfo YRP/anti_dbgtools YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/Advapi_Hash_API YRP/CRC32b_poly_Constant YRP/BASE64_table YRP/Turla_APT_Malware_Gen1 YRP/Turla_APT_Malware_Gen3 YRP/GenerateTLSClientHelloPacket_Test FlorianRoth/carbon_metadata FlorianRoth/Turla_APT_Malware_Gen1 FlorianRoth/Turla_APT_Malware_Gen3
88bb3b2ab34dbaa33ea4c6a2624d97fc78193e43342db7910043b4f8a2244418	PE32	2019-05-24 22:44:31	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/IsBeyondImageSize YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/network_tcp_socket YRP/Str_Win32_Winsock2_Library FlorianRoth/DragonFly_APT_Sep17_3
415b437648e241b61ab8073b6eaeb5b275f6e42b5ba27a22939633e6c0c18091	PE32	2019-01-29 00:53:33	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsConsole YRP/HasDebugData YRP/IsBeyondImageSize YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Dropper_Strings YRP/DebuggerCheck__QueryInfo YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/create_service YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/MD5_Constants
0ad977c6024de8b911d1a611d5234d420eb6219270dc49e2f56cbeb339ed9a66	PE32	2019-01-29 00:53:12	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsConsole YRP/HasDebugData YRP/IsBeyondImageSize YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_files_operation
d581b95b43c16407305f5d52631f044936b354ed921cb2efe8dfc9257960d2db	PE32	2018-11-14 20:38:30	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/System_Tools YRP/Misc_Suspicious_Strings YRP/DebuggerCheck__QueryInfo YRP/anti_dbgtools YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/Advapi_Hash_API YRP/CRC32b_poly_Constant YRP/BASE64_table YRP/Turla_APT_Malware_Gen1 YRP/Turla_APT_Malware_Gen3 YRP/GenerateTLSClientHelloPacket_Test FlorianRoth/carbon_metadata FlorianRoth/Turla_APT_Malware_Gen1 FlorianRoth/Turla_APT_Malware_Gen3
8d20dd4433821eaeb1b2bec5911ba3633e656ca56ae50b75d35b2d52ea55b2cb	PE32	2018-11-14 20:37:43	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/System_Tools YRP/Misc_Suspicious_Strings YRP/anti_dbgtools YRP/network_http YRP/network_tcp_socket YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/Advapi_Hash_API YRP/CRC32b_poly_Constant YRP/BASE64_table YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/Turla_APT_Malware_Gen1 YRP/Turla_APT_Malware_Gen3 YRP/GenerateTLSClientHelloPacket_Test FlorianRoth/carbon_metadata FlorianRoth/Turla_APT_Malware_Gen1 FlorianRoth/Turla_APT_Malware_Gen3
0b90db3a69aa8cfab36a66cd5390f46c32e3d88d8fcaefce8cd9e00700e10b65	PE32	2018-11-14 20:37:35	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/contentis_base64 FlorianRoth/DragonFly_APT_Sep17_3
1a488c6824bd39f3568346b2aaf3f6666f41b1d4961a2d77360c7c65c7978b5e	PE32	2018-11-14 20:37:29	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/contentis_base64 FlorianRoth/DragonFly_APT_Sep17_3
4dfcb6d9a132ac4d0ac897940ce7c83a2050272e71fcf483bea63f4e8bd663be	PE32	2018-11-13 23:10:32	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasDebugData YRP/IsBeyondImageSize YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/CRC32_poly_Constant YRP/CRC32_table
c90a512f223fb7100cd72b94d19044e414882c345dc10231364de9942cc2da44	PE32	2018-11-13 21:51:24	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/IsBeyondImageSize YRP/HasRichSignature YRP/domain YRP/contentis_base64
45704b9e8d28c4c8aa8ee63617c87f4866cc48771791cb3d3e1fa5b88efeca57	PE32	2018-11-13 21:51:24	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/IsBeyondImageSize YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/win_registry YRP/win_files_operation
aa6a0593b897a89e3345c3ac03639b51e54048d9e916879cc6258fbc25990cf7	PE32	2018-03-07 05:14:33	http://103.68.190.250/Sources//Advance/WndRec...	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasDebugData YRP/IsBeyondImageSize YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/DebuggerException__SetConsoleCtrl YRP/win_mutex YRP/Big_Numbers1
59979d3bc3d64500898f3c1fda833cc0f87db36b65f1bb4631e2ac1b232c8aad	PE32	2018-03-07 02:43:23	http://94.130.104.170/jpeg1x32.dll_C2BA81C0DE...	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasDebugData YRP/IsBeyondImageSize YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library FlorianRoth/DragonFly_APT_Sep17_3
9611d0b1837e933b9d938e19791b757aa56669ec75b8fd671bdd1371eede03bb	PE32	2018-03-07 02:37:00	http://94.130.104.170/decrypted_rkctl_Win32.d...	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/network_tcp_socket YRP/Str_Win32_Winsock2_Library FlorianRoth/DragonFly_APT_Sep17_3
099ad10b55e74e1b99424d8e739107534004ba5b1e6c051cf8b942ed32dabca6	PE32	2018-03-07 02:36:48	http://94.130.104.170/decrypted_inj_services_...	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/DebuggerCheck__QueryInfo YRP/escalate_priv YRP/win_token
dec5542f2a19ff58af26b1e30a80d2628ac8fba9d8569a867f1c8529eb209f8e	PE32	2018-02-23 15:00:59	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsConsole YRP/HasDebugData YRP/IsBeyondImageSize YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/Advapi_Hash_API FlorianRoth/DragonFly_APT_Sep17_3
325d9aeecb2e2607ecc43bfce7e49c2561195158e8a38f366a33cca5300876c4	PE32	2018-02-23 15:00:59	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_v71_DLL YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional [+] YRP/Microsoft_Visual_Cpp_v60_DLL YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsConsole YRP/HasDebugData YRP/IsBeyondImageSize YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/Advapi_Hash_API FlorianRoth/DragonFly_APT_Sep17_3
da4192b9b0a0c3a1be1f1e52e2a4cc4bcf11b8436b04d0ae8118ef84fc4f6d34	PE32	2018-02-23 15:00:55	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_70_DLL YRP/Microsoft_Visual_Cpp_70_DLL_additional YRP/Microsoft_Visual_Cpp_v60_DLL [+] YRP/Microsoft_Visual_Cpp_70_DLL_Method_3 YRP/IsPE32 YRP/IsDLL YRP/IsConsole YRP/HasDebugData YRP/IsBeyondImageSize YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_files_operation

Recent Searches
yrp/microsoft_visual_cpp_70_dll_additional
yrp/ngh_php_php
yrp/installshield_afw
yrp/expressorv13cgsoftlabs
yrp/darkrat
yrp/asprotect_v123_rc1
yrp/zeroaccess_js
yrp/screenshot
yrp/upx_wwwupxsourceforgenet
yrp/ispe32

Search

Recent Searches