MD5 Hash File type Added Source Yara Hits
84e3ad0d62d21739d632d2106864e79e ELF 2017-10-16 01:20:43 CuckooSandbox/shellcode CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api CuckooSandbox/vmdetect [+]
b3d26632c4077e731ef2da329974519d ELF 2017-10-16 01:33:40 CuckooSandbox/shellcode CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api CuckooSandbox/vmdetect [+]
24734ef952fe363415cd4c2f7322276f ELF 2017-10-16 01:37:29 CuckooSandbox/shellcode CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api CuckooSandbox/vmdetect [+]
5249f9138e69786c8968231c2f50bd68 PE32 2018-02-20 13:12:38http://download234hkl.com/mimikatz.exe YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsConsole [+]
2d9cb4e97ecb8029c71c26da729f0b27 PE32 2018-03-07 02:54:56 YRP/Visual_Cpp_2005_Release_Microsoft YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 [+]
d6658c0928930d55d636d41c280099c5 PE32+ 2018-03-07 02:54:58 YRP/Microsoft_Visual_Cpp_80_DLL YRP/IsPE64 YRP/IsConsole YRP/HasOverlay [+]
713215ad1495c38dff844fb5464f1f4b PE32+ 2018-03-07 04:04:42http://188.126.22.149/html/mimi.exe YRP/Microsoft_Visual_Cpp_80_DLL YRP/IsPE64 YRP/IsConsole YRP/HasOverlay [+]
cd507fb8f4c1151095a33f6dd720cadb PE32 2018-03-07 04:04:47http://188.126.22.149/mimi.exe YRP/Visual_Cpp_2005_Release_Microsoft YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 [+]
f901c645188f9c80afa8f49174f065ce PE32+ 2018-05-24 00:58:05 CuckooSandbox/vmdetect YRP/webshell_iMHaPFtp_2 YRP/webshell_caidao_shell_guo YRP/webshell_cihshell_fix [+]
2c527d980eb30daa789492283f9bf69e PE32+ 2018-06-20 17:35:22http://122.147.225.142/x64/mimikatz.exe YRP/Microsoft_Visual_Cpp_80_DLL YRP/IsPE64 YRP/IsConsole YRP/IsBeyondImageSize [+]
6bfff091c62f8c3a48f92ef3cfecb56c Composite 2018-07-25 10:39:18 CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api YRP/domain YRP/IP [+]
8a0abaa811bd71ddee96c18c575cc73d Composite 2018-07-25 10:39:25 CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api YRP/domain YRP/IP [+]
0d910e316735e8b163ee460e5708e950 Composite 2018-08-05 09:49:27 CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api YRP/domain YRP/IP [+]
614ee10df43f4039a1e7cacb02d55881 Composite 2018-08-06 07:39:27 CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api YRP/domain YRP/IP [+]
f6217d33e19a5509f28bbadd3a1585dc Composite 2018-08-06 09:29:28 CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api YRP/domain YRP/IP [+]