SHA256 Hash File type Added Source Yara Hits
ELF 2017-10-16 03:20:43User Submission CuckooSandbox/shellcode CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api CuckooSandbox/vmdetect [+]
ELF 2017-10-16 03:33:40User Submission CuckooSandbox/shellcode CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api CuckooSandbox/vmdetect [+]
ELF 2017-10-16 03:37:29User Submission CuckooSandbox/shellcode CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api CuckooSandbox/vmdetect [+]
PE32 2018-02-20 14:12:38http://download234hkl.com/mimikatz.exe YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsConsole [+]
PE32 2018-03-07 03:54:56User Submission YRP/Visual_Cpp_2005_Release_Microsoft YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 [+]
PE32+ 2018-03-07 03:54:58User Submission YRP/Microsoft_Visual_Cpp_80_DLL YRP/IsPE64 YRP/IsConsole YRP/HasOverlay [+]
PE32+ 2018-03-07 05:04:42http://188.126.22.149/html/mimi.exe YRP/Microsoft_Visual_Cpp_80_DLL YRP/IsPE64 YRP/IsConsole YRP/HasOverlay [+]
PE32 2018-03-07 05:04:47http://188.126.22.149/mimi.exe YRP/Visual_Cpp_2005_Release_Microsoft YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 [+]
PE32+ 2018-05-24 02:58:05User Submission CuckooSandbox/vmdetect YRP/webshell_iMHaPFtp_2 YRP/webshell_caidao_shell_guo YRP/webshell_cihshell_fix [+]
PE32+ 2018-06-20 19:35:22http://122.147.225.142/x64/mimikatz.exe YRP/Microsoft_Visual_Cpp_80_DLL YRP/IsPE64 YRP/IsConsole YRP/IsBeyondImageSize [+]
Composite 2018-07-25 12:39:18User Submission CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api YRP/domain YRP/IP [+]
Composite 2018-07-25 12:39:25User Submission CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api YRP/domain YRP/IP [+]
Composite 2018-08-05 11:49:27User Submission CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api YRP/domain YRP/IP [+]
Composite 2018-08-06 09:39:27User Submission CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api YRP/domain YRP/IP [+]
Composite 2018-08-06 11:29:28User Submission CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api YRP/domain YRP/IP [+]
PE32+ 2019-02-12 01:46:42http://files.red-starless.com/mimikatz_bis.ex... YRP/Microsoft_Visual_Cpp_80_DLL YRP/IsPE64 YRP/IsConsole YRP/HasOverlay [+]
PE32+ 2019-05-05 01:54:43User Submission YRP/Microsoft_Visual_Cpp_80_DLL YRP/IsPE64 YRP/IsConsole YRP/IsBeyondImageSize [+]
PE32+ 2019-06-11 17:39:54http://119.29.1.141:80/mimikatz.exe YRP/Microsoft_Visual_Cpp_80_DLL YRP/IsPE64 YRP/IsConsole YRP/HasOverlay [+]
PE32+ 2019-07-28 16:12:26User Submission YRP/Microsoft_Visual_Cpp_80_DLL YRP/IsPE64 YRP/IsConsole YRP/HasDebugData [+]
PE32 2019-09-16 03:40:18http://115.159.87.251/mimikatz.exe YRP/Visual_Cpp_2005_Release_Microsoft YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 [+]
PE32 2019-09-26 02:55:27https://shockwaver.org/mimi/Win32/mimikatz.ex... YRP/Visual_Cpp_2005_Release_Microsoft YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 [+]
PE32 2019-09-26 03:21:13http://52.50.24.225/mimikatz.exe YRP/Visual_Cpp_2005_Release_Microsoft YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 [+]
PE32+ 2019-09-26 03:43:26http://63love.cn/mimikatz.exe YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp_80_DLL YRP/IsPE64 YRP/IsConsole [+]
PE32+ 2019-09-26 03:44:44http://2345.vn:8080/x64/mimikatz.exe YRP/Microsoft_Visual_Cpp_80_DLL YRP/IsPE64 YRP/IsConsole YRP/HasOverlay [+]
PE32+ 2020-08-28 23:16:43User Submission YRP/IsPE64 YRP/IsDLL YRP/IsConsole YRP/HasDebugData [+]
PE32 2020-08-28 23:17:00User Submission YRP/Visual_Cpp_2005_DLL_Microsoft YRP/Visual_Cpp_2003_DLL_Microsoft YRP/IsPE32 YRP/IsDLL [+]
PE32 2021-02-13 00:49:46User Submission YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsConsole [+]
PE32+ 2021-02-13 00:50:18User Submission YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp_80_DLL YRP/IsPE64 YRP/IsConsole [+]