MalShare

SHA256 Hash	File type	Added	Source	Yara Hits
3faf99846d588414d0c5534b88375591743872c2336f10abb4aa2cf23d18642a	PE32	2022-02-18 18:29:39	User Submission	YRP/The_Best_Cryptor_FsK_SignByfly YRP/The_Best_Cryptor_FsK YRP/FSG_v110_Eng_dulekxt_ YRP/RCryptorv11Vaska [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/domain YRP/contentis_base64 YRP/ThreadControl__Context YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/inject_thread YRP/create_service YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/sniff_audio YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/CookieTools YRP/suspicious_packer_section
658be609d1e85cad1a5d6b21c261b2d30435e960071a263f86c6de729646ff5b	PE32	2022-02-18 00:40:59	User Submission	YRP/The_Best_Cryptor_FsK_SignByfly YRP/The_Best_Cryptor_FsK YRP/FSG_v110_Eng_dulekxt_ YRP/ASProtectSKE21xexeAlexeySolodovnikov [+] YRP/RCryptorv11Vaska YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/ExportTableIsBad YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/CookieTools YRP/suspicious_packer_section
c5f45a67e5257b2ebc3227d0ce7a1f0f4c58460689493b216f9d9153bfe822d8	PE32	2022-02-18 00:27:04	User Submission	YRP/The_Best_Cryptor_FsK_SignByfly YRP/The_Best_Cryptor_FsK YRP/FSG_v110_Eng_dulekxt_ YRP/RCryptorv11Vaska [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/domain YRP/contentis_base64 YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Big_Numbers0 YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section
9160e691fe1cf7734e98fce3a74ec0614a47147c9760aa5724f200050fd6fb14	MS-DOS	2022-02-18 00:10:58	User Submission	YRP/The_Best_Cryptor_FsK_SignByfly YRP/The_Best_Cryptor_FsK YRP/FSG_v110_Eng_dulekxt_ YRP/RCryptorv11Vaska [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section FlorianRoth/DragonFly_APT_Sep17_3
1b21b1c056b34f4d8fd758c002eea3cf3c6b38e2dea46dfcd46ad887e0a4223e	PE32	2022-02-17 21:41:54	User Submission	YRP/The_Best_Cryptor_FsK_SignByfly YRP/The_Best_Cryptor_FsK YRP/FSG_v110_Eng_dulekxt_ YRP/ASProtectSKE21xexeAlexeySolodovnikov [+] YRP/RCryptorv11Vaska YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/ExportTableIsBad YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/CookieTools YRP/suspicious_packer_section
4e9905fbe59f10ee78766e004d570ad32efa23fbeac434c142f491f2bf6f1757	PE32	2022-02-17 19:45:58	User Submission	YRP/The_Best_Cryptor_FsK_SignByfly YRP/The_Best_Cryptor_FsK YRP/FSG_v110_Eng_dulekxt_ YRP/ASProtectSKE21xexeAlexeySolodovnikov [+] YRP/RCryptorv11Vaska YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/ExportTableIsBad YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/CookieTools YRP/suspicious_packer_section
0a3d864489c73d07a60547267d3ef409dc37efb76c60769b4be4ba8f438a3a24	PE32	2022-02-17 18:26:37	User Submission	YRP/The_Best_Cryptor_FsK_SignByfly YRP/The_Best_Cryptor_FsK YRP/FSG_v110_Eng_dulekxt_ YRP/RCryptorv11Vaska [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/network_dropper YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section
23488ffe4c3af2563df3995af88d64bec546e9493318894dacab4c425a637dc3	PE32	2022-02-17 15:21:17	User Submission	YRP/The_Best_Cryptor_FsK_SignByfly YRP/The_Best_Cryptor_FsK YRP/FSG_v110_Eng_dulekxt_ YRP/RCryptorv11Vaska [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/network_dropper YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section
ede441080f775abf0780fefdf5a7bdbcb3767597a1b3bdc5653e7d319f5e41ad	PE32	2022-02-17 12:11:10	User Submission	YRP/The_Best_Cryptor_FsK_SignByfly YRP/The_Best_Cryptor_FsK YRP/FSG_v110_Eng_dulekxt_ YRP/ASProtectSKE21xexeAlexeySolodovnikov [+] YRP/RCryptorv11Vaska YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/ExportTableIsBad YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/CookieTools YRP/suspicious_packer_section
a9bf84220bf84ea4ad202912e161a1db7f32a10996f008b0bf199d0daf9ac2a8	PE32	2022-02-17 05:30:22	User Submission	YRP/The_Best_Cryptor_FsK_SignByfly YRP/The_Best_Cryptor_FsK YRP/FSG_v110_Eng_dulekxt_ YRP/RCryptorv11Vaska [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/win_registry YRP/CRC32_poly_Constant YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API
bf0ceeb819839871a8a07666b2485125018d710248e77ce8dc402e5a06549670	PE32	2022-02-17 00:53:28	User Submission	YRP/The_Best_Cryptor_FsK_SignByfly YRP/The_Best_Cryptor_FsK YRP/FSG_v110_Eng_dulekxt_ YRP/ASProtectSKE21xexeAlexeySolodovnikov [+] YRP/RCryptorv11Vaska YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/ExportTableIsBad YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/CookieTools YRP/suspicious_packer_section
fb63ccae32cce5d13111a62f1672666fdf22b2ccaf803c0d77ef4a4816798b7e	PE32	2022-02-16 17:45:15	User Submission	YRP/The_Best_Cryptor_FsK_SignByfly YRP/The_Best_Cryptor_FsK YRP/FSG_v110_Eng_dulekxt_ YRP/RCryptorv11Vaska [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/domain YRP/contentis_base64 YRP/network_dropper YRP/keylogger YRP/rat_webcam YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/suspicious_packer_section
435afcf51ae61f174b75f498c14d3b51dd98f3374865fdebac4bac661a1aedf9	PE32	2022-02-16 15:08:58	User Submission	YRP/The_Best_Cryptor_FsK_SignByfly YRP/The_Best_Cryptor_FsK YRP/FSG_v110_Eng_dulekxt_ YRP/RCryptorv11Vaska [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/domain YRP/contentis_base64 YRP/ThreadControl__Context YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/inject_thread YRP/create_service YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/sniff_audio YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/CookieTools
2f065e7ab015d62bd2e1b9f289a4fa0ed50d9ac89c9cc1ef97ee4d8722084b7a	PE32	2022-02-16 15:05:40	User Submission	YRP/The_Best_Cryptor_FsK_SignByfly YRP/The_Best_Cryptor_FsK YRP/FSG_v110_Eng_dulekxt_ YRP/RCryptorv11Vaska [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/domain YRP/contentis_base64 YRP/ThreadControl__Context YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/inject_thread YRP/create_service YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/sniff_audio YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers0 YRP/Big_Numbers3 YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API
c4c264c76064493fa5567d04c20d5756e5582a66ea9c99c585dda726c88c9217	PE32	2022-02-16 09:41:50	User Submission	YRP/The_Best_Cryptor_FsK_SignByfly YRP/The_Best_Cryptor_FsK YRP/FSG_v110_Eng_dulekxt_ YRP/RCryptorv11Vaska [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/domain YRP/IP YRP/contentis_base64 YRP/network_tcp_socket YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/suspicious_packer_section
35924bd00222647a7c3d369c2b9183817449a228c479e014a961b59b27609f2a	PE32	2022-02-16 02:25:13	User Submission	YRP/The_Best_Cryptor_FsK_SignByfly YRP/The_Best_Cryptor_FsK YRP/FSG_v110_Eng_dulekxt_ YRP/ASProtectSKE21xexeAlexeySolodovnikov [+] YRP/RCryptorv11Vaska YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/ExportTableIsBad YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/CookieTools YRP/suspicious_packer_section
05bb91bf880f1bd0af906fa9a33f4c6ac103c9d93ad5c5a1f9c6b4e469999597	PE32	2022-02-16 01:54:44	User Submission	YRP/The_Best_Cryptor_FsK_SignByfly YRP/The_Best_Cryptor_FsK YRP/FSG_v110_Eng_dulekxt_ YRP/ASProtectSKE21xexeAlexeySolodovnikov [+] YRP/RCryptorv11Vaska YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/ExportTableIsBad YRP/HasModified_DOS_Message YRP/domain YRP/contentis_base64 YRP/CookieTools YRP/suspicious_packer_section
aefc34c66c86a6dcf809ee12387792662cffb8d3a2729e7c1025f99d9981c76e	PE32	2022-02-15 23:10:27	User Submission	YRP/The_Best_Cryptor_FsK_SignByfly YRP/The_Best_Cryptor_FsK YRP/FSG_v110_Eng_dulekxt_ YRP/RCryptorv11Vaska [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/suspicious_packer_section
11109d909651e0acac509916c352f2cad3085e08b057de1d9c1b337a0ca688e3	PE32	2020-06-26 18:58:22	User Submission	YRP/The_Best_Cryptor_FsK_SignByfly YRP/The_Best_Cryptor_FsK YRP/FSG_v110_Eng_dulekxt_ YRP/RCryptorv11Vaska [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasModified_DOS_Message YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/network_dropper YRP/network_dns YRP/escalate_priv YRP/cred_local YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/Str_Win32_Winsock2_Library
a30384db9952e1b7be5b2441c10ee41e626fa5173c48e970a269f0aa54f4ed5a	PE32	2020-01-15 10:49:16	User Submission	YRP/The_Best_Cryptor_FsK_SignByfly YRP/The_Best_Cryptor_FsK YRP/FSG_v110_Eng_dulekxt_ YRP/RCryptorv11Vaska [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/domain YRP/contentis_base64 YRP/ThreadControl__Context YRP/keylogger YRP/win_registry FlorianRoth/DragonFly_APT_Sep17_3

Recent Searches
yrp/the_best_cryptor_fsk_signbyfly
yrp/with_urls
yrp/kkrunchy023alpha2ryd
yrp/win_token
yrp/iswindowsgui
yrp/powershell
yrp/without_attachments
yrp/big_numbers1
yrp/without_images
yrp/sig_238_xsniff

Search

Recent Searches