SHA256 Hash File type Added Source Yara Hits
C 2018-03-06 21:22:59http://173.199.71.172/dm.txt YRP/webshell_JspSpy_JspSpyJDK5_JspSpyJDK51_luci_jsp_spy2009_m_ma3_xxx YRP/webshell_000_403_807_a_c5_config_css_dm_he1p_JspSpy_JspSpyJDK5_JspSpyJDK51_luci_jsp_xxx YRP/webshell_000_403_807_a_c5_config_css_dm_he1p_xxx YRP/domain [+]
HTML 2018-06-08 17:09:45User Submission CuckooSandbox/embedded_win_api YRP/webshell_iMHaPFtp_2 YRP/webshell_caidao_shell_guo YRP/webshell_PHP_redcod [+]
HTML 2019-09-15 03:31:05http://112.74.42.175/dama.jsp YRP/webshell_config_myxx_zend YRP/webshell_000_403_807_a_c5_config_css_dm_he1p_JspSpy_JspSpyJDK5_JspSpyJDK51_luci_jsp_xxx YRP/webshell_000_403_c5_config_myxx_queryDong_spyjsp2010_zend YRP/webshell_000_403_807_a_c5_config_css_dm_he1p_xxx [+]
C 2019-09-15 03:31:16http://112.74.42.175/jspspy.jsp YRP/webshell_JspSpy_JspSpyJDK5_JspSpyJDK51_luci_jsp_spy2009_m_ma3_xxx YRP/webshell_000_403_807_a_c5_config_css_dm_he1p_JspSpy_JspSpyJDK5_JspSpyJDK51_luci_jsp_xxx YRP/webshell_he1p_JspSpy_nogfw_ok_style_1_JspSpy1 YRP/webshell_000_403_807_a_c5_config_css_dm_he1p_xxx [+]
data 2019-10-25 22:21:42User Submission CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api CuckooSandbox/vmdetect YRP/webshell_iMHaPFtp_2 [+]
HTML 2019-10-25 22:24:08User Submission CuckooSandbox/embedded_win_api YRP/webshell_iMHaPFtp_2 YRP/webshell_caidao_shell_guo YRP/webshell_PHP_redcod [+]
HTML 2019-10-25 22:24:10User Submission CuckooSandbox/embedded_win_api YRP/webshell_iMHaPFtp_2 YRP/webshell_caidao_shell_guo YRP/webshell_PHP_redcod [+]
HTML 2019-10-26 14:42:58User Submission CuckooSandbox/embedded_win_api YRP/webshell_iMHaPFtp_2 YRP/webshell_caidao_shell_guo YRP/webshell_PHP_redcod [+]
HTML 2019-10-26 15:01:01User Submission CuckooSandbox/embedded_win_api YRP/webshell_iMHaPFtp_2 YRP/webshell_caidao_shell_guo YRP/webshell_PHP_redcod [+]
HTML 2019-10-26 15:01:31User Submission CuckooSandbox/embedded_win_api YRP/webshell_iMHaPFtp_2 YRP/webshell_caidao_shell_guo YRP/webshell_PHP_redcod [+]