MalShare
MD5 Hash File type Added Source Yara Hits
84e3ad0d62d21739d632d2106864e79e ELF 2017-10-16 03:20:43User Submission CuckooSandbox/shellcode CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api CuckooSandbox/vmdetect [+]
b3d26632c4077e731ef2da329974519d ELF 2017-10-16 03:33:40User Submission CuckooSandbox/shellcode CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api CuckooSandbox/vmdetect [+]
24734ef952fe363415cd4c2f7322276f ELF 2017-10-16 03:37:29User Submission CuckooSandbox/shellcode CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api CuckooSandbox/vmdetect [+]
28e5f4f9eaad865788a038487667e181 ASCII 2018-03-07 04:08:04http://172.104.107.30/PowerSploit/CodeExecuti... YRP/powershell YRP/domain YRP/IP YRP/contentis_base64 [+]
0367157f4e32b07915cbaef702acded1 ASCII 2018-03-07 04:14:29http://172.104.107.30/PowerSploit/ScriptModif... YRP/powershell YRP/domain YRP/url YRP/contentis_base64 [+]
b8a6d53b7c0857c759f071ebb78d9382 ASCII 2018-03-07 04:15:50http://172.104.107.30/nishang/Backdoors/DNS_T... YRP/powershell YRP/domain YRP/IP YRP/url [+]
ef4641bb140049fbd06ef8005f0139f4 ASCII 2018-03-07 04:15:52http://172.104.107.30/nishang/Backdoors/Execu... YRP/powershell YRP/domain YRP/IP YRP/url [+]
7444dfde1b5019bbe64c0789d6cb0179 ASCII 2018-03-07 04:15:56http://172.104.107.30/nishang/Backdoors/HTTP-... YRP/powershell YRP/domain YRP/url YRP/contentis_base64 [+]
9f1b14e2010f06bd46c544e375a23ff5 UTF-8 2018-03-07 04:16:03http://172.104.107.30/nishang/Client/Out-CHM.... YRP/powershell YRP/domain YRP/IP YRP/url [+]
05b8bec2cc458b773262a23b86c66689 ASCII 2018-03-07 04:16:05http://172.104.107.30/nishang/Client/Out-Exce... YRP/powershell YRP/domain YRP/url YRP/contentis_base64 [+]
bfa9aad1689ecac5629b8fef02864878 ASCII 2018-03-07 04:16:07http://172.104.107.30/nishang/Client/Out-HTA.... YRP/powershell YRP/domain YRP/IP YRP/url [+]
475703077701240e459c8550b3599f36 ASCII 2018-03-07 04:16:19http://172.104.107.30/nishang/Client/Out-Word... YRP/powershell YRP/domain YRP/url YRP/contentis_base64 [+]
735c6027f9cbc092618e10e6bd8629fd UTF-8 2018-03-07 04:19:54http://172.104.107.30/nishang/powerpreter/Pow... CuckooSandbox/vmdetect YRP/powershell YRP/domain YRP/IP [+]
f901c645188f9c80afa8f49174f065ce PE32+ 2018-05-24 02:58:05User Submission CuckooSandbox/vmdetect YRP/webshell_iMHaPFtp_2 YRP/webshell_caidao_shell_guo YRP/webshell_cihshell_fix [+]
779f0d3e51365cb856806dbf33d4333f XML 2018-06-01 21:28:18User Submission YRP/powershell YRP/domain YRP/IP YRP/url [+]
f10fc4dd59a09f8deb6c74cc1962ebf8 Composite 2018-06-23 11:31:13User Submission YRP/powershell YRP/office_document_vba YRP/Office_AutoOpen_Macro YRP/Contains_VBA_macro_code [+]
f9f27da64943f751a68b93400e64d05b HTML 2018-07-16 09:27:43http://down.cacheoffer.tk/d2/sp.txt YRP/powershell YRP/domain YRP/contentis_base64 YRP/Antivirus [+]
1cff7065348059660c3156713cd28cfe ASCII 2018-07-24 12:44:08User Submission YRP/powershell YRP/domain YRP/IP YRP/url [+]
6080e6a377a486753167b982e649cd13 ASCII 2018-08-20 12:53:55User Submission YRP/powershell YRP/domain YRP/IP YRP/url [+]
7e6fef45f6ba0eeaecc3feeb65a57cc0 PE32+ 2018-09-01 02:46:51User Submission YRP/IsPE64 YRP/IsDLL YRP/IsWindowsGUI YRP/IsBeyondImageSize [+]
34dc9a69f33ba93e631cd5048d9f2624 Microsoft 2018-11-14 19:06:13User Submission YRP/powershell YRP/domain YRP/url YRP/contentis_base64 [+]
5074e705c0fc4ca3a998a1345e0fc5f2 Composite 2019-05-21 19:35:31User Submission YRP/with_images YRP/without_attachments YRP/with_urls YRP/powershell [+]
cbb8738b3b77deba5f78761f11c4830a Rich 2019-05-22 03:44:45User Submission YRP/powershell YRP/domain YRP/IP YRP/url [+]
762a724d4daa0b2da9323f53cd3e2a2d ASCII 2019-06-28 19:43:42http://123.207.143.211/payload.txt YRP/powershell YRP/domain YRP/contentis_base64 YRP/GEN_PowerShell [+]
4a940dee2f725d88f7b7402c88ebdc34 ASCII 2019-10-23 21:20:23User Submission CuckooSandbox/embedded_win_api CuckooSandbox/vmdetect YRP/powershell YRP/domain [+]
d2149892c946e60abab264f5d8d236d3 ASCII 2019-10-25 06:40:24User Submission CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api YRP/powershell YRP/domain [+]
c86050690e0575e952a75840d815c0bf data 2019-10-25 22:21:42User Submission CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api CuckooSandbox/vmdetect YRP/webshell_iMHaPFtp_2 [+]
524ddd7c6931ad3ef4c1e34688fd33c4 ASCII 2019-10-25 22:22:39User Submission YRP/powershell YRP/domain YRP/url YRP/contentis_base64 [+]
891f69afa325088443f63f7aa4e73500 ASCII 2019-10-25 22:22:55User Submission CuckooSandbox/embedded_win_api YRP/powershell YRP/domain YRP/url [+]
90c47788f506f94d1c30ae3284d8f21f ASCII 2019-10-26 14:40:57User Submission YRP/powershell YRP/domain YRP/url YRP/contentis_base64 [+]
0d85a577e831bb9eb332cebbe8660246 ASCII 2019-10-26 14:41:03User Submission CuckooSandbox/embedded_win_api YRP/powershell YRP/domain YRP/url [+]
6bfa9e102375e098fe886ffc026c45db data 2019-11-06 22:00:55User Submission CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api CuckooSandbox/vmdetect YRP/Borland [+]
26b2728e622bc5edd09ccbe44378f1f7 ASCII 2019-12-03 13:16:35https://pastebin.com/raw/Hn0iW6jc YRP/powershell YRP/domain YRP/contentis_base64 YRP/GEN_PowerShell [+]
4498d9997c23b335a71653a94d27b758 ASCII 2019-12-04 01:20:00https://pastebin.com/raw/qaTw5Kyn YRP/powershell YRP/domain YRP/contentis_base64 YRP/GEN_PowerShell [+]
d703853987e6219ced79e776d468135b ASCII 2019-12-17 12:13:56https://pastebin.com/raw/V6rBPiJm YRP/powershell YRP/domain YRP/contentis_base64 YRP/GEN_PowerShell [+]
a78933f507e741f7aa9d025fcc005852 ASCII 2019-12-25 12:11:55https://pastebin.com/raw/d8V3GC8H YRP/powershell YRP/domain YRP/contentis_base64 YRP/GEN_PowerShell
413607c6764e90edef1acaeffde5bb6c ASCII 2019-12-29 12:00:19https://pastebin.com/raw/p74tenEd YRP/powershell YRP/domain YRP/contentis_base64 YRP/GEN_PowerShell [+]
d0df14eec106fcca6bac238557026c5d XML 2020-03-06 20:24:10User Submission CuckooSandbox/embedded_win_api CuckooSandbox/vmdetect YRP/possible_includes_base64_packed_functions YRP/with_images [+]
fe8f17003018cf469f2b5d0bd19ba80e data 2020-03-18 01:55:14User Submission CuckooSandbox/shellcode CuckooSandbox/embedded_win_api CuckooSandbox/vmdetect YRP/possible_includes_base64_packed_functions [+]
24ad3d19618fb6a7b31d5f8d3fc5b2bc XML 2020-03-23 19:54:00User Submission CuckooSandbox/embedded_win_api CuckooSandbox/vmdetect YRP/Borland YRP/powershell [+]