MalShare

SHA256 Hash	File type	Added	Source	Yara Hits
ea0859e88c92efbe6b1313e9bc404babdfb0844c42b5f22e202859a6c07856b5	PE32+	2022-03-03 19:00:43	User Submission	YRP/IsPE64 YRP/IsWindowsGUI YRP/HasRichSignature YRP/powershell [+] YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VM_Generic_Detection YRP/Dropper_Strings YRP/WMI_strings YRP/Misc_Suspicious_Strings YRP/anti_dbg YRP/disable_firewall YRP/create_service YRP/network_tcp_socket YRP/escalate_priv YRP/rat_rdp YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Advapi_Hash_API YRP/BASE64_table YRP/Str_Win32_Winsock2_Library
3a6dedb97a9b8940e528a22410be3d4b437fd2bbb2302a11ba913dba56a3d91b	PE32	2022-02-23 15:24:15	User Submission	YRP/UPX_050_070 YRP/UPX_v060_v061 YRP/ASProtect_v132 YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h [+] YRP/UPX_v060_v061_additional YRP/UPX_050_070_additional YRP/Packman_V0001_Bubbasoft_additional YRP/UPX050070 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Dropper_Strings YRP/disable_firewall YRP/network_udp_sock YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/BASE64_table YRP/Delphi_DecodeDate YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section
268d7c779cd268b0a763a40db22f0a32028120e14a5ac90d7c2b2e8b5e94aa71	PE32	2022-02-19 17:23:07	User Submission	YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature [+] YRP/domain YRP/contentis_base64 YRP/Dropper_Strings YRP/disable_firewall YRP/network_dropper YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library FlorianRoth/DragonFly_APT_Sep17_3
772c64b03701e5f275c8249a3152d54246fa13fc2abc91308401ffe8128e7a96	PE32	2022-02-19 10:25:02	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Dropper_Strings YRP/disable_firewall YRP/inject_thread YRP/network_dropper YRP/network_tcp_socket YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/GenerateTLSClientHelloPacket_Test
264852d88e4f720337a562afcb58d1172b61f79a55e9cb6797bab27be78b3cf8	PE32	2022-02-19 09:59:36	User Submission	YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Browsers YRP/Dropper_Strings YRP/anti_dbg YRP/disable_antivirus YRP/disable_firewall YRP/network_http YRP/screenshot YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/CRC32_poly_Constant YRP/RIPEMD160_Constants YRP/SHA1_Constants YRP/VC8_Random YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API
f7b707cbab08352254635bcfa14262b40c25f6042f1bf28ad4e3e4736159b63c	PE32	2022-02-19 09:51:00	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Dropper_Strings YRP/disable_firewall YRP/inject_thread YRP/network_dropper YRP/network_tcp_socket YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/GenerateTLSClientHelloPacket_Test
fac02a4d3442c003d3a67ff259ef4a57f8d8d974b8d46018ca5fba2c1b89b8ed	PE32	2022-02-19 09:34:08	User Submission	YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ [+] YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/BobSoft_Mini_Delphi_BoB_BobSoft_additional YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/BobSoftMiniDelphiBoBBobSoft YRP/IsPE32 YRP/IsWindowsGUI YRP/borland_delphi YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Dropper_Strings YRP/anti_dbg YRP/disable_firewall YRP/network_ssl YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/win_hook YRP/MD5_Constants YRP/OpenSSL_DSA YRP/BASE64_table YRP/Delphi_FormShow
d4df548327ce1dbfe219b56567ee4fd3519a32f4f38dbc76bc2bb084d328c7af	PE32	2022-02-19 07:29:40	User Submission	YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Browsers YRP/Dropper_Strings YRP/anti_dbg YRP/disable_antivirus YRP/disable_firewall YRP/network_http YRP/screenshot YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/CRC32_poly_Constant YRP/RIPEMD160_Constants YRP/SHA1_Constants YRP/VC8_Random YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API
eb53c5d7db3d200a892c94b65c50437b726e22eda0687254ac1733656ce34477	PE32	2022-02-19 03:16:41	User Submission	YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Browsers YRP/Dropper_Strings YRP/anti_dbg YRP/disable_antivirus YRP/disable_firewall YRP/network_http YRP/screenshot YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/CRC32_poly_Constant YRP/RIPEMD160_Constants YRP/SHA1_Constants YRP/VC8_Random YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API
4994c65e27b9a3bc254f5e1679ae33f3f85e0510c5059d779ec811a4216364cd	PE32	2022-02-19 00:42:41	User Submission	YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Browsers YRP/Dropper_Strings YRP/anti_dbg YRP/disable_antivirus YRP/disable_firewall YRP/network_http YRP/screenshot YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/CRC32_poly_Constant YRP/RIPEMD160_Constants YRP/SHA1_Constants YRP/VC8_Random YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API
cd00cb46d9e51600f1d52a4fb9be2350281b533ee7189ce64b82f2bc2cc29b1b	PE32	2022-02-18 23:02:40	User Submission	YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Browsers YRP/Dropper_Strings YRP/anti_dbg YRP/disable_antivirus YRP/disable_firewall YRP/network_http YRP/screenshot YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/CRC32_poly_Constant YRP/RIPEMD160_Constants YRP/SHA1_Constants YRP/VC8_Random YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API
c23db84d0c9160806243c3a0b34aff2efc90d62ee8503590fd68fcf7849248b5	PE32	2022-02-18 23:00:37	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Dropper_Strings YRP/disable_firewall YRP/inject_thread YRP/network_dropper YRP/network_tcp_socket YRP/win_registry YRP/Str_Win32_Winsock2_Library
071099ea1f88eadc4dde772661334cddc1a90bb4c1d3a62012e37216c9a49145	PE32	2022-02-18 22:39:09	User Submission	YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Browsers YRP/Dropper_Strings YRP/anti_dbg YRP/disable_antivirus YRP/disable_firewall YRP/network_http YRP/screenshot YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/CRC32_poly_Constant YRP/RIPEMD160_Constants YRP/SHA1_Constants YRP/VC8_Random YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API
81ab5ec46bcc973ac1b1ef85907b9b98ce64b14ba18fc93baa4d58da7730da45	PE32	2022-02-18 19:19:31	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Dropper_Strings YRP/disable_firewall YRP/inject_thread YRP/network_dropper YRP/network_tcp_socket YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/GenerateTLSClientHelloPacket_Test
ff963d00453e56559edc74e63368375e50b3832c5e6251208e5c4aaa00e5da17	PE32	2022-02-18 17:29:21	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Dropper_Strings YRP/disable_firewall YRP/inject_thread YRP/network_dropper YRP/network_tcp_socket YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/GenerateTLSClientHelloPacket_Test
60626363864881542f23f22affaf07784c6a52252e59bd2cc2b64d54d6c13c0e	PE32	2022-02-18 16:55:54	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Dropper_Strings YRP/disable_firewall YRP/inject_thread YRP/network_dropper YRP/network_tcp_socket YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/GenerateTLSClientHelloPacket_Test
f68c013806f795e5159e172dcd8437e1d2c78323977f663be2f5a309c32fac87	PE32	2022-02-18 12:49:41	User Submission	YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Browsers YRP/Dropper_Strings YRP/anti_dbg YRP/disable_antivirus YRP/disable_firewall YRP/network_http YRP/screenshot YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/CRC32_poly_Constant YRP/RIPEMD160_Constants YRP/SHA1_Constants YRP/VC8_Random YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API
b3d1982eb57156aebc57fb7ddd0af1af5564b0da6e7127d3e6299f7aa7a049c0	PE32	2022-02-18 11:37:22	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Dropper_Strings YRP/disable_firewall YRP/inject_thread YRP/network_dropper YRP/network_tcp_socket YRP/win_registry YRP/Str_Win32_Winsock2_Library
65fb159d8fa44f2c821e79ca68da64da3994cecd74072e4dcdcad76169cb0167	PE32	2022-02-18 10:13:50	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Dropper_Strings YRP/disable_firewall YRP/inject_thread YRP/network_dropper YRP/network_tcp_socket YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/GenerateTLSClientHelloPacket_Test
d48a423148f30c12f8fea637483541b0f1a63c24b2a381923097137aa7a3c824	PE32	2022-02-18 07:05:49	User Submission	YRP/Microsoft_Visual_Basic_v50 YRP/PureBasic_4x_Neil_Hodgson_additional YRP/PureBasic_4x_Neil_Hodgson YRP/PureBasic4xNeilHodgson [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/PureBasic YRP/with_images YRP/with_urls YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Dropper_Strings YRP/WMI_strings YRP/disable_firewall YRP/network_udp_sock YRP/network_smtp_raw YRP/network_tcp_socket YRP/network_dns YRP/screenshot YRP/keylogger YRP/spreading_share YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library FlorianRoth/DragonFly_APT_Sep17_3
3ebd2752af70dc0ece44b5313c1b7f537fc3bd241cc17f738ebd2d84231a1b43	PE32	2022-02-18 05:51:08	User Submission	YRP/ASProtect_v132 YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay [+] YRP/HasDigitalSignature YRP/MinGW_1 YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/disable_antivirus YRP/disable_firewall YRP/network_tcp_socket YRP/network_dns YRP/bitcoin YRP/escalate_priv YRP/screenshot YRP/check_patchlevel YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/Big_Numbers1 YRP/CRC32_poly_Constant YRP/BASE64_table YRP/Str_Win32_Winsock2_Library
ba9161df018668ba51adf7d5e544d278d26960ee591c5dd74028b519f2f432a4	PE32	2022-02-18 03:31:39	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Dropper_Strings YRP/disable_firewall YRP/inject_thread YRP/network_dropper YRP/network_tcp_socket YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/GenerateTLSClientHelloPacket_Test
48487cec0a798de980a863ea6c00dc7ac790cbca0c8fb08c7a9cfa316f275b7b	PE32	2022-02-18 03:22:29	User Submission	YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ [+] YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/borland_delphi YRP/borland_delphi_dll YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Dropper_Strings YRP/disable_firewall YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/network_ssl YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/android_meterpreter YRP/BASE64_table YRP/Delphi_Random YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/Str_Win32_Winsock2_Library
6eb84c8f0edaf6e02e6055697f376f08a68bfbb4b6fd3f9758fffb435e53c30d	PE32	2022-02-18 03:08:00	User Submission	YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ [+] YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/borland_delphi YRP/borland_delphi_dll YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Dropper_Strings YRP/disable_firewall YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/network_ssl YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/BASE64_table YRP/Delphi_Random YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/Str_Win32_Winsock2_Library
2bf02b60c1ccffac20cd31a40ec1fc061f77de63ed34691a48e6e23753bdc67f	PE32	2022-02-18 01:15:30	User Submission	YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Browsers YRP/Dropper_Strings YRP/anti_dbg YRP/disable_antivirus YRP/disable_firewall YRP/network_http YRP/screenshot YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/CRC32_poly_Constant YRP/RIPEMD160_Constants YRP/SHA1_Constants YRP/VC8_Random YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API
6dd393655039df2c484225fed602d1d3067dc20018ca18e2c5d7a15f7b442540	MS-DOS	2022-02-18 01:14:45	User Submission	YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI YRP/HasModified_DOS_Message [+] YRP/domain YRP/IP YRP/contentis_base64 YRP/Dropper_Strings YRP/disable_firewall YRP/network_udp_sock YRP/network_tcp_listen YRP/network_dropper YRP/network_tcp_socket YRP/network_dns YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section
ba1207cdf6e66fba908a786f72b6b82425aa5da24d7fda77b78dcccca01d7145	PE32	2022-02-18 01:08:26	User Submission	YRP/MingWin32_GCC_V3X YRP/MingWin32_GCC_3x YRP/MingWin32_v_h_additional YRP/MinGW_GCC_3x_additional [+] YRP/MinGW_GCC_3x YRP/MingWin32_GCC_3x_additional YRP/MingWin32_v_h YRP/MingWin32_v YRP/MinGWGCC3x YRP/IsPE32 YRP/IsWindowsGUI YRP/MinGW_1 YRP/domain YRP/contentis_base64 YRP/System_Tools YRP/Dropper_Strings YRP/disable_firewall YRP/network_tcp_socket YRP/network_dns YRP/keylogger YRP/win_registry YRP/Str_Win32_Winsock2_Library FlorianRoth/DragonFly_APT_Sep17_3
fc78caaa71497e6856ab01610f8093657b3c06072363c4e5b783edb6ac36845c	PE32	2022-02-18 00:30:25	User Submission	YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature [+] YRP/MinGW_1 YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/disable_antivirus YRP/disable_firewall YRP/network_tcp_socket YRP/network_dns YRP/bitcoin YRP/escalate_priv YRP/screenshot YRP/check_patchlevel YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/Big_Numbers1 YRP/CRC32_poly_Constant YRP/BASE64_table YRP/Str_Win32_Winsock2_Library
ec325ffe388460fa491f699d20b250cba3ef9220aafab7e72ed64519b7f9ffd9	PE32	2022-02-18 00:29:48	User Submission	YRP/Microsoft_Visual_Basic_v50 YRP/PureBasic_4x_Neil_Hodgson_additional YRP/PureBasic_4x_Neil_Hodgson YRP/PureBasic4xNeilHodgson [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/PureBasic YRP/with_images YRP/with_urls YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Dropper_Strings YRP/WMI_strings YRP/disable_firewall YRP/network_udp_sock YRP/network_smtp_raw YRP/network_tcp_socket YRP/network_dns YRP/screenshot YRP/keylogger YRP/spreading_share YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library FlorianRoth/DragonFly_APT_Sep17_3
87bd30bb83bf15052cce372769340067715079983752893c946275c6569be23f	PE32	2022-02-17 23:41:18	User Submission	YRP/ASProtect_v132 YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay [+] YRP/HasDigitalSignature YRP/MinGW_1 YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/disable_antivirus YRP/disable_firewall YRP/network_tcp_socket YRP/network_dns YRP/bitcoin YRP/escalate_priv YRP/screenshot YRP/check_patchlevel YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/Big_Numbers1 YRP/CRC32_poly_Constant YRP/BASE64_table YRP/Str_Win32_Winsock2_Library
bc346d6d370676300eb6064977b672f64e2f9bf71d453cba36703e5ab537cddb	PE32	2022-02-17 23:05:36	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Installer_VISE_Custom_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional [+] YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Installer_VISE_Custom YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Dropper_Strings YRP/disable_firewall YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library
8fd49f7d598184e3fed3d36ae73fd3e045400e1034a20c456e7ee3dda2dcc5c2	PE32	2022-02-17 22:44:18	User Submission	YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ [+] YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/borland_delphi YRP/borland_delphi_dll YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Dropper_Strings YRP/disable_firewall YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/network_ssl YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/BASE64_table YRP/Delphi_Random YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/Str_Win32_Winsock2_Library
83634164d9319f2b0e85e39346324ddb4d8944105e27bc11b99b41ffa1d7861b	PE32	2022-02-17 22:41:31	User Submission	YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Browsers YRP/Dropper_Strings YRP/anti_dbg YRP/disable_antivirus YRP/disable_firewall YRP/network_http YRP/screenshot YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/CRC32_poly_Constant YRP/RIPEMD160_Constants YRP/SHA1_Constants YRP/VC8_Random YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API
f3e0808f5a1efa1a1bfebeda83eac389018a082ef1f01fe286b46f52ea18d352	PE32	2022-02-17 21:11:20	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsBeyondImageSize YRP/ImportTableIsBad YRP/borland_delphi YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Antivirus YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/anti_dbg YRP/disable_antivirus YRP/disable_firewall YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/network_ssl YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/android_meterpreter YRP/Big_Numbers0 YRP/CRC32_poly_Constant YRP/CRC32_table YRP/MD5_Constants YRP/BASE64_table YRP/Delphi_Random YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/Str_Win32_Winsock2_Library YRP/GenerateTLSClientHelloPacket_Test
838c400fd623f220b31799d40e5a6420a8bab0a12ffacd2223d8d01d046a8990	PE32	2022-02-17 18:34:17	User Submission	YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi YRP/Borland_Delphi_30_additional [+] YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/D1S1Gv11betaD1N YRP/IsPE32 YRP/IsWindowsGUI YRP/borland_delphi YRP/borland_delphi_dll YRP/domain YRP/IP YRP/contentis_base64 YRP/Dropper_Strings YRP/ThreadControl__Context YRP/disable_firewall YRP/inject_thread YRP/network_dyndns YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/cred_local YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/android_meterpreter YRP/CRC32_poly_Constant YRP/CRC32_table YRP/MD5_Constants YRP/DES_sbox YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library
729b982edbfd16e07eb90950b911632e8d7fcef13c3f32beecb8c1fc5a0d1467	PE32	2022-02-17 17:44:35	User Submission	YRP/Microsoft_Visual_Basic_v50 YRP/PureBasic_4x_Neil_Hodgson_additional YRP/PureBasic_4x_Neil_Hodgson YRP/PureBasic4xNeilHodgson [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/PureBasic YRP/with_images YRP/with_urls YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Dropper_Strings YRP/WMI_strings YRP/disable_firewall YRP/network_udp_sock YRP/network_smtp_raw YRP/network_tcp_socket YRP/network_dns YRP/screenshot YRP/keylogger YRP/spreading_share YRP/win_registry YRP/win_files_operation YRP/Big_Numbers1 YRP/Str_Win32_Winsock2_Library FlorianRoth/DragonFly_APT_Sep17_3
788792efe56ee57b376673568ba5e2a2de1cfd45b38f2dcb6bc0cad149494beb	PE32	2022-02-17 16:57:07	User Submission	YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi YRP/Borland_Delphi_30_additional [+] YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/D1S1Gv11betaD1N YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/borland_delphi YRP/borland_delphi_dll YRP/domain YRP/IP YRP/contentis_base64 YRP/Dropper_Strings YRP/ThreadControl__Context YRP/disable_firewall YRP/inject_thread YRP/network_dyndns YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/cred_local YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/android_meterpreter YRP/CRC32_poly_Constant YRP/CRC32_table YRP/MD5_Constants YRP/DES_sbox YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library
9f2394e70b503680d1b94671648d0f1807bf15354cc6f250900e9341d40f3432	PE32	2022-02-17 16:09:09	User Submission	YRP/Borland_Cpp_DLL YRP/Borland_Cpp_for_Win32_1999 YRP/Borland_Cpp_DLL_additional YRP/Borland [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/borland_cpp YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Dropper_Strings YRP/DebuggerException__SetConsoleCtrl YRP/anti_dbg YRP/disable_firewall YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/win_hook YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API
7a315c8dee78b3c8b78e3509f5daf80b6f7112eeef4a9435fa5a30ba253d0c8e	PE32	2022-02-17 14:43:04	User Submission	YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ [+] YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/D1S1Gv11betaD1N YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/borland_delphi_dll YRP/domain YRP/contentis_base64 YRP/Dropper_Strings YRP/disable_firewall YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/keylogger YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API FlorianRoth/DragonFly_APT_Sep17_3
322338b72c8a2eccc2b690772d2f223f4def63945cb0bd30f467b411fa14803e	PE32	2022-02-17 13:55:52	User Submission	YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ [+] YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/borland_delphi_dll YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Dropper_Strings YRP/disable_firewall YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/network_ssl YRP/keylogger YRP/win_registry YRP/win_files_operation YRP/BASE64_table YRP/Delphi_Random YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Str_Win32_Winsock2_Library YRP/CookieTools
23fe3cb746da40f3bf826e954f02c04f49b2c649fc53d56bae6f0d53edb35fa4	PE32	2022-02-17 13:55:34	User Submission	YRP/Armadillo_v1xx_v2xx_additional YRP/Microsoft_Visual_Cpp_v70_DLL YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_60_DLL_Debug [+] YRP/Armadillo_v1xx_v2xx YRP/Microsoft_Visual_Cpp_v60_DLL YRP/Microsoft_Visual_Cpp_60 YRP/Armadillov1xxv2xx YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Browsers YRP/Dropper_Strings YRP/Check_FindWindowA_iat YRP/disable_firewall YRP/inject_thread YRP/network_udp_sock YRP/network_tcp_listen YRP/network_dropper YRP/network_tcp_socket YRP/network_dns YRP/spreading_file YRP/win_mutex YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/Advapi_Hash_API YRP/VC8_Random YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library
c94e8c7791546386ae38d9bca09bb48ebfe13cb2cd74ebf4c8731b7ea9be7908	PE32	2022-02-17 11:39:04	User Submission	YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Browsers YRP/Dropper_Strings YRP/anti_dbg YRP/disable_antivirus YRP/disable_firewall YRP/network_http YRP/screenshot YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Big_Numbers1 YRP/CRC32_poly_Constant YRP/RIPEMD160_Constants YRP/SHA1_Constants YRP/VC8_Random YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API
390ff4fbb01995560c8338a731ca304cb10aa4040865147571e0a8f6f86afdc7	PE32	2022-02-17 11:26:57	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Dropper_Strings YRP/disable_firewall YRP/inject_thread YRP/network_dropper YRP/network_tcp_socket YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/GenerateTLSClientHelloPacket_Test
babdfc2079c2c0104b4178c605409d71effca9365f61d67a60b93c3c879a700a	PE32	2022-02-17 11:18:47	User Submission	YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi YRP/Borland_Delphi_30_additional [+] YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/D1S1Gv11betaD1N YRP/IsPE32 YRP/IsWindowsGUI YRP/borland_delphi YRP/borland_delphi_dll YRP/domain YRP/IP YRP/contentis_base64 YRP/Dropper_Strings YRP/ThreadControl__Context YRP/disable_firewall YRP/inject_thread YRP/network_dyndns YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/cred_local YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/android_meterpreter YRP/CRC32_poly_Constant YRP/CRC32_table YRP/MD5_Constants YRP/DES_sbox YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library
0901a97dd6e79d437a98ca830e3e770727637396fded7314ff6884e723f70f30	PE32	2022-02-17 09:14:52	User Submission	YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Browsers YRP/Dropper_Strings YRP/anti_dbg YRP/disable_antivirus YRP/disable_firewall YRP/network_http YRP/screenshot YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/CRC32_poly_Constant YRP/RIPEMD160_Constants YRP/SHA1_Constants YRP/VC8_Random YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API
5f58e60d70595fa58a3a85e62d5d9eb21a7fcce81bee2bbc8c13953a9165d08b	PE32	2022-02-17 08:33:10	User Submission	CuckooSandbox/vmdetect YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional [+] YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/VMWare_Detection YRP/Sandboxie_Detection YRP/VirtualPC_Detection YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/DebuggerCheck__QueryInfo YRP/Check_Dlls YRP/vmdetect YRP/antisb_threatExpert YRP/antisb_sandboxie YRP/antivm_vmware YRP/disable_firewall YRP/network_udp_sock YRP/network_tcp_listen YRP/network_irc YRP/network_http YRP/network_dropper YRP/network_tcp_socket YRP/network_dns YRP/spreading_file YRP/rat_rdp YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/CRC32_poly_Constant YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API
7b13ca952d50d4f5b2f83562abfa6a29c4264b193222d3e98a6692fdadd7a0f0	PE32	2022-02-17 08:21:00	User Submission	YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Browsers YRP/Dropper_Strings YRP/anti_dbg YRP/disable_antivirus YRP/disable_firewall YRP/network_http YRP/screenshot YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/CRC32_poly_Constant YRP/RIPEMD160_Constants YRP/SHA1_Constants YRP/VC8_Random YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API
15b43d92c23d1ff4a4b5fc3f38b5b4b3335bc67d343eae03ac182e4d4d9d25e5	PE32	2022-02-17 06:39:29	User Submission	YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Browsers YRP/Dropper_Strings YRP/anti_dbg YRP/disable_antivirus YRP/disable_firewall YRP/network_http YRP/screenshot YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/CRC32_poly_Constant YRP/RIPEMD160_Constants YRP/SHA1_Constants YRP/VC8_Random YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API
87ed6ac9c6b064a5dbeb8afa6e2e46f3f9392798656ec011ebace0ddd2ff8045	PE32	2022-02-17 04:13:51	User Submission	YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ [+] YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI YRP/borland_delphi YRP/borland_delphi_dll YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Browsers YRP/Dropper_Strings YRP/disable_firewall YRP/inject_thread YRP/network_udp_sock YRP/network_tcp_listen YRP/network_dropper YRP/network_tcp_socket YRP/network_dns YRP/network_ssl YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/CRC32_poly_Constant YRP/CRC32_table YRP/BASE64_table YRP/Delphi_Random YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/CookieTools
c55dd27763830616bf141f5b0743d8e1901c268d39a32a2b638cb2bb65f99e7b	PE32	2022-02-17 03:41:39	User Submission	YRP/Microsoft_Visual_Basic_v50 YRP/PureBasic_4x_Neil_Hodgson_additional YRP/PureBasic_4x_Neil_Hodgson YRP/PureBasic4xNeilHodgson [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/PureBasic YRP/with_images YRP/with_urls YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Dropper_Strings YRP/WMI_strings YRP/Misc_Suspicious_Strings YRP/disable_firewall YRP/network_udp_sock YRP/network_smtp_raw YRP/network_tcp_socket YRP/network_dns YRP/screenshot YRP/keylogger YRP/spreading_share YRP/win_registry YRP/win_files_operation YRP/Big_Numbers1 YRP/Str_Win32_Winsock2_Library FlorianRoth/DragonFly_APT_Sep17_3
d65474a5a0f440ad85bd3e0bfe2138ca9b600d8c540ef1e32de11f9212306d4d	PE32	2022-02-17 02:48:26	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/disable_firewall YRP/inject_thread YRP/network_http YRP/escalate_priv YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Big_Numbers1 YRP/CRC32_poly_Constant YRP/CRC32_table YRP/BASE64_table YRP/VC6_Random YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/UPX YRP/suspicious_packer_section
d973e5d720f44a07f220f9d80fce9555ad09d97b1899f64a13454f34ab234a8d	PE32	2022-02-17 00:22:21	User Submission	YRP/Armadillo_v2xx_CopyMem_II_additional YRP/Microsoft_Visual_Cpp_70_MFC YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Dropper_Strings YRP/disable_firewall YRP/network_irc YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library
bec53e06e0bc058045997c468b56e63f741bb1544be9748fcdf6e8cc9202890d	PE32	2022-02-17 00:11:09	User Submission	CuckooSandbox/vmdetect YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional [+] YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/VMWare_Detection YRP/Sandboxie_Detection YRP/VirtualPC_Detection YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/DebuggerCheck__QueryInfo YRP/Check_Dlls YRP/vmdetect YRP/antisb_threatExpert YRP/antisb_sandboxie YRP/antivm_vmware YRP/disable_firewall YRP/network_udp_sock YRP/network_tcp_listen YRP/network_irc YRP/network_http YRP/network_dropper YRP/network_tcp_socket YRP/network_dns YRP/spreading_file YRP/rat_rdp YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/CRC32_poly_Constant YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API
e2d5e5c3995dcebcffcf77451e477c49b75010160f6bcb0c8bd683d07bb3714d	PE32	2022-02-17 00:07:28	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/VM_Generic_Detection YRP/Dropper_Strings YRP/disable_firewall YRP/network_dropper YRP/win_registry YRP/Str_Win32_Winsock2_Library FlorianRoth/DragonFly_APT_Sep17_3
ff5d8e15ba5400dfa7cf5a381df24eb81f5fb46c793f263edea93c15386f3c37	PE32	2022-02-16 23:03:49	User Submission	YRP/WWPack32_v100_v111_v112_v120_additional YRP/StarForce_ProActive_11_StarForce_Technology_additional YRP/WWPack32_v1x_additional YRP/MSLRH_032a_fake_yodas_cryptor_12_emadicius_additional [+] YRP/WWPack32_v100_v111_v112_v120 YRP/WWPack32_v1x YRP/MSLRH_032a_fake_WWPack32_1x_emadicius YRP/WWPack32v100v111v112v120 YRP/WWPack32v1x YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/Dropper_Strings YRP/disable_firewall YRP/network_irc YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library FlorianRoth/DragonFly_APT_Sep17_3
e4f5220afb1699379dbfa575ce484e0b24d0ec194b79f9aea3037c0696ce8eb0	PE32	2022-02-16 20:05:11	User Submission	YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ [+] YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/borland_delphi_dll YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Dropper_Strings YRP/disable_firewall YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/network_ssl YRP/keylogger YRP/win_registry YRP/win_files_operation YRP/BASE64_table YRP/Delphi_Random YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Str_Win32_Winsock2_Library YRP/CookieTools
7be7b92ed53ed01ecd66d05db213829241b2b438d5b31ffd3a9eb1bb1b5df3d2	MS-DOS	2022-02-16 19:41:24	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasModified_DOS_Message YRP/domain YRP/IP YRP/contentis_base64 YRP/Dropper_Strings YRP/disable_firewall YRP/network_udp_sock YRP/network_tcp_listen YRP/network_dropper YRP/network_tcp_socket YRP/network_dns YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section
572ff00d4911da51ea046e3854c6ef6fdca8b2a188e09c9ef32457555b731788	PE32	2022-02-16 19:09:52	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Dropper_Strings YRP/disable_firewall YRP/network_irc YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/VC6_Random YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API
d3d2ab9ee40b4c20bd451f6203545ded7cfe12fcc79c9403439837b4e455aeab	PE32	2022-02-16 18:55:43	User Submission	YRP/MingWin32_GCC_3x YRP/Microsoft_Visual_Cpp_v71_DLL_Debug_additional YRP/MingWin32_v_h_additional YRP/MinGW_GCC_3x_additional [+] YRP/Dev_Cpp_4992_Bloodshed_Software YRP/Microsoft_Visual_Cpp_v71_DLL_Debug YRP/MinGW_GCC_3x YRP/MingWin32_GCC_3x_additional YRP/MingWin32_v_h YRP/Dev_Cue_4992_Bloodshed_Software YRP/MingWin32_Dev_Cpp_v4x_h_additional YRP/MingWin32_v YRP/MingWin32_Dev_Cpp_v4x_h YRP/MinGWGCC3x YRP/DevC4992BloodshedSoftware YRP/IsPE32 YRP/IsWindowsGUI YRP/domain YRP/IP YRP/contentis_base64 YRP/Dropper_Strings YRP/disable_firewall YRP/network_irc YRP/escalate_priv YRP/win_mutex YRP/win_registry YRP/win_token YRP/Str_Win32_Winsock2_Library
56ef7aec1e05cc26908a0caf1c816481cef4c301ccd796b34beaf9b5dabe7289	PE32	2022-02-16 18:48:26	User Submission	YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi YRP/Borland_Delphi_30_additional [+] YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/D1S1Gv11betaD1N YRP/IsPE32 YRP/IsWindowsGUI YRP/borland_delphi YRP/borland_delphi_dll YRP/domain YRP/IP YRP/contentis_base64 YRP/Dropper_Strings YRP/ThreadControl__Context YRP/disable_firewall YRP/inject_thread YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/cred_local YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/android_meterpreter YRP/CRC32_poly_Constant YRP/CRC32_table YRP/MD5_Constants YRP/DES_sbox YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library
777b50939eb1557c2bbca7a385b41ef8b6d7789d3ed61ac5e9c4180b7b7bb019	PE32	2022-02-16 18:36:03	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay [+] YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/VM_Generic_Detection YRP/Dropper_Strings YRP/disable_firewall YRP/network_dropper YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library
00923f76d1dee9a9bb4915552d722da3fe74534b2d3ccc656a757389a1009947	PE32	2022-02-16 16:56:28	User Submission	YRP/MingWin32_GCC_3x YRP/MingWin32_v_h_additional YRP/MinGW_GCC_3x_additional YRP/MinGW_GCC_3x [+] YRP/MingWin32_GCC_3x_additional YRP/MingWin32_v_h YRP/MingWin32_v YRP/MinGWGCC3x YRP/IsPE32 YRP/IsWindowsGUI YRP/MinGW_1 YRP/domain YRP/contentis_base64 YRP/Dropper_Strings YRP/ThreadControl__Context YRP/SEH__vectored YRP/disable_firewall YRP/inject_thread YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/MD5_Constants YRP/BASE64_table YRP/Str_Win32_Winsock2_Library
343823169192fd4a01cc46f524f11dd59466fd9a7f4c5df441aa49cc496c7845	PE32	2022-02-16 13:32:31	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Dropper_Strings YRP/disable_firewall YRP/inject_thread YRP/network_dropper YRP/network_tcp_socket YRP/escalate_priv YRP/win_registry YRP/win_token YRP/Str_Win32_Winsock2_Library
d4fecc3ca24f9513073b6b68ef5fd7f980973286c8ffbd9ddd49f3fa4c441335	PE32	2022-02-16 09:56:23	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/IsBeyondImageSize YRP/ImportTableIsBad YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Browsers YRP/Dropper_Strings YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/disable_firewall YRP/disable_registry YRP/disable_taskmanager YRP/network_tcp_listen YRP/network_irc YRP/network_tcp_socket YRP/network_dns YRP/screenshot YRP/keylogger YRP/cred_local YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/VC8_Random YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/suspicious_packer_section
185daa0ef5d700430bc4ecb1411125da4190fe7f9494088bdb12e5ce801cd302	PE32	2022-02-16 09:28:22	User Submission	YRP/Armadillo_v2xx_CopyMem_II_additional YRP/Microsoft_Visual_Cpp_70_MFC YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/Dropper_Strings YRP/ThreadControl__Context YRP/antisb_threatExpert YRP/disable_firewall YRP/create_service YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API
70a4d874977b2e2ce23083c279ccec3763ac8a29120e1aa9ffe56208160e4f75	MS-DOS	2022-02-16 09:22:16	User Submission	YRP/IsPE32 YRP/IsWindowsGUI YRP/HasModified_DOS_Message YRP/maldoc_getEIP_method_1 [+] YRP/domain YRP/IP YRP/contentis_base64 YRP/Dropper_Strings YRP/disable_firewall YRP/network_udp_sock YRP/network_tcp_listen YRP/network_dropper YRP/network_tcp_socket YRP/network_dns YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section
f2f7dab00f6bbded203dffe242db10c6e4c05c4d6aafb44e8df803a5ed6cb7f7	PE32	2022-02-16 06:35:56	User Submission	YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Browsers YRP/Dropper_Strings YRP/anti_dbg YRP/disable_antivirus YRP/disable_firewall YRP/network_http YRP/screenshot YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/CRC32_poly_Constant YRP/RIPEMD160_Constants YRP/SHA1_Constants YRP/VC8_Random YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API
6d8e63486be5fbbf9eb1d4e172ffd04946d8b0842b3d44b799d9b314621e1f46	PE32	2022-02-16 03:07:42	User Submission	YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi YRP/Borland_Delphi_30_additional [+] YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/D1S1Gv11betaD1N YRP/IsPE32 YRP/IsWindowsGUI YRP/borland_delphi YRP/borland_delphi_dll YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/contentis_base64 YRP/Dropper_Strings YRP/disable_firewall YRP/inject_thread YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/cred_local YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/android_meterpreter YRP/Big_Numbers0 YRP/Big_Numbers2 YRP/CRC32_poly_Constant YRP/CRC32_table YRP/MD5_Constants YRP/TEAN YRP/DES_sbox YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library
7ca8a20d773f12426fedc10edf0766ab734aff6b8facf381100379c6568d8187	PE32	2022-02-16 03:06:06	User Submission	YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Browsers YRP/Dropper_Strings YRP/anti_dbg YRP/disable_antivirus YRP/disable_firewall YRP/network_http YRP/screenshot YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/CRC32_poly_Constant YRP/RIPEMD160_Constants YRP/SHA1_Constants YRP/VC8_Random YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API
b57dbd1046f95917c952e56f8ea71517485b7668465918a0326bd0e7d16717ea	MS-DOS	2022-02-16 02:44:01	User Submission	YRP/Armadillo_v2xx_CopyMem_II_additional YRP/Microsoft_Visual_Cpp_70_MFC YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasModified_DOS_Message YRP/domain YRP/IP YRP/contentis_base64 YRP/Browsers YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/disable_firewall YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section
67e7032a14d7e5a587fc86f5bb0a960df06d30ff57e77cc69284757921962b32	PE32	2022-02-16 02:08:32	User Submission	YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Browsers YRP/Dropper_Strings YRP/anti_dbg YRP/disable_antivirus YRP/disable_firewall YRP/network_http YRP/screenshot YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/CRC32_poly_Constant YRP/RIPEMD160_Constants YRP/SHA1_Constants YRP/VC8_Random YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API
cd9ce61bb6ca21d2b4c8a184920d056c0e1f85f68003ab37eb62fd953160dd2a	PE32	2022-02-16 01:57:06	User Submission	YRP/MingWin32_GCC_3x YRP/MingWin32_v_h_additional YRP/MinGW_GCC_3x_additional YRP/MinGW_GCC_3x [+] YRP/MingWin32_GCC_3x_additional YRP/MingWin32_v_h YRP/MingWin32_v YRP/MinGWGCC3x YRP/IsPE32 YRP/IsWindowsGUI YRP/MinGW_1 YRP/domain YRP/IP YRP/contentis_base64 YRP/Dropper_Strings YRP/anti_dbg YRP/disable_firewall YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/win_registry YRP/win_files_operation YRP/Big_Numbers1 YRP/Advapi_Hash_API YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API
5aeaeb725121960488f4dfbd968611a6d801ef90d51a50509732d1822960d301	PE32	2022-02-16 01:31:53	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Dropper_Strings YRP/disable_firewall YRP/inject_thread YRP/network_dropper YRP/network_tcp_socket YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/UPX YRP/suspicious_packer_section
4ae3c9991b19f121cb9f3f6fdda57a625027e9502d15327daf13b6205d8c1302	PE32	2022-02-16 00:37:55	User Submission	YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ [+] YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/borland_delphi_dll YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Dropper_Strings YRP/disable_firewall YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/network_ssl YRP/keylogger YRP/win_registry YRP/win_files_operation YRP/BASE64_table YRP/Delphi_Random YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Str_Win32_Winsock2_Library YRP/CookieTools
b28f862297874941fa2b1000013f928a91c32fb8553527c8ce830d7e0c73e04c	PE32	2022-02-16 00:27:58	User Submission	YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Browsers YRP/Dropper_Strings YRP/anti_dbg YRP/disable_antivirus YRP/disable_firewall YRP/network_http YRP/screenshot YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/CRC32_poly_Constant YRP/RIPEMD160_Constants YRP/SHA1_Constants YRP/VC8_Random YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API
954a86ef044aa8706046cb435c3fc0e697d027e5f7c33c8c857038bcf321f51f	PE32	2022-02-16 00:10:12	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Dropper_Strings YRP/disable_firewall YRP/inject_thread YRP/network_dropper YRP/network_tcp_socket YRP/win_registry YRP/Str_Win32_Winsock2_Library
731d8dbffb2121e78395c3b6cf42742098797e8723615f5bb5acd25c5149fd8c	PE32	2022-02-15 23:58:37	User Submission	YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi YRP/Borland_Delphi_30_additional [+] YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/D1S1Gv11betaD1N YRP/IsPE32 YRP/IsWindowsGUI YRP/borland_delphi YRP/borland_delphi_dll YRP/domain YRP/IP YRP/contentis_base64 YRP/Dropper_Strings YRP/ThreadControl__Context YRP/disable_firewall YRP/inject_thread YRP/network_dyndns YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/cred_local YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/android_meterpreter YRP/CRC32_poly_Constant YRP/CRC32_table YRP/MD5_Constants YRP/DES_sbox YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library
dbdcd0c4a03f9b60d8e9f99479b72b6c40451866a04df04bbfddb5cf1df083b1	PE32	2022-02-15 23:38:57	User Submission	CuckooSandbox/vmdetect YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional [+] YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/IP YRP/contentis_base64 YRP/VMWare_Detection YRP/Sandboxie_Detection YRP/VirtualPC_Detection YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/DebuggerCheck__QueryInfo YRP/Check_Dlls YRP/vmdetect YRP/antisb_threatExpert YRP/antisb_sandboxie YRP/antivm_vmware YRP/disable_firewall YRP/network_udp_sock YRP/network_tcp_listen YRP/network_irc YRP/network_http YRP/network_dropper YRP/network_tcp_socket YRP/network_dns YRP/spreading_file YRP/rat_rdp YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/CRC32_poly_Constant YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API
c5b68a54a0c26ef88d252b06675d1750706b707f15b0b2988e28cb6d29bfc72a	PE32	2022-02-15 22:59:12	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Dropper_Strings YRP/disable_firewall YRP/inject_thread YRP/network_dropper YRP/network_tcp_socket YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/GenerateTLSClientHelloPacket_Test
1aad0e1abe54780ab30cf9f5bbd312a99fcfaaec895279de01b3c092360be2c6	PE32	2022-02-15 22:52:21	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Dropper_Strings YRP/disable_firewall YRP/inject_thread YRP/network_dropper YRP/network_tcp_socket YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/GenerateTLSClientHelloPacket_Test
87eb231204e3f5501b7376e9145b0f6a716b97ec8a6b6982398ed3012f4aa9eb	PE32	2022-02-15 22:14:26	User Submission	YRP/Microsoft_Visual_Basic_v50 YRP/PureBasic_4x_Neil_Hodgson_additional YRP/PureBasic_4x_Neil_Hodgson YRP/PureBasic4xNeilHodgson [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/PureBasic YRP/with_images YRP/with_urls YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Dropper_Strings YRP/WMI_strings YRP/disable_firewall YRP/network_udp_sock YRP/network_smtp_raw YRP/network_tcp_socket YRP/network_dns YRP/screenshot YRP/keylogger YRP/spreading_share YRP/win_registry YRP/win_files_operation YRP/Big_Numbers1 YRP/Str_Win32_Winsock2_Library FlorianRoth/DragonFly_APT_Sep17_3
72cafc768375deaa46d8c0dc2bb5a698d696a69e222ae7b9772d2c9fc3743daf	PE32	2022-02-15 21:20:35	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/disable_firewall YRP/inject_thread YRP/network_irc YRP/network_dropper YRP/keylogger YRP/spreading_file YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/CRC32_poly_Constant YRP/Cerberus YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library
d220d46297847c537db3ff95b8242763c4cc89d8ca3d1df029a583a07674805d	PE32	2022-02-15 21:18:47	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Dropper_Strings YRP/disable_firewall YRP/inject_thread YRP/network_dropper YRP/network_tcp_socket YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/GenerateTLSClientHelloPacket_Test
9aec5987667e8409581151752cfb86d8277c12bb9f879e763d2a62c6c36fa131	PE32	2022-02-15 19:20:48	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Dropper_Strings YRP/disable_firewall YRP/inject_thread YRP/network_dropper YRP/network_tcp_socket YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/GenerateTLSClientHelloPacket_Test
b4c94fec313a2e72662f47d7a298e7e1b5bdc8e0af96290a9edc81f6b5628542	PE32	2022-02-15 19:17:28	User Submission	YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi YRP/Borland_Delphi_30_additional [+] YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/D1S1Gv11betaD1N YRP/IsPE32 YRP/IsWindowsGUI YRP/borland_delphi YRP/borland_delphi_dll YRP/domain YRP/IP YRP/contentis_base64 YRP/Dropper_Strings YRP/ThreadControl__Context YRP/disable_firewall YRP/inject_thread YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/cred_local YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/android_meterpreter YRP/CRC32_poly_Constant YRP/CRC32_table YRP/MD5_Constants YRP/DES_sbox YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library
0cfc5a2b117a22ec589e21f8422953244f73f0797ef6bd3310f390b3bb2a53cc	PE32	2022-02-15 18:53:27	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Dropper_Strings YRP/disable_firewall YRP/inject_thread YRP/network_dropper YRP/network_tcp_socket YRP/win_registry YRP/Str_Win32_Winsock2_Library
58494509fce6f06a28578d95e98e7e274c7dd81114d382d223661adf96e6f039	PE32	2022-02-14 05:26:40	User Submission	YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature [+] YRP/domain YRP/IP YRP/contentis_base64 YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/anti_dbg YRP/disable_firewall YRP/create_service YRP/network_tcp_socket YRP/escalate_priv YRP/rat_rdp YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Advapi_Hash_API YRP/Str_Win32_Winsock2_Library
b9ab7e0a5ab8bb14b0846f66df2991688b3fc08aaec97f18475b10ef739849e2	PE32	2022-01-13 21:01:13	User Submission	YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/IsPE32 YRP/IsWindowsGUI YRP/HasDebugData [+] YRP/HasRichSignature YRP/powershell YRP/maldoc_find_kernel32_base_method_1 YRP/domain YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Browsers YRP/Antivirus YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/disable_firewall YRP/rat_rdp YRP/Str_Win32_Winsock2_Library YRP/mimikatz
b21006795ed20d95b4aad41ec8d86293a20bd2f7ff0e2aee6552084bf9fceb45	ASCII	2021-11-11 03:13:17	User Submission	YRP/powershell YRP/domain YRP/contentis_base64 YRP/Browsers [+] YRP/disable_firewall YRP/disable_taskmanager
5398281f02ed2a0649bbe42c6796580bb2453fd714e8825b83d9f20c234e3f9c	PE32	2021-10-23 04:24:28	User Submission	YRP/Visual_Cpp_2005_Release_Microsoft YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 [+] YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Browsers YRP/Antivirus YRP/Dropper_Strings YRP/anti_dbg YRP/disable_antivirus YRP/disable_firewall YRP/network_tcp_listen YRP/network_http YRP/network_tcp_socket YRP/network_dns YRP/network_dga YRP/screenshot YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/android_meterpreter YRP/Big_Numbers3 YRP/Advapi_Hash_API YRP/CRC32_poly_Constant YRP/RIPEMD160_Constants YRP/SHA1_Constants YRP/BASE64_table YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/suspicious_packer_section
e73f30a724718aa2cca153040f38e2f79e35ee59c65cfa6c4af0dc1e176c96d5	PE32+	2021-08-26 03:09:59	User Submission	YRP/Microsoft_Visual_Cpp_80 YRP/Microsoft_Visual_Cpp_80_DLL YRP/IsPE64 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/VM_Generic_Detection YRP/Qemu_Detection YRP/Dropper_Strings YRP/WMI_strings YRP/anti_dbg YRP/disable_firewall YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/migrate_apc YRP/check_patchlevel YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/android_meterpreter YRP/Big_Numbers0 YRP/Big_Numbers1 YRP/Big_Numbers2 YRP/CRC32_poly_Constant YRP/CRC32_table YRP/MD5_Constants YRP/WHIRLPOOL_Constants YRP/RijnDael_AES YRP/RijnDael_AES_CHAR YRP/RijnDael_AES_LONG YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/suspicious_packer_section
e04a22d06a0ac6ea4d16a69d74af36c15f2bb85619a28ff7778c6b348d84ea85	PE32	2021-06-28 16:44:34	User Submission	YRP/Visual_Cpp_2005_Release_Microsoft YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 [+] YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Browsers YRP/Antivirus YRP/Dropper_Strings YRP/anti_dbg YRP/disable_antivirus YRP/disable_firewall YRP/network_tcp_listen YRP/network_smtp_raw YRP/network_http YRP/network_tcp_socket YRP/network_dns YRP/network_dga YRP/screenshot YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/android_meterpreter YRP/Big_Numbers1 YRP/Big_Numbers2 YRP/Big_Numbers3 YRP/Advapi_Hash_API YRP/CRC32_poly_Constant YRP/BLOWFISH_Constants YRP/MD5_Constants YRP/RIPEMD160_Constants YRP/SHA1_Constants YRP/SHA512_Constants YRP/WHIRLPOOL_Constants YRP/DES_Long YRP/RijnDael_AES YRP/BASE64_table YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/suspicious_packer_section
44ca40e89c1f9013774bca71ac0ffe8c3a0bc676f7d5e22f3697e48f18e6c44d	PE32	2021-06-19 06:01:12	User Submission	CuckooSandbox/vmdetect YRP/possible_includes_base64_packed_functions YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Browsers YRP/Antivirus YRP/VMWare_Detection YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/vmdetect YRP/anti_dbgtools YRP/antivm_vmware YRP/disable_antivirus YRP/disable_uax YRP/disable_firewall YRP/disable_registry YRP/disable_taskmanager YRP/hijack_network YRP/network_ssl YRP/escalate_priv YRP/spreading_file YRP/rat_rdp YRP/check_patchlevel YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Big_Numbers0 YRP/Big_Numbers1 YRP/CRC32_poly_Constant YRP/CRC32_table YRP/MD5_Constants YRP/Cerberus YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Http_API YRP/suspicious_packer_section YRP/IronTiger_Gh0stRAT_variant
f69c2d3c933ce844b7d84cbb7cc5c54dd6801671025ece2980226e9d8cf83780	PE32+	2021-05-31 03:12:26	User Submission	YRP/Microsoft_Visual_Cpp_80_DLL YRP/IsPE64 YRP/IsWindowsGUI YRP/HasOverlay [+] YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/VM_Generic_Detection YRP/Qemu_Detection YRP/Dropper_Strings YRP/WMI_strings YRP/anti_dbg YRP/disable_firewall YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/migrate_apc YRP/check_patchlevel YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/android_meterpreter YRP/Big_Numbers0 YRP/Big_Numbers1 YRP/Big_Numbers2 YRP/CRC32_poly_Constant YRP/CRC32_table YRP/MD5_Constants YRP/WHIRLPOOL_Constants YRP/RijnDael_AES YRP/RijnDael_AES_CHAR YRP/RijnDael_AES_LONG YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/suspicious_packer_section
e7e162bcc110f34bbae8b94d7729ae19eb3b7cb91146092cb9b048ecd3958527	PE32+	2021-05-13 03:22:18	User Submission	YRP/Microsoft_Visual_Cpp_80_DLL YRP/IsPE64 YRP/IsWindowsGUI YRP/HasOverlay [+] YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/VM_Generic_Detection YRP/Qemu_Detection YRP/Dropper_Strings YRP/WMI_strings YRP/anti_dbg YRP/disable_firewall YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/migrate_apc YRP/check_patchlevel YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/android_meterpreter YRP/Big_Numbers0 YRP/Big_Numbers1 YRP/Big_Numbers2 YRP/CRC32_poly_Constant YRP/CRC32_table YRP/MD5_Constants YRP/WHIRLPOOL_Constants YRP/RijnDael_AES YRP/RijnDael_AES_CHAR YRP/RijnDael_AES_LONG YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/suspicious_packer_section
1393b8873da96ac7d4b32684ba89c794223af5f75ce5b436219eaa098122b4d4	PE32	2021-04-30 04:41:38	User Submission	YRP/Visual_Cpp_2005_Release_Microsoft YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 [+] YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Browsers YRP/Antivirus YRP/Dropper_Strings YRP/anti_dbg YRP/disable_antivirus YRP/disable_firewall YRP/network_tcp_listen YRP/network_smtp_raw YRP/network_http YRP/network_tcp_socket YRP/network_dns YRP/network_dga YRP/screenshot YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/android_meterpreter YRP/Big_Numbers1 YRP/Big_Numbers2 YRP/Big_Numbers3 YRP/Advapi_Hash_API YRP/CRC32_poly_Constant YRP/BLOWFISH_Constants YRP/MD5_Constants YRP/RIPEMD160_Constants YRP/SHA1_Constants YRP/SHA512_Constants YRP/WHIRLPOOL_Constants YRP/DES_Long YRP/RijnDael_AES YRP/BASE64_table YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/suspicious_packer_section
8844b5912ebfbd8b5699300f2b7cfddce8a6a15471cf43232d661e2cbce1826a	PE32+	2021-04-17 03:14:27	User Submission	YRP/Microsoft_Visual_Cpp_80_DLL YRP/IsPE64 YRP/IsWindowsGUI YRP/HasOverlay [+] YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/VM_Generic_Detection YRP/Qemu_Detection YRP/Dropper_Strings YRP/WMI_strings YRP/anti_dbg YRP/disable_firewall YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/migrate_apc YRP/check_patchlevel YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/android_meterpreter YRP/Big_Numbers0 YRP/Big_Numbers1 YRP/Big_Numbers2 YRP/CRC32_poly_Constant YRP/CRC32_table YRP/MD5_Constants YRP/WHIRLPOOL_Constants YRP/RijnDael_AES YRP/RijnDael_AES_CHAR YRP/RijnDael_AES_LONG YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/suspicious_packer_section
f171f1ec64a4ad9183dc66228ecefe9df8628e60405679441c677ab0e19cfd60	PE32+	2021-04-14 01:17:47	User Submission	YRP/Microsoft_Visual_Cpp_80 YRP/Microsoft_Visual_Cpp_80_DLL YRP/IsPE64 YRP/IsWindowsGUI [+] YRP/HasOverlay YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/VM_Generic_Detection YRP/Qemu_Detection YRP/Dropper_Strings YRP/WMI_strings YRP/anti_dbg YRP/disable_firewall YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/migrate_apc YRP/check_patchlevel YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/android_meterpreter YRP/Big_Numbers0 YRP/Big_Numbers1 YRP/Big_Numbers2 YRP/CRC32_poly_Constant YRP/CRC32_table YRP/MD5_Constants YRP/WHIRLPOOL_Constants YRP/RijnDael_AES YRP/RijnDael_AES_CHAR YRP/RijnDael_AES_LONG YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/suspicious_packer_section
5477abc5bbbce767d16a3b0c576cad3a64c77b180a38dff442380afcc9d581bf	PE32	2021-04-11 03:16:25	User Submission	CuckooSandbox/vmdetect YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 [+] YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/VM_Generic_Detection YRP/VirtualPC_Detection YRP/Qemu_Detection YRP/Dropper_Strings YRP/WMI_strings YRP/vmdetect YRP/anti_dbg YRP/antivm_vmware YRP/disable_firewall YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/migrate_apc YRP/check_patchlevel YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/android_meterpreter YRP/Big_Numbers0 YRP/Big_Numbers1 YRP/Big_Numbers2 YRP/CRC32_poly_Constant YRP/CRC32_table YRP/MD5_Constants YRP/WHIRLPOOL_Constants YRP/RijnDael_AES YRP/RijnDael_AES_CHAR YRP/RijnDael_AES_LONG YRP/VC8_Random YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/suspicious_packer_section
5ecee976cf043b0f1d434f06940840704438cdbda1f1103fe9c3fdeb082cf15d	PE32+	2021-04-11 01:57:15	User Submission	YRP/Microsoft_Visual_Cpp_80_DLL YRP/IsPE64 YRP/IsWindowsGUI YRP/HasOverlay [+] YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/url YRP/contentis_base64 YRP/Dropper_Strings YRP/WMI_strings YRP/anti_dbg YRP/disable_firewall YRP/network_http YRP/screenshot YRP/keylogger YRP/check_patchlevel YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/android_meterpreter YRP/Big_Numbers0 YRP/Big_Numbers1 YRP/Big_Numbers2 YRP/CRC32_poly_Constant YRP/CRC32_table YRP/MD5_Constants YRP/WHIRLPOOL_Constants YRP/RijnDael_AES YRP/RijnDael_AES_CHAR YRP/RijnDael_AES_LONG YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/suspicious_packer_section

Recent Searches
yrp/disable_firewall
yrp/microsoft_visual_c_v20
yrp/crypter31slesh
yrp/yodas_protector_v1032_exescrcom_ashkbiz_danehkar_h_additional
yrp/dzapatcherv13loader
yrp/check_findwindowa_iat
yrp/mew_11_se_v10_northfox_additional
yrp/ntkrnlpackerashkbizdanehkar
yrp/waterbug_sav
yrp/webshell_php_150

Search

Recent Searches