MalShare

SHA256 Hash	File type	Added	Source	Yara Hits
e4078b4859d7ed700d8de087ce1600602985b1e2b86282f99e91285d82548715	DOS	2021-12-10 03:44:57	User Submission	YRP/domain YRP/url YRP/contentis_base64 YRP/network_dyndns
a6d5576d0033628eb155e0e5cea71abfce6a074003c680cec5eadaf4c00e4cb9	ASCII	2021-11-27 03:07:44	User Submission	CuckooSandbox/vmdetect YRP/davivienda YRP/domain YRP/contentis_base64 [+] YRP/VMWare_Detection YRP/Misc_Suspicious_Strings YRP/vmdetect YRP/network_dyndns YRP/android_meterpreter YRP/Big_Numbers1
45479362abb0eb02ddfb2e40726d06eaeff59f41154b05815339a1f2b78d5099	Public	2021-11-25 03:54:58	User Submission	YRP/domain YRP/url YRP/contentis_base64 YRP/network_dyndns [+] YRP/android_meterpreter
078a98c55a046340bcc38668fe7fd08f55ed5fab55e7916f8f28ec271aa5a613	ASCII	2021-11-25 03:33:32	User Submission	YRP/domain YRP/IP YRP/url YRP/contentis_base64 [+] YRP/System_Tools YRP/Misc_Suspicious_Strings YRP/network_dyndns YRP/Big_Numbers1
f0764472039101d70264e8b8340f78de296c1c2d70be7159f27bcbd1a9f774cb	Public	2021-11-25 03:33:29	User Submission	YRP/domain YRP/url YRP/contentis_base64 YRP/network_dyndns [+] YRP/android_meterpreter
c413639e6761e3d2e2baa10f37e545c7781e974f5eb4e64e6d7600532d282ec0	PE32	2021-11-14 09:03:10	User Submission	YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI [+] YRP/HasDebugData YRP/domain YRP/IP YRP/contentis_base64 YRP/disable_dep YRP/network_dyndns YRP/Big_Numbers1 YRP/Big_Numbers3
ce2a06fd24fa1453eb319ce820c2e43bf0f3795bb08bef4890f8600dd4bd5a5e	Public	2021-10-25 05:16:01	User Submission	YRP/domain YRP/url YRP/contentis_base64 YRP/network_dyndns [+] YRP/android_meterpreter
a674a4a32f849cc121e6b872da5a793418de56a458e530b351a801ba6d6300f7	PE32	2021-10-22 00:49:32	User Submission	YRP/possible_includes_base64_packed_functions YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET [+] YRP/Microsoft_Visual_Studio_NET_additional YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/Borland YRP/NETexecutableMicrosoft YRP/D1S1Gv11betaD1N YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/IsPacked YRP/HasDebugData YRP/borland_delphi_dll YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/VMWare_Detection YRP/Sandboxie_Detection YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/disable_antivirus YRP/network_udp_sock YRP/network_tcp_listen YRP/network_dyndns YRP/network_smtp_raw YRP/network_tcp_socket YRP/network_dns YRP/network_ssl YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/spreading_file YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/BASE64_table YRP/Delphi_Random YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/CookieTools YRP/suspicious_packer_section
d047ef175b2b94716b5854252eba7fee06f79e9b7eaff76c31516db83d63f463	PE32	2021-10-08 19:10:30	User Submission	YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ [+] YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/BobSoft_Mini_Delphi_BoB_BobSoft_additional YRP/Borland_Delphi_v60_v70 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/NETexecutableMicrosoft YRP/BobSoftMiniDelphiBoBBobSoft YRP/D1S1Gv11betaD1N YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/borland_delphi YRP/borland_delphi_dll YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/network_udp_sock YRP/network_tcp_listen YRP/network_dyndns YRP/network_smtp_raw YRP/network_tcp_socket YRP/network_dns YRP/network_ssl YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/spreading_file YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/BASE64_table YRP/Delphi_Random YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/CookieTools
cc03cd3db24427db4274995198377ae945966c27bd5b74bc52e4547481b93553	PE32	2021-09-11 16:00:32	User Submission	YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Microsoft_Visual_Cpp YRP/Borland YRP/D1S1Gv11betaD1N YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/borland_delphi_dll YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Browsers YRP/VM_Generic_Detection YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/create_service YRP/network_udp_sock YRP/network_tcp_listen YRP/network_dyndns YRP/network_smtp_raw YRP/network_tcp_socket YRP/network_dns YRP/network_ssl YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/spreading_file YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/BASE64_table YRP/Delphi_FormShow YRP/Delphi_DecodeDate YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/CookieTools
b5ec7f78185a787382d36904970a9635691ef6034a9acc501008eb817e11d07e	PE32	2021-09-01 17:13:20	User Submission	YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ [+] YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/BobSoft_Mini_Delphi_BoB_BobSoft_additional YRP/Borland_Delphi_v60_v70 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/NETexecutableMicrosoft YRP/BobSoftMiniDelphiBoBBobSoft YRP/D1S1Gv11betaD1N YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/borland_delphi YRP/borland_delphi_dll YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/network_udp_sock YRP/network_tcp_listen YRP/network_dyndns YRP/network_smtp_raw YRP/network_tcp_socket YRP/network_dns YRP/network_ssl YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/spreading_file YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/BASE64_table YRP/Delphi_Random YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/CookieTools
64c961fa1b24bad0cedc4e69c95177414154a6f4ec05b4028169ff30b5a25234	PE32	2021-09-01 15:05:56	User Submission	YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ [+] YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/BobSoft_Mini_Delphi_BoB_BobSoft_additional YRP/Borland_Delphi_v60_v70 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/NETexecutableMicrosoft YRP/BobSoftMiniDelphiBoBBobSoft YRP/D1S1Gv11betaD1N YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/borland_delphi YRP/borland_delphi_dll YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/network_udp_sock YRP/network_tcp_listen YRP/network_dyndns YRP/network_smtp_raw YRP/network_tcp_socket YRP/network_dns YRP/network_ssl YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/spreading_file YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/BASE64_table YRP/Delphi_Random YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/CookieTools
b5a74cb76d93a819cf0cd2a9d7d3d0d491555f8cb76a2a7f657f7d0cdefc0dae	HTML	2021-08-31 18:19:55	User Submission	YRP/domain YRP/url YRP/contentis_base64 YRP/network_dyndns
27ac7a84cd05f29051d1dd5deb5c90a3c406f0a18e44c6c34bc72744151bc4be	HTML	2021-08-31 18:19:55	User Submission	YRP/domain YRP/url YRP/contentis_base64 YRP/network_dyndns
e38f19678efbfeef15e02d989e16ef3ba4b90c210de69d6f6b02419d4109c2b3	UTF-8	2021-08-31 18:19:37	User Submission	YRP/domain YRP/url YRP/contentis_base64 YRP/network_dyndns
f1943befafa73351b7dad586f7ff686f2c099a5ebbbdb63bc4f16d67024fb17f	PE32	2021-08-31 17:03:01	User Submission	YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ [+] YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/BobSoft_Mini_Delphi_BoB_BobSoft_additional YRP/Borland_Delphi_v60_v70 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/NETexecutableMicrosoft YRP/BobSoftMiniDelphiBoBBobSoft YRP/D1S1Gv11betaD1N YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/borland_delphi YRP/borland_delphi_dll YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/network_udp_sock YRP/network_tcp_listen YRP/network_dyndns YRP/network_smtp_raw YRP/network_tcp_socket YRP/network_dns YRP/network_ssl YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/spreading_file YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Big_Numbers1 YRP/Big_Numbers2 YRP/Big_Numbers3 YRP/Big_Numbers4 YRP/BASE64_table YRP/Delphi_Random YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/CookieTools
a3cbb98747178f3da58a7d44bbd672c526d1721b20ece7d92f3b85667467aa2b	PE32	2021-08-31 15:00:38	User Submission	YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ [+] YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/BobSoft_Mini_Delphi_BoB_BobSoft_additional YRP/Borland_Delphi_v60_v70 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/NETexecutableMicrosoft YRP/BobSoftMiniDelphiBoBBobSoft YRP/D1S1Gv11betaD1N YRP/IsPE32 YRP/IsWindowsGUI YRP/borland_delphi YRP/borland_delphi_dll YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/network_udp_sock YRP/network_tcp_listen YRP/network_dyndns YRP/network_smtp_raw YRP/network_tcp_socket YRP/network_dns YRP/network_ssl YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/spreading_file YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Big_Numbers1 YRP/Big_Numbers2 YRP/Big_Numbers3 YRP/Big_Numbers4 YRP/BASE64_table YRP/Delphi_Random YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/CookieTools
41b5691a9272ab9dcb87a5f3f106da073fc3d2c4aea1abd78ac7b3af4cbbffdd	PE32	2021-08-31 09:07:39	User Submission	YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ [+] YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/BobSoft_Mini_Delphi_BoB_BobSoft_additional YRP/Borland_Delphi_v60_v70 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/NETexecutableMicrosoft YRP/BobSoftMiniDelphiBoBBobSoft YRP/D1S1Gv11betaD1N YRP/IsPE32 YRP/IsWindowsGUI YRP/borland_delphi YRP/borland_delphi_dll YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Antivirus YRP/VMWare_Detection YRP/Sandboxie_Detection YRP/Dropper_Strings YRP/WMI_strings YRP/Misc_Suspicious_Strings YRP/DebuggerCheck__RemoteAPI YRP/anti_dbg YRP/network_udp_sock YRP/network_tcp_listen YRP/network_dyndns YRP/network_smtp_raw YRP/network_tcp_socket YRP/network_dns YRP/network_ssl YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/spreading_file YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/BASE64_table YRP/Delphi_Random YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/Njrat YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/CookieTools
56f435a5987f429df40365c3fc9e17443e7a79a003d57d29b4b8f4396bf8c22b	PE32	2021-08-30 10:05:32	User Submission	YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ [+] YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/BobSoft_Mini_Delphi_BoB_BobSoft_additional YRP/Borland_Delphi_v60_v70 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/BobSoftMiniDelphiBoBBobSoft YRP/D1S1Gv11betaD1N YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/borland_delphi YRP/borland_delphi_dll YRP/maldoc_find_kernel32_base_method_1 YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/anti_dbg YRP/network_udp_sock YRP/network_tcp_listen YRP/network_dyndns YRP/network_smtp_raw YRP/network_tcp_socket YRP/network_dns YRP/network_ssl YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/spreading_file YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/CRC32_poly_Constant YRP/RIPEMD160_Constants YRP/SHA1_Constants YRP/BASE64_table YRP/Delphi_Random YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/CookieTools
b484b76186c0e9c0d4f8719978a2235d0f580088562df853c837e296b1d837ed	PE32	2021-08-30 09:10:31	User Submission	YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ [+] YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/BobSoft_Mini_Delphi_BoB_BobSoft_additional YRP/Borland_Delphi_v60_v70 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/NETexecutableMicrosoft YRP/BobSoftMiniDelphiBoBBobSoft YRP/D1S1Gv11betaD1N YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/borland_delphi YRP/borland_delphi_dll YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/network_udp_sock YRP/network_tcp_listen YRP/network_dyndns YRP/network_smtp_raw YRP/network_tcp_socket YRP/network_dns YRP/network_ssl YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/spreading_file YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/BASE64_table YRP/Delphi_Random YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/CookieTools
38f6a97463d677f0fff204aacbfeaf0fbd896753c533b46041dbfaf2a7c31428	ASCII	2021-08-15 03:10:49	User Submission	CuckooSandbox/vmdetect YRP/davivienda YRP/domain YRP/contentis_base64 [+] YRP/VMWare_Detection YRP/Misc_Suspicious_Strings YRP/vmdetect YRP/network_tcp_listen YRP/network_dyndns YRP/android_meterpreter YRP/Big_Numbers1 YRP/suspicious_packer_section
430e2531309a3c3dec2f6a19b6aff30a2b141cd61794f23a8af36193d1c62545	HTML	2021-07-11 04:42:53	https://cheems192.github.io/Gift.html	YRP/domain YRP/IP YRP/url YRP/contentis_base64 [+] YRP/network_dyndns YRP/Big_Numbers3
cb62d0675b3a22bf3290b9613b1f6e8835e799c2683690002f9a14c7f11c7be3	PE32	2021-06-15 20:01:56	User Submission	YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ [+] YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/D1S1Gv11betaD1N YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/borland_delphi YRP/borland_delphi_dll YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/network_udp_sock YRP/network_tcp_listen YRP/network_dyndns YRP/network_smtp_raw YRP/network_tcp_socket YRP/network_dns YRP/network_ssl YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/spreading_file YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/BASE64_table YRP/Delphi_Random YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/CookieTools
88f01486746fd2dc7460042285111d0a9c81032fe9cd5fa3c272f4fcb835b4b1	PE32	2021-06-12 22:14:26	User Submission	YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ [+] YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/BobSoft_Mini_Delphi_BoB_BobSoft_additional YRP/Borland_Delphi_v60_v70 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/NETexecutableMicrosoft YRP/BobSoftMiniDelphiBoBBobSoft YRP/D1S1Gv11betaD1N YRP/IsPE32 YRP/IsWindowsGUI YRP/borland_delphi YRP/borland_delphi_dll YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/network_udp_sock YRP/network_tcp_listen YRP/network_dyndns YRP/network_smtp_raw YRP/network_tcp_socket YRP/network_dns YRP/network_ssl YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/spreading_file YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/BASE64_table YRP/Delphi_Random YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/CookieTools YRP/suspicious_packer_section
e1d9ae2f639f743bdb32a38c514e103f2454d1170c3b1a3d6696ffcb073ce4ac	PE32	2021-06-09 12:18:09	User Submission	YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsConsole [+] YRP/HasDebugData YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/DebuggerException__SetConsoleCtrl YRP/anti_dbg YRP/network_dyndns YRP/win_files_operation YRP/BASE64_table YRP/Str_Win32_Winsock2_Library
f8004bf04ec1d419c5e108a6c893e49784343acb63bf7d4bea2d764469fe7c47	Public	2021-06-03 23:00:44	User Submission	YRP/domain YRP/url YRP/contentis_base64 YRP/network_dyndns [+] YRP/android_meterpreter
2e47f47065a13a48ae86ee76059ec4060e397f94cc25aa51ec6177f837314fe1	PE32	2021-05-04 03:55:45	http://159.69.142.67/ahmad/nj666/mono.exe	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/HasDebugData YRP/IsBeyondImageSize YRP/domain YRP/IP YRP/contentis_base64 YRP/disable_dep YRP/network_dyndns YRP/Big_Numbers3 YRP/MD5_Constants
cb44653da2456706135577133cec5fa629cc2a5dc888f6d3f85acc5fe0f5632f	PE32	2021-05-04 03:55:32	http://159.69.142.67/ahmad/nj666/Discordttt.e...	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/HasDebugData YRP/IsBeyondImageSize YRP/domain YRP/IP YRP/contentis_base64 YRP/disable_dep YRP/network_dyndns YRP/Big_Numbers3 YRP/MD5_Constants
586d1a857c5a8c41192992c4eb6cf61810e5d7289e761369ff2ac25f173d052d	PE32	2021-05-04 03:55:23	http://159.69.142.67/ahmad/nj666/ahmad.exe	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/HasDebugData YRP/IsBeyondImageSize YRP/domain YRP/IP YRP/contentis_base64 YRP/disable_dep YRP/network_dyndns YRP/Big_Numbers3 YRP/MD5_Constants
40439c197dbca26b851e506ca7cdd3dbb5c2ab9dba9530e839b68c2aa83362dd	PE32	2021-05-04 03:54:24	http://159.69.142.67/ahmad/666nj214/47.exe	YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/HasDebugData [+] YRP/IsBeyondImageSize YRP/domain YRP/IP YRP/contentis_base64 YRP/disable_dep YRP/network_dyndns YRP/Big_Numbers3
f7ee9f459144b5f0087dda5124f70c8e9ad762fde4ba029f95b44a2c812d25ef	PE32	2021-05-04 03:54:22	http://159.69.142.67/ahmad/666nj214/45.exe	YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/HasDebugData [+] YRP/IsBeyondImageSize YRP/domain YRP/IP YRP/contentis_base64 YRP/disable_dep YRP/network_dyndns YRP/Big_Numbers3
0037ef6aea2b179208cd379210224fb863e12100e921a9e3c036ffbdea7e63d2	PE32	2021-05-04 03:54:19	http://159.69.142.67/ahmad/666nj214/20.exe	YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/HasDebugData [+] YRP/IsBeyondImageSize YRP/domain YRP/IP YRP/contentis_base64 YRP/disable_dep YRP/network_dyndns YRP/Big_Numbers3
6274d716e80f6a97e2ece7827b9f0999693b53a96d4cf119ae35c9643a7dd619	data	2021-04-22 20:41:09	User Submission	YRP/possible_includes_base64_packed_functions YRP/domain YRP/contentis_base64 YRP/network_dyndns [+] YRP/android_meterpreter YRP/suspicious_packer_section
c2e0c6e6c722381d504fe6a52c0c3c2b9d18935a15a3f89823e13ad5d4cd87fe	PE32	2021-04-04 01:47:42	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/IsPacked YRP/HasDebugData YRP/IsBeyondImageSize YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Dropper_Strings YRP/network_tcp_listen YRP/network_dyndns YRP/network_dns YRP/screenshot YRP/suspicious_packer_section
81e28cbc8abd3d394d3c46ce567eba84b7e25d707e6b9d76005cc6e7c915b063	ASCII	2021-01-20 11:08:27	User Submission	CuckooSandbox/vmdetect YRP/domain YRP/contentis_base64 YRP/VMWare_Detection [+] YRP/Misc_Suspicious_Strings YRP/vmdetect YRP/network_dyndns YRP/android_meterpreter YRP/Big_Numbers0
d99f963867c66314fff11089e2392265d73bcbfc54da20832aec8af41bae372b	HTML	2020-12-07 02:25:34	http://shimmer-heartbreaking-ticket.glitch.me...	YRP/domain YRP/IP YRP/url YRP/contentis_base64 [+] YRP/network_dyndns
b15f3d5fbf111b893d5997c92d054fdabeed5360860067da60ea08832bb8fe34	Public	2020-11-22 03:18:57	User Submission	YRP/domain YRP/url YRP/contentis_base64 YRP/network_dyndns [+] YRP/android_meterpreter
36f53eb7ea9e049ab589b69f748e4098be5f51577c3b881cf95d7928d19fe68d	PE32	2020-11-01 17:18:07	User Submission	YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/domain [+] YRP/url YRP/contentis_base64 YRP/Dropper_Strings YRP/network_dyndns YRP/network_http YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/CCREWBACK1 FlorianRoth/DragonFly_APT_Sep17_3
da8d470b6cc10d2928005b220e6cd9bd35f1add53c30a99b9fa44b82d9e7adc3	ASCII	2020-10-23 03:21:53	User Submission	YRP/possible_includes_base64_packed_functions YRP/domain YRP/url YRP/contentis_base64 [+] YRP/network_dyndns YRP/Big_Numbers1
8df97f59144a4f3d55572156abd94b750a1a6ebbb5d1a08c001b5e1f4a1ce351	PE32	2020-07-08 20:43:18	User Submission	YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ [+] YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/BobSoft_Mini_Delphi_BoB_BobSoft_additional YRP/Borland_Delphi_v60_v70 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/BobSoftMiniDelphiBoBBobSoft YRP/D1S1Gv11betaD1N YRP/IsPE32 YRP/IsWindowsGUI YRP/borland_delphi YRP/borland_delphi_dll YRP/maldoc_find_kernel32_base_method_1 YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/anti_dbg YRP/network_udp_sock YRP/network_tcp_listen YRP/network_dyndns YRP/network_smtp_raw YRP/network_tcp_socket YRP/network_dns YRP/network_ssl YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/spreading_file YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Big_Numbers3 YRP/RIPEMD160_Constants YRP/SHA1_Constants YRP/SHA512_Constants YRP/RijnDael_AES_CHAR YRP/RijnDael_AES_LONG YRP/BASE64_table YRP/Delphi_Random YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/CookieTools
114b523475887825da1ed090f395ab3f27c7e0589d512f9f02ad8bd6828a4ff5	PE32	2020-06-30 14:13:59	User Submission	YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional [+] YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Dropper_Strings YRP/network_dyndns YRP/Big_Numbers1
1177036d064ed0c5413704a8e7ddfe96193205fde7849874fd4995f33b637bf2	PE32	2020-06-27 19:31:46	User Submission	YRP/UPXv20MarkusLaszloReiser YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/network_dyndns YRP/UPX YRP/suspicious_packer_section
11102c6a4d505e06b6d915994e161ad133fce63d2029f91ede7773258d3ce433	PE32	2020-06-26 21:25:57	User Submission	YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature [+] YRP/maldoc_find_kernel32_base_method_1 YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/network_dyndns FlorianRoth/DragonFly_APT_Sep17_3
bad073090a5739c1c83f16a88475eef65882ab0ce3e81ee3cf51eada0dc0b341	ASCII	2020-06-12 03:36:29	User Submission	YRP/possible_includes_base64_packed_functions YRP/domain YRP/url YRP/contentis_base64 [+] YRP/network_dyndns YRP/Big_Numbers1
614b620c6ec03c43605a86036a3b18542f2283e980937946bcb24061c01198e0	ASCII	2020-06-06 03:21:01	User Submission	YRP/possible_includes_base64_packed_functions YRP/domain YRP/url YRP/contentis_base64 [+] YRP/network_dyndns YRP/Big_Numbers1
6815108791f453d0ef5dc6965b005eda33730e8dabff42f72c0ecbdd82db0b45	ASCII	2020-06-06 03:20:54	User Submission	YRP/possible_includes_base64_packed_functions YRP/domain YRP/url YRP/contentis_base64 [+] YRP/network_dyndns YRP/android_meterpreter YRP/Big_Numbers1
480ff619ab8f19c0de727af79b87798edef33bb31b4430681cd436f9a8482155	HTML	2020-05-06 19:35:33	https://past-strengthened-halibut.glitch.me/	YRP/domain YRP/IP YRP/url YRP/contentis_base64 [+] YRP/network_dyndns
02cf3ae9996b9932cb2e0eebf1745cb8c8e524e07bb5becc4764b8d99a032542	Public	2020-04-23 03:31:27	User Submission	YRP/domain YRP/url YRP/contentis_base64 YRP/network_dyndns [+] YRP/android_meterpreter
15b2c323e4a41e54ffdba37a4fcca69fa6ad559fb4154a16f9a8a0f9ffea265f	ASCII	2020-04-23 03:31:22	User Submission	YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings [+] YRP/network_dyndns YRP/android_meterpreter YRP/Big_Numbers1
459910db61537823eacca9b790ed8f3b699c7ea6adeb5d820f62091baee11b3e	data	2020-04-18 03:20:36	User Submission	YRP/possible_includes_base64_packed_functions YRP/domain YRP/url YRP/contentis_base64 [+] YRP/network_dyndns YRP/android_meterpreter YRP/Big_Numbers1
347a3a7d154722d24aa318e532d5d70ecf7d5b1c286427afe1159089609e91d9	UTF-8	2020-04-18 03:20:33	User Submission	YRP/possible_includes_base64_packed_functions YRP/domain YRP/url YRP/contentis_base64 [+] YRP/network_dyndns YRP/Big_Numbers1
3004771720b0c1b077f6238c74c57165dc66feacf031732f3409f0c3c8f7a9ae	data	2020-04-02 03:27:49	User Submission	YRP/possible_includes_base64_packed_functions YRP/domain YRP/url YRP/contentis_base64 [+] YRP/network_dyndns YRP/android_meterpreter YRP/Big_Numbers1
0a14ff5515622aa16b9e06470a11ea6d45c629c19bad06a400deb9b3cf53a019	UTF-8	2020-04-02 03:27:32	User Submission	YRP/possible_includes_base64_packed_functions YRP/domain YRP/url YRP/contentis_base64 [+] YRP/network_dyndns YRP/Big_Numbers1
88961ef69b62561c159094bef22d69c37cfc6f190e7e5f5ecad8693c40ba51f3	UTF-8	2020-04-02 03:17:02	User Submission	YRP/possible_includes_base64_packed_functions YRP/domain YRP/url YRP/contentis_base64 [+] YRP/network_dyndns YRP/Big_Numbers1
b6612ac5bd9193ed2335b06e3b63ccf44057eba4f14e7f4eb0e7d38afab6be05	UTF-8	2020-03-22 03:12:09	User Submission	YRP/possible_includes_base64_packed_functions YRP/domain YRP/url YRP/contentis_base64 [+] YRP/network_dyndns YRP/Big_Numbers1
dbfb476897172f95c1da379fb78ad1c57073c92e7e4ee49d0fb29e5639c13130	data	2020-03-22 03:12:06	User Submission	YRP/possible_includes_base64_packed_functions YRP/domain YRP/url YRP/contentis_base64 [+] YRP/network_dyndns YRP/android_meterpreter YRP/Big_Numbers1
057f185049c90acbc2e108e4cada3ce2536b591c8854e911442580c6f2d5775a	UTF-8	2020-03-18 03:53:50	User Submission	YRP/domain YRP/IP YRP/url YRP/contentis_base64 [+] YRP/System_Tools YRP/Antivirus YRP/Misc_Suspicious_Strings YRP/network_dyndns YRP/spreading_file YRP/android_meterpreter YRP/Big_Numbers1 YRP/Big_Numbers3 YRP/WarpStrings YRP/Warp YRP/suspicious_packer_section
5cfd4884faa30fbdd5af432e70b22c033f36f032b4b92f84aead84b57b5dd592	data	2020-03-18 01:55:14	User Submission	CuckooSandbox/shellcode CuckooSandbox/embedded_win_api CuckooSandbox/vmdetect YRP/possible_includes_base64_packed_functions [+] YRP/Borland YRP/powershell YRP/maldoc_find_kernel32_base_method_1 YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Browsers YRP/RE_Tools YRP/Antivirus YRP/VM_Generic_Detection YRP/VMWare_Detection YRP/Sandboxie_Detection YRP/VirtualBox_Detection YRP/Dropper_Strings YRP/WMI_strings YRP/Misc_Suspicious_Strings YRP/vmdetect YRP/WMI_VM_Detect YRP/anti_dbgtools YRP/network_tcp_listen YRP/network_dyndns YRP/network_dropper YRP/network_tcp_socket YRP/spreading_file YRP/rat_rdp YRP/win_mutex YRP/win_files_operation YRP/vmdetect_misc YRP/android_meterpreter YRP/Big_Numbers0 YRP/Big_Numbers1 YRP/CRC32_poly_Constant YRP/TEAN YRP/spyeye YRP/spyeye_plugins YRP/GEN_PowerShell YRP/Str_Win32_Winsock2_Library YRP/SurtrStrings YRP/Surtr YRP/nAspyUpdateStrings YRP/nAspyUpdate YRP/Mimikatz_Memory_Rule_1 YRP/REDLEAVES_CoreImplant_UniqueStrings YRP/Ham_backdoor YRP/Tofu_Backdoor YRP/fin7_functions FlorianRoth/Tofu_Backdoor FlorianRoth/REDLEAVES_CoreImplant_UniqueStrings FlorianRoth/Msfpayloads_msf_psh
e320e4d98f71fafa8ee18ddc10be0653c553377662810da68cd1afcb6cbd8263	Public	2020-02-26 03:17:23	User Submission	YRP/domain YRP/url YRP/contentis_base64 YRP/network_dyndns [+] YRP/android_meterpreter
3e73fc549fc6928ecb0fe0cd77e0ccfdb371f554bc6afb2aa1930814cd4bdb16	ASCII	2020-02-26 03:17:20	User Submission	YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings [+] YRP/network_dyndns YRP/android_meterpreter YRP/Big_Numbers1
f81abee7a6b75fdcda5ca20be24971540dbbe90c748871cc2952491505a5181a	ASCII	2020-02-24 12:23:34	User Submission	CuckooSandbox/embedded_win_api YRP/domain YRP/url YRP/contentis_base64 [+] YRP/Browsers YRP/inject_thread YRP/create_service YRP/create_com_service YRP/network_udp_sock YRP/network_tcp_listen YRP/network_dyndns YRP/network_smtp_dotNet YRP/network_smtp_raw YRP/network_smtp_vb YRP/network_p2p_win YRP/network_irc YRP/network_http YRP/network_dropper YRP/network_ftp YRP/network_tcp_socket YRP/network_dns YRP/network_ssl YRP/network_dga YRP/bitcoin YRP/escalate_priv YRP/screenshot YRP/lookupip YRP/lookupgeo YRP/keylogger YRP/cred_local YRP/sniff_audio YRP/cred_ff YRP/cred_vnc YRP/cred_ie7 YRP/sniff_lan YRP/migrate_apc YRP/spreading_file YRP/spreading_share YRP/rat_vnc YRP/rat_rdp YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/Advapi_Hash_API YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API
76e4a8d1e76dae8db6da3829024108c02203c4e4b5a4301b5717564b05c7966d	Public	2020-02-07 03:23:40	User Submission	YRP/domain YRP/url YRP/contentis_base64 YRP/network_dyndns [+] YRP/android_meterpreter
77ff8db480256e3e7dd644c708cfca7aa51c71b7d6643d611e5bbab815524897	ASCII	2020-02-07 03:23:31	User Submission	YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings [+] YRP/network_dyndns YRP/android_meterpreter YRP/Big_Numbers1
69140b1e6a79984b7873e33198c9fed0bc7c42b583c0f9bb4c3f3da4cf8edc6f	UTF-8	2020-01-31 03:14:18	User Submission	YRP/possible_includes_base64_packed_functions YRP/domain YRP/url YRP/contentis_base64 [+] YRP/network_dyndns YRP/Big_Numbers1
d4529e79bd3a772114acf1228f6c5d1f305ea852f4abcaf3a2c60bb3e6183815	PE32	2020-01-15 16:36:38	User Submission	YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/SEH__vba YRP/network_udp_sock YRP/network_tcp_listen YRP/network_dyndns YRP/network_tcp_socket YRP/network_dns YRP/win_registry YRP/Str_Win32_Winsock2_Library
af6b74f9991a476e3408b2e10417dd82b33e48b72505863d55dab5e6c694f002	PE32	2020-01-15 16:34:36	User Submission	YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional [+] YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/Antivirus YRP/SEH__vba YRP/network_dyndns
56b56cb1fca182b0181231262acf3cea8a5790468485c6f06679b8778beae4b8	PE32	2020-01-15 16:34:30	User Submission	YRP/PackerUPX_CompresorGratuito_wwwupxsourceforgenet YRP/UPX_wwwupxsourceforgenet_additional YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/Netopsystems_FEAD_Optimizer_1 [+] YRP/UPX_290_LZMA YRP/UPX_290_LZMA_Markus_Oberhumer_Laszlo_Molnar_John_Reiser YRP/UPX_290_LZMA_additional YRP/UPX_wwwupxsourceforgenet YRP/UPXv20MarkusLaszloReiser YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/UPX290LZMAMarkusOberhumerLaszloMolnarJohnReiser YRP/upx_3 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/network_dyndns YRP/UPX YRP/suspicious_packer_section
805ef0364326f7ad9d3bdfcc90b0c0d2c66e766d477608b1b5e12b650adc0e15	PE32	2020-01-15 16:13:03	User Submission	CuckooSandbox/vmdetect YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland YRP/D1S1Gv11betaD1N [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/borland_delphi YRP/borland_delphi_dll YRP/domain YRP/IP YRP/contentis_base64 YRP/System_Tools YRP/Browsers YRP/Antivirus YRP/VM_Generic_Detection YRP/Sandboxie_Detection YRP/VirtualBox_Detection YRP/Dropper_Strings YRP/Check_Dlls YRP/Check_VBox_Description YRP/vmdetect YRP/anti_dbgtools YRP/antisb_sandboxie YRP/antivm_virtualbox YRP/antivm_bios YRP/disable_antivirus YRP/inject_thread YRP/create_service YRP/network_udp_sock YRP/network_dyndns YRP/network_dropper YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/cred_local YRP/sniff_audio YRP/cred_ff YRP/spreading_share YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/MD5_Constants YRP/Delphi_Random YRP/Delphi_FormShow YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/DarkComet_1 YRP/DarkComet_3 FlorianRoth/RAT_DarkComet KevTheHermit/DarkComet
2d99ab174a8f989605b906ccc9b90177930a0e209a338ee749cfdf9474d13b53	PE32	2020-01-15 11:53:19	User Submission	YRP/LCC_Win32_v1x_additional YRP/Microsoft_Visual_Cpp_30_old_crap YRP/LCC_Win32_1x YRP/LCC_Win32_v1x [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/IsBeyondImageSize YRP/domain YRP/contentis_base64 YRP/Dropper_Strings YRP/disable_firewall YRP/network_tcp_listen YRP/network_dyndns YRP/network_irc YRP/network_tcp_socket YRP/network_dns YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API
e86a2f523437aac66bd8ef8b0d943f77bca1a66f0dc03f7f513b1adfa1297be7	PE32	2020-01-15 11:53:17	User Submission	YRP/PackerUPX_CompresorGratuito_wwwupxsourceforgenet YRP/UPX_wwwupxsourceforgenet_additional YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/UPX_290_LZMA [+] YRP/UPX_290_LZMA_Markus_Oberhumer_Laszlo_Molnar_John_Reiser YRP/UPX_290_LZMA_additional YRP/UPX_wwwupxsourceforgenet YRP/UPX290LZMAMarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 YRP/IsWindowsGUI YRP/domain YRP/contentis_base64 YRP/network_dyndns YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/UPX YRP/suspicious_packer_section
494bdc059704761f9636f7dd9a67577ab1c7bb85c76724bac9a2a58797d49e47	PE32	2020-01-15 11:12:58	User Submission	YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/maldoc_find_kernel32_base_method_1 [+] YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/Dropper_Strings YRP/network_dyndns FlorianRoth/DragonFly_APT_Sep17_3
9d4e3d0ad6a390394a7c92f8000755f4903a301e67900ca3bd829345098d9481	PE32	2020-01-15 11:12:23	User Submission	YRP/PeStubOEP_v1x YRP/PeStubOEP_v1x_additional YRP/PECompact_25x_Jeremy_Collake YRP/IsPE32 [+] YRP/IsWindowsGUI YRP/HasRichSignature YRP/maldoc_find_kernel32_base_method_1 YRP/maldoc_getEIP_method_1 YRP/domain YRP/contentis_base64 YRP/Dropper_Strings YRP/network_dyndns FlorianRoth/DragonFly_APT_Sep17_3
2dee2f72c1a01191ee622d5391d6c9ee1a2ff64d0afb8948bdf6541d87f754b8	PE32	2020-01-15 09:52:42	User Submission	YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ [+] YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/BobSoft_Mini_Delphi_BoB_BobSoft_additional YRP/Borland_Delphi_v60_v70 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/BobSoftMiniDelphiBoBBobSoft YRP/IsPE32 YRP/IsWindowsGUI YRP/borland_delphi YRP/domain YRP/IP YRP/contentis_base64 YRP/Dropper_Strings YRP/network_udp_sock YRP/network_tcp_listen YRP/network_dyndns YRP/network_irc YRP/network_tcp_socket YRP/network_dns YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_files_operation YRP/win_hook YRP/BASE64_table YRP/Delphi_Random YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/Str_Win32_Winsock2_Library
1d7408e6cd03f91355c2d5c41829945b9ef650816d4e44ccac29f8ed966a610c	PE32	2020-01-15 09:41:36	User Submission	YRP/IsPE32 YRP/IsConsole YRP/domain YRP/IP [+] YRP/url YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/network_dyndns YRP/network_irc
3f6f88d80dc7ea8562a4aff3979422111ac593867cc7037c5bffa514c397ba91	PE32	2020-01-13 21:15:27	User Submission	YRP/PackerUPX_CompresorGratuito_wwwupxsourceforgenet YRP/UPX_wwwupxsourceforgenet_additional YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/Netopsystems_FEAD_Optimizer_1 [+] YRP/UPX_290_LZMA YRP/UPX_290_LZMA_Markus_Oberhumer_Laszlo_Molnar_John_Reiser YRP/UPX_290_LZMA_additional YRP/UPX_wwwupxsourceforgenet YRP/UPXv20MarkusLaszloReiser YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/UPX290LZMAMarkusOberhumerLaszloMolnarJohnReiser YRP/upx_3 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature YRP/domain YRP/contentis_base64 YRP/network_dyndns YRP/UPX YRP/suspicious_packer_section
02c4f00a8debaf1cb4a57c27d7d4f3df15040476ed2bc7531aa84d84f5d011ad	data	2020-01-13 18:42:39	User Submission	YRP/domain YRP/contentis_base64 YRP/network_dyndns
0fe0537923fca85ebd795b8e3dacb4218b82c625d1c14675bb9986a981dc7579	PE32	2020-01-13 18:01:49	User Submission	CuckooSandbox/vmdetect YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland YRP/IsPE32 [+] YRP/IsWindowsGUI YRP/IsPacked YRP/IsBeyondImageSize YRP/borland_delphi YRP/domain YRP/contentis_base64 YRP/Browsers YRP/Sandboxie_Detection YRP/VirtualPC_Detection YRP/VirtualBox_Detection YRP/Obfuscated_Strings YRP/Check_Dlls YRP/vmdetect YRP/antisb_joesanbox YRP/antisb_anubis YRP/antisb_threatExpert YRP/antisb_sandboxie YRP/antisb_cwsandbox YRP/antivm_virtualbox YRP/inject_thread YRP/network_dyndns YRP/escalate_priv YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_token YRP/Delphi_CompareCall YRP/Delphi_Copy
01af2127896a894b31680968c0bfd2002b296d93274eced1fa04ad953b4b20ab	PE32	2020-01-13 14:40:54	User Submission	YRP/Armadillo_v2xx_CopyMem_II_additional YRP/Microsoft_Visual_Cpp_70_MFC YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/HasRichSignature YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/network_dyndns YRP/win_registry YRP/win_files_operation YRP/suspicious_packer_section
d0d01db88a79ce0fb42bda63329769f3582186386935755580b9e1f59ec1d56d	Public	2020-01-11 03:18:01	User Submission	YRP/domain YRP/url YRP/contentis_base64 YRP/network_dyndns [+] YRP/android_meterpreter
69e1d0a32fb6555eda0f83880096fb0e77600e1cc2bab3206833bbef15d81e0e	ASCII	2020-01-11 03:18:00	User Submission	YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings [+] YRP/network_dyndns YRP/android_meterpreter YRP/Big_Numbers1
c664f46d4370acb3b1a410fb4891fe5bc7644aa35972bc00cf879e5b876bfac2	ASCII	2020-01-11 03:18:00	User Submission	YRP/possible_includes_base64_packed_functions YRP/domain YRP/IP YRP/url [+] YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/network_dyndns YRP/android_meterpreter YRP/Big_Numbers1
4d228aed36720aa47cc2656f47aed01dcd2751fc8a2a3d36281eeb18ad4b9810	PE32	2019-11-24 12:54:54	User Submission	YRP/UPX_v0896_v102_v105_v122_Delphi_stub_additional YRP/UPX_v0896_v102_v105_v122_Delphi_stub_Laszlo_Markus YRP/PackerUPX_CompresorGratuito_wwwupxsourceforgenet YRP/UPX_wwwupxsourceforgenet_additional [+] YRP/MSLRH_V031_emadicius YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/UPX_v0896_v102_v105_v122_Delphi_stub YRP/UPX_wwwupxsourceforgenet YRP/Borland YRP/UPXProtectorv10x2 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/domain YRP/contentis_base64 YRP/network_dyndns YRP/screenshot YRP/rat_webcam YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library
3724074e10edc9f33a9deb0f1debff81bf8c41bc0d544cae424905b78021049a	PE32	2019-11-24 12:14:50	User Submission	YRP/possible_includes_base64_packed_functions YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional [+] YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI YRP/borland_delphi YRP/domain YRP/url YRP/contentis_base64 YRP/Misc_Suspicious_Strings YRP/network_dyndns YRP/network_http YRP/keylogger YRP/win_registry YRP/win_files_operation YRP/android_meterpreter YRP/Big_Numbers1 YRP/Delphi_Random YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_DecodeDate YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API
eea96a229f117359dd478a5643f57c7ac35154dc2395dd661a383f7109b18f19	XML	2019-11-12 18:21:09	User Submission	CuckooSandbox/vmdetect YRP/powershell YRP/domain YRP/IP [+] YRP/url YRP/contentis_base64 YRP/Antivirus YRP/VMWare_Detection YRP/Dropper_Strings YRP/WMI_strings YRP/Misc_Suspicious_Strings YRP/vmdetect YRP/network_dyndns YRP/Big_Numbers1 YRP/Big_Numbers3
9eae3d1dd6d90d77e3eab737033736f319b1928712472c3ce33a0950c8da06a1	data	2019-11-06 22:00:55	User Submission	CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api CuckooSandbox/vmdetect YRP/Borland [+] YRP/powershell YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Browsers YRP/Antivirus YRP/VMWare_Detection YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/vmdetect YRP/hijack_network YRP/network_tcp_listen YRP/network_dyndns YRP/lookupip YRP/Big_Numbers1 YRP/Big_Numbers3 YRP/GEN_PowerShell FlorianRoth/Suspicious_PowerShell_WebDownload_1 FlorianRoth/Msfpayloads_msf_3 FlorianRoth/Msfpayloads_msf_ref FlorianRoth/Hacktool_Strings_p0wnedShell
64f112d0f9c673cc334628270b627fcde1186be66675fec57763e89473c8f4cc	ASCII	2019-11-05 16:20:35	User Submission	YRP/domain YRP/IP YRP/url YRP/contentis_base64 [+] YRP/network_dyndns
a6a5c0a791a8c9eb49c4f921eac7e9f7471e76458115f342a57156f9ed6612db	ASCII	2019-11-05 14:50:35	User Submission	CuckooSandbox/embedded_win_api CuckooSandbox/vmdetect YRP/possible_includes_base64_packed_functions YRP/powershell [+] YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Browsers YRP/Antivirus YRP/VM_Generic_Detection YRP/VirtualBox_Detection YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/DebuggerCheck__QueryInfo YRP/ThreadControl__Context YRP/SEH__vectored YRP/vmdetect YRP/anti_dbg YRP/antisb_threatExpert YRP/hijack_network YRP/network_tcp_listen YRP/network_dyndns YRP/network_dropper YRP/bitcoin YRP/screenshot YRP/keylogger YRP/spreading_file YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/vmdetect_misc YRP/android_meterpreter YRP/Big_Numbers1 YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/Tofu_Backdoor FlorianRoth/PowerShell_Susp_Parameter_Combo FlorianRoth/Recon_Commands_Windows_Gen1 FlorianRoth/Tofu_Backdoor
867845d3999f8ac817ed4684dcaff9e132f6c15a891b8ecac5f238e960b0e911	ASCII	2019-10-26 15:00:44	User Submission	CuckooSandbox/embedded_win_api YRP/domain YRP/IP YRP/url [+] YRP/contentis_base64 YRP/System_Tools YRP/network_dyndns YRP/Big_Numbers3
140a69a91cc1cc474d4b811aa1fa67e8cb7076bdf4fb2ed7a281932da2183d5a	ASCII	2019-10-26 15:00:37	User Submission	YRP/domain YRP/url YRP/contentis_base64 YRP/network_dyndns [+] FlorianRoth/APT10_Malware_Sample_Gen
5ee9349e551cfafb4d871cffc16031ed2673579b643ae24e9fcbddb950459674	ASCII	2019-10-26 14:42:11	User Submission	YRP/domain YRP/url YRP/contentis_base64 YRP/network_dyndns [+] YRP/Big_Numbers1 FlorianRoth/APT10_Malware_Sample_Gen
85647df6de3a89e4fb8f14052e5fbee81e9705b8f4b5cbb43033a21e5dabcbc3	ASCII	2019-10-26 14:40:57	User Submission	CuckooSandbox/embedded_win_api YRP/domain YRP/IP YRP/url [+] YRP/contentis_base64 YRP/System_Tools YRP/network_dyndns YRP/Big_Numbers3
a46b2383a7e945d5bceda13b4c3a9322731e533b4e33c8aeef07cce2f78552e6	ASCII	2019-10-26 14:40:47	User Submission	YRP/domain YRP/url YRP/contentis_base64 YRP/network_dyndns [+] YRP/Big_Numbers1 FlorianRoth/APT10_Malware_Sample_Gen
c6704540d4b19d018f585f720b3ddd78dc603acfa921eb8931a7ba975f88abe1	ASCII	2019-10-25 22:23:27	User Submission	CuckooSandbox/embedded_win_api CuckooSandbox/vmdetect YRP/domain YRP/IP [+] YRP/contentis_base64 YRP/System_Tools YRP/Browsers YRP/RE_Tools YRP/Antivirus YRP/VMWare_Detection YRP/Sandboxie_Detection YRP/VirtualBox_Detection YRP/Misc_Suspicious_Strings YRP/DebuggerCheck__RemoteAPI YRP/DebuggerHiding__Active YRP/Check_Dlls YRP/vmdetect YRP/anti_dbg YRP/anti_dbgtools YRP/antisb_threatExpert YRP/antisb_sandboxie YRP/antivm_virtualbox YRP/antivm_vmware YRP/disable_antivirus YRP/disable_firewall YRP/disable_dep YRP/inject_thread YRP/create_service YRP/create_com_service YRP/network_udp_sock YRP/network_tcp_listen YRP/network_dyndns YRP/network_smtp_dotNet YRP/network_smtp_raw YRP/network_smtp_vb YRP/network_p2p_win YRP/network_irc YRP/network_http YRP/network_dropper YRP/network_ftp YRP/network_tcp_socket YRP/network_dns YRP/network_ssl YRP/network_dga YRP/bitcoin YRP/escalate_priv YRP/screenshot YRP/lookupip YRP/lookupgeo YRP/keylogger YRP/cred_local YRP/sniff_audio YRP/cred_ff YRP/cred_vnc YRP/cred_ie7 YRP/sniff_lan YRP/migrate_apc YRP/spreading_file YRP/spreading_share YRP/rat_vnc YRP/rat_rdp YRP/rat_webcam YRP/win_mutex YRP/win_token YRP/win_files_operation YRP/vmdetect_misc YRP/Advapi_Hash_API YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API
3cc73699dfe3d71ea3e1f482a942c192de8250f9c029a712b0e3ea2051651857	ASCII	2019-10-25 22:22:39	User Submission	CuckooSandbox/embedded_win_api YRP/domain YRP/IP YRP/url [+] YRP/contentis_base64 YRP/System_Tools YRP/network_dyndns YRP/Big_Numbers3
f732d4b461eccf94951aec61169dad10352e9a072a49eacf1b17a1789f57c4c7	ASCII	2019-10-25 22:22:39	User Submission	CuckooSandbox/embedded_win_api YRP/domain YRP/IP YRP/url [+] YRP/contentis_base64 YRP/System_Tools YRP/network_dyndns YRP/Big_Numbers3
66a84450fda2abc65a29d7733678729520408de7c24eb290d22a1e68dc201e12	ASCII	2019-10-25 22:22:25	User Submission	YRP/domain YRP/url YRP/contentis_base64 YRP/network_dyndns [+] FlorianRoth/APT10_Malware_Sample_Gen
fae6e8eead2044c31a28c271c540d7ab968bb59a075cf8641d4e3b767a83c2bf	data	2019-10-25 22:21:42	User Submission	CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api CuckooSandbox/vmdetect YRP/webshell_iMHaPFtp_2 [+] YRP/webshell_caidao_shell_guo YRP/webshell_PHP_redcod YRP/webshell_php_sh_server YRP/webshell_cihshell_fix YRP/webshell_php_up YRP/webshell_asp_EFSO_2 YRP/webshell_jsp_up YRP/webshell_Server_Variables YRP/webshell_caidao_shell_ice_2 YRP/webshell_phpspy2010 YRP/webshell_asp_ice YRP/webshell_asp_404 YRP/webshell_webshell_cnseay02_1 YRP/webshell_php_fbi YRP/webshell_B374kPHP_B374k YRP/webshell_php_list YRP/webshell_caidao_shell_404 YRP/webshell_ASP_aspydrv YRP/webshell_Dx_Dx YRP/webshell_MySQL_Web_Interface_Version_0_8 YRP/webshell_phpkit_1_0_odd YRP/webshell_wsb_idc YRP/webshell_php_404 YRP/webshell_webshell_cnseay_x YRP/webshell_asp_up YRP/webshell_phpkit_0_1a_odd YRP/webshell_jsp_k81 YRP/webshell_jsp_cmdjsp YRP/webshell_Java_Shell YRP/webshell_PHP_r57142 YRP/webshell_simple_backdoor YRP/webshell_php_cmd YRP/webshell_PHP_co YRP/webshell_PHP_150 YRP/webshell_PHP_c37 YRP/webshell_PHP_b37 YRP/webshell_PHP_bug_1_ YRP/webshell_ghost_source_icesword_silic YRP/webshell_browser_201_3_400_in_JFolder_jfolder01_jsp_leo_ma_warn_webshell_nc_download YRP/webshell_Dive_Shell_1_0_Emperor_Hacking_Team_xxx YRP/webshell_jsp_reverse_jsp_reverse_jspbd YRP/webshell_gfs_sh_r57shell_r57shell127_SnIpEr_SA_xxx YRP/webshell_itsec_PHPJackal_itsecteam_shell_jHn YRP/webshell_NIX_REMOTE_WEB_SHELL_NIX_REMOTE_WEB_xxx1 YRP/webshell_2008_2009mssql_phpspy_2005_full_phpspy_2006_arabicspy_hkrkoz YRP/webshell_000_403_c5_config_myxx_queryDong_spyjsp2010_zend YRP/webshell_r57shell127_r57_iFX_r57_kartal_r57_antichat YRP/webshell_000_403_807_a_c5_config_css_dm_he1p_xxx YRP/webshell_phpspy_2005_full_phpspy_2005_lite_phpspy_2006_PHPSPY YRP/webshell_c99_locus7s_c99_w4cking_xxx YRP/webshell_r57shell127_r57_kartal_r57 YRP/webshell_webshells_new_con2 YRP/webshell_Expdoor_com_ASP YRP/webshell_webshells_new_php2 YRP/webshell_bypass_iisuser_p YRP/webshell_sig_404super YRP/webshell_webshells_new_JSP YRP/webshell_webshell_123 YRP/webshell_dev_core YRP/webshell_webshells_new_pHp YRP/webshell_webshells_new_pppp YRP/webshell_webshells_new_code YRP/webshell_webshells_new_xxxx YRP/webshell_webshells_new_PHP1 YRP/webshell_webshells_new_asp1 YRP/webshell_webshells_new_php6 YRP/webshell_GetPostpHp YRP/webshell_webshells_new_php5 YRP/webshell_webshells_new_PHP YRP/webshell_webshells_new_Asp YRP/perlbot_pl YRP/php_backdoor_php YRP/Liz0ziM_Private_Safe_Mode_Command_Execuriton_Bypass_Exploit_php YRP/shankar_php_php YRP/Casus15_php_php YRP/small_php_php YRP/shellbot_pl YRP/fuckphpshell_php YRP/ngh_php_php YRP/jsp_reverse_jsp YRP/Tool_asp YRP/NT_Addy_asp YRP/SimAttacker___Vrsion_1_0_0___priv8_4_My_friend_php YRP/phvayvv_php_php YRP/r57shell_php_php YRP/rst_sql_php_php YRP/wh_bindshell_py YRP/lurm_safemod_on_cgi YRP/c99madshell_v2_0_php_php YRP/w3d_php_php YRP/WinX_Shell_html YRP/Dx_php_php YRP/csh_php_php YRP/pHpINJ_php_php YRP/sig_2008_php_php YRP/ak74shell_php_php YRP/Rem_View_php_php YRP/Java_Shell_js YRP/STNC_php_php YRP/aZRaiLPhp_v1_0_php YRP/zacosmall_php YRP/CmdAsp_asp YRP/simple_backdoor_php YRP/mysql_shell_php YRP/Dive_Shell_1_0___Emperor_Hacking_Team_php YRP/Asmodeus_v0_1_pl YRP/Reader_asp YRP/phpshell17_php YRP/SimShell_1_0___Simorgh_Security_MGZ_php YRP/jspshall_jsp YRP/rootshell_php YRP/connectback2_pl YRP/shells_PHP_wso YRP/backdoor1_php YRP/elmaliseker_asp YRP/s72_Shell_v1_1_Coding_html YRP/hidshell_php_php YRP/kacak_asp YRP/PHP_Backdoor_Connect_pl_php YRP/Antichat_Socks5_Server_php_php YRP/Antichat_Shell_v1_3_php YRP/Safe_Mode_Bypass_PHP_4_4_2_and_PHP_5_1_2_php YRP/cyberlords_sql_php_php YRP/Ayyildiz_Tim___AYT__Shell_v_2_1_Biz_html YRP/EFSO_2_asp YRP/lamashell_php YRP/Ajax_PHP_Command_Shell_php YRP/JspWebshell_1_2_jsp YRP/Sincap_php_php YRP/Phyton_Shell_py YRP/sh_php_php YRP/phpjackal_php YRP/sql_php_php YRP/cgi_python_py YRP/ru24_post_sh_php_php YRP/telnetd_pl YRP/php_include_w_shell_php YRP/Safe0ver_Shell__Safe_Mod_Bypass_By_Evilc0der_php YRP/shell_php_php YRP/telnet_cgi YRP/ironshell_php YRP/backdoorfr_php YRP/aspydrv_asp YRP/cmdjsp_jsp YRP/h4ntu_shell__powered_by_tsoi_ YRP/Ajan_asp YRP/PHANTASMA_php YRP/MySQL_Web_Interface_Version_0_8_php YRP/multiple_webshells_0002 YRP/multiple_webshells_0003 YRP/multiple_webshells_0005 YRP/multiple_webshells_0010 YRP/multiple_webshells_0013 YRP/multiple_webshells_0015 YRP/multiple_webshells_0016 YRP/multiple_webshells_0018 YRP/multiple_php_webshells YRP/multiple_webshells_0019 YRP/multiple_webshells_0022 YRP/multiple_webshells_0027 YRP/multiple_webshells_0030 YRP/multiple_webshells_0031 YRP/multiple_webshells_0032 YRP/PHP_Cloaked_Webshell_SuperFetchExec YRP/WebShell_dC3_Security_Crew_Shell_PRiV YRP/WebShell_simattacker YRP/WebShell_DTool_Pro YRP/WebShell_ironshell YRP/WebShell_b374k_mini_shell_php_php YRP/WebShell_Sincap_1_0 YRP/WebShell_b374k_php YRP/WebShell_SimAttacker___Vrsion_1_0_0___priv8_4_My_friend YRP/WebShell_h4ntu_shell__powered_by_tsoi_ YRP/WebShell_php_webshells_MyShell YRP/WebShell_php_webshells_pws YRP/WebShell_reader_asp_php YRP/WebShell_Liz0ziM_Private_Safe_Mode_Command_Execuriton_Bypass_Exploit YRP/WebShell_php_backdoor YRP/WebShell_php_webshells_pHpINJ YRP/WebShell_php_webshells_NGH YRP/WebShell_php_webshells_matamu YRP/WebShell_ru24_post_sh YRP/WebShell_hiddens_shell_v1 YRP/WebShell_c99_locus7s YRP/WebShell_safe0ver YRP/WebShell_php_webshells_kral YRP/WebShell_cgitelnet YRP/WebShell_NTDaddy_v1_9 YRP/WebShell_lamashell YRP/WebShell_Simple_PHP_backdoor_by_DK YRP/WebShell_CmdAsp_asp_php YRP/WebShell_NCC_Shell YRP/WebShell_php_webshells_README YRP/WebShell_backupsql YRP/WebShell_AK_74_Security_Team_Web_Shell_Beta_Version YRP/WebShell_php_webshells_cpanel YRP/WebShell_php_webshells_529 YRP/WebShell_qsd_php_backdoor YRP/WebShell_Ayyildiz_Tim___AYT__Shell_v_2_1_Biz YRP/WebShell_Gamma_Web_Shell YRP/WebShell_WinX_Shell YRP/WebShell_php_include_w_shell YRP/WebShell_PhpSpy_Ver_2006 YRP/WebShell_php_webshells_myshell YRP/WebShell_php_webshells_lolipop YRP/WebShell_simple_cmd YRP/WebShell_go_shell YRP/WebShell_aZRaiLPhp_v1_0 YRP/WebShell_webshells_zehir4 YRP/WebShell_zehir4_asp_php YRP/WebShell_php_webshells_lostDC YRP/WebShell_CasuS_1_5 YRP/WebShell__Ajax_PHP_Command_Shell_Ajax_PHP_Command_Shell_soldierofallah YRP/WebShell__Small_Web_Shell_by_ZaCo_small_zaco_zacosmall YRP/WebShell_Generic_PHP_1 YRP/WebShell__CrystalShell_v_1_erne_stres YRP/WebShell_Generic_PHP_5 YRP/WebShell__findsock_php_findsock_shell_php_reverse_shell YRP/WebShell_Generic_PHP_6 YRP/Unpack_Injectt YRP/FeliksPack3___PHP_Shells_ssh YRP/bin_Client YRP/ZXshell2_0_rar_Folder_ZXshell YRP/RkNTLoad YRP/binder2_binder2 YRP/thelast_orice2 YRP/sendmail YRP/FSO_s_zehir4 YRP/hkshell_hkshell YRP/DarkSpy105 YRP/EditServer_Webshell YRP/FSO_s_reader YRP/svchostdll YRP/HYTop_DevPack_server YRP/vanquish YRP/BIN_Client YRP/Simple_PHP_BackDooR YRP/hkshell_hkrmv YRP/FeliksPack3___PHP_Shells_phpft YRP/bdcli100 YRP/rdrbs084 YRP/HYTop_CaseSwitch_2005 YRP/FSO_s_casus15_2 YRP/installer YRP/elmaliseker YRP/shelltools_g0t_root_resolve YRP/shelltools_g0t_root_Fport YRP/HYTop_DevPack_upload YRP/PasswordReminder YRP/rknt_zip_Folder_RkNT YRP/dbgntboot YRP/PHP_shell YRP/rdrbs100 YRP/Mithril_Mithril YRP/hkdoordll YRP/Mithril_v1_45_dllTest YRP/dbgiis6cli YRP/Debug_cress YRP/FeliksPack3___PHP_Shells_usr YRP/FSO_s_phpinj YRP/xssshell_db YRP/EditServer_Webshell_2 YRP/by064cli YRP/Mithril_dllTest YRP/connector YRP/shelltools_g0t_root_HideRun YRP/regshell YRP/PHP_Shell_v1_7 YRP/xssshell_save YRP/screencap YRP/ZXshell2_0_rar_Folder_zxrecv YRP/_root_040_zip_Folder_deploy YRP/by063cli YRP/icyfox007v1_10_rar_Folder_asp YRP/byshell063_ntboot_2 YRP/shelltools_g0t_root_xwhois YRP/vanquish_2 YRP/ZXshell2_0_rar_Folder_nc YRP/BIN_Server YRP/HYTop2006_rar_Folder_2006 YRP/HDConfig YRP/Webshell_and_Exploit_CN_APT_HK YRP/Pastebin_Webshell YRP/Borland YRP/possible_exploit YRP/powershell YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/Browsers YRP/Antivirus YRP/VMWare_Detection YRP/Sandboxie_Detection YRP/Dropper_Strings YRP/Base64d_PE YRP/Misc_Suspicious_Strings YRP/SEH__vba YRP/Check_Dlls YRP/vmdetect YRP/anti_dbg YRP/anti_dbgtools YRP/antisb_sandboxie YRP/inject_thread YRP/network_tcp_listen YRP/network_dyndns YRP/network_http YRP/network_dropper YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/sniff_lan YRP/win_registry YRP/win_token YRP/win_files_operation YRP/android_meterpreter YRP/Mal_http_EXE YRP/Mal_PotPlayer_DLL YRP/Big_Numbers1 YRP/Big_Numbers3 YRP/WoolenGoldfish_Sample_1 YRP/WoolenGoldfish_Generic_3 YRP/Cerberus YRP/eval_post YRP/md5_71a7c769e644d8cf3cf32419239212c7 YRP/ScanBox_Malware_Generic YRP/Base64_encoded_Executable YRP/Invoke_mimikittenz YRP/GEN_PowerShell YRP/Nanocore_RAT_Gen_1 YRP/Nanocore_RAT_Gen_2 YRP/apt_hellsing_implantstrings YRP/FavoriteStrings YRP/NaikonStrings YRP/Naikon YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/EQGRP_create_dns_injection YRP/EQGRP_screamingplow YRP/EQGRP_MixText YRP/EQGRP_tunnel_state_reader YRP/EQGRP_payload YRP/EQGRP_eligiblecandidate YRP/EQGRP_BUSURPER_2211_724 YRP/EQGRP_networkProfiler_orderScans YRP/EQGRP_epicbanana_2_1_0_1 YRP/EQGRP_sniffer_xml2pcap YRP/EQGRP_BananaAid YRP/EQGRP_config_jp1_UA YRP/EQGRP_userscript YRP/EQGRP_BUSURPER_3001_724 YRP/EQGRP_workit YRP/EQGRP_tinyhttp_setup YRP/EQGRP_EPBA YRP/EQGRP_jetplow_SH YRP/EQGRP_extrabacon YRP/EQGRP_sploit_py YRP/EQGRP_uninstallPBD YRP/EQGRP_BICECREAM YRP/EQGRP_BFLEA_2201 YRP/EQGRP_StoreFc YRP/EQGRP_BBALL YRP/EQGRP_BARPUNCH_BPICKER YRP/EQGRP_Implants_Gen5 YRP/EQGRP_pandarock YRP/EQGRP_BananaUsurper_writeJetPlow YRP/EQGRP_Implants_Gen4 YRP/EQGRP_Implants_Gen3 YRP/EQGRP_BLIAR_BLIQUER YRP/EQGRP_sploit YRP/EQGRP_Implants_Gen2 YRP/EQGRP_Implants_Gen1 YRP/EQGRP_ssh_telnet_29 YRP/EQGRP_callbacks YRP/EQGRP_Extrabacon_Output YRP/EQGRP_Unique_Strings YRP/JavaDropper YRP/QuarksPwDump_Gen YRP/ZhoupinExploitCrew YRP/BackDoorLogger YRP/Jasus YRP/ShellCreator2 YRP/SmartCopy2 YRP/TinyZBot YRP/antivirusdetector YRP/csext YRP/kagent YRP/mimikatzWrapper YRP/pvz_in YRP/zhLookUp YRP/zhmimikatz YRP/OPCLEAVER_BackDoorLogger YRP/OPCLEAVER_Jasus YRP/OPCLEAVER_ShellCreator2 YRP/OPCLEAVER_SmartCopy2 YRP/OPCLEAVER_SynFlooder YRP/OPCLEAVER_TinyZBot YRP/OPCLEAVER_ZhoupinExploitCrew YRP/OPCLEAVER_antivirusdetector YRP/OPCLEAVER_csext YRP/OPCLEAVER_kagent YRP/OPCLEAVER_mimikatzWrapper YRP/OPCLEAVER_pvz_in YRP/OPCLEAVER_zhLookUp YRP/OPCLEAVER_zhmimikatz YRP/OPCLEAVER_CCProxy_Config YRP/Payload_Exe2Hex YRP/Codoso_CustomTCP_4 YRP/Codoso_Gh0st_3 YRP/Codoso_Gh0st_1 YRP/Codoso_PGV_PVID_1 YRP/Havex_Trojan_PHP_Server YRP/Turla_APT_Malware_Gen1 YRP/Turla_APT_Malware_Gen2 YRP/Turla_APT_Malware_Gen3 YRP/shimrat YRP/shimratreporter YRP/FiveEyes_QUERTY_Malwaresig_20123_cmdDef YRP/FiveEyes_QUERTY_Malwareqwerty_20123 YRP/FiveEyes_QUERTY_Malwaresig_20120_cmdDef YRP/FiveEyes_QUERTY_Malwaresig_20121_cmdDef YRP/apt_equation_equationlaser_runtimeclasses YRP/EquationDrug_HDDSSD_Op YRP/Sofacy_Fybis_ELF_Backdoor_Gen1 YRP/WaterBug_wipbot_2013_dll YRP/Casper_Included_Strings YRP/Casper_SystemInformation_Output YRP/suspicious_packer_section YRP/APT_Malware_PutterPanda_Rel YRP/WindowsCredentialEditor YRP/Amplia_Security_Tool YRP/PwDump YRP/PScan_Portscan_1 YRP/HackTool_Samples YRP/Fierce2 YRP/Ncrack YRP/SQLMap YRP/PortScanner YRP/NetBIOS_Name_Scanner YRP/FeliksPack3___Scanners_ipscan YRP/IP_Stealing_Utilities YRP/PortRacer YRP/scanarator YRP/_Bitchin_Threads_ YRP/portscan YRP/ProPort_zip_Folder_ProPort YRP/StealthWasp_s_Basic_PortScanner_v1_2 YRP/BluesPortScan YRP/scanarator_iis YRP/Angry_IP_Scanner_v2_08_ipscan YRP/crack_Loader YRP/Beastdoor_Backdoor YRP/Powershell_Netcat YRP/CN_Hacktool_MilkT_Scanner YRP/WCE_Modified_1_1014 YRP/iKAT_command_lines_agent YRP/iKAT_startbar YRP/BypassUac2 YRP/BypassUac_9 YRP/APT_Proxy_Malware_Packed_dev YRP/Ncat_Hacktools_CN YRP/MS08_067_Exploit_Hacktools_CN YRP/Hacktools_CN_Burst_sql YRP/Hacktools_CN_Panda_445TOOL YRP/Hacktools_CN_WinEggDrop YRP/Hacktools_CN_Panda_Burst YRP/Hacktools_CN_GOGOGO_Bat YRP/Hacktools_CN_Burst_pass YRP/Hacktools_CN_JoHor_Posts_Killer YRP/Hacktools_CN_Burst_Start YRP/Hacktools_CN_Burst_Blast YRP/VUBrute_VUBrute YRP/VUBrute_config YRP/sig_238_listip YRP/ArtTrayHookDll YRP/EditServer_HackTool YRP/sig_238_letmein YRP/sig_238_token YRP/sig_238_webget YRP/ASPack_Chinese YRP/sig_238_filespy YRP/EditKeyLogReadMe YRP/PassSniffer_zip_Folder_readme YRP/EditKeyLog YRP/PassSniffer YRP/UnPack_rar_Folder_InjectT YRP/Jc_WinEggDrop_Shell YRP/UnPack_rar_Folder_TBack YRP/ByPassFireWall_zip_Folder_Inject YRP/sig_238_sqlcmd YRP/sig_238_2323 YRP/CleanIISLog YRP/sqlcheck YRP/sig_238_RunAsEx YRP/SplitJoin_V1_3_3_rar_Folder_3 YRP/InstGina YRP/sig_238_findoor YRP/WinEggDropShellFinal_zip_Folder_InjectT YRP/gina_zip_Folder_gina YRP/sig_238_xsniff YRP/sig_238_fscan YRP/_FsHttp_FsPop_FsSniffer YRP/Ammyy_Admin_AA_v3 YRP/LinuxHacktool_eyes_scanssh YRP/LinuxHacktool_eyes_pscan2 YRP/LinuxHacktool_eyes_a YRP/LinuxHacktool_eyes_mass YRP/CN_Toolset__XScanLib_XScanLib_XScanLib YRP/CN_Toolset_NTscan_PipeCmd YRP/CN_Toolset_sig_1433_135_sqlr YRP/Mimikatz_Memory_Rule_1 YRP/Mimikatz_Memory_Rule_2 YRP/Mimikatz_Logfile YRP/VSSown_VBS YRP/ccrewMiniasp YRP/MiniASP YRP/Anthem_DeepPanda_lot1 YRP/Anthem_DeepPanda_htran_exe YRP/KINS_dropper YRP/IronTiger_ASPXSpy YRP/IronTiger_wmiexec YRP/IronPanda_DNSTunClient YRP/IronPanda_Malware_Htran YRP/Trojan_Win32_Plaplex YRP/Trojan_Win32_Adupib YRP/IMPLANT_3_v1 YRP/PoseidonGroup_Malware YRP/liudoor YRP/BernhardPOS YRP/Unit78020_Malware_Gen1 YRP/Unit78020_Malware_Gen3 FlorianRoth/QuarksPwDump_Gen FlorianRoth/KINS_dropper FlorianRoth/Win_PrivEsc_gp3finder_v4_0 FlorianRoth/Win_PrivEsc_folderperm FlorianRoth/FiveEyes_QUERTY_Malwaresig_20123_cmdDef FlorianRoth/FiveEyes_QUERTY_Malwareqwerty_20123 FlorianRoth/FiveEyes_QUERTY_Malwaresig_20120_cmdDef FlorianRoth/FiveEyes_QUERTY_Malwaresig_20121_cmdDef FlorianRoth/Nidiran_Trojan_1 FlorianRoth/Nidiran_Trojan_3 FlorianRoth/Mal_http_EXE FlorianRoth/Mal_PotPlayer_DLL FlorianRoth/ScanBox_Malware_Generic FlorianRoth/EQGRP_create_dns_injection FlorianRoth/EQGRP_screamingplow FlorianRoth/EQGRP_MixText FlorianRoth/EQGRP_tunnel_state_reader FlorianRoth/EQGRP_payload FlorianRoth/EQGRP_eligiblecandidate FlorianRoth/EQGRP_BUSURPER_2211_724 FlorianRoth/EQGRP_networkProfiler_orderScans FlorianRoth/EQGRP_epicbanana_2_1_0_1 FlorianRoth/EQGRP_sniffer_xml2pcap FlorianRoth/EQGRP_BananaAid FlorianRoth/EQGRP_config_jp1_UA FlorianRoth/EQGRP_userscript FlorianRoth/EQGRP_BUSURPER_3001_724 FlorianRoth/EQGRP_workit FlorianRoth/EQGRP_tinyhttp_setup FlorianRoth/EQGRP_EPBA FlorianRoth/EQGRP_jetplow_SH FlorianRoth/EQGRP_extrabacon FlorianRoth/EQGRP_sploit_py FlorianRoth/EQGRP_uninstallPBD FlorianRoth/EQGRP_BICECREAM FlorianRoth/EQGRP_BFLEA_2201 FlorianRoth/EQGRP_StoreFc FlorianRoth/EQGRP_BBALL FlorianRoth/EQGRP_BARPUNCH_BPICKER FlorianRoth/EQGRP_Implants_Gen5 FlorianRoth/EQGRP_pandarock FlorianRoth/EQGRP_BananaUsurper_writeJetPlow FlorianRoth/EQGRP_Implants_Gen4 FlorianRoth/EQGRP_Implants_Gen3 FlorianRoth/EQGRP_BLIAR_BLIQUER FlorianRoth/EQGRP_sploit FlorianRoth/EQGRP_Implants_Gen2 FlorianRoth/EQGRP_Implants_Gen1 FlorianRoth/EQGRP_ssh_telnet_29 FlorianRoth/EQGRP_callbacks FlorianRoth/EQGRP_Extrabacon_Output FlorianRoth/EQGRP_Unique_Strings FlorianRoth/OPCLEAVER_BackDoorLogger FlorianRoth/OPCLEAVER_Jasus FlorianRoth/OPCLEAVER_ShellCreator2 FlorianRoth/OPCLEAVER_SmartCopy2 FlorianRoth/OPCLEAVER_SynFlooder FlorianRoth/OPCLEAVER_TinyZBot FlorianRoth/OPCLEAVER_ZhoupinExploitCrew FlorianRoth/OPCLEAVER_antivirusdetector FlorianRoth/OPCLEAVER_csext FlorianRoth/OPCLEAVER_kagent FlorianRoth/OPCLEAVER_mimikatzWrapper FlorianRoth/OPCLEAVER_pvz_in FlorianRoth/OPCLEAVER_zhLookUp FlorianRoth/OPCLEAVER_zhmimikatz FlorianRoth/OPCLEAVER_CCProxy_Config FlorianRoth/ONHAT_Proxy_Hacktool FlorianRoth/RAT_JavaDropper FlorianRoth/malware_sakula_memory FlorianRoth/Casper_Included_Strings FlorianRoth/Casper_SystemInformation_Output FlorianRoth/GhostDragon_Gh0stRAT FlorianRoth/GhostDragon_Gh0stRAT_Sample2 FlorianRoth/kerberoast_PY FlorianRoth/WiltedTulip_ReflectiveLoader FlorianRoth/WindowsShell_s3 FlorianRoth/WindosShell_s1 FlorianRoth/WindowsShell_Gen FlorianRoth/WindowsShell_Gen2 FlorianRoth/ps1_toolkit_Invoke_Shellcode FlorianRoth/ps1_toolkit_Invoke_Mimikatz FlorianRoth/ps1_toolkit_Invoke_RelfectivePEInjection FlorianRoth/ps1_toolkit_Persistence FlorianRoth/ps1_toolkit_Invoke_Mimikatz_RelfectivePEInjection FlorianRoth/ps1_toolkit_Inveigh_BruteForce_2 FlorianRoth/ps1_toolkit_Persistence_2 FlorianRoth/ps1_toolkit_Inveigh_BruteForce_3 FlorianRoth/Pirpi_1609_A FlorianRoth/Pirpi_1609_B FlorianRoth/Regin_Related_Malware FlorianRoth/Unit78020_Malware_Gen1 FlorianRoth/Unit78020_Malware_Gen3 FlorianRoth/APT_Liudoor FlorianRoth/CoreImpact_sysdll_exe FlorianRoth/IronPanda_DNSTunClient FlorianRoth/IronPanda_Malware_Htran FlorianRoth/DeepPanda_lot1 FlorianRoth/DeepPanda_htran_exe FlorianRoth/Empire_Invoke_Mimikatz FlorianRoth/APT_Malware_CommentCrew_MiniASP FlorianRoth/Metasploit_Loader_RSMudge FlorianRoth/Sofacy_Fybis_ELF_Backdoor_Gen1 FlorianRoth/FourElementSword_Config_File FlorianRoth/FourElementSword_ElevateDLL_2 FlorianRoth/PoseidonGroup_Malware FlorianRoth/apt_equation_equationlaser_runtimeclasses FlorianRoth/EquationDrug_HDDSSD_Op FlorianRoth/PoisonIvy_Sample_6 FlorianRoth/Payload_Exe2Hex FlorianRoth/Fidelis_Advisory_cedt370 FlorianRoth/WaterBug_wipbot_2013_dll FlorianRoth/apt_hellsing_implantstrings FlorianRoth/IMPLANT_3_v1 FlorianRoth/BernhardPOS FlorianRoth/Turla_APT_Malware_Gen1 FlorianRoth/Turla_APT_Malware_Gen2 FlorianRoth/Turla_APT_Malware_Gen3 FlorianRoth/APT_Project_Sauron_Scripts FlorianRoth/APT_Project_Sauron_arping_module FlorianRoth/APT_Project_Sauron_kblogi_module FlorianRoth/APT_Project_Sauron_basex_module FlorianRoth/APT_Project_Sauron_dext_module FlorianRoth/Invoke_mimikittenz FlorianRoth/APT_Malware_PutterPanda_Rel FlorianRoth/APT6_Malware_Sample_Gen FlorianRoth/Codoso_CustomTCP_4 FlorianRoth/Codoso_Gh0st_3 FlorianRoth/Codoso_Gh0st_1 FlorianRoth/Codoso_PGV_PVID_1 FlorianRoth/PlugX_J16_Gen2 FlorianRoth/NTLM_Dump_Output FlorianRoth/shimrat FlorianRoth/shimratreporter FlorianRoth/WoolenGoldfish_Sample_1 FlorianRoth/WoolenGoldfish_Generic_3 FlorianRoth/Hacktool_Strings_p0wnedShell FlorianRoth/Keylogger_CN_APT FlorianRoth/Nanocore_RAT_Gen_1 FlorianRoth/Nanocore_RAT_Gen_2 FlorianRoth/Trojan_Win32_Plaplex FlorianRoth/Trojan_Win32_Adupib KevTheHermit/JavaDropper
51495022c0eb3fab8f0ceaa1de5b934d7262fa6d8ef9702363742254d18ee623	data	2019-10-23 08:30:23	User Submission	CuckooSandbox/shellcode CuckooSandbox/embedded_win_api CuckooSandbox/vmdetect YRP/powershell [+] YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/System_Tools YRP/VMWare_Detection YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/vmdetect YRP/network_dyndns YRP/Big_Numbers1 YRP/Trojan_W32_Gh0stMiancha_1_0_0 YRP/fin7_functions
324c24925e1cbfcc4caf7637b0e50ddc878de843a4941ffeef58fa40ceba4676	ASCII	2019-10-06 17:01:50	User Submission	YRP/domain YRP/IP YRP/contentis_base64 YRP/Misc_Suspicious_Strings [+] YRP/network_dyndns YRP/android_meterpreter YRP/Big_Numbers1
3d1e812e00ca5c140b66ab5351f5cf990f167fad6558a8549eb5cd5922a79e2d	UTF-8	2019-10-06 17:01:18	User Submission	YRP/domain YRP/url YRP/contentis_base64 YRP/network_dyndns [+] YRP/android_meterpreter

Recent Searches
yrp/network_dyndns
yrp/irontiger_wmiexec
yrp/trojan_win32_plalsalog
yrp/orienv1xv2xfisunav
yrp/vidgrab
yrp/keyfinder_tool
yrp/teslacrypt
yrp/derusbi_kernel
yrp/str_win32_wininet_library
yrp/gmremote

Search

Recent Searches