Search tag:Crypter

Stealer Crypter

AutoIt Compiled ScriptStealer Loader

675a7ad76f67d05d1f05be24b7f70db3

MD5 675a7ad76f67d05d1f05be24b7f70db3 · SHA256 095aaaa3cd9bb371eb912452ea29d6d12e907fcd4a[...]4f6

Commodity Crypter (imphash)T1027 T1140 T1055 T1027.001 CAB:COMPRESSION:LZX PE File Layout Win 64 Exe x64 PDB Path

1.69 MB 12 hours ago

Stealer Crypter

Portable Executable fileStealer Loader

cede917005058b4c75682694354b3c46

MD5 cede917005058b4c75682694354b3c46 · SHA256 bdc6af65b3c5c5d2519e0a2798f9445a522806ded0[...]692

Commodity Crypter (imphash)T1027 T1140 T1055 T1027.001 PE File Layout Win 64 Exe x64

11.81 MB 17 hours ago

Stealer Crypter

Portable Executable fileStealer Loader

f730d01d590cf293093c0fcb73b3b22b

MD5 f730d01d590cf293093c0fcb73b3b22b · SHA256 fcccbce48b9c530257d49fe82897d975a52d0abece[...]05f

Commodity Crypter (imphash)T1027 T1140 T1055 T1027.001 PE File Layout Win 64 Exe x64

5.52 MB yesterday

Stealer Crypter

Portable Executable fileStealer Loader

1fa9c0a151cf3638c103765f158af242

MD5 1fa9c0a151cf3638c103765f158af242 · SHA256 26e0644cf7ad60cc0d8aebe5381251eacc124860a9[...]2b3

Commodity Crypter (imphash)T1027 T1140 T1055 T1027.001 PE File Layout Win 64 Exe x64

7.6 MB yesterday

Stealer Crypter

Portable Executable fileStealer Loader

ee2745732746b920aca8df89d96d1614

MD5 ee2745732746b920aca8df89d96d1614 · SHA256 505e8314a5eb11b4c79f221199ba06c8b338a4b121[...]cb8

PE File Layout Win 32 Exe x86 Commodity Crypter (imphash)T1027 T1140 T1055 T1027.001 CAB:COMPRESSION:LZX

4.39 MB 3 days ago

.NET Reflective Loader

Portable Executable fileLoaderCrypter

112b56a6484156fa0b9d5296c8eb6240

MD5 112b56a6484156fa0b9d5296c8eb6240 · SHA256 d6055b5594b16f82fce35db1a693e65fcf6209facb[...]e7f

Managed .NET PE File Layout Win 32 Exe x86 SOS: 0.84 Reflective Loader Payload Malicious T1059.007

1.59 MB 6 days ago

XBinder

Portable Executable fileLoaderCrypterRAT

d2c20418550c97b75a6f0aa15aef57d1

MD5 d2c20418550c97b75a6f0aa15aef57d1 · SHA256 98379ccde6fc0517a749bdfb4fa3a384ccc8dbb86f[...]d87

Malicious XBinder Resource SOS: 0.82 Managed .NET PE File Layout Win 32 Exe x86 SOS: 0.96 Known C2 infrastructure⚠ C2 valid-rpg.gl.at.ply.gg

362.5 KB 9 days ago

XBinder

Portable Executable fileLoaderCrypterRAT

0706cd387a4eba2beaf3325911a4957d

MD5 0706cd387a4eba2beaf3325911a4957d · SHA256 51ef64b51fbc68f3fdffa43e7c0d89fad5a522a53d[...]067

Managed .NET PE File Layout Win 32 Exe x86 SOS: 0.85 Malicious XBinder Resource SOS: 0.93 Known C2 infrastructure⚠ C2 Artexxiz-64097.portmap.host

100.35 KB 9 days ago

XBinder

Portable Executable fileLoaderCrypterRAT

048f5b7440b085874c751745877cbaa2

MD5 048f5b7440b085874c751745877cbaa2 · SHA256 99abb19b58002ac9bd71b4d097dbcd63d41cc7e7a2[...]4fc

Malicious SOS: 0.28 Managed .NET PE File Layout Win 32 Exe x86

66.56 KB 9 days ago

.NET Reflective Loader

Rar archiveLoaderCrypter

94aa2ae25ca01cf36f833516fd13df4b

MD5 94aa2ae25ca01cf36f833516fd13df4b · SHA256 86dfa03616288994385a6aaf1106e1320d92096122[...]e0d

Reflective Loader Payload Malicious Managed .NET PE File Layout SOS: 0.84 .Net Obfuscator .Net Reactor PDB Path T1059.007 SOS: 0.33

810.27 KB 11 days ago

.NET Reflective Loader

Portable Executable fileLoaderCrypter

7a35065b803f6f05dbce13ff68e1f815

MD5 7a35065b803f6f05dbce13ff68e1f815 · SHA256 08954f9446234a2fafe12537884cfd684df960b6d2[...]526

Managed .NET PE File Layout Win 32 Exe x86 SOS: 0.84 Reflective Loader Payload Malicious T1059.007

751.1 KB 16 days ago

.NET Reflective Loader

Portable Executable fileLoaderCrypter

ba392b9ef395210c60902a8d64efe4dc

MD5 ba392b9ef395210c60902a8d64efe4dc · SHA256 08edc0df73427e600402e4f2529d5284b17ccb16f4[...]936

Managed .NET PE File Layout Win 32 Exe x86 Reflective Loader Payload Malicious SOS: 0.84 PDB Path T1059.007 .Net Obfuscator

1.08 MB 27 days ago

XBinder

Portable Executable fileLoaderCrypter

421a3d6d50dfe2c4cb472d43f0a0d547

MD5 421a3d6d50dfe2c4cb472d43f0a0d547 · SHA256 bc9f8ebefe5505eb504755f12e4e29f40b4d6ff266[...]e6b

Managed .NET PE File Layout Win 32 Exe x86 SOS: 0.18 Malicious XBinder Resource SOS: 0.99 PDB Path T1059.007

7.05 MB one month ago

XBinder

Portable Executable fileLoaderCrypterRAT

01af93c099eda51a2b46fb2108fc1e2a

MD5 01af93c099eda51a2b46fb2108fc1e2a · SHA256 f9ac08dc0d9d265ba44e7b256cc554cd9a741ca2a7[...]024

Managed .NET PE File Layout Win 32 Exe x86 Malicious SOS: 0.18 XBinder Resource SOS: 0.29 SOS: 0.23 SOS: 0.40⚠ C2 8.tcp.cpolar.top

2.27 MB one month ago

.NET Reflective Loader

Portable Executable fileLoaderCrypter

bad081341c8fb06e01a2abd0c880ce6a

MD5 bad081341c8fb06e01a2abd0c880ce6a · SHA256 080dfb9d893d2dd995e8fb81a4098a8d908c563e38[...]65a

Reflective Loader Payload Malicious SOS: 0.85 Managed .NET PE File Layout Win 32 Exe x86 SOS: 0.37 .Net Obfuscator .Net Reactor

1.04 MB one month ago

.NET Reflective Loader

Portable Executable fileLoaderCrypter

f6cbdbd16d7723f9598b910f03ba8fc5

MD5 f6cbdbd16d7723f9598b910f03ba8fc5 · SHA256 2423704f01108fc081ac5257cc60ed6ca266c3958c[...]3df

Managed .NET PE File Layout SOS: 0.85 Win 32 Exe x86 Reflective Loader Payload Malicious PDB Path .Net Obfuscator .Net Reactor

1.93 MB one month ago

.NET Reflective Loader

Portable Executable fileLoaderCrypter

36cf6c012aeaa9e956a7ee0815bee9fa

MD5 36cf6c012aeaa9e956a7ee0815bee9fa · SHA256 d8ef460c9a9914057ee4ccd122e74ca078a6b09e03[...]29d

Reflective Loader Payload Malicious SOS: 0.84 Managed .NET PE File Layout Win 32 Exe x86 SOS: 0.37 .Net Obfuscator .Net Reactor

1.11 MB one month ago

.NET Reflective Loader

Portable Executable fileLoaderCrypter

7192731baec2a32f438a994c15f8ce8b

MD5 7192731baec2a32f438a994c15f8ce8b · SHA256 b24fefefe8a95d6a765caff9b0ae40ed480dfdbfe2[...]3e3

Managed .NET PE File Layout Win 32 Exe x86 SOS: 0.68 Reflective Loader Payload Malicious PDB Path .Net Obfuscator .Net Reactor

2.09 MB 3 months ago

.NET Reflective Loader

Portable Executable fileLoaderCrypter

08c3a66548259d0589ca348c905ad3ce

MD5 08c3a66548259d0589ca348c905ad3ce · SHA256 f2145437eba0d3bb81c9b7bc905b4cd26a546a8b9a[...]cda

Managed .NET PE File Layout Win 32 Exe x86 SOS: 0.84 Reflective Loader Payload Malicious PDB Path .Net Obfuscator .Net Reactor

814.08 KB 3 months ago

.NET Reflective Loader

Portable Executable fileLoaderCrypter

183573ffe3b0c5f9188c5fab6b80ebec

MD5 183573ffe3b0c5f9188c5fab6b80ebec · SHA256 bc6d86cef1b7404823c1d830387b2c9b1289c45362[...]897

Managed .NET PE File Layout Win 32 Exe x86 SOS: 0.85 Reflective Loader Payload Malicious PDB Path .Net Obfuscator .Net Reactor

1.32 MB 3 months ago

.NET Reflective Loader

Portable Executable fileLoaderCrypter

34c3f92bf36ced3543c545065cfe6095

MD5 34c3f92bf36ced3543c545065cfe6095 · SHA256 3bce373a6a8b4a35e50d54469fe16ad22926757896[...]8fb

Managed .NET PE File Layout Win 32 Exe x86 SOS: 0.84 Reflective Loader Payload Malicious PDB Path .Net Obfuscator .Net Reactor

1.22 MB 3 months ago

.NET Reflective Loader

Portable Executable fileLoaderCrypter

df8e26f66145f175ecff2cef4ee76b01

MD5 df8e26f66145f175ecff2cef4ee76b01 · SHA256 7f1c566eee880bce9a3f80880badee548b53ab3ade[...]9df

Managed .NET PE File Layout Win 32 Exe x86 SOS: 0.83 Reflective Loader Payload Malicious PDB Path .Net Obfuscator .Net Reactor

1.21 MB 3 months ago

.NET Reflective Loader

Portable Executable fileLoaderCrypter

d245eadb186f026bc1bc70fd0e2273ac

MD5 d245eadb186f026bc1bc70fd0e2273ac · SHA256 0e4e0247476003c3efef81eba6fdc6c98876d15ae4[...]11d

Managed .NET PE File Layout Win 32 Exe x86 SOS: 0.85 Reflective Loader Payload Malicious PDB Path .Net Obfuscator .Net Reactor

1.21 MB 3 months ago

.NET Reflective Loader

Portable Executable fileLoaderCrypter

eaff05ace23686b52695ea35367725fd

MD5 eaff05ace23686b52695ea35367725fd · SHA256 81c589fae253795f2a6625709d192409df2349b929[...]ffd

Managed .NET PE File Layout Win 32 Exe x86 SOS: 0.84 Reflective Loader Payload Malicious PDB Path .Net Obfuscator .Net Reactor

1.21 MB 3 months ago

XBinder

Portable Executable fileLoaderCrypter

1e3c5aa594c8beaefb73e35b563379d7

MD5 1e3c5aa594c8beaefb73e35b563379d7 · SHA256 6aa08b6fdb70023bdd14805657a5d4e36b5733b8b4[...]f11

Managed .NET PE File Layout Win 32 Exe x86 SOS: 0.87 Malicious XBinder Resource PDB Path

28.9 MB 4 months ago

XBinder

Portable Executable fileLoaderCrypterRAT

2345b03a066a71cf32238df6f2ef8ba9

MD5 2345b03a066a71cf32238df6f2ef8ba9 · SHA256 eee6d177a92e0e870f5aa99b4366cb4559b3f0c2c6[...]c91

Managed .NET PE File Layout Win 32 Exe x86 SOS: 0.18 Malicious XBinder Resource SOS: 0.31 SOS: 0.24C2 bildad.us.org,brandy.it.com

3.32 MB 5 months ago

XBinder

Portable Executable fileLoaderCrypterRAT

23012fdfae8f3a12379e28d91663987c

MD5 23012fdfae8f3a12379e28d91663987c · SHA256 9ce0019bf338d8ee9c2760d9dd677f6f72aad8de12[...]710

Managed .NET PE File Layout Win 32 Exe x86 SOS: 0.18 Malicious XBinder Resource SOS: 0.22 SOS: 0.31C2 mestizo.co.com

4.85 MB 5 months ago

XBinder

Portable Executable fileLoaderCrypterRAT

TEST

MD5 8f8743131055e1e181f7d7c4ff527065 · SHA256 20da7c750b4c1162896320d3381121eb4bf71a19ee[...]65c

Managed .NET PE File Layout Win 32 Exe x86 SOS: 0.18 Malicious XBinder Resource SOS: 0.21 SOS: 0.24C2 admingdtg.vn,handyrenuopen.in.net,roof[...].it.comC2 admingdtg.vn,aliexpress.us.com

160.77 KB 5 months ago

XBinder

Portable Executable fileLoaderCrypter

6b3b7aa0591eda2b0739244fb9af98fb

MD5 6b3b7aa0591eda2b0739244fb9af98fb · SHA256 b6904ecafd06356ff695f268a8b40d4c8cf298e821[...]775

Managed .NET PE File Layout Win 32 Exe x86 SOS: 0.18 Malicious XBinder Resource PDB Path

7.86 MB 5 months ago

XBinder

Portable Executable fileLoaderCrypter

76d622a3a2f86e2a5e6217155a6ee1d4

MD5 76d622a3a2f86e2a5e6217155a6ee1d4 · SHA256 fc094a9cbf6b8e30b323d1b55d5b9a9a49c2d2ce34[...]fe9

Managed .NET PE File Layout Win 32 Exe x86 SOS: 0.82 Malicious PDB Path SOS: 0.21

1.61 MB 6 months ago

XBinder

Portable Executable fileLoaderCrypter

d5872083e5270ce860627c321c4a17ef

MD5 d5872083e5270ce860627c321c4a17ef · SHA256 3f8981f1a4160417e2859c31255e030de9e488eb03[...]504

Managed .NET PE File Layout Win 32 Exe x86 SOS: 0.44 Malicious

926.54 KB 6 months ago

XBinder

Portable Executable fileLoaderCrypter

669d03f9d88272fe852903f4512ef0c3

MD5 669d03f9d88272fe852903f4512ef0c3 · SHA256 8339d057c0369f28b6c71fff740206a8a2b8eca170[...]0a4

Managed .NET PE File Layout Win 32 Exe x86 .Net Obfuscator .Net Reactor SOS: 0.92 Malicious

497.15 KB 6 months ago

XBinder

Portable Executable fileLoaderCrypterRAT

ddb6c8a783b96a6014eefaaa3aba7087

MD5 ddb6c8a783b96a6014eefaaa3aba7087 · SHA256 585c1c3e0c92f1ded8d57fc754c884b0cc59fb9187[...]079

Managed .NET PE File Layout Win 32 Exe x86 SOS: 0.18 Malicious XBinder Resource PDB Path SOS: 0.63 Fody/Costura PackerC2 176.160.157.96,uchiwa5.duckdns.org,mau[...]dns.org

4.81 MB 6 months ago

XBinder

Portable Executable fileLoaderCrypter

607e7182bd7d0571d9b65c6792a4ae80

MD5 607e7182bd7d0571d9b65c6792a4ae80 · SHA256 5baa2eb4706b40736dc3e93858fadf0d15309186c5[...]4c9

Managed .NET PE File Layout Win 32 Exe x86 SOS: 0.18 Malicious XBinder Resource PDB Path SOS: 0.24 Fody/Costura Packer

2.65 MB 7 months ago

XBinder

Portable Executable fileLoaderCrypter

dd189ef86ad4736b618f348fa43341c2

MD5 dd189ef86ad4736b618f348fa43341c2 · SHA256 834fa1d96b7cf40739c4209a422a0698e1fae4c98b[...]cf1

Managed .NET PE File Layout Win 32 Exe x86 SOS: 0.18 Malicious XBinder Resource PDB Path SOS: 0.70

315.39 KB 7 months ago

XBinder

Portable Executable fileLoaderCrypterRAT

ed22eea89ee3207e18847b0110e9c124

MD5 ed22eea89ee3207e18847b0110e9c124 · SHA256 a874812d5f6518587a09b679236e71a2555702fb99[...]f3b

Managed .NET PE File Layout Win 32 Exe x86 SOS: 0.22 Malicious XBinder Resource SOS: 0.36 PDB Path SOS: 0.29

1.38 MB 8 months ago

XBinder

Portable Executable fileLoaderCrypterRAT

4da5c5736c519c4c787923f0557151a0

MD5 4da5c5736c519c4c787923f0557151a0 · SHA256 90fd5c9b21c51814a25bb2eac80a6c5d34967ab275[...]e3b

Managed .NET PE File Layout Win 32 Exe x86 SOS: 0.18 Malicious XBinder Resource PDB Path SOS: 0.20 SOS: 0.95C2 176.160.157.96,uchiwa5.duckdns.org,tru[...]dns.org

3.05 MB 8 months ago

XBinder

Portable Executable fileLoaderCrypter

880a15ca0dcba93d0f93390af98e20d1

MD5 880a15ca0dcba93d0f93390af98e20d1 · SHA256 a380d3d69ccfa937fb1dacccfbf7cb91b74957bd14[...]227

Corrupted PE File Layout Win 32 Exe x86 Blacklist VBA scripting.filesystemobject WScript.Shell WinHttp.WinHttpRequest.5.1 WinHttp.WinHttpRequest.5 ADODB.Stream

23.73 MB 8 months ago

XBinder

Portable Executable fileLoaderCrypterRAT

410cb81162ec36be6d0aaac659e69d87

MD5 410cb81162ec36be6d0aaac659e69d87 · SHA256 1527ffe43de6ba0434539f610495f129d8b120cfd5[...]fa7

Managed .NET PE File Layout Win 32 Exe x86 SOS: 0.18 Malicious XBinder Resource SOS: 0.95 PDB Path SOS: 0.20⚠ C2 adobe-cdn.duckdns.org,chelou.duckdns.or[...]157.96

2.96 MB 8 months ago

njRat

Portable Executable fileRATLoaderCrypter

09575b55813a21ae8dd8b05ba16a7042

MD5 09575b55813a21ae8dd8b05ba16a7042 · SHA256 039da7db86cb6be73b7b1a06d64540f0b74cd1ac8d[...]102

Managed .NET PE File Layout Win 32 Exe x86 SOS: 0.28 Malicious⚠ C2 0.tcp.eu.ngrok.io

67.07 KB 8 months ago

XBinder

Portable Executable fileLoaderCrypterRAT

6b53a3d1fa3f9ed9038e6a4f9ceab6cd

MD5 6b53a3d1fa3f9ed9038e6a4f9ceab6cd · SHA256 48c88582ea582d1a57a786a5d76ca82fe6ac03950f[...]1d0

Managed .NET PE File Layout Win 32 Exe x86 SOS: 0.18 Malicious XBinder Resource SOS: 0.97 PDB Path SOS: 0.20⚠ C2 adobe-cdn.duckdns.org,chelou.duckdns.or[...]157.96

3.07 MB 8 months ago

XBinder

Portable Executable fileLoaderCrypterRAT

4cc7ff30a24e18106f3f0fe5d4fdeeaa

MD5 4cc7ff30a24e18106f3f0fe5d4fdeeaa · SHA256 f03f175facb93c6f2056578e337b86a2baf4149289[...]866

Managed .NET PE File Layout Win 32 Exe x86 SOS: 0.18 Malicious XBinder Resource SOS: 0.97 PDB Path⚠ C2 adobe-cdn.duckdns.org,chelou.duckdns.or[...]157.96

14.36 MB 8 months ago

XBinder

Portable Executable fileLoaderCrypterRAT

0458eb4d882661a3e8c930093acb7b30

MD5 0458eb4d882661a3e8c930093acb7b30 · SHA256 b291b864abd5de39810dde3f77b9027d1aa3c63107[...]f1c

Managed .NET PE File Layout Win 32 Exe x86 SOS: 0.18 Malicious XBinder Resource SOS: 0.95 PDB Path SOS: 0.20⚠ C2 adobe-cdn.duckdns.org,chelou.duckdns.or[...]157.96

2.95 MB 8 months ago

XBinder

Portable Executable fileLoaderCrypterRAT

b7b0284b0a883b14741a4de2b99d0be6

MD5 b7b0284b0a883b14741a4de2b99d0be6 · SHA256 c41bdae3a8c738db247ce311db878cda9c7c4954ec[...]6bc

Managed .NET PE File Layout Win 32 Exe x86 SOS: 0.18 Malicious XBinder Resource PDB Path SOS: 0.20 SOS: 0.96⚠ C2 adobe-cdn.duckdns.org,chelou.duckdns.o[...]dns.org

3.1 MB 8 months ago

XBinder

Portable Executable fileLoaderCrypterRAT

f3aeb0b18295996edf9b14beb46f4308

MD5 f3aeb0b18295996edf9b14beb46f4308 · SHA256 a0bb1a57ce9f24c426e6a396bece5ad8ff28e04789[...]881

Managed .NET PE File Layout Win 32 Exe x86 SOS: 0.18 Malicious XBinder Resource SOS: 0.91 PDB Path SOS: 0.20⚠ C2 adobe-cdn.duckdns.org,mauvaise.duckdns.[...]157.96

3.07 MB 8 months ago

XBinder

Portable Executable fileLoaderCrypterRAT

20f26a980149598b2a7f6d3935822c62

MD5 20f26a980149598b2a7f6d3935822c62 · SHA256 587ea69283a5e2863add67c8d8ad0382910bdb57d1[...]a5e

Managed .NET PE File Layout Win 32 Exe x86 SOS: 0.18 Malicious XBinder Resource SOS: 0.97 PDB Path SOS: 0.20⚠ C2 adobe-cdn.duckdns.org,chelou.duckdns.o[...]dns.org

3.09 MB 8 months ago

XBinder

Portable Executable fileLoaderCrypter

45146b7913dac0de49c391733d38e5c8

MD5 45146b7913dac0de49c391733d38e5c8 · SHA256 c8ca721da8c1cb2ebd0a1a16a0f56af8bd86f4f281[...]86b

PE File Layout Win 32 Exe x86 PDB Path .Net Obfuscator .Net Reactor Managed .NET SOS: 0.65 Malicious

5.37 MB 8 months ago

XBinder

Portable Executable fileLoaderCrypterRAT

9ba269a5292b2baa8acb21488c834460

MD5 9ba269a5292b2baa8acb21488c834460 · SHA256 fde6dc8a8d086c22dc4a06f8162c2bcddc9727c189[...]547

Managed .NET PE File Layout Win 32 Exe x86 SOS: 0.18 Malicious XBinder Resource SOS: 0.97 PDB Path SOS: 0.20⚠ C2 adobe-cdn.duckdns.org,chelou.duckdns.o[...]dns.org

2.96 MB 8 months ago

XBinder

Portable Executable fileLoaderCrypterRAT

f16142725661cf13a11e30c4e127e4c9

MD5 f16142725661cf13a11e30c4e127e4c9 · SHA256 e2cc856a84dd0a5da86e44cca6c207d76180f21e71[...]1ad

Managed .NET PE File Layout Win 32 Exe x86 SOS: 0.18 Malicious XBinder Resource PDB Path SOS: 0.20 SOS: 0.97⚠ C2 adobe-cdn.duckdns.org,chelou.duckdns.o[...]dns.org

3.09 MB 8 months ago

XBinder

Portable Executable fileLoaderCrypterRAT

2682c661b8b2e7cb051974843d544842

MD5 2682c661b8b2e7cb051974843d544842 · SHA256 2c7db9d7977e0de038fe6cac5d224553322efd751c[...]00c

Managed .NET PE File Layout Win 32 Exe x86 SOS: 0.18 Malicious XBinder Resource SOS: 0.95⚠ C2 adobe-cdn.duckdns.org,chelou.duckdns.o[...]dns.org

3.06 MB 8 months ago

Search results