MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
6fdfde467812f0236b758433fb4012eebe9bb7c9f9ab89408ead80585056291a	PE32	2024-09-30 02:41:40 UTC	User Submission	CuckooSandbox/vmdetect YRP/Advapi_Hash_API YRP/Delphi_CompareCall [+] YRP/Delphi_Copy YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 YRP/domain YRP/Browsers YRP/Sandboxie_Detection YRP/VirtualPC_Detection YRP/VirtualBox_Detection YRP/Dropper_Strings YRP/Obfuscated_Strings YRP/Check_Dlls YRP/vmdetect YRP/anti_dbg YRP/anti_dbgtools YRP/antisb_joesanbox YRP/antisb_anubis YRP/antisb_threatExpert YRP/antisb_sandboxie YRP/antisb_cwsandbox YRP/antivm_virtualbox YRP/inject_thread YRP/dyndns YRP/cred_local YRP/cred_ff YRP/cred_ie7 YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/CyberGate YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v4x YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/borland_delphi FlorianRoth/RAT_CyberGate KevTheHermit/CyberGate BAMFDetect/CyberGate
c804df29c41623f89dec19ee9c4f09e5804f7a0e97fd0f77be42a88567134d74	PDF	2024-09-30 02:41:36 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/url [+] YRP/pdf
02338bc924a6dc4cc402d7fc1064ae86044642fd44fbbc1a84d7b00eb128b987	PE32	2024-09-30 02:41:32 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain [+] YRP/ai_compressed YRP/gem YRP/anti_dbg YRP/screenshot YRP/win_files_operation YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature
c321a4ddc14d5e47272a421b1781995cbcf1c98b8de8983d829708a3de9d24e3	PE32	2024-09-30 02:41:25 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 YRP/domain [+] YRP/wmf YRP/anti_dbg YRP/screenshot YRP/win_registry YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature
1364a6bfab95afd2ad282cb760424ad5569670a3ae8cea5d7ff9a972d0e0d5a1	PE32	2024-09-30 02:41:14 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain [+] YRP/suspicious_packer_section YRP/PECompactv2xx YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature
c10816957f5f8268d421e401b747b082adefe746c39216142d44fa14082af668	Zip	2024-09-30 02:41:11 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/url [+] YRP/excel_2007 YRP/corel_draw_compressed YRP/odg YRP/_3dxml_compressed
1448d6e6f7c8c5e301e665ac38f03557c4a6b8bbf8d8df94fc619eb19617de19	PE32	2024-09-30 02:41:03 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/png YRP/excel_XML YRP/gem YRP/wmf YRP/prc YRP/x3d YRP/Misc_Suspicious_Strings YRP/DebuggerException__SetConsoleCtrl YRP/anti_dbg YRP/keylogger YRP/win_files_operation YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI YRP/HasDebugData YRP/HasRichSignature
64fe82901960610fed65a0f664ad99a6e10c1ac3acc745629eae0a9053d3841d	PE32	2024-09-30 02:40:57 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/url YRP/excel_XML YRP/gem YRP/pgml YRP/amf YRP/prc YRP/x3d YRP/_3dxml YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_files_operation YRP/win_hook YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature
b4cacd09705e66c9141f2603db21c9006af529311d17dbaa7f220e6bf427568d	ELF	2024-09-30 02:40:53 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/url [+] YRP/suspicious_packer_section
1b5e213fc12be8f5b7e199d618ef66e6f5c6f50b6144fee02a043d43aa9ad76e	PE32	2024-09-30 02:40:49 UTC	User Submission	CuckooSandbox/vmdetect YRP/domain YRP/VirtualPC_Detection [+] YRP/vmdetect YRP/antivm_vmware YRP/IsPE32 YRP/IsWindowsGUI YRP/IsBeyondImageSize YRP/HasRichSignature