MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
27ee558124fb0a0f9029b0d673e4cd9573712e825252f86bf1e7e05fe9a24011	PE32	2024-09-30 20:19:11 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/Misc_Suspicious_Strings YRP/anti_dbg YRP/network_tcp_socket YRP/Str_Win32_Winsock2_Library YRP/Visual_Cpp_2005_Release_Microsoft YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsConsole YRP/HasOverlay YRP/HasDebugData YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
1a66e5abc7f3274cf613b6aa59c251bb392e55538da9af17a71b292d589f9025	PE32	2024-09-30 20:19:07 UTC	User Submission	YRP/CRC32_poly_Constant YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/url YRP/png YRP/excel_XML YRP/pgml YRP/rip YRP/amf YRP/x3d YRP/_3dxml YRP/escalate_priv YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Borland_Delphi_40_additional YRP/Inno_Installer_v512_collides_with_Borland_Delphi_20_Overlay YRP/Inno_Installer_v512 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Inno_Setup_Module_v5 YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature
8558b09121344a0b91bdb5d6243b1eee5b053436fdf27dd97395a2a278f867a7	PE32	2024-09-30 20:19:02 UTC	User Submission	CuckooSandbox/vmdetect YRP/CRC32_poly_Constant YRP/VC8_Random [+] YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 YRP/domain YRP/url YRP/VMWare_Detection YRP/VirtualPC_Detection YRP/vmdetect YRP/anti_dbg YRP/win_registry YRP/win_files_operation YRP/suspicious_packer_section YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature
471ccb145ca813e2c03e184e104fcf936d00e8a69d6f072581cee53dfbef4e81	PE32	2024-09-30 20:18:58 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/suspicious_packer_section [+] YRP/Microsoft_Visual_Basic_v50 YRP/IsPE32 YRP/IsConsole YRP/IsPacked
c978fdc2b2bfd08034b4823293c180699eb4589aab4172d1d8598004a706217f	PE32	2024-09-30 20:18:55 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 YRP/domain [+] YRP/win_registry YRP/MingWin32_GCC_V3X YRP/MingWin32_GCC_3x YRP/MingWin32_v_h_additional YRP/MinGW_GCC_3x_additional YRP/MinGW_GCC_3x YRP/MingWin32_GCC_3x_additional YRP/MingWin32_v_h YRP/MingWin32_v YRP/MinGWGCC3x YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/MinGW_1
25d900339ea7d099bc2d5dfb2c22b540d1306c432df69a147817280d439aeb05	PE32	2024-09-30 20:18:52 UTC	User Submission	YRP/CRC32_poly_Constant YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/url YRP/excel_XML YRP/gem YRP/pgml YRP/wmf YRP/amf YRP/prc YRP/x3d YRP/_3dxml YRP/escalate_priv YRP/screenshot YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/Nullsoft_PiMP_Stub_SFX YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature
b078d1c7ea637fc51262e63c520759a04439ff641a7a01f9ea370dc161f62176	PE32+	2024-09-30 20:18:38 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/png YRP/excel_XML YRP/ai_compressed YRP/pgml YRP/wmf YRP/amf YRP/x3d YRP/_3dxml YRP/android_meterpreter YRP/IsPE64 YRP/IsWindowsGUI YRP/ImportTableIsBad
be40d8b4015e22283cd183f5c521b4149f6c6eab0eacb95893886ba3e8dada38	PE32	2024-09-30 20:18:33 UTC	User Submission	YRP/CRC32_poly_Constant YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/url YRP/gem YRP/screenshot YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section YRP/UPX YRP/PackerUPX_CompresorGratuito_wwwupxsourceforgenet YRP/UPX_wwwupxsourceforgenet_additional YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/UPX_v0896_v102_v105_v124_Markus_Laszlo_overlay YRP/UPX_v0896_v102_v105_v124_Markus_Laszlo_overlay_additional YRP/UPX_wwwupxsourceforgenet YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature
05d9c1d40fce370646abae00efc7ce44369f2417ee9d136e65779ca655dae650	PE32	2024-09-30 20:18:29 UTC	User Submission	YRP/Big_Numbers0 YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/Obfuscated_Strings YRP/Visual_Cpp_2003_DLL_Microsoft YRP/IsPE32 YRP/HasDebugData YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
05c0e88cd914ce83f893abd52948bc54003f771b3ddc9d4857409531bc6e6e2b	PE32	2024-09-30 20:18:27 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/Safeguard_103_Simonzh [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3