MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
2aba7798f8349ff64d8c2a0387fe0820d1dbbc2b902804ba791ef4ac7821a655	PE32	2024-10-08 00:51:54 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain [+] YRP/win_private_profile YRP/Microsoft_Visual_Basic_v50 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasModified_DOS_Message
6841abacc91bab4cb9f2cfeaaed8af963f9d5b6189f6e7349f360b1b3186ca9d	PE32	2024-10-08 00:51:51 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/url YRP/excel_XML YRP/gem YRP/pgml YRP/amf YRP/prc YRP/x3d YRP/_3dxml YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_files_operation YRP/win_hook YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/BobSoft_Mini_Delphi_BoB_BobSoft_additional YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/BobSoftMiniDelphiBoBBobSoft YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature
03ec5eeafa12c89f28935f1db07324ba8322a38d594e89ede82654fe734b63cc	PE32	2024-10-08 00:51:48 UTC	User Submission	CuckooSandbox/vmdetect YRP/CRC32_poly_Constant YRP/VC8_Random [+] YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 YRP/domain YRP/url YRP/gif_bitmap YRP/ai_compressed YRP/VMWare_Detection YRP/VirtualPC_Detection YRP/vmdetect YRP/anti_dbg YRP/win_registry YRP/win_files_operation YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature
357af9ddd68c890cc9eaf85afbcd82e5ee05cdfe3f0a96a0eb64b3bee490153d	Zip	2024-10-08 00:51:43 UTC	User Submission	CuckooSandbox/shellcode YRP/Big_Numbers1 YRP/IP [+] YRP/contentis_base64 YRP/domain YRP/url YRP/png YRP/ogg YRP/gif_animated YRP/nullsoft_streaming_video YRP/excel_2007 YRP/gif_bitmap YRP/gif89a_bitmap YRP/jpeg YRP/jpg_with_EXIF YRP/ai_compressed YRP/corel_draw_compressed YRP/gem YRP/hpgl YRP/odg YRP/rip YRP/wmf YRP/_3dxml_compressed YRP/Misc_Suspicious_Strings YRP/android_meterpreter YRP/suspicious_packer_section YRP/JavaDropper KevTheHermit/JavaDropper
a927d372a5ae6d8eb7d52ecd52e666b4aceec9f6a18ce47c3b064e8cc704c492	PE32	2024-10-08 00:51:27 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 YRP/domain [+] YRP/gem YRP/wmf YRP/DebuggerException__SetConsoleCtrl YRP/ThreadControl__Context YRP/SEH__vectored YRP/inject_thread YRP/migrate_apc YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/IsBeyondImageSize YRP/HasRichSignature
b74ad07ed20a9d1cc2ccc774a6a302f698265c4b53b95ce07726f8176c7a03b5	MS-DOS	2024-10-08 00:51:24 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/url YRP/MPRESS_V200_V20X_MATCODE_Software_20090423 YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/mpress_2_xx_x86 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasModified_DOS_Message
71be114cbed30181f363b09d703b237cfe03f59934c5552fa99fc9510264f4db	XML	2024-10-08 00:51:21 UTC	User Submission	YRP/Big_Numbers1 YRP/contentis_base64 YRP/domain [+] YRP/url YRP/excel_XML YRP/pgml YRP/rip YRP/amf YRP/stl YRP/x3d YRP/_3dxml YRP/android_meterpreter
78c33c286b47de359669c31c4b7cfb211b5ebf44ea530dc1994a6f096e417d17	PE32	2024-10-08 00:51:17 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/url YRP/excel_XML YRP/pgml YRP/amf YRP/xaml YRP/x3d YRP/_3dxml YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/win_files_operation YRP/PUP_InstallRex_AntiFWb YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature FlorianRoth/PUP_InstallRex_AntiFWb
dea1a34c0cc0c88eb0bbdea109b436612ec74c1294a1ddc2c0e8ea9ac08ab99d	PE32	2024-10-08 00:51:11 UTC	User Submission	YRP/maldoc_indirect_function_call_3 YRP/contentis_base64 YRP/domain [+] YRP/nullsoft_streaming_video YRP/excel_XML YRP/gem YRP/x3d YRP/suspicious_packer_section YRP/UPX YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/UPX_v0896_v102_v105_v124_Markus_Laszlo_overlay YRP/UPX_v0896_v102_v105_v124_Markus_Laszlo_overlay_additional YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature
72bdba3111d070a4fc187f28ee249ab469fea02b366d02ebdbbefa74656a958c	PE32	2024-10-08 00:51:03 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/prc [+] YRP/win_files_operation YRP/win_hook YRP/Armadillo_v2xx_CopyMem_II_additional YRP/Microsoft_Visual_Cpp_70_MFC YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature