MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
f544157af4b7e7c46e0c36b78ef98219312ed2bc9b3d7906a28f2615936f7f04	PE32	2024-09-27 08:13:49 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/wmf YRP/prc YRP/screenshot YRP/keylogger YRP/win_mutex YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasDebugData YRP/HasRichSignature
c806e84bc73aaa9ec105003ba9f7daf5e5d3a7ea936cf2671586e97c6d9256ca	Windows	2024-09-27 08:13:43 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/gif_bitmap [+] YRP/rip YRP/prc
ad11c4070f019f4a87e991e2da008f5540d19c1ae16a138cf6d00756e7a953c2	PE32	2024-09-27 08:13:32 UTC	User Submission	YRP/MD5_Constants YRP/Delphi_Random YRP/Delphi_FormShow [+] YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/IP YRP/contentis_base64 YRP/domain YRP/gem YRP/rip YRP/wmf YRP/prc YRP/System_Tools YRP/Browsers YRP/VM_Generic_Detection YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/ThreadControl__Context YRP/disable_antivirus YRP/inject_thread YRP/hijack_network YRP/create_service YRP/network_udp_sock YRP/network_tcp_listen YRP/network_dropper YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/sniff_audio YRP/spreading_share YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/DarkComet_1 YRP/DarkComet_3 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI YRP/borland_delphi FlorianRoth/RAT_DarkComet KevTheHermit/DarkComet
673984468a5c441cb496699ae8565ef1c360c633e95dfd07ca43dac68af0ef97	PDF	2024-09-27 08:13:29 UTC	User Submission	YRP/invalid_trailer_structure YRP/multiple_versions YRP/contentis_base64 [+] YRP/domain YRP/url YRP/pdf
df8c2a40c95c32cfd14666d8b595fe44df58f34784dece3ff661220ef5566527	PE32	2024-09-27 08:13:26 UTC	User Submission	YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/maldoc_find_kernel32_base_method_1 [+] YRP/contentis_base64 YRP/domain YRP/gem YRP/wmf YRP/inject_thread YRP/win_registry YRP/win_files_operation YRP/suspicious_packer_section YRP/UPX YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/UPXv20MarkusLaszloReiser YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/UPX20030XMarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 YRP/IsWindowsGUI YRP/borland_delphi
c7a28126c1763e75e69bd78452e830643a6e29283f50065d403734195f375165	Zip	2024-09-27 08:13:17 UTC	User Submission	CuckooSandbox/shellcode YRP/Big_Numbers1 YRP/IP [+] YRP/contentis_base64 YRP/domain YRP/url YRP/png YRP/avi YRP/gif_animated YRP/anime_music_video YRP/nullsoft_streaming_video YRP/excel_2007 YRP/gif_bitmap YRP/gif89a_bitmap YRP/jpeg YRP/jpg_with_EXIF YRP/corel_draw_graohic YRP/corel_draw_compressed YRP/gem YRP/hpgl YRP/odg YRP/rip YRP/wmf YRP/jt YRP/stl YRP/_3dxml_compressed YRP/android_meterpreter YRP/suspicious_packer_section YRP/JavaDropper KevTheHermit/JavaDropper
47f7f64de24a2ec62d506be2d548d922724e1b6f5afbac5753bb65254d42308e	GIF	2024-09-27 08:13:02 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/gif_bitmap YRP/stl YRP/android_meterpreter
57d4b3b8d2cfca090b5646d62a705aa2c53eb30a3f755873b9da4e569bb33db7	PE32	2024-09-27 08:12:55 UTC	User Submission	YRP/domain YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsBeyondImageSize YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
7fef64da7d4bb29ee4ab149faf34a84a1e857a70719e06517ecdf343684db7d7	RAR	2024-09-27 08:12:39 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/nullsoft_streaming_video [+] YRP/rar_with_js
8c716b3e05646c66309178edfb8c63429c25d1f475cd78d190c974dcaf65702a	PE32	2024-09-27 08:12:33 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/domain YRP/Safeguard_103_Simonzh [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasModified_DOS_Message FlorianRoth/Sality_Malware_Oct16