MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
7002904cb31b51029a2cc6ff6876942941efc8a1e9fb1ef72846037e9db62c68	PE32	2024-10-01 04:56:58 UTC	User Submission	CuckooSandbox/vmdetect YRP/CRC32_poly_Constant YRP/VC8_Random [+] YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 YRP/domain YRP/url YRP/nullsoft_streaming_video YRP/VMWare_Detection YRP/VirtualPC_Detection YRP/vmdetect YRP/anti_dbg YRP/win_registry YRP/win_files_operation YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature
b961b4b021e3d62ad1684411c3b280c194479e8bf8832b622f89bbe0879678fa	PE32	2024-10-01 04:56:55 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 YRP/domain [+] YRP/DebuggerException__SetConsoleCtrl YRP/escalate_priv YRP/win_token YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Borland_Cpp_DLL YRP/Borland_Cpp_for_Win32_1999 YRP/Borland YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay
f30a0f9ca25403f17d12972d2a9d9dbaf3d858e4b04ff592b74dfbe2cc9798e1	PE32	2024-10-01 04:56:47 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/IsPE32 [+] YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/HasRichSignature
644835044fcf193ae51e1151aa9e3fcc8345dea35cbbc9a4db89ec8732d53b06	PE32	2024-10-01 04:56:42 UTC	User Submission	YRP/CRC32_poly_Constant YRP/contentis_base64 YRP/domain [+] YRP/gif_bitmap YRP/gem YRP/screenshot YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/suspicious_packer_section YRP/UPX YRP/PackerUPX_CompresorGratuito_wwwupxsourceforgenet YRP/UPX_wwwupxsourceforgenet_additional YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/Netopsystems_FEAD_Optimizer_1 YRP/UPX_290_LZMA YRP/UPX_290_LZMA_Markus_Oberhumer_Laszlo_Molnar_John_Reiser YRP/UPX_290_LZMA_additional YRP/UPX_wwwupxsourceforgenet YRP/UPXv20MarkusLaszloReiser YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/UPX290LZMAMarkusOberhumerLaszloMolnarJohnReiser YRP/upx_3 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature
6b597bdb18c805a193f79d3ae6a0ea65cfcf514322d8875fc6021e5d81054e6e	PE32	2024-10-01 04:56:35 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/keylogger YRP/win_registry YRP/win_token YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay
dcfec92ba11b62f0e99193f6956b624e0d3f4f10f5315ec6875e200d9ab0e3aa	PE32	2024-10-01 04:56:32 UTC	User Submission	YRP/CRC32_poly_Constant YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/url YRP/excel_XML YRP/gem YRP/pgml YRP/amf YRP/x3d YRP/_3dxml YRP/screenshot YRP/win_registry YRP/suspicious_packer_section YRP/UPX YRP/UPX_v0896_v102_v105_v122_Delphi_stub_additional YRP/UPX_v0896_v102_v105_v122_Delphi_stub_Laszlo_Markus YRP/PackerUPX_CompresorGratuito_wwwupxsourceforgenet YRP/UPX_wwwupxsourceforgenet_additional YRP/MSLRH_V031_emadicius YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/UPX_v0896_v102_v105_v122_Delphi_stub YRP/UPX_wwwupxsourceforgenet YRP/UPXv20MarkusLaszloReiser YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/UPXProtectorv10x2 YRP/UPX20030XMarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature
6ce40efce7a459c63ccc7ca7550f25b99741dd939e20e1c09064e940ed78d9e0	PDF	2024-10-01 04:56:29 UTC	User Submission	YRP/invalid_trailer_structure YRP/contentis_base64 YRP/domain [+] YRP/url YRP/pdf YRP/Misc_Suspicious_Strings
abd6cd02eaeab8808210d1e37de47a118b52108551be8fbfa3a2b4b73ecdb8c8	PE32	2024-10-01 04:56:26 UTC	User Submission	CuckooSandbox/vmdetect YRP/CRC32_poly_Constant YRP/MD5_Constants [+] YRP/BASE64_table YRP/VC8_Random YRP/contentis_base64 YRP/domain YRP/url YRP/gem YRP/Browsers YRP/VMWare_Detection YRP/vmdetect YRP/anti_dbg YRP/network_dropper YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature
0e17a2db7a458da6267c9ab9bbd2c90e4159c2918043aa8ccebb7e0663135f7f	PDF	2024-10-01 04:56:23 UTC	User Submission	CuckooSandbox/vmdetect YRP/invalid_trailer_structure YRP/multiple_versions [+] YRP/contentis_base64 YRP/domain YRP/url YRP/pdf YRP/jpeg YRP/VMWare_Detection YRP/vmdetect
a2a319ed58f58187757f9013e13c40ef3d2a0e70dc54a503de5fd181209b1785	MS	2024-10-01 04:56:20 UTC	User Submission	CuckooSandbox/embedded_pe YRP/without_attachments YRP/with_images [+] YRP/with_urls YRP/contentis_base64 YRP/domain YRP/url YRP/rip YRP/jt YRP/Antivirus YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/android_meterpreter YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section YRP/Borland