MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
bd6b25345ef38e946af4f7e997db453a2014a611e111ebac7ed7c56ea43f7838	PE32	2024-09-30 09:10:34 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/Armadillo_v171 [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay
bde0cdbfca9110a01bdcddc70c6a65a86effbdfad236b216b37b50bae8009124	PE32	2024-09-30 09:10:31 UTC	User Submission	YRP/CRC32_poly_Constant YRP/CRC32_table YRP/BLOWFISH_Constants [+] YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain YRP/nullsoft_streaming_video YRP/gem YRP/prc YRP/System_Tools YRP/Misc_Suspicious_Strings YRP/ThreadControl__Context YRP/inject_thread YRP/network_udp_sock YRP/network_tcp_listen YRP/network_dropper YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/spreading_file YRP/win_token YRP/win_files_operation YRP/android_meterpreter YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/suspicious_packer_section YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasModified_DOS_Message YRP/HasRichSignature FlorianRoth/CN_Honker_T00ls_Lpk_Sethc_v4_LPK
11ef2073992c6db90ca8efb1aa6a017e59a7dfa4870280d28f43363931d5cdda	PE32	2024-09-30 09:10:29 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 YRP/domain [+] YRP/gem YRP/hpgl YRP/screenshot YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature
f4d004858329d79137701f74987b66ad89777f144890c75ad03e539ec279e8ec	PE32	2024-09-30 09:10:26 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/url [+] YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/suspicious_packer_section YRP/UPX YRP/ACProtect_13x_14x_DLL_Risco_Software_Inc YRP/UPX_v0896_v102_v105_v122_DLL_additional YRP/UPX_v0896_v102_v105_v122 YRP/UPX_v0896_v102_v105_v122_DLL_Laszlo_Markus YRP/UPX_v0896_v102_v105_v122_DLL YRP/UPX_v0896_v102_v105_v122_additional YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/IsPacked FlorianRoth/DragonFly_APT_Sep17_3
b02579ea7a9b11def2b59a83a2ebb316cce63eaac5e2ba662677e91dc9dd0696	PE32	2024-09-30 09:10:23 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/jpeg YRP/keylogger YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/suspicious_packer_section YRP/ASPack_v21 YRP/ASPack_v2001_additional YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/ASPack_v10804_additional YRP/ASPack_v21_Alexey_Solodovnikov YRP/ASPack_v10804_Hint_WIN_EP YRP/ASPack_v2000 YRP/ASPack_v2001 YRP/ASPackv21AlexeySolodovnikov YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay
b10cf51daeb77eba87b61a731b7983a83463c5e8abb1d6d9cbbff9776a4583e8	PE32	2024-09-30 09:10:21 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 YRP/domain [+] YRP/DebuggerException__SetConsoleCtrl YRP/escalate_priv YRP/win_token YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Borland_Cpp_DLL YRP/Borland_Cpp_for_Win32_1999 YRP/Borland YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay
2115579bc5d467c187059d1c68b096a1514f1ec9f3b9b829f2578704507e2cd4	PE32	2024-09-30 09:10:16 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/win_files_operation [+] YRP/Armadillo_v4x YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature
6e36ff7f485b8e95404ee99fefa0d9dab1acd0e6734b3fa8a39908cfaabc892b	PE32	2024-09-30 09:10:10 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/win_files_operation [+] YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/FASM FlorianRoth/DragonFly_APT_Sep17_3
b43fa57ab4fe4bff73d43fa34004ec2dd710b5186fc9565b80c6e3f2dc78bf91	RAR	2024-09-30 09:10:08 UTC	User Submission	CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api CuckooSandbox/shellcode [+] YRP/Big_Numbers1 YRP/CRC32_poly_Constant YRP/contentis_base64 YRP/domain YRP/url YRP/prc YRP/Misc_Suspicious_Strings YRP/escalate_priv YRP/screenshot YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/android_meterpreter
b3b5a05d2c68db1575eea6c3ca95ee29dbd5ea6860c691a33e3e546f31d72250	PE32	2024-09-30 09:10:04 UTC	User Submission	CuckooSandbox/vmdetect YRP/Big_Numbers1 YRP/IP [+] YRP/contentis_base64 YRP/domain YRP/url YRP/gem YRP/prc YRP/VMWare_Detection YRP/Dropper_Strings YRP/vmdetect YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/Armadillo_v2xx_CopyMem_II_additional YRP/Microsoft_Visual_Cpp_70_MFC YRP/IsPE32 YRP/IsWindowsGUI YRP/HasDebugData YRP/HasRichSignature