MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
0f8a1c9d5ab9193d3349657c1811747149ef9cdc86f1c49b138d79c8ae753132	PE32	2024-09-28 11:52:40 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/Dropper_Strings [+] YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
01045c683bb23ed5c19b8c523b25fcaba3cda4bc63b0fe59bbae582419d4703d	PE32	2024-09-28 11:52:37 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain [+] YRP/ai_compressed YRP/suspicious_packer_section YRP/ThemidaWinLicense_V18X_V19X_Oreans_Technologies YRP/Themida_18xx_Oreans_Technologies YRP/ThemidaWinLicense_V18X_V19X_DLL_Oreans_Technologies YRP/ThemidaWinLicense_V1820_p_Oreans_Technologies YRP/ThemidaWinLicense_V1820_p_Oreans_Technologies_Sign_by_fly YRP/ThemidaWinLicense_V18X_V19Xnbsp_Oreans_Technologiesnbsp_nbsp_SignByfly YRP/ThemidaWinLicense_V18X_V19X_Other_Oreans_Technologies_20080131 YRP/Themida_18xx_19xx_Oreans_Technologies YRP/ThemidaWinLicense_V1802_p_Oreans_Technologies YRP/Themida_18xx_Oreans_Technologies_additional YRP/ThemidaWinLicense_V18X_V19X_Other_Oreans_Technologies_SignByfly_20080131 YRP/ThemidaWinLicense_V1802_p_Oreans_Technologies_additional YRP/ThemidaWinLicense_V18X_V2X_Oreans_Technologies_20080131 YRP/ThemidaWinLicenseV18XV19XOreansTechnologies YRP/ThemidaWinLicenseV1802OreansTechnologies YRP/Themida18xxOreansTechnologies YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature
62336cdb393e3ea2a4f0531427688204c86fe5da0fa8576f953559aa6f7bcd07	PE32	2024-09-28 11:52:32 UTC	User Submission	YRP/CRC32_poly_Constant YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/url YRP/gif_animated YRP/excel_XML YRP/gif_bitmap YRP/gif89a_bitmap YRP/gem YRP/pgml YRP/amf YRP/x3d YRP/_3dxml YRP/screenshot YRP/win_registry YRP/suspicious_packer_section YRP/UPX YRP/UPX_v0896_v102_v105_v122_Delphi_stub_additional YRP/UPX_v0896_v102_v105_v122_Delphi_stub_Laszlo_Markus YRP/PackerUPX_CompresorGratuito_wwwupxsourceforgenet YRP/UPX_wwwupxsourceforgenet_additional YRP/MSLRH_V031_emadicius YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/UPX_v0896_v102_v105_v122_Delphi_stub YRP/UPX_wwwupxsourceforgenet YRP/Borland YRP/UPXv20MarkusLaszloReiser YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/UPXProtectorv10x2 YRP/UPX20030XMarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature
02936a0b242f537678d140950ef7e30dc655f3b84258c3abe44c1ea8e7da03f4	PE32	2024-09-28 11:52:30 UTC	User Submission	CuckooSandbox/vmdetect YRP/contentis_base64 YRP/domain [+] YRP/Antivirus YRP/VirtualPC_Detection YRP/Obfuscated_Strings YRP/vmdetect YRP/win_mutex YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section YRP/UPX YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Microsoft_Visual_Cpp YRP/UPXv20MarkusLaszloReiser YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature
1c324dd416432a6ec78b43ba97db42cf818e3eab58dc97e6d65575b2f89dcd6d	PE32	2024-09-28 11:52:24 UTC	User Submission	YRP/CRC32_poly_Constant YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/prc YRP/System_Tools YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/Nullsoft_PiMP_Install_System_additional YRP/Nullsoft_PiMP_Install_System YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature
adbcc09c99291c1c5f438873cd0584b5ebc5c19ea95d71afeaf8ebe408e5a314	PE32	2024-09-28 11:52:18 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain [+] YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message FlorianRoth/DragonFly_APT_Sep17_3
9e5ff80fcd0727848d983179f2821d1a684b9a242d423940130fb690a59644d8	PE32	2024-09-28 11:52:13 UTC	User Submission	YRP/BASE64_table YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/url YRP/excel_XML YRP/gem YRP/pgml YRP/amf YRP/xaml YRP/x3d YRP/_3dxml YRP/anti_dbg YRP/win_registry YRP/win_files_operation YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature
1ba5a933eb7061b2cbb0117f93731f6ff73a56f5ce771d98ec87d2f531e6dad3	PE32	2024-09-28 11:52:10 UTC	User Submission	CuckooSandbox/vmdetect YRP/Big_Numbers1 YRP/IP [+] YRP/contentis_base64 YRP/domain YRP/url YRP/gem YRP/prc YRP/VMWare_Detection YRP/Dropper_Strings YRP/vmdetect YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/Armadillo_v2xx_CopyMem_II_additional YRP/Microsoft_Visual_Cpp_70_MFC YRP/IsPE32 YRP/IsWindowsGUI YRP/HasDebugData YRP/HasRichSignature
52dd8860fe93cc95bcb27e405bb8c33553b09ce7cbb083a0a5798c86c00430a9	RAR	2024-09-28 11:52:08 UTC	User Submission	CuckooSandbox/shellcode YRP/contentis_base64 YRP/domain [+] YRP/gem
7bb67c2063c1ef564cc13281839fb2d2ae79f2e0d95bba12117f1544dd5e7f2d	PDF	2024-09-28 11:52:01 UTC	User Submission	YRP/Big_Numbers1 YRP/invalid_trailer_structure YRP/multiple_versions [+] YRP/contentis_base64 YRP/domain YRP/url YRP/pdf YRP/jpeg