MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
76174e36d3e853ce885b0ea1fe0b2ff0cb4226672847732ba493b67dd100185d	PE32	2024-09-29 16:35:50 UTC	User Submission	YRP/Big_Numbers1 YRP/contentis_base64 YRP/domain [+] YRP/prc YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/sniff_audio YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Wininet_Library YRP/Armadillo_v1xx_v2xx_additional YRP/Microsoft_Visual_Cpp_60_DLL_additional YRP/Microsoft_Visual_Cpp_v70_DLL YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_60_DLL_Debug YRP/Armadillo_v1xx_v2xx YRP/Microsoft_Visual_Cpp_v60_DLL YRP/Microsoft_Visual_Cpp_60_DLL YRP/Microsoft_Visual_Cpp_60 YRP/Armadillov1xxv2xx YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature
03cf84ec741375e9d904b47f3e473b110cb28d208532b500227601a8023fca62	PE32	2024-09-29 16:35:45 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain [+] YRP/keylogger YRP/win_registry YRP/suspicious_packer_section YRP/NsPack_v37_North_Star YRP/NsPack_v37_North_Star_h YRP/NsPack_v37_North_Star_h_additional YRP/NsPacK_V37_LiuXingPing_additional YRP/NSPack_3x_Liu_Xing_Ping_additional YRP/NsPacK_V37_LiuXingPing YRP/NsPack_3x_Liu_Xing_Ping YRP/NsPacKV37LiuXingPing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked
cfa55c786466707fd1f1e89e3592860d69891f11872f1e7ceb19ab7ef2eeb82b	PE32	2024-09-29 16:35:38 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/win_registry YRP/Borland_Delphi_40_additional YRP/Enigma_Protector_V11X_V15X_Sukhov_Vladimir_Serge_N_Markin YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Enigma_Protector_11X_13X_Sukhov_Vladimir_Serge_N_Markin_additional YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/BobSoft_Mini_Delphi_BoB_BobSoft_additional YRP/Enigma_Protector_11X_13X_Sukhov_Vladimir_Serge_N_Markin YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/EnigmaProtector11X13XSukhovVladimirSergeNMarkin YRP/BobSoftMiniDelphiBoBBobSoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/IsPacked
dd7a571ad9553fd29feeefba77626e99dd5bd9d6b446f4ed6d86c160da823610	data	2024-09-29 16:35:34 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/url [+] YRP/stl YRP/xaml
88bf08b4c1f286f357588384f6079d2eb51ab45f605db25f4d03db33ccd98297	PE32	2024-09-29 16:35:31 UTC	User Submission	YRP/Advapi_Hash_API YRP/MD5_Constants YRP/contentis_base64 [+] YRP/domain YRP/gem YRP/prc YRP/antisb_threatExpert YRP/screenshot YRP/win_private_profile YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Typical_Malware_String_Transforms YRP/Armadillo_v1xx_v2xx_additional YRP/Microsoft_Visual_Cpp_60_DLL_additional YRP/Microsoft_Visual_Cpp_v70_DLL YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_60_DLL_Debug YRP/Armadillo_v1xx_v2xx YRP/Microsoft_Visual_Cpp_v60_DLL YRP/Microsoft_Visual_Cpp_60_DLL YRP/Microsoft_Visual_Cpp_60 YRP/Armadillov1xxv2xx YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3 FlorianRoth/Typical_Malware_String_Transforms
4213db8e5f8559de04066ad07d2ffe1c52bcf162e54df093768ff54d3a52e9af	PE32	2024-09-29 16:35:23 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/gem [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/IsPE32
f0626fe126207918f3621ea613aada8317708da3230b555309e81bd9c44a657e	PE32	2024-09-29 16:35:20 UTC	User Submission	YRP/CRC32_poly_Constant YRP/CRC32_table YRP/CRC32b_poly_Constant [+] YRP/BASE64_table YRP/contentis_base64 YRP/domain YRP/url YRP/excel_2007 YRP/corel_draw_compressed YRP/gem YRP/odg YRP/rip YRP/jt YRP/_3dxml_compressed YRP/Browsers YRP/VM_Generic_Detection YRP/anti_dbg YRP/disable_antivirus YRP/escalate_priv YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/Str_Win32_Http_API YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature
b344eb9506b5644a1b4e2fefca9ed6ed74ae3c6041d38d96e10aee149ebc10e0	PDF	2024-09-29 16:35:18 UTC	User Submission	YRP/invalid_trailer_structure YRP/multiple_versions YRP/contentis_base64 [+] YRP/domain YRP/url YRP/pdf
4508b728e9d3762d41b679fb1e27b583aa94e0839d4b134c64c93a9aa2dc1870	PE32	2024-09-29 16:35:13 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/ThreadControl__Context [+] YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/escalate_priv YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature
1e9eacfc68eb161a6c9ad76cd7fa2fe97da1f58e84d8acf573508f16282af7c9	PE32	2024-09-29 16:35:07 UTC	User Submission	YRP/BASE64_table YRP/VC8_Random YRP/contentis_base64 [+] YRP/domain YRP/url YRP/excel_2007 YRP/corel_draw_compressed YRP/gem YRP/odg YRP/prc YRP/_3dxml_compressed YRP/System_Tools YRP/Browsers YRP/Dropper_Strings YRP/anti_dbg YRP/disable_antivirus YRP/network_dropper YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature