MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
c625ad5ab8ddce738bebc3cf9b915b16fc8dc4128e3768e4ed0f15a0750157c5	PE32	2024-09-28 17:41:08 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/SEH__vba [+] YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
7a3bb274532c5e2f9d3358b44bfb07ac94db80abecc2ce1c082b9ca50f349c76	PE32	2024-09-28 17:41:03 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 YRP/domain [+] YRP/wmf YRP/keylogger YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasDebugData
c13caba0ea5f4897651b7027daf60c31040e9285e2d49d7b248e0098f43ee5a8	PE32	2024-09-28 17:40:52 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/gem [+] YRP/screenshot YRP/suspicious_packer_section YRP/UPX YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/UPX_290_LZMA YRP/UPX_290_LZMA_Markus_Oberhumer_Laszlo_Molnar_John_Reiser YRP/UPX_290_LZMA_additional YRP/UPXv20MarkusLaszloReiser YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/UPX20030XMarkusOberhumerLaszloMolnarJohnReiser YRP/UPX290LZMAMarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked
ebb0330d0e9c9ee2caa42c27b56b0047b0a38464eebfa96935629610a8c7ff76	PE32	2024-09-28 17:40:44 UTC	User Submission	YRP/Delphi_Random YRP/Delphi_CompareCall YRP/Delphi_Copy [+] YRP/Delphi_StrToInt YRP/contentis_base64 YRP/domain YRP/gem YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/keylogger YRP/win_registry YRP/win_files_operation YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/BobSoft_Mini_Delphi_BoB_BobSoft_additional YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/BobSoftMiniDelphiBoBBobSoft YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/borland_delphi
8cd6a878510977c14c7b09674f3a72c4ddd3607739c9c3817bb2086ee35a785b	PE32	2024-09-28 17:40:42 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/gem [+] YRP/wmf YRP/SEH__vba YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature
e6767102feef70a79f72fcab507bc845453f79eb280a4c1a5c9f7807c0f0446d	PE32	2024-09-28 17:40:37 UTC	User Submission	CuckooSandbox/embedded_macho YRP/CRC32_poly_Constant YRP/CRC32b_poly_Constant [+] YRP/RIPEMD160_Constants YRP/SHA1_Constants YRP/RijnDael_AES_CHAR YRP/RijnDael_AES_LONG YRP/IP YRP/maldoc_OLE_file_magic_number YRP/contentis_base64 YRP/domain YRP/url YRP/doc YRP/excel_2007 YRP/excel_2003 YRP/excel_XML YRP/corel_draw_compressed YRP/gem YRP/odg YRP/pgml YRP/rip YRP/wmf YRP/amf YRP/dgn YRP/prc YRP/xaml YRP/x3d YRP/_3dxml YRP/_3dxml_compressed YRP/_7z YRP/win_files_operation YRP/suspicious_packer_section YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDebugData
a66ec726da88972846f5986dd86de88fe86c7a1aae00aa17486d46c9c70894eb	PE32	2024-09-28 17:40:33 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 YRP/domain [+] YRP/rip YRP/IsPE32 YRP/IsWindowsGUI YRP/HasModified_DOS_Message YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
4e9377ef28562d654a41e01862884aa43d48fbf52e1c31d57071621262c9e4cb	PE32	2024-09-28 17:40:27 UTC	User Submission	YRP/CRC32_poly_Constant YRP/CRC32_table YRP/IP [+] YRP/contentis_base64 YRP/domain YRP/url YRP/excel_XML YRP/gem YRP/pgml YRP/amf YRP/prc YRP/x3d YRP/_3dxml YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_files_operation YRP/win_hook YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/BobSoft_Mini_Delphi_BoB_BobSoft_additional YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/BobSoftMiniDelphiBoBBobSoft YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature
918970bc06661a0453c882b92dcd104a3cdcdf5ac92011c645a09169316bde6c	PE32	2024-09-28 17:40:24 UTC	User Submission	YRP/Delphi_Random YRP/contentis_base64 YRP/domain [+] YRP/keylogger YRP/win_registry YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/borland_delphi
da0ef8dd26db910031e2cdbb55f3bfa4f97b3b03984001e869fa7c2add06724b	PE32	2024-09-28 17:40:21 UTC	User Submission	YRP/Big_Numbers3 YRP/contentis_base64 YRP/domain [+] YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/IsPacked