MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
95913238ded88e5a1954e5414a3cc67afc64252e93e042f4ebd1709677ef0a64	PE32+	2024-09-30 11:23:38 UTC	User Submission	YRP/IP YRP/maldoc_OLE_file_magic_number YRP/contentis_base64 [+] YRP/domain YRP/url YRP/png YRP/excel_XML YRP/gem YRP/pgml YRP/wmf YRP/amf YRP/prc YRP/x3d YRP/_3dxml YRP/WMI_strings YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Microsoft_Visual_Cpp_80_DLL YRP/IsPE64 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature
d77ff9014caa59fbf1a02b31897951b46f7510802c92f2035b8e9c0a7df45116	PE32	2024-09-30 11:23:35 UTC	User Submission	YRP/CRC32_poly_Constant YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/url YRP/excel_XML YRP/gem YRP/pgml YRP/wmf YRP/amf YRP/prc YRP/x3d YRP/_3dxml YRP/escalate_priv YRP/screenshot YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/Nullsoft_PiMP_Stub_SFX YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature
f594b8cb678ed6fda96db15a02cc38423f1ab7cc611e759424e11339631f75ee	PE32	2024-09-30 11:23:33 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/Microsoft_Visual_Cpp_v50v60_MFC [+] YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
ea14afb0f9b9e610962f62e37a0b508d17ee81a55ab8ab1839bda52af5621473	PE32	2024-09-30 11:23:25 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 YRP/domain [+] YRP/prc YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature
e27f1c1a82f1e06b72c38c2d3ee2a846ba8e701920d290f78ff0c7295af3eb09	PE32	2024-09-30 11:23:23 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/url YRP/Browsers YRP/anti_dbg YRP/win_files_operation YRP/suspicious_packer_section YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDebugData YRP/HasRichSignature
ba3960afdb6e36fde89fa37b4cd3ba8d99ab7c517224317ff490c09d71340ae6	PE32	2024-09-30 11:23:20 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 YRP/domain [+] YRP/DebuggerException__SetConsoleCtrl YRP/escalate_priv YRP/win_token YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Borland_Cpp_DLL YRP/Borland_Cpp_for_Win32_1999 YRP/Borland YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay
cdec472fdf6551909b15d08cc9401eee68d18185389d80d7c9c9e9767e990c26	PE32	2024-09-30 11:23:17 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/screenshot YRP/keylogger YRP/FSG_v110_Eng_dulekxt_ YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature
b5d22fc45f0c13ae6656acac1e034a12f28d688d7a428144369587aafcb856e0	PE32	2024-09-30 11:23:14 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/DebuggerException__SetConsoleCtrl [+] YRP/escalate_priv YRP/win_token YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Borland_Cpp_DLL YRP/Borland_Cpp_for_Win32_1999 YRP/Borland YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay
ad844409c4497298c2cb11431523c27fd4d3b532d73a59282279e2f0a742571d	PE32	2024-09-30 11:23:12 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/url YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay FlorianRoth/DragonFly_APT_Sep17_3
d6ac3c305adde1bf3f3585914f57c3fb5eed1f23d3e9c4c309a9c365f5f01542	data	2024-09-30 11:23:10 UTC	User Submission	CuckooSandbox/vmdetect