MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
a16ceaf2287e09dd69c8922534aa591c925fd03d3bd502c6576a2d030ba60b7e	MS-DOS	2024-09-30 09:17:06 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/url YRP/MPRESS_V200_V20X_MATCODE_Software_20090423 YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/mpress_2_xx_x86 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasModified_DOS_Message
a2a777776cde9b752b6a2a5ced504d10da818dacf21a1c19af9acc6fca053beb	PE32	2024-09-30 09:17:03 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/domain YRP/Safeguard_103_Simonzh [+] YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasModified_DOS_Message FlorianRoth/Sality_Malware_Oct16
b4bc2668567b97baac1636777c6ef0a57c557f00c2aa033ded9749d5805e184c	PE32	2024-09-30 09:17:01 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/network_tcp_socket [+] YRP/escalate_priv YRP/keylogger YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/MASMTASM YRP/TASM_MASM YRP/TASM_MASM_additional YRP/PE_Diminisher_v01_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay FlorianRoth/DragonFly_APT_Sep17_3
c7d89770957c1cf92c4304004ce8fe477ba62e82f95789162b41150b021580fa	PE32	2024-09-30 09:16:57 UTC	User Submission	YRP/Big_Numbers0 YRP/maldoc_getEIP_method_1 YRP/IP [+] YRP/contentis_base64 YRP/domain YRP/suspicious_packer_section YRP/Safeguard_103_Simonzh YRP/yodas_Protector_V1033_Ashkbiz_Danehkar_Sign_by_fly YRP/yodas_Protector_v1033_exescrcom_Ashkbiz_Danehkar_h_additional YRP/Hyings_PE_Armor_076_Hying_CCG YRP/yodas_Protector_v102b_Ashkbiz_Danehkar YRP/yodas_Protector_V1033_Ashkbiz_Danehkar YRP/yodas_Protector_v1033_exescrcom_Ashkbiz_Danehkar YRP/yodas_Protector_v1033_exescrcom_Ashkbiz_Danehkar_h YRP/Hyings_PE_Armor_075exe_Hying YRP/Hyings_PE_Armor_076_Hying_CCG_additional YRP/yodas_Protector_102b_Ashkbiz_Danehkar YRP/yodasProtectorV1033AshkbizDanehkar YRP/yodasProtectorv1033exescrcomAshkbizDanehkar YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature
1152942c3effc33ef08586a0f940213c213e18bfc8c3e9d69bd4014ac737a717	PE32	2024-09-30 09:16:54 UTC	User Submission	YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/IP [+] YRP/contentis_base64 YRP/domain YRP/excel_XML YRP/gem YRP/pgml YRP/amf YRP/prc YRP/xaml YRP/x3d YRP/_3dxml YRP/Browsers YRP/Antivirus YRP/Misc_Suspicious_Strings YRP/ThreadControl__Context YRP/anti_dbg YRP/disable_antivirus YRP/inject_thread YRP/network_tcp_socket YRP/network_dns YRP/keylogger YRP/spreading_file YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section YRP/UPX YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/borland_delphi
b7f004372bf037c0a6ef435bb01d21d852cd52155507c8cff2b37c569f3f7161	PE32	2024-09-30 09:16:51 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 YRP/domain [+] YRP/DebuggerException__SetConsoleCtrl YRP/escalate_priv YRP/win_token YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Borland_Cpp_DLL YRP/Borland_Cpp_for_Win32_1999 YRP/Borland YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay
be4c9c149cb6d0268a8e22e98b2b91af01c0bf8f48ad6e7382f369af8527461b	PDF	2024-09-30 09:16:49 UTC	User Submission	YRP/Big_Numbers2 YRP/shellcode_blob_metadata YRP/invalid_xref_numbers [+] YRP/BlackHole_v2 YRP/contentis_base64 YRP/domain YRP/url YRP/pdf
1a6681d4f91bf6cb792d193a23285734abe3ea9fe27942591b3a97910f58062f	RAR	2024-09-30 09:16:40 UTC	User Submission	YRP/domain YRP/android_meterpreter YRP/rar_with_js
aeb6a5355220b3a2fdbc5a38585bc7b0fb5eba53e3c8d8533eb41fdf34d97c2e	PE32	2024-09-30 09:16:37 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/Microsoft_Visual_Basic_v50 [+] YRP/IsPE32 YRP/IsConsole YRP/Cygwin FlorianRoth/DragonFly_APT_Sep17_3
1accbb1a35e99fb60116254dfb0cde42708ca41e8c01385699c820ace1d86604	PE32	2024-09-30 09:16:34 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/gem YRP/prc YRP/Obfuscated_Strings YRP/screenshot YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasModified_DOS_Message