MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
ebf4735a2036d9a87215fa24092c66be1798f6279fd8b2312639462945687a51	PE32	2024-09-27 13:42:22 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain [+] YRP/gem YRP/jt YRP/prc YRP/System_Tools YRP/Browsers YRP/Dropper_Strings YRP/anti_dbg YRP/disable_antivirus YRP/escalate_priv YRP/cred_local YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/Str_Win32_Wininet_Library YRP/Armadillo_v2xx_CopyMem_II_additional YRP/Microsoft_Visual_Cpp_70_MFC YRP/eXPressorv13CGSoftLabs YRP/IsPE32 YRP/IsWindowsGUI YRP/HasDebugData YRP/HasRichSignature
55928f5a5f8e1dc34d028b6ffef7ea72e8df1266a681a113dfc3f3b413af2392	PE32	2024-09-27 13:42:18 UTC	User Submission	YRP/MD5_Constants YRP/RijnDael_AES YRP/maldoc_find_kernel32_base_method_1 [+] YRP/maldoc_getEIP_method_1 YRP/IP YRP/contentis_base64 YRP/domain YRP/gem YRP/rip YRP/prc YRP/VM_Generic_Detection YRP/anti_dbg YRP/antivm_bios YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library YRP/Safeguard_103_Simonzh YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature
99bb1cd060e1a0cb91ccb8c50e75c1bdcfb1188192c1d978d91ff5b09d55115f	Zip	2024-09-27 13:42:14 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/png [+] YRP/excel_2007 YRP/corel_draw_compressed YRP/odg YRP/_3dxml_compressed
b1bb23fabf8181d0bdb8b6eb9ffc0f8c8c50637652b1d5205e96578de7d9278e	PE32	2024-09-27 13:42:05 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/suspicious_packer_section [+] YRP/Microsoft_Visual_Basic_v50 YRP/IsPE32 YRP/IsConsole YRP/IsPacked
57d7350db2c870efa1ef30918b23a716f4078596508fc06ad0e1dcdf78c349e0	PE32	2024-09-27 13:42:02 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/url YRP/jt YRP/network_tcp_socket YRP/win_mutex YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDebugData YRP/HasRichSignature
3c48a76a5d6938f153f4121872f182c0880760ee0d70087eacb8ba4b35c2d0f0	Zip	2024-09-27 13:41:56 UTC	User Submission	YRP/Big_Numbers1 YRP/Big_Numbers2 YRP/contentis_base64 [+] YRP/domain YRP/url YRP/png YRP/gif_animated YRP/excel_2007 YRP/gif_bitmap YRP/gif89a_bitmap YRP/jpeg YRP/ai_compressed YRP/corel_draw_compressed YRP/gem YRP/hpgl YRP/odg YRP/wmf YRP/_3dxml_compressed YRP/android_meterpreter YRP/suspicious_packer_section YRP/JavaDropper KevTheHermit/JavaDropper
265e8fe58aca1213b35246c3a34ebfc3d45d7b0ea5a7faddbbdef956e6ea5ab0	PE32	2024-09-27 13:41:46 UTC	User Submission	YRP/Delphi_Random YRP/Delphi_CompareCall YRP/Delphi_Copy [+] YRP/Delphi_StrToInt YRP/contentis_base64 YRP/domain YRP/gem YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/keylogger YRP/win_registry YRP/win_files_operation YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/BobSoft_Mini_Delphi_BoB_BobSoft_additional YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/BobSoftMiniDelphiBoBBobSoft YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/borland_delphi
9029653039a4840634beca04efa085cb1141b1a09e9a31a19a71be2371cff126	PE32	2024-09-27 13:41:37 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/SEH__vba YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
57cc411441f9094a4c1e68229387f56000a8227436809e6bec7e56ea9ccab4f6	PE32	2024-09-27 13:41:35 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/SEH__vba [+] YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature
91f4abdc44bd90a9f6a06866cc2c24b46dffdda9412a6f3ab64c6ff835d90419	MS-DOS	2024-09-27 13:41:32 UTC	User Submission	YRP/Advapi_Hash_API YRP/CRC32_poly_Constant YRP/maldoc_find_kernel32_base_method_1 [+] YRP/contentis_base64 YRP/domain YRP/url YRP/prc YRP/DebuggerCheck__QueryInfo YRP/ThreadControl__Context YRP/inject_thread YRP/network_http YRP/network_dns YRP/network_dga YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasModified_DOS_Message