MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
21839b051fb149d1767960d0e4d545d65e53d266fdb67bfb23e2e141d7c63988	PE32	2024-09-28 08:19:30 UTC	User Submission	YRP/BASE64_table YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/url YRP/gem YRP/prc YRP/Browsers YRP/Dropper_Strings YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/disable_antivirus YRP/network_http YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature
fff4044f1cb4ed188acb11c7a4314fb2fce2211bf3407cc3db373a91ae812bd2	PE32	2024-09-28 08:19:25 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/url YRP/excel_XML YRP/gem YRP/pgml YRP/amf YRP/xaml YRP/x3d YRP/_3dxml YRP/anti_dbg YRP/win_private_profile YRP/win_files_operation YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature
564fb65801d99f46aa937a9269faf727860848c1060e9db98e98bdd6b43b924c	PE32	2024-09-28 08:19:23 UTC	User Submission
acdfaad6b4f8465b4a2f457e4b1484fc9f2c1203bb8a9cd069746afd55288845	PE32	2024-09-28 08:19:20 UTC	User Submission	YRP/Big_Numbers1 YRP/MD5_Constants YRP/VC8_Random [+] YRP/without_attachments YRP/without_images YRP/without_urls YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain YRP/gem YRP/DebuggerException__SetConsoleCtrl YRP/network_smtp_raw YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay
06ba1fbe39f7415311556bc028c6b8858d3ae3f79a6b7f1fe0e3a2d443bfacce	Zip	2024-09-28 08:19:10 UTC	User Submission	CuckooSandbox/shellcode YRP/contentis_base64 YRP/domain [+] YRP/png YRP/nullsoft_streaming_video YRP/excel_2007 YRP/gif_bitmap YRP/corel_draw_compressed YRP/hpgl YRP/odg YRP/_3dxml_compressed YRP/android_meterpreter YRP/suspicious_packer_section
db2761265dc43850144f493bdad45ced0ab61e6e7580b4acd66eb97a4da624fd	PE32	2024-09-28 08:19:02 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/maldoc_getEIP_method_1 YRP/contentis_base64 [+] YRP/domain YRP/Qemu_Detection YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/ImportTableIsBad FlorianRoth/DragonFly_APT_Sep17_3
74f1204af1eaf0473013fde35e3af092867f56d9dd20bda08ad5689be4873532	PDF	2024-09-28 08:18:58 UTC	User Submission	YRP/Big_Numbers1 YRP/invalid_trailer_structure YRP/multiple_versions [+] YRP/contentis_base64 YRP/domain YRP/url YRP/pdf YRP/jpeg
18b660fc4bd6359d4df3df354e303a56436de274a52e5c688688867b82962006	PE32	2024-09-28 08:18:53 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/Safeguard_103_Simonzh [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
ee21c155c7d3fe53e7205157b7f5dc784cf3ef2adcd736096538504e798be3ce	PE32	2024-09-28 08:18:48 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/domain YRP/Safeguard_103_Simonzh [+] YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasModified_DOS_Message FlorianRoth/Sality_Malware_Oct16
c43ad0b8c3c9aa6a502b82cf5e95769b68c35548dcde90c51eefecd84cdb910e	PDF	2024-09-28 08:18:45 UTC	User Submission	YRP/invalid_trailer_structure YRP/multiple_versions YRP/contentis_base64 [+] YRP/domain YRP/url YRP/pdf