MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
cdcb4acee9f2fdc2468c56f7786bfa642a3fe122ba0ce812d94a7defa353bf1d	PE32	2024-09-30 04:27:46 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/prc [+] YRP/ThreadControl__Context YRP/SEH__vectored YRP/win_private_profile YRP/win_files_operation YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasDebugData YRP/HasRichSignature
969eded08e4e4fd2cad512f8dd4ad889791a3bf29ff7ba94204712bf2009c8a2	PE32	2024-09-30 04:27:44 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/Str_Win32_Wininet_Library [+] YRP/Str_Win32_Internet_API YRP/suspicious_packer_section YRP/UPX YRP/PackerUPX_CompresorGratuito_wwwupxsourceforgenet YRP/UPX_wwwupxsourceforgenet_additional YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/UPX_v0896_v102_v105_v124_Markus_Laszlo_overlay YRP/UPX_v0896_v102_v105_v124_Markus_Laszlo_overlay_additional YRP/UPX_wwwupxsourceforgenet YRP/UPXv20MarkusLaszloReiser YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/UPX20030XMarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
e6c7d535b00ec309dfbbb0214e59ee103888f97597f8c62f34181bc0ee618168	PE32	2024-09-30 04:27:39 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/Misc_Suspicious_Strings [+] YRP/network_tcp_socket YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsConsole YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
d28c2a5d082567fc1a95080809500b7525c471b567b18aa21fd127782fcaaec4	PE32	2024-09-30 04:27:31 UTC	User Submission	YRP/Delphi_FormShow YRP/Delphi_Copy YRP/Delphi_StrToInt [+] YRP/IP YRP/contentis_base64 YRP/domain YRP/excel_XML YRP/gem YRP/pgml YRP/amf YRP/prc YRP/x3d YRP/_3dxml YRP/Dropper_Strings YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/borland_delphi
d3de46974c54ce4e236174a43d669353521ddb16a7df732b6d4a8d90718e317f	Dalvik	2024-09-30 04:27:23 UTC	User Submission	CuckooSandbox/embedded_win_api YRP/Big_Numbers1 YRP/BASE64_table [+] YRP/contentis_base64 YRP/domain YRP/url YRP/gif_bitmap YRP/rip YRP/wmf YRP/prc YRP/android_meterpreter YRP/possible_includes_base64_packed_functions
a7f2e677f990f6029fd4487c3ea14cf11b2cb3f5d9bd3c9226d6525a2d8b1937	Zip	2024-09-30 04:27:04 UTC	User Submission	CuckooSandbox/shellcode YRP/Big_Numbers1 YRP/contentis_base64 [+] YRP/domain YRP/url YRP/png YRP/gif_animated YRP/excel_2007 YRP/gif_bitmap YRP/gif89a_bitmap YRP/corel_draw_compressed YRP/odg YRP/_3dxml_compressed YRP/spreading_file
f99268b66cf8fd4585ed612a13411cd2576c55a08b523a0ed5567066c2170db1	PE32	2024-09-30 04:26:54 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/prc [+] YRP/screenshot YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/suspicious_packer_section YRP/UPX YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature
5a511d8585bca1b21ed0e5ed12c334814318aea74589b121b57e4e1522858d29	PE32	2024-09-30 04:26:52 UTC	User Submission	YRP/domain YRP/suspicious_packer_section YRP/UPX [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/IsBeyondImageSize YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
1e0fcccb0af1410bc99e7138a869a40089895c89f5ae1bbde172ebc871929f34	PE32	2024-09-30 04:26:46 UTC	User Submission	YRP/domain YRP/IsPE32 YRP/IsDLL [+] YRP/IsWindowsGUI YRP/IsPacked YRP/IsBeyondImageSize YRP/HasRichSignature
30c144f503482ec46cfcc842ee2ae604595d385755eb5634670b32623aec5c90	PDF	2024-09-30 04:26:38 UTC	User Submission	YRP/invalid_trailer_structure YRP/multiple_versions YRP/contentis_base64 [+] YRP/domain YRP/url YRP/pdf