MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
b715d3a043f89bae4892c999c8ac3f091e5822840561d7c7188aaea16d107440	PE32	2024-09-29 09:05:04 UTC	User Submission	YRP/CRC32_poly_Constant YRP/Delphi_Copy YRP/IP [+] YRP/contentis_base64 YRP/domain YRP/url YRP/excel_XML YRP/pgml YRP/amf YRP/x3d YRP/_3dxml YRP/escalate_priv YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Borland_Delphi_40_additional YRP/Inno_Installer_v512_collides_with_Borland_Delphi_20_Overlay YRP/Inno_Installer_v512 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Inno_Setup_Module_v5 YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/borland_delphi
96201844ab3093946b2f77d45b91c987683306cf91d4dcfcb9641e532146102a	MS-DOS	2024-09-29 09:05:01 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/suspicious_packer_section [+] YRP/FSG_v133 YRP/FSG_v133_Eng_dulekxt YRP/FSG_13_additional YRP/FSG_133_Eng_dulekxt YRP/FSG_13 YRP/FSG_v133_dulekxt YRP/FSGv133Engdulekxt YRP/FSGv133 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasModified_DOS_Message FlorianRoth/DragonFly_APT_Sep17_3
6edf68a112607b413d6a420efed75bd0e2f5dbb97b257266f83c6f489760047a	PE32	2024-09-29 09:04:46 UTC	User Submission	CuckooSandbox/vmdetect YRP/Advapi_Hash_API YRP/Delphi_CompareCall [+] YRP/Delphi_Copy YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 YRP/domain YRP/nullsoft_streaming_video YRP/gem YRP/Browsers YRP/Sandboxie_Detection YRP/VirtualPC_Detection YRP/VirtualBox_Detection YRP/Dropper_Strings YRP/Obfuscated_Strings YRP/Check_Dlls YRP/vmdetect YRP/anti_dbg YRP/anti_dbgtools YRP/antisb_joesanbox YRP/antisb_anubis YRP/antisb_threatExpert YRP/antisb_sandboxie YRP/antisb_cwsandbox YRP/antivm_virtualbox YRP/inject_thread YRP/dyndns YRP/cred_local YRP/cred_ff YRP/cred_ie7 YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/CyberGate YRP/suspicious_packer_section YRP/UPX YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v4x YRP/UPXv20MarkusLaszloReiser YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/UPX20030XMarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/borland_delphi FlorianRoth/RAT_CyberGate KevTheHermit/CyberGate BAMFDetect/CyberGate
90c977de492e8cdb56e34c1bf68f0e0f201e3acc7edd139c5eb01a394b41f426	PE32	2024-09-29 09:04:38 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/url [+] YRP/wmf YRP/SEH__vba YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/IsBeyondImageSize YRP/HasRichSignature
ca8720a39f39d50c664ec270fd9aafe691e0571c9bf0e3de9903a41df1f3311c	PE32	2024-09-29 09:04:36 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/url YRP/wmf YRP/anti_dbg YRP/win_files_operation YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature
2a689aa55a73b667642d6bcbe02b877d741261fd14022226c839c6e9eb4adbe0	PE32	2024-09-29 09:04:30 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/excel_XML YRP/pgml YRP/amf YRP/x3d YRP/_3dxml YRP/suspicious_packer_section YRP/UPX YRP/UPX_v30_EXE_LZMA_Markus_Oberhumer_Laszlo_Molnar_John_Reiser_additional YRP/UPX_302 YRP/PackerUPX_CompresorGratuito_wwwupxsourceforgenet YRP/UPX_293_LZMA YRP/UPX_wwwupxsourceforgenet_additional YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/UPX_293_300_LZMA YRP/UPX_293_LZMA_additional YRP/UPX_v30_EXE_LZMA_Markus_Oberhumer_Laszlo_Molnar_John_Reiser YRP/UPX_293_300_LZMA_Markus_Oberhumer_Laszlo_Molnar_John_Reiser YRP/UPX_wwwupxsourceforgenet YRP/UPXv20MarkusLaszloReiser YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/UPX293300LZMAMarkusOberhumerLaszloMolnarJohnReiser YRP/UPX20030XMarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked FlorianRoth/DragonFly_APT_Sep17_3
140a81bc3aa14f723cf0c01a2199020408b12aa657300119698c4997c3b5836e	PE32	2024-09-29 09:04:21 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/suspicious_packer_section [+] YRP/PECompact_v110b2_additional YRP/PECompact_v14xp_additional YRP/PECompact_v14xp YRP/PECompactv14x YRP/PECompactv2xx YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature
145d74e61a74f1b2215a2d0c3ec122c1fb86d2da3f1ebf13415c99f36721a68e	PE32	2024-09-29 09:04:09 UTC	User Submission	YRP/CRC32_poly_Constant YRP/contentis_base64 YRP/domain [+] YRP/nullsoft_streaming_video YRP/gem YRP/prc YRP/Misc_Suspicious_Strings YRP/escalate_priv YRP/screenshot YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/Nullsoft_PiMP_Stub_SFX YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature
0bddd673a60d2fbee8be43a63d2283c08773880fe57ff75be1885b28b6494176	PE32	2024-09-29 09:04:01 UTC	User Submission	YRP/Delphi_FormShow YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/gem YRP/prc YRP/Dropper_Strings YRP/network_http YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/suspicious_packer_section YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/BobSoft_Mini_Delphi_BoB_BobSoft_additional YRP/Borland_Delphi_v60_v70 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/BobSoftMiniDelphiBoBBobSoft YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/borland_delphi
d35d49195f299ceed51f1f68bdcb4149095b409ff2a6a5b1e8f12b0aeecd1b76	PDF	2024-09-29 09:03:58 UTC	User Submission	YRP/invalid_trailer_structure YRP/multiple_versions YRP/contentis_base64 [+] YRP/domain YRP/url YRP/pdf