MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
4354bb9d86b8b406d94b2af66fcfee801507794893c07e52c660844b04edaefd	PE32	2024-09-29 01:10:08 UTC	User Submission	YRP/domain YRP/suspicious_packer_section YRP/UPX [+] YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/IsPacked YRP/IsBeyondImageSize YRP/HasRichSignature
04a5cb762bb68721641bd5561c9ec5cbe0b8d292dcf779596169a81e0a4ef238	Zip	2024-09-29 01:10:02 UTC	User Submission	CuckooSandbox/vmdetect CuckooSandbox/shellcode YRP/Big_Numbers1 [+] YRP/IP YRP/contentis_base64 YRP/domain YRP/url YRP/png YRP/avi YRP/gif_animated YRP/anime_music_video YRP/excel_2007 YRP/gif_bitmap YRP/gif89a_bitmap YRP/jpeg YRP/ai_compressed YRP/corel_draw_graohic YRP/corel_draw_compressed YRP/gem YRP/odg YRP/wmf YRP/_3dxml_compressed YRP/VMWare_Detection YRP/vmdetect YRP/android_meterpreter YRP/suspicious_packer_section YRP/JavaDropper KevTheHermit/JavaDropper
1c74a8fd6798d42cdcc109f75b959b97fb880f6e20632000ae26107252f395ff	PE32	2024-09-29 01:09:45 UTC	User Submission	YRP/Big_Numbers1 YRP/Big_Numbers2 YRP/Big_Numbers3 [+] YRP/Big_Numbers4 YRP/Big_Numbers5 YRP/CRC32_poly_Constant YRP/CRC32_table YRP/MD5_Constants YRP/BASE64_table YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/IP YRP/contentis_base64 YRP/domain YRP/url YRP/png YRP/gif_animated YRP/excel_XML YRP/gif_bitmap YRP/gif89a_bitmap YRP/gem YRP/pgml YRP/wmf YRP/amf YRP/prc YRP/stl YRP/x3d YRP/_3dxml YRP/Misc_Suspicious_Strings YRP/anti_dbg YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/BobSoft_Mini_Delphi_BoB_BobSoft_additional YRP/Borland_Delphi_v60_v70 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/BobSoftMiniDelphiBoBBobSoft YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/borland_delphi
c8b146642f344aaac9fe87e7078bbbc1c8729f36ea4af118418d0267e8320785	PDF	2024-09-29 01:09:41 UTC	User Submission	YRP/invalid_xref_numbers YRP/contentis_base64 YRP/domain [+] YRP/url YRP/pdf
e32522926996e1a923f70e1ce1f29fd40e008f967c97f1983e9fd161eafb760d	PE32	2024-09-29 01:09:38 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/url [+] YRP/gem YRP/win_registry YRP/Armadillo_v1xx_v2xx_additional YRP/Microsoft_Visual_Cpp_v70_DLL YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_60_DLL_Debug YRP/Armadillo_v1xx_v2xx YRP/Microsoft_Visual_Cpp_v60_DLL YRP/Microsoft_Visual_Cpp_60 YRP/Armadillov1xxv2xx YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature
f685a9bd9869149f54620a7f0cbb15e4b1a788787ccf80327f680a9e09000cc1	Zip	2024-09-29 01:09:29 UTC	User Submission	YRP/Big_Numbers1 YRP/contentis_base64 YRP/domain [+] YRP/url YRP/png YRP/gif_animated YRP/nullsoft_streaming_video YRP/excel_2007 YRP/gif_bitmap YRP/gif89a_bitmap YRP/corel_draw_compressed YRP/gem YRP/odg YRP/rip YRP/wmf YRP/jt YRP/stl YRP/_3dxml_compressed YRP/android_meterpreter YRP/suspicious_packer_section YRP/JavaDropper KevTheHermit/JavaDropper
d83b58ef9b18021c56bc8008695d446dc24aae2d35c04631a94d90f8a31d3f0f	PE32	2024-09-29 01:09:05 UTC	User Submission	YRP/Advapi_Hash_API YRP/maldoc_getEIP_method_1 YRP/contentis_base64 [+] YRP/domain YRP/IsPE32 YRP/IsWindowsGUI YRP/HasModified_DOS_Message FlorianRoth/DragonFly_APT_Sep17_3
148ca51650af079182b5e959f7f254ba39a07fde69439ec2cbd69ba7b2f77aff	PDF	2024-09-29 01:09:02 UTC	User Submission	YRP/invalid_xref_numbers YRP/contentis_base64 YRP/domain
8f4a8273f305c06d4f740d85ed9a583634d09f1934cd539c6656803408c529e5	PE32	2024-09-29 01:08:56 UTC	User Submission	YRP/Big_Numbers0 YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/url YRP/avi YRP/anime_music_video YRP/corel_draw_graohic YRP/gem YRP/wmf YRP/suspicious_packer_section YRP/Armadillo_v1xx_v2xx_additional YRP/Microsoft_Visual_Cpp_60_DLL_additional YRP/Microsoft_Visual_Cpp_v70_DLL YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_60_DLL_Debug YRP/Armadillo_v1xx_v2xx YRP/Microsoft_Visual_Cpp_v60_DLL YRP/Microsoft_Visual_Cpp_60_DLL YRP/Microsoft_Visual_Cpp_60 YRP/Armadillov1xxv2xx YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasRichSignature
4f64ecb29bed2cd7a1450e3265e2ade2bd605c8bb0f48c0fe950a409b91c26f0	PE32	2024-09-29 01:08:35 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/excel_XML YRP/pgml YRP/wmf YRP/amf YRP/x3d YRP/_3dxml YRP/suspicious_packer_section YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/Armadillo_3X_5X_Silicon_Realms_Toolworks YRP/Armadillo_v430_440_Silicon_Realms_Toolworks YRP/Armadillo_v4x YRP/Armadillov430v440SiliconRealmsToolworks YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature