MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
02ce269510564a26b320229b0bf7d1fc07d995e1d2675145348204d3ee3c2037	PE32	2024-09-30 09:43:41 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/Microsoft_Visual_Cpp_v50v60_MFC [+] YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/IsPE32 FlorianRoth/DragonFly_APT_Sep17_3
ee51eed405b51d95cd9ee585e1116b925afd9d0aa6434ba3465878965634ba1c	PE32	2024-09-30 09:43:38 UTC	User Submission	YRP/TEAN YRP/maldoc_find_kernel32_base_method_1 YRP/IP [+] YRP/contentis_base64 YRP/domain YRP/url YRP/gem YRP/win_registry YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature
db4017331d42073a4d211aae1ed4c7790da9a8f8fcd6800eff7618821a34c34b	PE32	2024-09-30 09:43:31 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/gem [+] YRP/screenshot YRP/win_registry YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/suspicious_packer_section YRP/UPX YRP/ACProtect_13x_14x_DLL_Risco_Software_Inc YRP/UPX_v0896_v102_v105_v122_DLL_additional YRP/UPX_v0896_v102_v105_v122 YRP/UPX_v0896_v102_v105_v122_DLL_Laszlo_Markus YRP/UPX_v0896_v102_v105_v122_DLL YRP/UPX_v0896_v102_v105_v122_additional YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature
4160edc78039e38c8c1db78010ae8f038711bae04393dc1812eeb2a493d3f0f6	PE32	2024-09-30 09:43:28 UTC	User Submission	YRP/CRC32_poly_Constant YRP/CRC32_table YRP/VC8_Random [+] YRP/contentis_base64 YRP/domain YRP/anti_dbg YRP/win_files_operation YRP/Armadillo_v2xx_CopyMem_II_additional YRP/Microsoft_Visual_Cpp_70_MFC YRP/IsPE32 YRP/IsWindowsGUI YRP/HasDebugData YRP/IsBeyondImageSize YRP/HasRichSignature
e07432946d2dcbab1ff4dcb2e2bbaa7b1485325ea0a8ac965dee04bcd85990f5	PE32	2024-09-30 09:43:26 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/suspicious_packer_section [+] YRP/Upack_024_beta_Dwing YRP/Upack_v024_v028_Alpha_Dwing YRP/Upack_024_027_beta_028_alpha_Dwing_ YRP/Upack_024_027_beta_028_alpha_Dwing YRP/Upack_02x_Dwing YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_02x_beta_Dwing YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_v024_v028alpha_Sign_by_hot_UNP_additional YRP/Upack_v024_v028alpha_Sign_by_hot_UNP YRP/Upack_01x_020_021_024_beta_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upack_024_beta_Dwing_additional YRP/Upackv024v028AlphaDwing YRP/Upackv029Betav031BetaDwing YRP/Upack024027beta028alphaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message FlorianRoth/DragonFly_APT_Sep17_3
1efd3bcbbcced7e2696faea4eaac80c7153300806fac15607d8066d445679abe	PE32	2024-09-30 09:43:21 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/excel_XML YRP/pgml YRP/wmf YRP/amf YRP/xaml YRP/x3d YRP/_3dxml YRP/Sandboxie_Detection YRP/ThreadControl__Context YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDebugData
dd261196b7bf080017838c2446d49ef13d586f5e13559915fd84ee88a9a58bff	PE32	2024-09-30 09:43:19 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/win_mutex [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
b87e6d10338534688cc5963d2655b26e753acf3e2292ba81823b6f95953e3158	PE32	2024-09-30 09:43:16 UTC	User Submission	CuckooSandbox/vmdetect YRP/Big_Numbers0 YRP/CRC32_poly_Constant [+] YRP/CRC32_table YRP/CRC32b_poly_Constant YRP/MD5_Constants YRP/BASE64_table YRP/IP YRP/contentis_base64 YRP/domain YRP/url YRP/excel_XML YRP/gem YRP/pgml YRP/rip YRP/wmf YRP/amf YRP/jt YRP/x3d YRP/_3dxml YRP/_7z YRP/System_Tools YRP/Browsers YRP/RE_Tools YRP/Antivirus YRP/VMWare_Detection YRP/VirtualBox_Detection YRP/Qemu_Detection YRP/vmdetect YRP/anti_dbg YRP/anti_dbgtools YRP/antivm_virtualbox YRP/antivm_vmware YRP/create_com_service YRP/escalate_priv YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/vmdetect_misc YRP/android_meterpreter YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature
61ccf72acc21f6d653d5d7c8d3abc0d1d7fdb12e8a39bd5cc532c04767b4848f	PE32	2024-09-30 09:43:13 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/suspicious_packer_section [+] YRP/UPX YRP/PackerUPX_CompresorGratuito_wwwupxsourceforgenet YRP/UPX_wwwupxsourceforgenet_additional YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/UPX_v0896_v102_v105_v124_Markus_Laszlo_overlay YRP/UPX_v0896_v102_v105_v124_Markus_Laszlo_overlay_additional YRP/UPX_wwwupxsourceforgenet YRP/UPXv20MarkusLaszloReiser YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/UPX20030XMarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 YRP/IsWindowsGUI YRP/HasModified_DOS_Message
0a47d3ead8b9b8ec2c699253b5822b288c6be77cddc9e114bfae134b7d43a052	PE32	2024-09-30 09:43:11 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/IsPE32 [+] YRP/IsWindowsGUI YRP/HasOverlay