MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
28bff09ca7b66c4a0c5de7db5641f26ccde79ecccce14e950e80a19a909056bd	PDF	2024-09-26 15:17:54 UTC	User Submission	YRP/Big_Numbers1 YRP/invalid_trailer_structure YRP/invalid_xref_numbers [+] YRP/contentis_base64 YRP/domain YRP/url YRP/jpeg
04637070b93833f552e20e234b56c19e297ff8855b9c96e389385390935b1a55	PE32	2024-09-26 15:17:48 UTC	User Submission	YRP/Big_Numbers0 YRP/Big_Numbers1 YRP/Big_Numbers2 [+] YRP/Big_Numbers3 YRP/Big_Numbers4 YRP/Big_Numbers5 YRP/Advapi_Hash_API YRP/VC6_Random YRP/maldoc_getEIP_method_1 YRP/IP YRP/contentis_base64 YRP/domain YRP/url YRP/avi YRP/dirac YRP/anime_music_video YRP/nullsoft_streaming_video YRP/excel_XML YRP/corel_draw_graohic YRP/gem YRP/pgml YRP/wmf YRP/amf YRP/jt YRP/prc YRP/x3d YRP/_3dxml YRP/System_Tools YRP/Dropper_Strings YRP/WMI_strings YRP/DebuggerCheck__RemoteAPI YRP/DebuggerHiding__Active YRP/DebuggerException__ConsoleCtrl YRP/DebuggerException__SetConsoleCtrl YRP/anti_dbg YRP/inject_thread YRP/create_service YRP/network_tcp_listen YRP/network_http YRP/network_tcp_socket YRP/network_dga YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/sniff_audio YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/android_meterpreter YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/Visual_Cpp_2005_Release_Microsoft YRP/VC8_Microsoft_Corporation YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsConsole YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature
0f1cb5d590c67014553180071e1afe8e030e580e72949147dc602e239e0b3654	PE32	2024-09-26 15:17:45 UTC	User Submission	YRP/CRC32_poly_Constant YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/excel_XML YRP/gem YRP/pgml YRP/amf YRP/prc YRP/x3d YRP/_3dxml YRP/Misc_Suspicious_Strings YRP/escalate_priv YRP/screenshot YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/suspicious_packer_section YRP/Nullsoft_PiMP_Stub_SFX YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature
4cdc22c97a4d4d401b5deb94715956c1b99bf4339dd7be67d6fc47f96e589613	Zip	2024-09-26 15:17:33 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/png [+] YRP/excel_2007 YRP/corel_draw_compressed YRP/gem YRP/odg YRP/wmf YRP/_3dxml_compressed YRP/suspicious_packer_section
b29f66a4dc75dd15b4a2d2f164b465151c389330698dc68ef387a98fd22028c0	PE32	2024-09-26 15:17:10 UTC	User Submission	YRP/CRC32_poly_Constant YRP/RIPEMD160_Constants YRP/SHA1_Constants [+] YRP/IP YRP/contentis_base64 YRP/domain YRP/url YRP/png YRP/excel_XML YRP/gem YRP/hpgl YRP/pgml YRP/wmf YRP/amf YRP/prc YRP/xaml YRP/x3d YRP/_3dxml YRP/Dropper_Strings YRP/escalate_priv YRP/win_registry YRP/win_token YRP/win_files_operation YRP/suspicious_packer_section YRP/RAR_SFX YRP/RAR_SFX_additional YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay
e6668ef3c7583cec8d91879a08facb3f46341dae28e6db4e33896bac22696980	PE32	2024-09-26 15:17:06 UTC	User Submission	YRP/MD5_Constants YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/url YRP/png YRP/excel_XML YRP/pgml YRP/wmf YRP/amf YRP/x3d YRP/_3dxml YRP/anti_dbg YRP/network_http YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/MinGW_1
f0cdb52a49a808270c425f52c6e197cc7c0815522d287ec3e353ec71481c3393	PE32	2024-09-26 15:17:01 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/Misc_Suspicious_Strings [+] YRP/SEH__vba YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay FlorianRoth/DragonFly_APT_Sep17_3
f94760499f01c59d1b25c0e0dd601d1dc8f4b94e1e93fb8432a8d473249444e2	RAR	2024-09-26 15:16:57 UTC	User Submission	CuckooSandbox/shellcode YRP/contentis_base64 YRP/domain [+] YRP/ai_compressed YRP/android_meterpreter
9ec8cd73c1d779f7215f29a3679d3964c8061828a56e9615f0658f0205d6a818	PE32	2024-09-26 15:16:51 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/gem [+] YRP/screenshot YRP/Armadillo_v2xx_CopyMem_II_additional YRP/Microsoft_Visual_Cpp_70_MFC YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature
5922222c6190ac3c634af3e24850c9298d35cc490203338f03fd50ccc4f65215	PE32	2024-09-26 15:16:48 UTC	User Submission	CuckooSandbox/vmdetect YRP/CRC32_poly_Constant YRP/CRC32_table [+] YRP/BASE64_table YRP/maldoc_find_kernel32_base_method_1 YRP/IP YRP/contentis_base64 YRP/domain YRP/rip YRP/prc YRP/Browsers YRP/VM_Generic_Detection YRP/VMWare_Detection YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/DebuggerCheck__QueryInfo YRP/DebuggerException__ConsoleCtrl YRP/DebuggerException__SetConsoleCtrl YRP/vmdetect YRP/anti_dbg YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/sniff_audio YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Armadillo_v1xx_v2xx_additional YRP/Microsoft_Visual_Cpp_60_DLL_additional YRP/Microsoft_Visual_Cpp_v70_DLL YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_60_DLL_Debug YRP/Armadillo_v1xx_v2xx YRP/Microsoft_Visual_Cpp_v60_DLL YRP/Microsoft_Visual_Cpp_60_DLL YRP/Microsoft_Visual_Cpp_60 YRP/Armadillov1xxv2xx YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasRichSignature FlorianRoth/Backdoor_Redosdru_Jun17