MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
9061cd6f8c8179fa5b6df0a1e84d78e6d2ae3c40b0f44c37aafd9e1c7ce5102f	PE32	2024-09-28 22:11:11 UTC	User Submission	YRP/domain YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional [+] YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/IsPE32 YRP/IsWindowsGUI YRP/IsBeyondImageSize
3964def5119600e780c2e7ec9d7ba41b9eae989eb3c944ef24843c7416de35e7	Zip	2024-09-28 22:11:02 UTC	User Submission	CuckooSandbox/shellcode YRP/Big_Numbers1 YRP/IP [+] YRP/contentis_base64 YRP/domain YRP/url YRP/png YRP/nullsoft_streaming_video YRP/excel_2007 YRP/gif_bitmap YRP/jpeg YRP/corel_draw_compressed YRP/gem YRP/hpgl YRP/odg YRP/_3dxml_compressed YRP/android_meterpreter
59d53df949448681bd8e6338665efa84ae33f1065de2623fd49c08adc9e3c715	PE32	2024-09-28 22:10:55 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 YRP/domain [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasModified_DOS_Message YRP/HasRichSignature
32d8057b95350f30fd4acdee5d500efacf2c519046953243a3d90afb832ba7cd	PE32	2024-09-28 22:10:48 UTC	User Submission	YRP/Big_Numbers0 YRP/Big_Numbers1 YRP/CRC32_poly_Constant [+] YRP/CRC32_table YRP/MD5_Constants YRP/BASE64_table YRP/Delphi_Random YRP/Delphi_RandomRange YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/IP YRP/contentis_base64 YRP/domain YRP/url YRP/avi YRP/dirac YRP/gif_animated YRP/anime_music_video YRP/nullsoft_streaming_video YRP/excel_XML YRP/gif_bitmap YRP/gif89a_bitmap YRP/jpeg YRP/corel_draw_graohic YRP/gem YRP/pgml YRP/rip YRP/wmf YRP/amf YRP/jt YRP/prc YRP/x3d YRP/_3dxml YRP/Browsers YRP/VM_Generic_Detection YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/SEH__vba YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/android_meterpreter YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section YRP/possible_includes_base64_packed_functions YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional YRP/Microsoft_Visual_Basic_v50v60_additional YRP/Borland YRP/UPXv20MarkusLaszloReiser YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/ProtectSharewareV11eCompservCMS YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasModified_DOS_Message
e4498fa9cb1752fed64f498e3421dc6adab731c11c21f6eea9355294dd11cccb	PE32	2024-09-28 22:10:30 UTC	User Submission	YRP/Big_Numbers0 YRP/contentis_base64 YRP/domain [+] YRP/ai YRP/ai_compressed YRP/gem YRP/screenshot YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section YRP/UPX YRP/UPX_wwwupxsourceforgenet_additional YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/UPX_v0896_v102_v105_v124_Markus_Laszlo_overlay YRP/UPX_v0896_v102_v105_v124_Markus_Laszlo_overlay_additional YRP/UPX_wwwupxsourceforgenet YRP/UPXv20MarkusLaszloReiser YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked
092adbb2fbb98afe9a0d96f76386c071586da06810d28875d96343a099f14f79	PE32	2024-09-28 22:10:27 UTC	User Submission	YRP/domain YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsBeyondImageSize YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
6a88145984bab1f1e195fbaf97d49217ed152704680ca184645df7966f1bac56	PE32	2024-09-28 22:10:24 UTC	User Submission	YRP/Big_Numbers3 YRP/VC8_Random YRP/contentis_base64 [+] YRP/domain YRP/url YRP/gem YRP/Misc_Suspicious_Strings YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/Armadillo_v2xx_CopyMem_II_additional YRP/Microsoft_Visual_Cpp_70_MFC YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDebugData YRP/HasRichSignature
de0daa6cd96939474003c86bc3677baf7bac5499832d60a70ef72befae060135	Zip	2024-09-28 22:10:19 UTC	User Submission	CuckooSandbox/shellcode KevTheHermit/JavaDropper
81446de6d2f1fd6c1c14952a5fe88ea6087e05a682387481e13f4dc214551f81	PE32	2024-09-28 22:10:01 UTC	User Submission	YRP/Advapi_Hash_API YRP/contentis_base64 YRP/domain [+] YRP/url YRP/avi YRP/anime_music_video YRP/gif_bitmap YRP/corel_draw_graohic YRP/gem YRP/prc YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Armadillo_v1xx_v2xx_additional YRP/Microsoft_Visual_Cpp_v70_DLL YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_60_DLL_Debug YRP/Armadillo_v1xx_v2xx YRP/Microsoft_Visual_Cpp_v60_DLL YRP/Microsoft_Visual_Cpp_60 YRP/Armadillov1xxv2xx YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature
697b69bafecb0358580d2668fd2899db9de19546e2b75f7ab606b46220bbebc6	PE32	2024-09-28 22:09:57 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/gif_bitmap [+] YRP/gem YRP/suspicious_packer_section YRP/UPX YRP/PackerUPX_CompresorGratuito_wwwupxsourceforgenet YRP/UPX_wwwupxsourceforgenet_additional YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/InstallAnywhere_61_Zero_G_Software_Inc_additional YRP/Netopsystems_FEAD_Optimizer_1 YRP/UPX_290_LZMA YRP/UPX_290_LZMA_Markus_Oberhumer_Laszlo_Molnar_John_Reiser YRP/UPX_290_LZMA_additional YRP/UPX_wwwupxsourceforgenet YRP/InstallAnywhere_61_Zero_G_Software_Inc YRP/UPXv20MarkusLaszloReiser YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/UPX290LZMAMarkusOberhumerLaszloMolnarJohnReiser YRP/InstallAnywhere61ZeroGSoftwareInc YRP/ProtectSharewareV11eCompservCMS YRP/upx_3 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature