MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
2115579bc5d467c187059d1c68b096a1514f1ec9f3b9b829f2578704507e2cd4	PE32	2024-09-30 09:10:16 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/win_files_operation [+] YRP/Armadillo_v4x YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature
6e36ff7f485b8e95404ee99fefa0d9dab1acd0e6734b3fa8a39908cfaabc892b	PE32	2024-09-30 09:10:10 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/win_files_operation [+] YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/FASM FlorianRoth/DragonFly_APT_Sep17_3
b43fa57ab4fe4bff73d43fa34004ec2dd710b5186fc9565b80c6e3f2dc78bf91	RAR	2024-09-30 09:10:08 UTC	User Submission	CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api CuckooSandbox/shellcode [+] YRP/Big_Numbers1 YRP/CRC32_poly_Constant YRP/contentis_base64 YRP/domain YRP/url YRP/prc YRP/Misc_Suspicious_Strings YRP/escalate_priv YRP/screenshot YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/android_meterpreter
b3b5a05d2c68db1575eea6c3ca95ee29dbd5ea6860c691a33e3e546f31d72250	PE32	2024-09-30 09:10:04 UTC	User Submission	CuckooSandbox/vmdetect YRP/Big_Numbers1 YRP/IP [+] YRP/contentis_base64 YRP/domain YRP/url YRP/gem YRP/prc YRP/VMWare_Detection YRP/Dropper_Strings YRP/vmdetect YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/Armadillo_v2xx_CopyMem_II_additional YRP/Microsoft_Visual_Cpp_70_MFC YRP/IsPE32 YRP/IsWindowsGUI YRP/HasDebugData YRP/HasRichSignature
cdc5b68dddf912ec8a7ef67d11b2a2ecf7cc802913371b20674a8ed5a7cb8666	MS-DOS	2024-09-30 09:10:01 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/prc [+] YRP/Dropper_Strings YRP/escalate_priv YRP/screenshot YRP/sniff_audio YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library YRP/update_PcMain YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_v60_DLL YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasModified_DOS_Message FlorianRoth/update_PcMain
8801063b96b0ed59b4fac06af3c33dd4d275e54a7725d0d826987b6ea5a5d0c7	Composite	2024-09-30 09:09:59 UTC	User Submission	YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/maldoc_OLE_file_magic_number [+] YRP/contentis_base64 YRP/domain YRP/doc YRP/excel_2003 YRP/gem YRP/wmf YRP/dgn
6cde3a77bd0f4951c37182f45e7caa3584eca9623b43f3f3bf84948ea7e565cf	PE32	2024-09-30 09:09:56 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/rip [+] YRP/SEH__vba YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional YRP/Microsoft_Visual_Basic_v50v60_additional YRP/Petite21 YRP/ProtectSharewareV11eCompservCMS YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature
bb54474a871ff5e5ace49de3ae25c1893429e14857fe3fa8b21d3342686e21d4	PE32	2024-09-30 09:09:50 UTC	User Submission	YRP/VC8_Random YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/url YRP/gem YRP/rip YRP/prc YRP/VM_Generic_Detection YRP/Dropper_Strings YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/antivm_bios YRP/disable_antivirus YRP/screenshot YRP/win_mutex YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature
30b4872afafb2b6592dbd118b890de2e173a0107fe6f8202cde2fd076b0e7188	PE32	2024-09-30 09:09:48 UTC	User Submission	CuckooSandbox/vmdetect YRP/CRC32_poly_Constant YRP/CRC32_table [+] YRP/CRC32b_poly_Constant YRP/MD5_Constants YRP/BASE64_table YRP/IP YRP/contentis_base64 YRP/domain YRP/url YRP/excel_XML YRP/gem YRP/pgml YRP/rip YRP/wmf YRP/amf YRP/jt YRP/x3d YRP/_3dxml YRP/_7z YRP/System_Tools YRP/Browsers YRP/RE_Tools YRP/Antivirus YRP/VMWare_Detection YRP/VirtualBox_Detection YRP/Qemu_Detection YRP/vmdetect YRP/anti_dbg YRP/anti_dbgtools YRP/antivm_virtualbox YRP/antivm_vmware YRP/create_com_service YRP/escalate_priv YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/vmdetect_misc YRP/android_meterpreter YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature
69b62af4c6b8fb1d6c419f2d922973bc1df11bdc5919e15a259665cd48339c66	ASCII	2024-09-30 09:09:45 UTC	User Submission	YRP/contentis_base64 YRP/domain