MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
673f54920e441fbbde6d8b0e2f10d7e2103049eb118825831c9758a1a9b3e5fb	PE32	2024-09-30 15:23:05 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 YRP/domain [+] YRP/DebuggerException__SetConsoleCtrl YRP/escalate_priv YRP/win_token YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Borland_Cpp_DLL YRP/Borland_Cpp_for_Win32_1999 YRP/Borland YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay
1ad04d26d0b145d625c8e2d15c51f6b5c7c2a693d42802f257c41293e4d6525f	PE32	2024-09-30 15:23:02 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/url [+] YRP/magic_lantern_video YRP/gem YRP/wmf YRP/prc YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section YRP/UPX YRP/ACProtect_13x_14x_DLL_Risco_Software_Inc YRP/UPX_v0896_v102_v105_v122_DLL_additional YRP/UPX_v0896_v102_v105_v122 YRP/UPX_v0896_v102_v105_v122_DLL_Laszlo_Markus YRP/UPX_v0896_v102_v105_v122_DLL YRP/UPX_v0896_v102_v105_v122_additional YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature
d305c421018be9a43349a75848e2b59044321553ed6405007cbc5a56f1f4b4c0	PE32	2024-09-30 15:23:00 UTC	User Submission	CuckooSandbox/vmdetect YRP/VC8_Random YRP/IP [+] YRP/contentis_base64 YRP/domain YRP/url YRP/gem YRP/System_Tools YRP/Browsers YRP/VirtualPC_Detection YRP/SEH__vba YRP/vmdetect YRP/anti_dbg YRP/antivm_vmware YRP/inject_thread YRP/network_http YRP/win_files_operation YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature
7c1bc28d3a442a4c0f75cdeef5c2ab16f898c0ca4244b79b083a69dc117c5142	PE32	2024-09-30 15:22:57 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 YRP/domain [+] YRP/DebuggerException__SetConsoleCtrl YRP/escalate_priv YRP/win_token YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Borland_Cpp_DLL YRP/Borland_Cpp_for_Win32_1999 YRP/Borland YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay
e7a56f070c1c5019d5bc6b31f17c74191a5c2e3b6626bb2e7b8d060a96978959	PE32	2024-09-30 15:22:54 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/keylogger [+] YRP/win_registry YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/suspicious_packer_section YRP/ASPack_v212_additional YRP/ASPack_v21_additional YRP/ASProtect_V2X_DLL_Alexey_Solodovnikov YRP/ASPack_v212 YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/ASPack_v211d YRP/ASProtect_V2X_DLL_Alexey_Solodovnikov_additional YRP/ASPack_212withouth_Poly_Solodovnikov_Alexey YRP/ASPack_v212_Alexey_Solodovnikov YRP/ASPackv212AlexeySolodovnikov YRP/ASProtectV2XDLLAlexeySolodovnikov YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay
a50d6511bf43382b31b28d6f2579423ff512957cecad5d0ed5a9cb3d598d72d9	PE32	2024-09-30 15:22:52 UTC	User Submission	YRP/BASE64_table YRP/Delphi_Random YRP/Delphi_FormShow [+] YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/IP YRP/contentis_base64 YRP/domain YRP/url YRP/gem YRP/prc YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/borland_delphi
9b1a4e6bd63418704270921fdfa4b88cd4f8ad0e42acb66480092df196b2c3af	PE32	2024-09-30 15:22:40 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/DebuggerException__SetConsoleCtrl [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature
9d223e408c1bfafdf7e0b26ea0bcd428d7c1cfc59672acfa133f42d8e6619149	PE32	2024-09-30 15:22:37 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/url YRP/excel_XML YRP/gem YRP/pgml YRP/amf YRP/jt YRP/x3d YRP/_3dxml YRP/screenshot YRP/win_registry YRP/Str_Win32_Wininet_Library YRP/suspicious_packer_section YRP/UPX YRP/UPX_v0896_v102_v105_v122_Delphi_stub_additional YRP/UPX_v0896_v102_v105_v122_Delphi_stub_Laszlo_Markus YRP/UPX_wwwupxsourceforgenet_additional YRP/MSLRH_V031_emadicius YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/UPX_v0896_v102_v105_v122_Delphi_stub YRP/UPX_wwwupxsourceforgenet YRP/UPXProtectorv10x2 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay
c4ccc72cafcc7fefdc677d66dfd364cf8c484543d1a4bddfc75daee5ada4a10a	PE32	2024-09-30 15:22:31 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/win_registry [+] YRP/win_hook YRP/suspicious_packer_section YRP/PeCompact_v208_Bitsum_Technologiessignature_by_loveboom YRP/PECompact_2x_Jeremy_Collake YRP/PECompact_2xx_BitSum_Technologies YRP/PECompact_V2X_Bitsum_Technologies_additional YRP/PECompact_V2X_Bitsum_Technologies YRP/PECompact_v20_additional YRP/PeCompact_2xx_BitSum_Technologies YRP/PeCompact_253_DLL_BitSum_Technologies_additional YRP/PECompact_v20 YRP/PeCompact_253_DLL_BitSum_Technologies YRP/Armadillo_v4x YRP/PECompactV2XBitsumTechnologies YRP/PECompact2xxBitSumTechnologies YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature
a32b4a281c790e307bbfd8b803626608ba193ce186abb3b98c7f58c668929a06	PE32	2024-09-30 15:22:29 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/wmf YRP/prc YRP/Misc_Suspicious_Strings YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section YRP/Microsoft_Visual_Basic_v50 YRP/VMProtect_1704_phpbb3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature