MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
bd77ccd8d63d1800b9ef60849786183c484824e9c820cf554990f09a194144fd	PE32	2024-09-30 09:35:09 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/gem [+] YRP/wmf YRP/SEH__vba YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional YRP/Microsoft_Visual_Basic_v50v60_additional YRP/FSG_v110_Eng_dulekxt_Microsoft_Visual_C_Basic_NET YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature
75d0e3934df3d148496d6678274cadc88fb2b923f6c6fada7e0a15d37b32981e	PE32	2024-09-30 09:35:07 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/gem [+] YRP/wmf YRP/SEH__vba YRP/escalate_priv YRP/win_mutex YRP/win_registry YRP/win_token YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature
a5812d95b4558ef9be40089d5c7ff4a744039d4651890fd65276a015d4158eb9	PE32	2024-09-30 09:35:01 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 YRP/domain [+] YRP/Browsers YRP/Dropper_Strings YRP/DebuggerCheck__QueryInfo YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/inject_thread YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/IsPE32 YRP/IsDLL YRP/IsConsole FlorianRoth/DragonFly_APT_Sep17_3
cd0d469e3350c5ceef2c3a1b72ee0699606565116f2f9d738075a3df6433d1fd	PDF	2024-09-30 09:34:58 UTC	User Submission	CuckooSandbox/vmdetect YRP/Big_Numbers1 YRP/invalid_trailer_structure [+] YRP/multiple_versions YRP/contentis_base64 YRP/domain YRP/url YRP/pdf YRP/jpeg YRP/VMWare_Detection YRP/vmdetect
664cf45bba43b50f4a111b6da8522ec3219b2e9e0525107ca5e6d23309be8e00	PE32	2024-09-30 09:34:53 UTC	User Submission	CuckooSandbox/vmdetect YRP/CRC32_poly_Constant YRP/RIPEMD160_Constants [+] YRP/SHA1_Constants YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain YRP/prc YRP/VirtualPC_Detection YRP/vmdetect YRP/win_registry YRP/android_meterpreter YRP/Safeguard_103_Simonzh YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/EnigmaProtector1XSukhovVladimirSergeNMarkin YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature
29aa46a3dad5f5a88b80378833e028e5796be9736f1f83b0c82bb5aea41ae92a	PE32	2024-09-30 09:34:51 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/Misc_Suspicious_Strings YRP/anti_dbg YRP/network_tcp_socket YRP/Str_Win32_Winsock2_Library YRP/Visual_Cpp_2005_Release_Microsoft YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsConsole YRP/HasOverlay YRP/HasDebugData YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
0a08cc0e208ff783603fe361ecae0f37a89ce4c54ac8e9c557a7ea9f746278e8	PE32	2024-09-30 09:34:48 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/suspicious_packer_section [+] YRP/Upack_036_beta_Dwing_additional YRP/Upack_V028_V0399_Dwing_20080321 YRP/Upack_028_0399_relocated_image_base_Delphi_NET_DLL_or_something_else_Dwing_h YRP/Upack_V03X_Dwing_additional YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/WinUpack_v039_final_relocated_image_base_By_Dwing_c2005_h2_additional YRP/WinUpack_v039_final_relocated_image_base_By_Dwing_c2005_h2 YRP/Upack_028_0399_relocated_image_base_Delphi_NET_DLL_or_something_else_Dwing YRP/Upack_v028_0399_relocated_image_base_Delphi_NET_DLL_or_something_else_img_srcimagessmiliessmilegif_ YRP/Upack_Patch_or_any_Version_Sign_by_hot_UNP YRP/Upack_Patch_or_any_Version_Dwing YRP/Upack_v028_039_relocated_image_base_Delphi_NET_DLL_or_something_else_Dwing YRP/Upack_v028_039_relocated_image_base_Delphi_NET_DLL_or_something_else_Dwing_h YRP/Upack_V03X_Dwing YRP/Upack_V036_V037_DLL_Dwing YRP/Upack_V028_V0399_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_036_beta_Dwing YRP/WinUpackv039finalrelocatedimagebaseByDwingc2005h2 YRP/Upack_PatchoranyVersionDwing YRP/UpackV037Dwing YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasModified_DOS_Message
2c713e22def4c57f7668305bdbeccfa1af7fc0f8d568ca12ce453fd162ebecf8	PE32	2024-09-30 09:34:41 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/url YRP/excel_XML YRP/pgml YRP/amf YRP/xaml YRP/x3d YRP/_3dxml YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/win_files_operation YRP/PUP_InstallRex_AntiFWb YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature FlorianRoth/PUP_InstallRex_AntiFWb
07783fe38180c8535e2c9ce6d27daa46254f3584b3c0c4f37448ed83c9829dc5	PE32	2024-09-30 09:34:39 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/url YRP/excel_XML YRP/pgml YRP/amf YRP/xaml YRP/x3d YRP/_3dxml YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/win_files_operation YRP/PUP_InstallRex_AntiFWb YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature FlorianRoth/PUP_InstallRex_AntiFWb
e875cdb8f5168bd9a0f8fe471e61360f915272a45e5a858fa9be35c2d89ec11e	data	2024-09-30 09:34:36 UTC	User Submission	CuckooSandbox/vmdetect