MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
180ff647ab64b8af5b924d63bb92602ed595626df257c78a1c7a10e24c700340	PE32	2024-09-30 19:03:48 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/IsPE32 [+] YRP/IsConsole FlorianRoth/DragonFly_APT_Sep17_3
dd21620b49ec6b8053eea904855775beda1969d546924b39a8c07e8d9881d18b	PE32	2024-09-30 19:03:42 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/Microsoft_Visual_Cpp_v50v60_MFC [+] YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/IsPE32 YRP/HasOverlay YRP/HasDebugData YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
b5157b95ca70e3b3873e207594aec32c7a558c2d20672f194319b12d13077c27	PE32	2024-09-30 19:03:29 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain [+] YRP/suspicious_packer_section YRP/ASPack_v212_additional YRP/ASPack_v21_additional YRP/ASProtect_V2X_DLL_Alexey_Solodovnikov YRP/ASPack_v212 YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/ASPack_v211d YRP/ASProtect_V2X_DLL_Alexey_Solodovnikov_additional YRP/ASPack_212withouth_Poly_Solodovnikov_Alexey YRP/ASPack_v212_Alexey_Solodovnikov YRP/ASPackv212AlexeySolodovnikov YRP/ASProtectV2XDLLAlexeySolodovnikov YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay
8884241c42fe4945d37f65a0c67e41b9af4b95522609440916b378d9f784cb7a	PE32	2024-09-30 19:03:25 UTC	User Submission	YRP/Big_Numbers1 YRP/Big_Numbers3 YRP/Advapi_Hash_API [+] YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/IP YRP/maldoc_OLE_file_magic_number YRP/contentis_base64 YRP/domain YRP/url YRP/png YRP/dirac YRP/nullsoft_streaming_video YRP/doc YRP/excel_2003 YRP/excel_XML YRP/gif_bitmap YRP/jpeg YRP/gem YRP/hpgl YRP/pgml YRP/rip YRP/wmf YRP/amf YRP/dgn YRP/jt YRP/prc YRP/x3d YRP/_3dxml YRP/System_Tools YRP/Browsers YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/DebuggerException__SetConsoleCtrl YRP/anti_dbg YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/spreading_file YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/android_meterpreter YRP/suspicious_packer_section YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/BobSoft_Mini_Delphi_BoB_BobSoft_additional YRP/Borland_Delphi_v60_v70 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/BobSoftMiniDelphiBoBBobSoft YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasModified_DOS_Message YRP/borland_delphi
bc58415a5039b71066aeb0b58fc592c9029c505299c1044dde130aabb53fa56b	PE32	2024-09-30 19:03:20 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain [+] YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message FlorianRoth/DragonFly_APT_Sep17_3
15eff00bfb2f5536b535bb0ebc428366c9dce0a3c7ae7048dd842ca10685b363	PDF	2024-09-30 19:03:16 UTC	User Submission	YRP/Big_Numbers1 YRP/invalid_trailer_structure YRP/multiple_versions [+] YRP/contentis_base64 YRP/domain YRP/url YRP/pdf YRP/jpeg
8e177238e0691064175fd6aba695c37be44de4d9a715a67d8cc224391336832a	PE32	2024-09-30 19:03:08 UTC	User Submission	YRP/CRC32_poly_Constant YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/gem YRP/_7z YRP/win_files_operation YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature
ea5677b6494d23f1ad0a7526ff36b1ba1169213339524c53ae7a26594014a78c	PDF	2024-09-30 19:03:04 UTC	User Submission	CuckooSandbox/vmdetect YRP/invalid_trailer_structure YRP/multiple_versions [+] YRP/contentis_base64 YRP/domain YRP/url YRP/pdf YRP/jpeg YRP/VMWare_Detection YRP/vmdetect
de9259dc986d7d1ea99caca0a41c71a3546044bf5efef95ddb2314f2d8b64eed	PE32	2024-09-30 19:03:01 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/win_registry [+] YRP/suspicious_packer_section YRP/UPX YRP/UPX_v0896_v102_v105_v122_Delphi_stub_additional YRP/UPX_v0896_v102_v105_v122_Delphi_stub_Laszlo_Markus YRP/PackerUPX_CompresorGratuito_wwwupxsourceforgenet YRP/UPX_wwwupxsourceforgenet_additional YRP/MSLRH_V031_emadicius YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/UPX_v0896_v102_v105_v122_Delphi_stub YRP/UPX_wwwupxsourceforgenet YRP/Borland YRP/UPXProtectorv10x2 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay
4d00c3d8f2ec9b76ad8459765aab667ba3f3eefc449523f066629acce92d6b2b	XML	2024-09-30 19:02:50 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/url [+] YRP/excel_XML YRP/pgml YRP/amf YRP/x3d YRP/_3dxml