MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
044be518920438762598ea05fec549b853500dccba5b0e75552e0062d7bce61b	PE32	2024-09-29 15:16:20 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/prc [+] YRP/win_mutex YRP/suspicious_packer_section YRP/UPX YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/UPXv20MarkusLaszloReiser YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/UPX20030XMarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 YRP/IsWindowsGUI YRP/HasModified_DOS_Message
1c25dd0153ba4dd2b28a22627017ba93cfa50f968d9946e59551a20a55cd71bd	PE32	2024-09-29 15:16:10 UTC	User Submission	YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/contentis_base64 [+] YRP/domain YRP/win_registry YRP/win_files_operation YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_60_70 YRP/D1S1Gv11betaD1N YRP/IsPE32 YRP/IsWindowsGUI YRP/borland_delphi FlorianRoth/DragonFly_APT_Sep17_3
275398d2cc3ccff2c0db280857cb6490600dd83b611fff8e64efe5bbadb6b605	PE32	2024-09-29 15:16:07 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/nullsoft_streaming_video [+] YRP/screenshot YRP/win_registry YRP/suspicious_packer_section YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked
9bf6d8723e3bf5836597d78356a13595afb7f19a10921a9561b55c5781f81610	PE32	2024-09-29 15:16:03 UTC	User Submission	YRP/CRC32_poly_Constant YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/url YRP/excel_XML YRP/pgml YRP/amf YRP/prc YRP/x3d YRP/_3dxml YRP/escalate_priv YRP/screenshot YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/Nullsoft_PiMP_Stub_SFX YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature
74dc288a0df492e18bd7280384339dc96f7f10c262237dd00b5ff5acdffcb190	PE32	2024-09-29 15:15:59 UTC	User Submission	YRP/BASE64_table YRP/Delphi_Random YRP/Delphi_FormShow [+] YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/IP YRP/contentis_base64 YRP/domain YRP/avi YRP/anime_music_video YRP/corel_draw_graohic YRP/gem YRP/wmf YRP/prc YRP/Browsers YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/borland_delphi_dll
0ff6bb3f8758920668a168931e25e35dfac9b32d157d9da97314f4d9ee85c01d	PE32	2024-09-29 15:15:49 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain [+] YRP/url YRP/ai_compressed YRP/jt YRP/Obfuscated_Strings YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/PrivateexeProtector20SetiSoftTeam YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature
41de72b4c620c608c74f45b0ba11b0695aa21f35450d91b026372b7e2967c02b	PE32	2024-09-29 15:15:47 UTC	User Submission	YRP/BASE64_table YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/System_Tools YRP/Antivirus YRP/Dropper_Strings YRP/screenshot YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
5885f93ca00f090c32c8db81c154489111db157999fceddc66c41b80e5950044	data	2024-09-29 15:15:42 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/avi [+] YRP/anime_music_video YRP/corel_draw_graohic
3bce23caa35a3f945e78cb66b49761cfd71f12ae4b7c4fe13d551f664d4789ce	PE32	2024-09-29 15:15:40 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/screenshot [+] YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section YRP/UPX YRP/ACProtect_13x_14x_DLL_Risco_Software_Inc YRP/UPX_v0896_v102_v105_v122_DLL_additional YRP/UPX_v0896_v102_v105_v122 YRP/UPX_v0896_v102_v105_v122_DLL_Laszlo_Markus YRP/UPX_v0896_v102_v105_v122_DLL YRP/UPX_v0896_v102_v105_v122_additional YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature
1d962c8924677dfca2b0dcec70b947efd29d1c4a4a84211f08928967e2493ff5	PE32	2024-09-29 15:15:37 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 YRP/domain [+] YRP/excel_XML YRP/pgml YRP/amf YRP/x3d YRP/_3dxml YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay