MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
aa1a2c3e9071a7519d95551cc006f6b591fdd0fff72125554b38302a812f6510	PE32	2024-10-01 12:40:08 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI
c4750c8835523f6dab4f87485dc189986fbf00004a4e790dfb38cfbb463a80db	PE32	2024-10-01 12:40:03 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature
acde07d6ffdba7a14e81cd840d6bd7eeae3fcf282c104345d54301426739a01b	PE32	2024-10-01 12:40:01 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/SEH__vba [+] YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
77095cd1beb7015e1cfafa03e86fff4511ae9806b917b165b8e83ca132e8cac8	PE32	2024-10-01 12:39:58 UTC	User Submission	YRP/CRC32_poly_Constant YRP/TEAN YRP/maldoc_find_kernel32_base_method_1 [+] YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain YRP/excel_XML YRP/pgml YRP/amf YRP/prc YRP/x3d YRP/_3dxml YRP/Obfuscated_Strings YRP/network_tcp_socket YRP/network_dns YRP/screenshot YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/ExportTableIsBad
7de4c40e00da26fffce0d8443b3c7052f79133aead3b1d0114c47c3340a82131	PE32	2024-10-01 12:39:55 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/png YRP/wmf YRP/Dropper_Strings YRP/win_registry YRP/win_files_operation YRP/Safeguard_103_Simonzh YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked
b22736e25da425118b91a0b3273adf695255eac53052e86dc66d77cad4991819	PE32	2024-10-01 12:39:49 UTC	User Submission	YRP/CRC32_poly_Constant YRP/VC8_Random YRP/IP [+] YRP/contentis_base64 YRP/domain YRP/url YRP/gem YRP/prc YRP/Browsers YRP/Dropper_Strings YRP/antisb_threatExpert YRP/screenshot YRP/win_mutex YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Wininet_Library YRP/Armadillo_v1xx_v2xx_additional YRP/Microsoft_Visual_Cpp_v70_DLL YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_60_DLL_Debug YRP/Armadillo_v1xx_v2xx YRP/Microsoft_Visual_Cpp_v60_DLL YRP/Microsoft_Visual_Cpp_60 YRP/Armadillov1xxv2xx YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature
e686ad2f6acac79a76e9192492ba15073a27f3d0f175cfdf057cfe8ebc716273	PE32	2024-10-01 12:39:47 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI
6d631e5af3e97a5e0d50e13e7e415aff6b6c6cab7c35e005417b2c168c78c28d	PE32	2024-10-01 12:39:43 UTC	User Submission	YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy [+] YRP/contentis_base64 YRP/domain YRP/url YRP/jt YRP/prc YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_files_operation YRP/win_hook YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/borland_delphi
3ab65d1bec83bbc80780adb55cff14e9ce92107323c6c22414785405bf6d9f7f	MS-DOS	2024-10-01 12:39:40 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/url YRP/MPRESS_V200_V20X_MATCODE_Software_20090423 YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/mpress_2_xx_x86 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasModified_DOS_Message
6ad75f5c4aa1cb7cff5481ffa209f1c637f325ffd9c9ebf5492afc4d94df2c0d	PE32	2024-10-01 12:39:29 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay