MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
cb44c9b92e522ca8d73d1b5fb2b6bac3b6ead64683a4f17f28663ae456b868ce	PE32	2024-09-28 04:31:47 UTC	User Submission	YRP/Big_Numbers0 YRP/Big_Numbers2 YRP/Advapi_Hash_API [+] YRP/CRC32_poly_Constant YRP/CRC32_table YRP/MD5_Constants YRP/IP YRP/contentis_base64 YRP/domain YRP/url YRP/gif_animated YRP/nullsoft_streaming_video YRP/excel_XML YRP/gif_bitmap YRP/gif87a_bitmap YRP/gif89a_bitmap YRP/ai_compressed YRP/gem YRP/hpgl YRP/pgml YRP/rip YRP/wmf YRP/amf YRP/prc YRP/x3d YRP/_3dxml YRP/Dropper_Strings YRP/DebuggerCheck__QueryInfo YRP/DebuggerException__SetConsoleCtrl YRP/ThreadControl__Context YRP/disable_antivirus YRP/escalate_priv YRP/screenshot YRP/win_registry YRP/win_token YRP/win_files_operation YRP/android_meterpreter YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/suspicious_packer_section YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature
7b84f4a930df432daddabaa65d5959e7d5ebcec687b0b21b1181907c6eeabc5e	PE32	2024-09-28 04:31:41 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/wmf [+] YRP/antisb_threatExpert YRP/win_files_operation YRP/Safeguard_103_Simonzh YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature
6872cf825c73fa88041aa51f7ba90db19b0dad3aaf5417cf5ecd2e14c89a5de3	PDF	2024-09-28 04:31:38 UTC	User Submission	YRP/invalid_trailer_structure YRP/multiple_versions YRP/contentis_base64 [+] YRP/domain YRP/url YRP/pdf
17ea4d87ae8da53e61095790487d8f63d70bcc9dbde5e85c759f8e339e073540	PE32	2024-09-28 04:31:31 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/excel_XML [+] YRP/x3d YRP/win_registry YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Http_API YRP/IsPE32 YRP/IsDLL YRP/HasDebugData YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
d8c258e8940e285bc658d1ff0612c96379f829a451a1e3b038406b91594e25cc	PE32	2024-09-28 04:31:24 UTC	User Submission	YRP/domain YRP/suspicious_packer_section YRP/UPX [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/IsBeyondImageSize FlorianRoth/DragonFly_APT_Sep17_3
701c417d821404fe7df33fe377b82a00ea810532b9a936e18b6a59d59db351b1	PE32	2024-09-28 04:31:21 UTC	User Submission	YRP/CRC32_poly_Constant YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/url YRP/gem YRP/screenshot YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section YRP/UPX YRP/PackerUPX_CompresorGratuito_wwwupxsourceforgenet YRP/UPX_wwwupxsourceforgenet_additional YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/UPX_v0896_v102_v105_v124_Markus_Laszlo_overlay YRP/UPX_v0896_v102_v105_v124_Markus_Laszlo_overlay_additional YRP/UPX_wwwupxsourceforgenet YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature
d7f6d82327c50e5666ad34c128d68fb9ce7a3cd188664e918b11f4b718d42af7	ASCII	2024-09-28 04:31:17 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/Dropper_Strings [+] YRP/disable_antivirus YRP/disable_taskmanager
e339ca6e4ce3a75a26dca7a59deea8a5e3d2e89b787fc56d99f1f8cbe3befbbf	Zip	2024-09-28 04:31:13 UTC	User Submission	CuckooSandbox/shellcode KevTheHermit/JavaDropper
59c455125037dd29065be9570e02bfc2387bc3d01458875ecf7c9f9c43962d6a	PE32	2024-09-28 04:30:56 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/win_files_operation [+] YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasRichSignature
20c0259226ede86e57c7d0d89f50c1a34d0ebb1b0799820bb9d3f7721cc8b6cf	PE32	2024-09-28 04:30:50 UTC	User Submission	YRP/Big_Numbers0 YRP/Big_Numbers1 YRP/contentis_base64 [+] YRP/domain YRP/url YRP/gem YRP/anti_dbg YRP/win_files_operation YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature