MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
3f6a42bca58fa8b1ae270c5f52cf92440391df1985babdeba9bde77030f85e32	PE32	2024-09-29 05:34:27 UTC	User Submission	YRP/MD5_Constants YRP/contentis_base64 YRP/domain [+] YRP/prc YRP/Antivirus YRP/antisb_threatExpert YRP/screenshot YRP/win_mutex YRP/win_private_profile YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Typical_Malware_String_Transforms YRP/Armadillo_v1xx_v2xx_additional YRP/Microsoft_Visual_Cpp_60_DLL_additional YRP/Microsoft_Visual_Cpp_v70_DLL YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_60_DLL_Debug YRP/Armadillo_v1xx_v2xx YRP/Microsoft_Visual_Cpp_v60_DLL YRP/Microsoft_Visual_Cpp_60_DLL YRP/Microsoft_Visual_Cpp_60 YRP/Armadillov1xxv2xx YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3 FlorianRoth/Typical_Malware_String_Transforms
2b60de4f71316c1914f263981cf09e05d7c0ad23b1e90ef9bd1253b354a07ee9	PE32	2024-09-29 05:34:24 UTC	User Submission	CuckooSandbox/vmdetect YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/rip YRP/Antivirus YRP/VMWare_Detection YRP/Dropper_Strings YRP/ThreadControl__Context YRP/vmdetect YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/HasOverlay
c6b260a9a34212b5e279dc389bc5e61a88b0407e7768aeff5e8afc3142bfff5b	PE32	2024-09-29 05:34:19 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/DebuggerException__SetConsoleCtrl [+] YRP/win_files_operation YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasDebugData YRP/IsBeyondImageSize YRP/HasRichSignature
a65ce63c7d62ba14093bca59cade4b915a02218d6cddece4e53a71f9b8dac713	PE32	2024-09-29 05:34:16 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/url [+] YRP/Browsers YRP/Antivirus YRP/Dropper_Strings YRP/antisb_threatExpert YRP/network_dns YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature
0b4822491b1207eb3468689825c03c0da20a89d61d4a526b2431bc0f13012939	Zip	2024-09-29 05:34:08 UTC	User Submission	CuckooSandbox/shellcode YRP/Big_Numbers1 YRP/contentis_base64 [+] YRP/domain YRP/url YRP/png YRP/ogg YRP/gif_animated YRP/excel_2007 YRP/gif_bitmap YRP/gif89a_bitmap YRP/jpeg YRP/jpg_with_EXIF YRP/corel_draw_compressed YRP/gem YRP/hpgl YRP/odg YRP/rip YRP/prc YRP/stl YRP/_3dxml_compressed YRP/android_meterpreter YRP/suspicious_packer_section
68ac0d7529a1857f414f15d0cb88f7e1ff1a0f0bce24ec6184e6102639387146	PE32	2024-09-29 05:33:53 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/gif_bitmap YRP/gem YRP/screenshot YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section YRP/UPX YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/UPX_290_LZMA YRP/UPX_290_LZMA_Markus_Oberhumer_Laszlo_Molnar_John_Reiser YRP/UPX_290_LZMA_additional YRP/Borland YRP/UPX290LZMAMarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked
9230684c7286e574b15dc1b5b405818b0413b826e91e8211d7e66ce7552cb43c	PE32	2024-09-29 05:33:48 UTC	User Submission	YRP/CRC32_poly_Constant YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/url YRP/excel_XML YRP/pgml YRP/amf YRP/prc YRP/x3d YRP/_3dxml YRP/Browsers YRP/Misc_Suspicious_Strings YRP/escalate_priv YRP/screenshot YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/Nullsoft_PiMP_Stub_SFX YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature
961b64295a83ad99af69fb25b15e658b7015ddf1e18c0c06e8c1e3acba4af080	PE32	2024-09-29 05:33:38 UTC	User Submission	YRP/CRC32_poly_Constant YRP/contentis_base64 YRP/domain [+] YRP/suspicious_packer_section YRP/UPX YRP/PackerUPX_CompresorGratuito_wwwupxsourceforgenet YRP/UPX_wwwupxsourceforgenet_additional YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/Netopsystems_FEAD_Optimizer_1 YRP/UPX_290_LZMA YRP/UPX_290_LZMA_Markus_Oberhumer_Laszlo_Molnar_John_Reiser YRP/UPX_290_LZMA_additional YRP/UPX_wwwupxsourceforgenet YRP/UPX290LZMAMarkusOberhumerLaszloMolnarJohnReiser YRP/upx_3 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature
babf2534d3cb7fa84e7877b790afe5a88d931b2f37f37d969080a54507a917c7	PE32	2024-09-29 05:33:35 UTC	User Submission	YRP/MD5_Constants YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/url YRP/excel_XML YRP/gem YRP/pgml YRP/amf YRP/x3d YRP/_3dxml YRP/anti_dbg YRP/network_http YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/MinGW_1
85333c3e1c56eded6f6e716373eb94763566f95264f41b651f884984e082e817	PDF	2024-09-29 05:33:33 UTC	User Submission	YRP/invalid_trailer_structure YRP/contentis_base64 YRP/domain [+] YRP/url YRP/pdf YRP/Misc_Suspicious_Strings