MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
bdf1f13a08e72434af07d5bdf33c8503349b35ac73aecdc760434e722931c17a	PE32	2024-09-27 10:54:17 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/RE_Tools [+] YRP/Antivirus YRP/anti_dbg YRP/anti_dbgtools YRP/win_registry YRP/win_hook YRP/suspicious_packer_section YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
2fb5f1db22efdf9bc22949e71cde93a6ccf7cb2dcdac7b1030bf4908c8ca10e4	PE32	2024-09-27 10:54:10 UTC	User Submission	YRP/Advapi_Hash_API YRP/CRC32_poly_Constant YRP/CRC32_table [+] YRP/VC8_Random YRP/maldoc_find_kernel32_base_method_1 YRP/IP YRP/contentis_base64 YRP/domain YRP/avi YRP/anime_music_video YRP/corel_draw_graohic YRP/gem YRP/wmf YRP/jt YRP/prc YRP/Misc_Suspicious_Strings YRP/DebuggerException__SetConsoleCtrl YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/network_tcp_socket YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/GenerateTLSClientHelloPacket_Test YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section YRP/Microsoft_Visual_Basic_v50 YRP/IsPE32 YRP/IsWindowsGUI YRP/HasDebugData YRP/HasRichSignature
0fccd35340edf127586c19edf7b9b899afc4244f5c7cf51a2cff99bcf620e531	PE32	2024-09-27 10:53:53 UTC	User Submission	YRP/CRC32_poly_Constant YRP/Delphi_Random YRP/Delphi_Copy [+] YRP/IP YRP/contentis_base64 YRP/domain YRP/url YRP/excel_XML YRP/pgml YRP/amf YRP/x3d YRP/_3dxml YRP/escalate_priv YRP/keylogger YRP/win_registry YRP/win_token YRP/win_files_operation YRP/suspicious_packer_section YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/borland_delphi
7158895afd08ab867b5fc5ec748d61b7f90278eb3265ac87e343ff6c48d331ba	Zip	2024-09-27 10:53:40 UTC	User Submission	CuckooSandbox/shellcode YRP/Big_Numbers1 YRP/IP [+] YRP/contentis_base64 YRP/domain YRP/url YRP/png YRP/gif_animated YRP/nullsoft_streaming_video YRP/excel_2007 YRP/gif_bitmap YRP/gif89a_bitmap YRP/jpg_with_EXIF YRP/ai_compressed YRP/corel_draw_compressed YRP/gem YRP/hpgl YRP/odg YRP/jt YRP/prc YRP/_3dxml_compressed YRP/android_meterpreter YRP/suspicious_packer_section YRP/possible_includes_base64_packed_functions
dcd22244c2b5c8414218ddb6b7f1bd06d4f2bb66129dc1a0c0abae0098363825	Zip	2024-09-27 10:53:24 UTC	User Submission	CuckooSandbox/shellcode YRP/Big_Numbers1 YRP/contentis_base64 [+] YRP/domain YRP/url YRP/png YRP/avi YRP/anime_music_video YRP/excel_2007 YRP/gif_bitmap YRP/jpeg YRP/jpg_with_EXIF YRP/ai_compressed YRP/corel_draw_graohic YRP/corel_draw_compressed YRP/gem YRP/hpgl YRP/odg YRP/wmf YRP/_3dxml_compressed YRP/android_meterpreter YRP/suspicious_packer_section YRP/JavaDropper KevTheHermit/JavaDropper
1e613ec7466ca2caf5cf4074792ab4e49bd284b064caf98dc43fb3dfa5203379	PDF	2024-09-27 10:53:12 UTC	User Submission	YRP/Big_Numbers1 YRP/invalid_trailer_structure YRP/multiple_versions [+] YRP/contentis_base64 YRP/domain YRP/url YRP/pdf YRP/jpeg
b045d317cba474484784765300e53579598c71c5e310443c52b005168d30f6a9	PE32	2024-09-27 10:53:07 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/win_files_operation [+] YRP/EZIP_v10_additional YRP/EZIP_v10 YRP/EZIPv10 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasModified_DOS_Message
8829ba6c4879af296ace84bdc4d3f7aae8899a35ff98a7a250e861764f81da71	PE32	2024-09-27 10:53:04 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/prc [+] YRP/screenshot YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/suspicious_packer_section YRP/UPX YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature
4685d8b1065bedca5d99228544a477a139adc82a9031ebb6c688e80ac1f2fc1f	PE32	2024-09-27 10:53:02 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/anti_dbg [+] YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasDebugData YRP/HasRichSignature
438658ac8573ac63a42f90423bc31c8385259af87d05c7285919ec403f818251	PE32	2024-09-27 10:52:56 UTC	User Submission	YRP/BASE64_table YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 [+] YRP/domain YRP/gem YRP/QuarianCode YRP/Quarian YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message