MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
aaee4554e5f043b300cd12e5329cbdd1f97765e33a55bbabd5434c2cae11e12b	PE32	2024-10-01 03:58:50 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/IsPE32 [+] YRP/IsWindowsGUI YRP/IsPacked YRP/IsBeyondImageSize
ead92375199b94924f8627895e0b1ccc2fdd4e0c296196ba2097c67c5e2945f8	MS-DOS	2024-10-01 03:58:46 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 YRP/domain [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/ImportTableIsBad YRP/HasModified_DOS_Message FlorianRoth/DragonFly_APT_Sep17_3
132ccecf321614d50c20b2393eca2ccaa21f91866f0a6af906187c18ac0842af	PE32	2024-10-01 03:58:42 UTC	User Submission	YRP/CRC32_poly_Constant YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/url YRP/png YRP/nullsoft_streaming_video YRP/excel_XML YRP/pgml YRP/amf YRP/x3d YRP/_3dxml YRP/escalate_priv YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Borland_Delphi_40_additional YRP/Inno_Installer_v512_collides_with_Borland_Delphi_20_Overlay YRP/Inno_Installer_v512 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Inno_Setup_Module_v5 YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature
77ee9c4fe3739d9636b28fa6657ddee70963ba8a945b49d29105c665defea21e	PE32	2024-10-01 03:58:40 UTC	User Submission	YRP/CRC32_poly_Constant YRP/RIPEMD160_Constants YRP/SHA1_Constants [+] YRP/IP YRP/contentis_base64 YRP/domain YRP/excel_XML YRP/pgml YRP/amf YRP/prc YRP/x3d YRP/_3dxml YRP/escalate_priv YRP/win_registry YRP/win_token YRP/win_files_operation YRP/RAR_SFX YRP/RAR_SFX_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay
65715675483578e415f818287d078926fbd74fb373ec18741224f23b95f9c6ba	PE32	2024-10-01 03:58:37 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 YRP/domain [+] YRP/DebuggerException__SetConsoleCtrl YRP/escalate_priv YRP/win_token YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Borland_Cpp_DLL YRP/Borland_Cpp_for_Win32_1999 YRP/Borland YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay
a22de8af64a97fb499ccd07b4667ab0350d500b0d1012ff125688b57088ade9e	PE32	2024-10-01 03:58:25 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/DebuggerException__SetConsoleCtrl [+] YRP/escalate_priv YRP/win_token YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Borland_Cpp_DLL YRP/Borland_Cpp_for_Win32_1999 YRP/Borland YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay
b9a7a47e7378eb06ef40908e67227c80a5d143bd498db8890b2da40f4894fe4a	PE32	2024-10-01 03:58:22 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/url YRP/excel_XML YRP/pgml YRP/wmf YRP/amf YRP/x3d YRP/_3dxml YRP/screenshot YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/suspicious_packer_section YRP/UPX YRP/PackerUPX_CompresorGratuito_wwwupxsourceforgenet YRP/UPX_wwwupxsourceforgenet_additional YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/Netopsystems_FEAD_Optimizer_1 YRP/UPX_290_LZMA YRP/UPX_290_LZMA_Markus_Oberhumer_Laszlo_Molnar_John_Reiser YRP/UPX_290_LZMA_additional YRP/UPX_wwwupxsourceforgenet YRP/UPXv20MarkusLaszloReiser YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/UPX290LZMAMarkusOberhumerLaszloMolnarJohnReiser YRP/upx_3 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature
657675851a9e0b15fb162c930db2e5d7bfb634ba33e11c01528d74fffaf51e5f	PE32	2024-10-01 03:58:19 UTC	User Submission	YRP/Advapi_Hash_API YRP/VC8_Random YRP/IP [+] YRP/contentis_base64 YRP/domain YRP/gem YRP/prc YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature
1e34f2ef1f6cd240b547cf1993fa7a99b2fa10a4b8a00276905b1cd96a9361f9	PE32	2024-10-01 03:58:17 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/suspicious_packer_section [+] YRP/Upack_024_beta_Dwing YRP/Upack_v024_v028_Alpha_Dwing YRP/Upack_024_027_beta_028_alpha_Dwing_ YRP/Upack_024_027_beta_028_alpha_Dwing YRP/Upack_02x_Dwing YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_02x_beta_Dwing YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_v024_v028alpha_Sign_by_hot_UNP_additional YRP/Upack_v024_v028alpha_Sign_by_hot_UNP YRP/Upack_01x_020_021_024_beta_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upack_024_beta_Dwing_additional YRP/Upackv024v028AlphaDwing YRP/Upackv029Betav031BetaDwing YRP/Upack024027beta028alphaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message FlorianRoth/DragonFly_APT_Sep17_3
0fb39dc17f927167b4b43d2d28b4c0c893aae767b1207bf8c30ea7275a1d7158	Java	2024-10-01 03:58:13 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/png [+] YRP/ogg YRP/gif_animated YRP/excel_2007 YRP/gif_bitmap YRP/gif89a_bitmap YRP/ai_compressed YRP/corel_draw_compressed YRP/odg YRP/wmf YRP/_3dxml_compressed YRP/android_meterpreter