MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
ed39b6489db45eb499cf9c007192aab37fe09f647732cadf7b5b4c0baeff3518	PE32	2024-09-30 12:51:48 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/anti_dbg YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Http_API YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDebugData YRP/HasRichSignature
e8332d49aded297ff2967f9af974856042308c1224b07cd12e1b24cd5ae14c89	PE32	2024-09-30 12:51:46 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/Microsoft_Visual_Cpp_8_additional [+] YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
542c34303a318378e88ef3c74bba9456fc1f9bb0418c33a80f22dac4e599efc2	PE32	2024-09-30 12:51:41 UTC	User Submission	YRP/Big_Numbers1 YRP/contentis_base64 YRP/domain [+] YRP/url YRP/gif_animated YRP/gif_bitmap YRP/gif89a_bitmap YRP/jpeg YRP/jpg_with_EXIF YRP/wmf YRP/Dropper_Strings YRP/SEH__vba YRP/win_registry YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature
2214fed8454c6115c2bdcab14ada2ab97ab8844419dcb6ecf266d595acf33e89	JPEG	2024-09-30 12:51:38 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/url [+] YRP/jpeg
ed41d0c3099fd54767c05dda12134f81592348e429759b698ef3cef79f88b938	PE32	2024-09-30 12:51:36 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/SEH__vba [+] YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature
d14b80ea89264d67274118203812a32c3915cbabc28389ddc53839258056e536	PE32	2024-09-30 12:51:33 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain [+] YRP/suspicious_packer_section YRP/ASPack_v212_additional YRP/ASPack_v21_additional YRP/ASProtect_V2X_DLL_Alexey_Solodovnikov YRP/ASPack_v212 YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/ASPack_v211d YRP/ASProtect_V2X_DLL_Alexey_Solodovnikov_additional YRP/ASPack_212withouth_Poly_Solodovnikov_Alexey YRP/ASPack_v212_Alexey_Solodovnikov YRP/ASPackv212AlexeySolodovnikov YRP/ASProtectV2XDLLAlexeySolodovnikov YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay
c6f34ebc7669881c0dc47438a264f32afcecf34478df92e0ce35297030c42933	MS-DOS	2024-09-30 12:51:31 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/suspicious_packer_section [+] YRP/FSG_v20_additional YRP/FSG_20_bartxt YRP/FSG_v20_bartxt YRP/FSG_v20 YRP/Borland YRP/FSGv20bartxt YRP/FSGv20 YRP/D1S1Gv11betaD1N YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasModified_DOS_Message FlorianRoth/DragonFly_APT_Sep17_3
addcf543fa6ee26c4eebb87448413e6b60abcd3a80c3e1df9fbbf84090aaef2c	PE32	2024-09-30 12:51:25 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain [+] YRP/anti_dbg YRP/escalate_priv YRP/win_registry YRP/win_token YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasDebugData YRP/HasRichSignature
4cf609ac0fc235a90f3f9488ead29a36fb9cd020b16fe3829a301c8fb75fbed7	MS-DOS	2024-09-30 12:51:22 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/url YRP/MPRESS_V200_V20X_MATCODE_Software_20090423 YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/mpress_2_xx_x86 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasModified_DOS_Message
448a1d034ae2fffaf2e1e6fc2a9dcda4ab271712154032e5ff508dc69750113a	PE32	2024-09-30 12:51:19 UTC	User Submission	YRP/CRC32_poly_Constant YRP/CRC32_table YRP/CRC32b_poly_Constant [+] YRP/VC8_Random YRP/maldoc_getEIP_method_1 YRP/IP YRP/contentis_base64 YRP/domain YRP/url YRP/png YRP/excel_XML YRP/gem YRP/hpgl YRP/pgml YRP/rip YRP/amf YRP/jt YRP/prc YRP/x3d YRP/_3dxml YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature