MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
7f9ad5e7e6c74f1d495ad90f0c394c044b173f9e74e20ff04b022e416a033411	PE32	2024-10-01 11:54:19 UTC	User Submission	YRP/CRC32b_poly_Constant YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/url YRP/gem YRP/rip YRP/prc YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/inject_thread YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Internet_API YRP/Armadillo_v2xx_CopyMem_II_additional YRP/Microsoft_Visual_Cpp_70_MFC YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature
d7bccaa97c420b1b7d93e870b4a4c870626844fb85efd328176e3a4a36a04aaa	PE32	2024-10-01 11:54:17 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain [+] YRP/gem YRP/Safeguard_103_Simonzh YRP/Armadillo_v4x YRP/IsPE32 YRP/IsWindowsGUI YRP/HasDebugData YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
d4eb87364a0bcc1a6565335f3f23a451bd526c715b01fe63cdf7f9e7f1c5d03b	PE32	2024-10-01 11:54:14 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/Dropper_Strings [+] YRP/disable_firewall YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/win_mutex YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/suspicious_packer_section YRP/UPX YRP/UPXv20MarkusLaszloReiser YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature
b6b8394ea9c62b9a38178de1ea72845b2c87d1f0287ac756642b9e69fdd94d3e	PE32	2024-10-01 11:54:12 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/DebuggerException__SetConsoleCtrl [+] YRP/network_tcp_socket YRP/escalate_priv YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library YRP/Borland_Cpp_DLL YRP/Borland_Cpp_for_Win32_1999 YRP/Borland YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay
e1ebc4f6bd43fa9ad671c43be44726ffa9062696df8f669186ac2ec4a238c0ec	C	2024-10-01 11:54:10 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/url YRP/network_irc YRP/android_meterpreter YRP/php_uname BAMFDetect/pbot_strings
64164c69405e1a96c884696803473cec505a09e54af605a11b403dba5d5b0e80	PE32	2024-10-01 11:54:07 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/DebuggerException__ConsoleCtrl [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature YRP/IsSuspicious
fddf72df1451ca43a43a0acd5473660d1340f12897960dd53d08b0e4aaf6f4f9	PE32	2024-10-01 11:54:05 UTC	User Submission	YRP/BLOWFISH_Constants YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/url YRP/excel_XML YRP/gif_bitmap YRP/gem YRP/pgml YRP/amf YRP/x3d YRP/_3dxml YRP/System_Tools YRP/Browsers YRP/Dropper_Strings YRP/network_http YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/android_meterpreter YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature
6c3609c6e42d622ba5522864ffde3261440ba767209ec0b8b45b85004e100acd	PE32	2024-10-01 11:54:02 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/gem [+] YRP/win_registry YRP/suspicious_packer_section YRP/ASProtect_v123_RC1 YRP/ASProtect_v12x_New_Strain_additional YRP/Microsoft_Visual_Basic_v50 YRP/ASProtect_v12x_New_Strain YRP/ASProtect_v11_BRS YRP/ASProtect_V2X_Registered_Alexey_Solodovnikov YRP/ASProtect_133_21_Registered_Alexey_Solodovnikov YRP/VMProtect_1704_phpbb3 YRP/ASProtect_v12_additional YRP/ASProtect_123_RC4_130824_Solodovnikov_Alexey YRP/ASProtect_133_21_Registered_Alexey_Solodovnikov_additional YRP/ASProtectvIfyouknowthisversionpostonPEiDboardh2 YRP/ASProtect13321RegisteredAlexeySolodovnikov YRP/ASProtectv12xNewStrain YRP/ASProtectv123RC1 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature
74c36638bec30069c59f21b49fd26db89e578552488f678b63d738059dea8053	PE32	2024-10-01 11:54:00 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/Dropper_Strings [+] YRP/anti_dbg YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Str_Win32_Wininet_Library YRP/EquationGroup_Toolset_Apr17_PC_Legacy_dll YRP/IsPE32 YRP/IsWindowsGUI YRP/IsBeyondImageSize YRP/HasRichSignature FlorianRoth/EquationGroup_Toolset_Apr17_PC_Legacy_dll
b261ec27c22515f75749defeec65818644dabb78241b066db92c9e4a8bdcdbf6	ASCII	2024-10-01 11:53:57 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/generic_javascript_obfuscation