MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
982293270c4060d002fcec50bcc81c08e698cc54d6035b091e8c14c98a48dde7	Zip	2024-09-28 21:10:41 UTC	User Submission	CuckooSandbox/shellcode YRP/Big_Numbers1 YRP/IP [+] YRP/contentis_base64 YRP/domain YRP/url YRP/png YRP/avi YRP/gif_animated YRP/anime_music_video YRP/nullsoft_streaming_video YRP/excel_2007 YRP/gif_bitmap YRP/gif89a_bitmap YRP/jpeg YRP/corel_draw_graohic YRP/corel_draw_compressed YRP/gem YRP/hpgl YRP/odg YRP/rip YRP/wmf YRP/jt YRP/stl YRP/_3dxml_compressed YRP/android_meterpreter YRP/suspicious_packer_section YRP/JavaDropper KevTheHermit/JavaDropper
86bad2743375ec44ac73ffb176f199b690cb1f3d2515b1d046c94ac94cf6b361	PE32	2024-09-28 21:10:18 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/Armadillo_v4x YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked
9de9c37f380475b5012c37a99f88478d6a19e406125ca218e439573f225ee7bb	Zip	2024-09-28 21:10:15 UTC	User Submission	YRP/domain YRP/excel_2007 YRP/corel_draw_compressed [+] YRP/odg YRP/_3dxml_compressed
340990d5f41deac956d0236089167417285717bd2c95a7c30398171a33579981	PE32	2024-09-28 21:10:10 UTC	User Submission	YRP/CRC32_poly_Constant YRP/contentis_base64 YRP/domain [+] YRP/gem YRP/prc YRP/Misc_Suspicious_Strings YRP/escalate_priv YRP/screenshot YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/NSIS_Installer_NullSoft YRP/Nullsoft_PiMP_Install_System_additional YRP/Nullsoft_PiMP_Install_System YRP/NSISInstallerNullSoft YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
ea4437cd63b4709cd1caae7a0d2333469d594eb7ec6ec54d0d79fb39788f7a4a	PE32	2024-09-28 21:10:06 UTC	User Submission	YRP/Big_Numbers0 YRP/Big_Numbers1 YRP/Big_Numbers2 [+] YRP/CRC32_poly_Constant YRP/CRC32_table YRP/IP YRP/contentis_base64 YRP/domain YRP/url YRP/excel_2007 YRP/jpeg YRP/corel_draw_compressed YRP/gem YRP/odg YRP/prc YRP/_3dxml_compressed YRP/System_Tools YRP/DebuggerException__SetConsoleCtrl YRP/anti_dbg YRP/network_dropper YRP/network_tcp_socket YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/suspicious_packer_section YRP/S_MultiFunction_Scanners_s YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Installer_VISE_Custom_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Installer_VISE_Custom YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay FlorianRoth/S_MultiFunction_Scanners_s
21ef0eaac3117cae6595df7bf38894c13967d3b1f4df9d528acf8fef0fc2ddeb	PE32	2024-09-28 21:10:02 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain [+] YRP/keylogger YRP/rat_webcam YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/suspicious_packer_section YRP/NsPack_29_North_Star YRP/nSpack_V2x_LiuXingPing YRP/nSpack_V2x_LiuXingPing_additional YRP/nSpack_V29_LiuXingPing YRP/nSPack_1x2x_North_StarLiu_Xing_Ping YRP/nSpackV2xLiuXingPing YRP/NsPack29NorthStar YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay
4b6f5229b3e05fc7ce937fd249c92fcc1a4de0214b09f1c814db39bef9a23f05	PE32	2024-09-28 21:09:59 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 YRP/domain [+] YRP/gem YRP/WMI_strings YRP/antisb_threatExpert YRP/escalate_priv YRP/win_registry YRP/win_token YRP/Str_Win32_Winsock2_Library YRP/IsPE32 YRP/IsConsole YRP/HasDebugData
559838a3989970c54127cbd95ae6da4b14a6b2aad0a198964d92a0d58284fb4a	MS	2024-09-28 21:09:56 UTC	User Submission	YRP/domain YRP/malicious_LNK_files
704bec90991a8fdad7a84d41fe39eece8b7375833929da1c3d16a2afbd25ee97	PE32	2024-09-28 21:09:52 UTC	User Submission	YRP/Big_Numbers1 YRP/CRC32_poly_Constant YRP/contentis_base64 [+] YRP/domain YRP/excel_2007 YRP/gif_bitmap YRP/corel_draw_compressed YRP/hpgl YRP/odg YRP/_3dxml_compressed YRP/spreading_file YRP/win_files_operation YRP/suspicious_packer_section YRP/Symantec_Visual_Cafe_v30_additional YRP/WinZip_32_bit_SFX_v8x_module_additional YRP/WinZip_32_bit_SFX_v8x_module YRP/WinZip32bitSFXv8xmodule YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature
9c430065edfd005e54a0414b670c9b984bd46c28d44500b06a0217bcb357c5fb	data	2024-09-28 21:09:46 UTC	User Submission	CuckooSandbox/vmdetect