MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
9c5693366415293586c3a36e42146388efe151c9b78ad3ea6c71ce432c883683	PE32	2024-09-29 16:37:50 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/url [+] YRP/System_Tools YRP/SEH__vba YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
53a3181cc393f773471a2acf741f6050cfecf7c66b28782759d2288c2bb4af74	PE32	2024-09-29 16:37:31 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 YRP/domain [+] YRP/url YRP/gem YRP/anti_dbg YRP/win_files_operation YRP/android_meterpreter YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature
3d7ab4afcee2d7ad680fa67fef2290b6ed9725a22b1746e69ff92e3fac67b531	Zip	2024-09-29 16:37:21 UTC	User Submission	CuckooSandbox/shellcode KevTheHermit/JavaDropper
43be4a325dd92bb9dc87468b7cec01b442385f1163e79af0238132f49d3a31db	PDF	2024-09-29 16:36:53 UTC	User Submission	YRP/invalid_trailer_structure YRP/multiple_versions YRP/contentis_base64 [+] YRP/domain YRP/url YRP/pdf
b4784c9540f1525731553dd3bf1290fb3f219440fe67178f22e51344cbe16909	PE32	2024-09-29 16:36:48 UTC	User Submission	YRP/maldoc_getEIP_method_4 YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/System_Tools YRP/RE_Tools YRP/Antivirus YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/anti_dbg YRP/anti_dbgtools YRP/inject_thread YRP/hijack_network YRP/escalate_priv YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section YRP/UPX YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature
a61772f1a3a06dc235170f202d61a60d39cedbb0688aabb55b0bfd16fd732427	PE32	2024-09-29 16:36:31 UTC	User Submission	CuckooSandbox/embedded_macho YRP/CRC32_poly_Constant YRP/CRC32_table [+] YRP/MD5_Constants YRP/BASE64_table YRP/maldoc_getEIP_method_1 YRP/IP YRP/contentis_base64 YRP/domain YRP/url YRP/excel_XML YRP/gem YRP/pgml YRP/rip YRP/wmf YRP/amf YRP/jt YRP/prc YRP/x3d YRP/_3dxml YRP/Misc_Suspicious_Strings YRP/screenshot YRP/keylogger YRP/win_files_operation YRP/android_meterpreter YRP/suspicious_packer_section YRP/Microsoft_Visual_Basic_v50 YRP/PureBasic_4x_Neil_Hodgson_additional YRP/PureBasic_4x_Neil_Hodgson YRP/PureBasic4xNeilHodgson YRP/IsPE32 YRP/IsWindowsGUI YRP/PureBasic
902629a525933b1878f2996de15876f1f755bac17e813b1614cbe4d62b509196	PE32	2024-09-29 16:36:20 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/screenshot [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
2d5514b19b4631335ad4d70af661673fa57c27f52fd2d33c97cfe470e0678070	Ruby	2024-09-29 16:36:13 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/url YRP/Misc_Suspicious_Strings
d22ee2627a2cad8230cf21a904a6f42c90d3fb5192bdb4d3493e788f1a9bc03b	RAR	2024-09-29 16:36:11 UTC	User Submission	YRP/contentis_base64 YRP/domain
bcd707eabc74d11aba488cd09c6b805f40a8d627c7c263d62bfeed25c941582a	Java	2024-09-29 16:36:06 UTC	User Submission	CuckooSandbox/shellcode YRP/Big_Numbers1 YRP/contentis_base64 [+] YRP/domain YRP/url YRP/png YRP/gif_animated YRP/excel_2007 YRP/gif_bitmap YRP/gif89a_bitmap YRP/jpg_with_EXIF YRP/corel_draw_compressed YRP/gem YRP/hpgl YRP/odg YRP/wmf YRP/_3dxml_compressed YRP/JavaDropper YRP/possible_includes_base64_packed_functions KevTheHermit/JavaDropper