MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
83b5d35cbdffce42e0aba4e81909914a0e643cf64b4c673c4b5442e45e45f974	Java	2024-09-30 18:47:15 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/png [+] YRP/excel_2007 YRP/corel_draw_compressed YRP/odg YRP/_3dxml_compressed
b28fa391acd0b72f0f7f031e9b09af7f34e07f2d765cce479d425623e728fdbd	PE32	2024-09-30 18:47:12 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/png [+] YRP/win_registry YRP/suspicious_packer_section YRP/PeCompact_v208_Bitsum_Technologiessignature_by_loveboom YRP/PECompact_2x_Jeremy_Collake YRP/PECompact_20x_Heuristic_Mode_Jeremy_Collake YRP/PECompact_2xx_BitSum_Technologies YRP/PECompact_v2xx YRP/PECompact_V2X_Bitsum_Technologies_additional YRP/PECompact_V2X_Bitsum_Technologies YRP/PECompact_v20_additional YRP/PeCompact_2xx_BitSum_Technologies YRP/PeCompact_253_DLL_BitSum_Technologies_additional YRP/PECompact_v20 YRP/PeCompact_253_DLL_BitSum_Technologies YRP/PECompact_v2xx_additional YRP/PECompactV2XBitsumTechnologies YRP/PECompact2xxBitSumTechnologies YRP/PECompactv2xx YRP/pecompact2 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature YRP/QtFrameWork
530f1dc902ffca257c3a6627b7c1961235840da39991149b296a5bf10cf2416c	PE32	2024-09-30 18:47:05 UTC	User Submission	YRP/MD5_Constants YRP/contentis_base64 YRP/domain [+] YRP/url YRP/prc YRP/antisb_threatExpert YRP/network_dropper YRP/screenshot YRP/win_private_profile YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Typical_Malware_String_Transforms YRP/Armadillo_v1xx_v2xx_additional YRP/Microsoft_Visual_Cpp_60_DLL_additional YRP/Microsoft_Visual_Cpp_v70_DLL YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_60_DLL_Debug YRP/Armadillo_v1xx_v2xx YRP/Microsoft_Visual_Cpp_v60_DLL YRP/Microsoft_Visual_Cpp_60_DLL YRP/Microsoft_Visual_Cpp_60 YRP/Armadillov1xxv2xx YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3 FlorianRoth/Typical_Malware_String_Transforms
66ae6f22ddbcac363d5039cb8a343a87ce72d432cc116f5c01f413b63424f45d	ASCII	2024-09-30 18:46:58 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/jt
24e99a59f3f1eaf4557ff91f191e7e0472722390a7fbb862983b05eb271f9f17	PE32	2024-09-30 18:46:53 UTC	User Submission	CuckooSandbox/vmdetect YRP/CRC32_poly_Constant YRP/CRC32_table [+] YRP/CRC32b_poly_Constant YRP/MD5_Constants YRP/BASE64_table YRP/IP YRP/contentis_base64 YRP/domain YRP/url YRP/excel_XML YRP/gem YRP/pgml YRP/rip YRP/wmf YRP/amf YRP/jt YRP/x3d YRP/_3dxml YRP/_7z YRP/System_Tools YRP/Browsers YRP/RE_Tools YRP/Antivirus YRP/VMWare_Detection YRP/VirtualBox_Detection YRP/Qemu_Detection YRP/vmdetect YRP/anti_dbg YRP/anti_dbgtools YRP/antivm_virtualbox YRP/antivm_vmware YRP/create_com_service YRP/escalate_priv YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/vmdetect_misc YRP/android_meterpreter YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature
483edf4c34656670c6ecd9e9d46d86ba0b6b1b4b5cb158e0b1fcba2ec5fd6184	PE32	2024-09-30 18:46:49 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/win_registry [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature
0956d340b8eac6da741a17e75844c880e6aa5dd0695c945d812d99034c6dc089	PE32	2024-09-30 18:46:44 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain [+] YRP/suspicious_packer_section YRP/ASPack_v212_additional YRP/ASPack_v21_additional YRP/ASProtect_V2X_DLL_Alexey_Solodovnikov YRP/ASPack_v212 YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/ASPack_v211d YRP/ASProtect_V2X_DLL_Alexey_Solodovnikov_additional YRP/ASPack_212withouth_Poly_Solodovnikov_Alexey YRP/ASPack_v212_Alexey_Solodovnikov YRP/ASPackv212AlexeySolodovnikov YRP/ASProtectV2XDLLAlexeySolodovnikov YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay
b47cc8a338f3256a7f451552329b54f74cae19e6c5c64b5dd41f62c1e8d2b347	PE32	2024-09-30 18:46:41 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/suspicious_packer_section [+] YRP/UPX YRP/PackerUPX_CompresorGratuito_wwwupxsourceforgenet YRP/UPX_wwwupxsourceforgenet_additional YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/UPX_v0896_v102_v105_v124_Markus_Laszlo_overlay YRP/UPX_v0896_v102_v105_v124_Markus_Laszlo_overlay_additional YRP/UPX_wwwupxsourceforgenet YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked
e30f20045878e73853b2abcc4bdf9eb3d108943c1b4ce165369e7e4deec4925c	PDF	2024-09-30 18:46:34 UTC	User Submission	YRP/invalid_trailer_structure YRP/multiple_versions YRP/contentis_base64 [+] YRP/domain YRP/url YRP/pdf YRP/jpeg
b93a1eac2d15ee058db2d6ba70b2a59b5910e0e6dd5ee40e013337976a2b2fc0	PE32	2024-09-30 18:46:32 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/Microsoft_Visual_Cpp_v50v60_MFC [+] YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/IsPE32 YRP/IsWindowsGUI YRP/HasDebugData YRP/HasRichSignature