MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
62467d9f13850e94cb8088b6a6a128cd23010fc922f14133ca4456a47be6ed60	PE32	2024-10-01 12:20:06 UTC	User Submission	YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy [+] YRP/contentis_base64 YRP/domain YRP/url YRP/gem YRP/prc YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_files_operation YRP/win_hook YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI YRP/borland_delphi
6997a20e4f6ab068a5128d2efd39f20e91fbfd7fb63f54bfbe405eda038a77fd	PE32	2024-10-01 12:20:04 UTC	User Submission	YRP/CRC32_poly_Constant YRP/CRC32_table YRP/BLOWFISH_Constants [+] YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain YRP/nullsoft_streaming_video YRP/gem YRP/prc YRP/Misc_Suspicious_Strings YRP/ThreadControl__Context YRP/inject_thread YRP/network_udp_sock YRP/network_tcp_listen YRP/network_dropper YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/spreading_file YRP/win_token YRP/win_files_operation YRP/android_meterpreter YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/suspicious_packer_section YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasModified_DOS_Message YRP/HasRichSignature FlorianRoth/CN_Honker_T00ls_Lpk_Sethc_v4_LPK
4a1d7eabed2edefb2ac74fb4aec2a5f40de351d41b4432ada8c93a863234dd42	PE32	2024-10-01 12:19:57 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/url [+] YRP/gem YRP/suspicious_packer_section YRP/UPX YRP/PackerUPX_CompresorGratuito_wwwupxsourceforgenet YRP/UPX_wwwupxsourceforgenet_additional YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/UPX_v0896_v102_v105_v124_Markus_Laszlo_overlay YRP/UPX_v0896_v102_v105_v124_Markus_Laszlo_overlay_additional YRP/UPX_wwwupxsourceforgenet YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature
7e7e2d2b58a9a4ce206c04670278f16c94b2d43b4c80e4540ee7f38db8f08aac	PE32	2024-10-01 12:19:54 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/suspicious_packer_section [+] YRP/UPX YRP/PackerUPX_CompresorGratuito_wwwupxsourceforgenet YRP/UPX_wwwupxsourceforgenet_additional YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/Netopsystems_FEAD_Optimizer_1 YRP/UPX_290_LZMA YRP/UPX_290_LZMA_Markus_Oberhumer_Laszlo_Molnar_John_Reiser YRP/UPX_290_LZMA_additional YRP/UPX_wwwupxsourceforgenet YRP/UPX290LZMAMarkusOberhumerLaszloMolnarJohnReiser YRP/CryptoLockv202EngRyanThian YRP/upx_3 YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
3c69f7d378d19c0a05142c3178cccbd6d39f81bfbb9cf02f58c1edf127d7fd15	Java	2024-10-01 12:19:51 UTC	User Submission	YRP/Big_Numbers1 YRP/contentis_base64 YRP/domain [+] YRP/url YRP/png YRP/ogg YRP/excel_2007 YRP/jpg_with_EXIF YRP/corel_draw_compressed YRP/gem YRP/odg YRP/_3dxml_compressed
57af2e66052a8441609016a5cac7856772e7894c42b6aa1e3ac000c57079eb18	PE32	2024-10-01 12:19:48 UTC	User Submission	YRP/CRC32_poly_Constant YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/url YRP/excel_XML YRP/gem YRP/pgml YRP/amf YRP/prc YRP/x3d YRP/_3dxml YRP/escalate_priv YRP/screenshot YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/Nullsoft_PiMP_Stub_SFX YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature
6a835890112b0a3a8e78c892d52fa1f1e79344395f03052659952266e21e403d	PE32	2024-10-01 12:19:46 UTC	User Submission	YRP/CRC32_poly_Constant YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/excel_XML YRP/gem YRP/hpgl YRP/pgml YRP/rip YRP/amf YRP/prc YRP/x3d YRP/_3dxml YRP/Misc_Suspicious_Strings YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/Nullsoft_PiMP_Stub_SFX YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature
6f912141ea9ff2b4e787fd550001b33086d9c1dcf5105195dc7fadbbd46d2591	PE32	2024-10-01 12:19:42 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/screenshot [+] YRP/suspicious_packer_section YRP/UPX YRP/ACProtect_13x_14x_DLL_Risco_Software_Inc YRP/UPX_v0896_v102_v105_v122_DLL_additional YRP/UPX_v0896_v102_v105_v122 YRP/UPX_v0896_v102_v105_v122_DLL_Laszlo_Markus YRP/UPX_v0896_v102_v105_v122_DLL YRP/UPX_v0896_v102_v105_v122_additional YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature
1abc671cafdbf1527eddb0b0e532e402f66f1c21acb818c0e632280e4e50c324	PE32	2024-10-01 12:19:40 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain [+] YRP/suspicious_packer_section YRP/ASProtect_v132 YRP/RLPack_V111_ap0x YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/RLPack_V112_V114_aPlib_043_ap0x_Sign_by_fly YRP/RLPack_V112_aPlib_043_ap0x YRP/RLPack_V111_ap0x_additional YRP/RLPack_V112_V114_aPlib_043_ap0x YRP/RLPack_V111_ap0x_Sign_by_fly YRP/RLPackV111ap0x YRP/RLPackV112V114aPlib043ap0x YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked
b62ef3f168e07cee64f1f7b22de89ce657f5fc79c2291b4a7edbc00ab4366d71	PE32	2024-10-01 12:19:34 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/network_dropper [+] YRP/keylogger YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay