MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
ad852953ae5655ff86b0c8869b41b3280fe84133de9b3c5bb64e4e37338bc797	PE32	2024-09-26 22:50:05 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 YRP/domain [+] YRP/gem YRP/SEH__vba YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature
c49dd1c55f66907986ad6d0f57beae7e5a5cee4026f0321e5f5fac1be3217bd5	PE32	2024-09-26 22:50:00 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/excel_XML YRP/pgml YRP/amf YRP/x3d YRP/_3dxml YRP/suspicious_packer_section YRP/UPX YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Microsoft_Visual_Cpp YRP/UPXv20MarkusLaszloReiser YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/UPX20030XMarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature
47e2b8a59629f4226d75aa87ec8046d451c91db43605f8e206818b1e3723b8d9	PE32	2024-09-26 22:49:57 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/url [+] YRP/gem YRP/Browsers YRP/anti_dbg YRP/win_mutex YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature
d57ff46b43d9960f0f6a70ff7e9549c00b8f9e352aa07e9fbfdca16dbef92a73	PE32	2024-09-26 22:49:54 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/url [+] YRP/SEH__vba YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature
7fdeebb5e48b022758b6e150cf4d638d4acd0b7efca6a2d1353b443f9369aea3	PE32	2024-09-26 22:49:50 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain [+] YRP/keylogger YRP/rat_webcam YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/suspicious_packer_section YRP/nSpack_V2x_LiuXingPing YRP/nSpack_V2x_LiuXingPing_additional YRP/nSPack_1x2x_North_StarLiu_Xing_Ping YRP/nSpackV2xLiuXingPing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/ExportTableIsBad
42ffd4d33fbb749ec7255c62ff63605929d5243ff6b6134f58b1442bab09fb85	MS-DOS	2024-09-26 22:49:47 UTC	User Submission	YRP/Advapi_Hash_API YRP/CRC32_poly_Constant YRP/maldoc_find_kernel32_base_method_1 [+] YRP/contentis_base64 YRP/domain YRP/url YRP/prc YRP/DebuggerCheck__QueryInfo YRP/ThreadControl__Context YRP/inject_thread YRP/network_http YRP/network_tcp_socket YRP/network_dns YRP/network_dga YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasModified_DOS_Message
c2d57d994dd84d3dd377979649e984729d06b0f55794939481f1a4e8a4b9469f	PE32	2024-09-26 22:49:41 UTC	User Submission	YRP/domain YRP/suspicious_packer_section YRP/PeCompact_v208_Bitsum_Technologiessignature_by_loveboom [+] YRP/PECompact_2x_Jeremy_Collake YRP/PECompact_20x_Heuristic_Mode_Jeremy_Collake YRP/PECompact_2xx_BitSum_Technologies YRP/PECompact_v2xx YRP/PECompact_V2X_Bitsum_Technologies_additional YRP/PECompact_V2X_Bitsum_Technologies YRP/PECompact_v20_additional YRP/PeCompact_2xx_BitSum_Technologies YRP/PeCompact_253_DLL_BitSum_Technologies_additional YRP/PECompact_v20 YRP/PeCompact_253_DLL_BitSum_Technologies YRP/PECompact_v2xx_additional YRP/PECompactV2XBitsumTechnologies YRP/PECompact2xxBitSumTechnologies YRP/PECompactv2xx YRP/pecompact2 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/IsBeyondImageSize YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
768fa61afbf8ead4903898885a9b63157004005db24392f1ebabc3e3f377bb01	PDF	2024-09-26 22:49:32 UTC	User Submission	YRP/invalid_xref_numbers YRP/contentis_base64 YRP/domain [+] YRP/url YRP/pdf
75fb757281b7b5689a71531c023ea9cd50b936beb5b578e8d9bf9ec1bdd5cced	DOS	2024-09-26 22:49:24 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/jt [+] YRP/System_Tools YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/spreading_file
f4d92795580e8767d12d63137cff4a519fabccbd934e8c91d36571a093525cbd	PE32	2024-09-26 22:49:11 UTC	User Submission	YRP/Advapi_Hash_API YRP/maldoc_getEIP_method_1 YRP/contentis_base64 [+] YRP/domain YRP/IsPE32 YRP/IsConsole YRP/HasModified_DOS_Message FlorianRoth/DragonFly_APT_Sep17_3