MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
3ab4b35a7f0dd987a7b63b5f138dd3d6e36bbf8879c1284388072bb3c7f04b04	PE32	2024-10-01 04:48:26 UTC	User Submission	YRP/MD5_Constants YRP/contentis_base64 YRP/domain [+] YRP/prc YRP/antisb_threatExpert YRP/screenshot YRP/win_private_profile YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Typical_Malware_String_Transforms YRP/Armadillo_v1xx_v2xx_additional YRP/Microsoft_Visual_Cpp_60_DLL_additional YRP/Microsoft_Visual_Cpp_v70_DLL YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_60_DLL_Debug YRP/Armadillo_v1xx_v2xx YRP/Microsoft_Visual_Cpp_v60_DLL YRP/Microsoft_Visual_Cpp_60_DLL YRP/Microsoft_Visual_Cpp_60 YRP/Armadillov1xxv2xx YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3 FlorianRoth/Typical_Malware_String_Transforms
b603a96a6b9b0de65a5eced256aef816175889d0a0944063ddc74f7706eb6b53	PE32	2024-10-01 04:48:23 UTC	User Submission	YRP/CRC32_poly_Constant YRP/CRC32_table YRP/BLOWFISH_Constants [+] YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain YRP/nullsoft_streaming_video YRP/gem YRP/prc YRP/Misc_Suspicious_Strings YRP/ThreadControl__Context YRP/inject_thread YRP/network_udp_sock YRP/network_tcp_listen YRP/network_dropper YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/spreading_file YRP/win_token YRP/win_files_operation YRP/android_meterpreter YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/suspicious_packer_section YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature FlorianRoth/CN_Honker_T00ls_Lpk_Sethc_v4_LPK
91d1d381bd667fdf02ffe7724a2170b2402d1da395e20bca7d524aa39446a1da	PE32	2024-10-01 04:48:19 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/Dropper_Strings [+] YRP/win_registry YRP/win_files_operation YRP/Microsoft_Visual_Cpp_v60_DLL_additional YRP/IsPE32 YRP/IsDLL YRP/IsConsole YRP/HasModified_DOS_Message FlorianRoth/DragonFly_APT_Sep17_3
d7a3a716cb03779547f12d1232ae7b48459950c03569e9a0db9feb722f3c1d9f	PE32	2024-10-01 04:48:16 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/rip YRP/suspicious_packer_section YRP/UPX YRP/PackerUPX_CompresorGratuito_wwwupxsourceforgenet YRP/UPX_wwwupxsourceforgenet_additional YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/UPX_v0896_v102_v105_v124_Markus_Laszlo_overlay YRP/UPX_v0896_v102_v105_v124_Markus_Laszlo_overlay_additional YRP/UPX_wwwupxsourceforgenet YRP/UPXv20MarkusLaszloReiser YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/UPX20030XMarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked
c487f96633469583e883e4eac4f6750210fd19459381739d9ed2fd4b8a3de519	PE32	2024-10-01 04:48:14 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/ai_compressed [+] YRP/gem YRP/wmf YRP/keylogger YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasModified_DOS_Message
e6310be0168c3cc3e35679161bfd7d3197aa1dde185d6f5e70ede37a0d3e5fce	PE32	2024-10-01 04:48:11 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/url YRP/excel_XML YRP/gem YRP/pgml YRP/wmf YRP/amf YRP/dwg YRP/x3d YRP/_3dxml YRP/keylogger YRP/win_registry YRP/win_files_operation YRP/IsPE32 YRP/IsWindowsGUI YRP/HasDebugData YRP/HasRichSignature
a10593310ec8d4f0164fc29b986ee1ab1cf7e7ea42a97a50dea9c7405de60b3c	PE32	2024-10-01 04:48:08 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/Check_OutputDebugStringA_iat [+] YRP/anti_dbg YRP/win_mutex YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/IsBeyondImageSize YRP/HasRichSignature
a1159d54579cdd21a8c02b392727bf0bc278259bb7a0d9699419bbd2714df095	PE32	2024-10-01 04:48:03 UTC	User Submission	YRP/CRC32_poly_Constant YRP/contentis_base64 YRP/domain [+] YRP/gem YRP/jt YRP/prc YRP/escalate_priv YRP/screenshot YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature
c5b489698775de1741e1afd4d48cc1ca6e5aa94bf140a4d69a05efefa5be2ed0	PE32	2024-10-01 04:48:00 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/Dropper_Strings [+] YRP/anti_dbg YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Str_Win32_Wininet_Library YRP/EquationGroup_Toolset_Apr17_PC_Legacy_dll YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature FlorianRoth/EquationGroup_Toolset_Apr17_PC_Legacy_dll
1a4252fbbdee3bd428d6bb016aa4a013b1f88fef48cfa33219edf2eb51d943a0	PE32	2024-10-01 04:47:58 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/Microsoft_Visual_Basic_v50 [+] YRP/IsPE32 YRP/IsConsole YRP/Cygwin FlorianRoth/DragonFly_APT_Sep17_3