MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
780e5ee16af71620a3f2d1b27dd6ef92e1d3f392cf6f3102f0d215a09cd256be	PE32	2024-09-26 15:49:52 UTC	User Submission	YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/IP [+] YRP/contentis_base64 YRP/domain YRP/excel_XML YRP/pgml YRP/rip YRP/amf YRP/prc YRP/x3d YRP/_3dxml YRP/System_Tools YRP/VM_Generic_Detection YRP/ThreadControl__Context YRP/inject_thread YRP/network_dropper YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/IsPE32 YRP/IsWindowsGUI YRP/borland_delphi
a496abf1cfbbe512afd38a21da3f7f356669bc3b1a299c11c97e0bcbb21a0d38	Zip	2024-09-26 15:49:43 UTC	User Submission	CuckooSandbox/shellcode YRP/Big_Numbers1 YRP/IP [+] YRP/contentis_base64 YRP/domain YRP/url YRP/png YRP/excel_2007 YRP/gif_bitmap YRP/jpg_with_EXIF YRP/ai_compressed YRP/corel_draw_compressed YRP/odg YRP/wmf YRP/_3dxml_compressed YRP/android_meterpreter YRP/suspicious_packer_section
6d97efa14ef5fd31a816b94d3e98f0e4a8b6b57cde9a804034090a76c3a2ecf9	PE32	2024-09-26 15:49:21 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 YRP/domain [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature
4cfefa5aef846e1fb4c2878da8d3463ff454608782c53daf1903f47d575eb9ca	PE32	2024-09-26 15:49:18 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/excel_XML YRP/gem YRP/pgml YRP/amf YRP/x3d YRP/_3dxml YRP/win_private_profile YRP/win_files_operation YRP/PseudoSigner_02_PE_Protect_09_Anorganix YRP/APatch_GUI_v11_additional YRP/_PseudoSigner_02_PE_Protect_09 YRP/PseudoSigner_02_PE_Protect_09 YRP/PE_Protect_v09 YRP/_PseudoSigner_02_PE_Protect_09_Anorganix YRP/PEProtectv09 YRP/PseudoSigner02PEProtect09Anorganix YRP/MoleBoxv20 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature
2242c3845a381b288cd8e1eb91afbc02f07cafb23cdcbf93678b6e8013794411	JSON	2024-09-26 15:49:16 UTC	User Submission	YRP/contentis_base64 YRP/domain
ac060b0720b49800a39173941df1af1f7814a012615b9c6845cae9771550e79c	PE32	2024-09-26 15:49:11 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain [+] YRP/url YRP/wmf YRP/jt YRP/Microsoft_Visual_Basic_v50 YRP/VMProtect_1704_phpbb3 YRP/NTkrnlSecureSuiteNTkrnlteam YRP/NTkrnlSecureSuite01015NTkrnlSoftware YRP/NTKrnlPackerAshkbizDanehkar YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature
1a1814c5b4a1084944f36d022a6300c217225581a93368823f281f569f237e6b	PDF	2024-09-26 15:49:06 UTC	User Submission	YRP/invalid_trailer_structure YRP/multiple_versions YRP/contentis_base64 [+] YRP/domain YRP/url YRP/pdf
649f5600bac6fd1abc651b417540276d219a6e7ead39dea7f514694c7f1086ac	ASCII	2024-09-26 15:49:00 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/android_meterpreter
839dac729f19d1de101a1abef46ada4e097a0297a89dff5418bb740254e7f7e1	PE32	2024-09-26 15:48:56 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/excel_XML YRP/pgml YRP/amf YRP/xaml YRP/x3d YRP/_3dxml YRP/network_smtp_dotNet YRP/keylogger YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/HasOverlay FlorianRoth/DragonFly_APT_Sep17_3
4564a654b24960396d281828e921a2896c3f582131d3c04f38ee0d01e8511402	PE32	2024-09-26 15:48:54 UTC	User Submission	YRP/domain YRP/suspicious_packer_section YRP/UPX [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/IsBeyondImageSize YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3