MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
af329b330d5d20aff63ea7f19ad8edd8a17e1bc10a93329274a3efaacd06f35d	PE32	2024-09-30 09:12:46 UTC	User Submission	YRP/MD5_Constants YRP/RIPEMD160_Constants YRP/SHA1_Constants [+] YRP/VC8_Random YRP/IP YRP/contentis_base64 YRP/domain YRP/excel_XML YRP/pgml YRP/amf YRP/x3d YRP/_3dxml YRP/System_Tools YRP/Dropper_Strings YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Microsoft_Visual_Cpp_70 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature
a4c16a5d3c16179fcd2eb1e5f7b24f75d3a7034b4478da2e1017e7b8c6c52bfe	Ruby	2024-09-30 09:12:40 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/url YRP/Misc_Suspicious_Strings
b9507544404eb4d899a03a7a0418be897f5967248cc451ffb28d4b389a0ecae5	PE32	2024-09-30 09:12:37 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 YRP/domain [+] YRP/DebuggerException__SetConsoleCtrl YRP/escalate_priv YRP/win_token YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Borland_Cpp_DLL YRP/Borland_Cpp_for_Win32_1999 YRP/Borland YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay
b0ce80f5666f3f9084881193d05239dc6b634976949d293bc78b6223716f080c	PE32	2024-09-30 09:12:34 UTC	User Submission	YRP/CRC32_poly_Constant YRP/CRC32b_poly_Constant YRP/contentis_base64 [+] YRP/domain YRP/url YRP/gif_bitmap YRP/gem YRP/hpgl YRP/rip YRP/wmf YRP/screenshot YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section YRP/UPX YRP/UPX_wwwupxsourceforgenet_additional YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/Netopsystems_FEAD_Optimizer_1 YRP/UPX_290_LZMA YRP/UPX_290_LZMA_Markus_Oberhumer_Laszlo_Molnar_John_Reiser YRP/UPX_290_LZMA_additional YRP/UPX_wwwupxsourceforgenet YRP/UPX290LZMAMarkusOberhumerLaszloMolnarJohnReiser YRP/upx_3 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature
b6477078aa365061a66772d7943f2f04f913fe8e0e022d4ada209f6736dcb4b5	PE32	2024-09-30 09:12:28 UTC	User Submission	YRP/CRC32_poly_Constant YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/url YRP/excel_XML YRP/gem YRP/pgml YRP/wmf YRP/amf YRP/prc YRP/x3d YRP/_3dxml YRP/Misc_Suspicious_Strings YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/Nullsoft_PiMP_Stub_SFX YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature
797c0c1a0726089e255d27acecfd4a0781a22790e85e23326690bc0955c7f42e	PE32	2024-09-30 09:12:25 UTC	User Submission	YRP/CRC32_poly_Constant YRP/BLOWFISH_Constants YRP/maldoc_getEIP_method_1 [+] YRP/contentis_base64 YRP/domain YRP/excel_2007 YRP/corel_draw_compressed YRP/gem YRP/odg YRP/rip YRP/wmf YRP/_3dxml_compressed YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_files_operation YRP/suspicious_packer_section YRP/UPX YRP/PEBundle_v244_additional YRP/PEBundle_v310 YRP/PEBundle_v310_additional YRP/PEBundle_20x_24x_Jeremy_Collake YRP/PEBundle_v244 YRP/PEBundlev310 YRP/PEBundlev244 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature
df9652740105068ebffaf4d1d7bf88ab933e3415a371a3e9566c4083956441b3	PE32	2024-09-30 09:12:23 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/wmf [+] YRP/SEH__vba YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature
a2563c690ee3dd2b9b3ed9ed1ac1e27412522901ed8ebe854b8273bacd732408	PE32	2024-09-30 09:12:20 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/gem [+] YRP/escalate_priv YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked
e5c558f03c2cee9b4b97da32c07ec81aa1db015e9d6350bc92a4589df333d374	PE32	2024-09-30 09:12:18 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/gem [+] YRP/SEH__vba YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
b9d651744cc97570322a5c153551084aa359c6260dd22ab4d366e36394f87ef7	PE32	2024-09-30 09:12:15 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/keylogger [+] YRP/rat_webcam YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/suspicious_packer_section YRP/ASProtect_v123_RC1 YRP/ASProtect_v12x_New_Strain_additional YRP/Microsoft_Visual_Basic_v50 YRP/ASProtect_v12x_New_Strain YRP/ASProtect_v11_BRS YRP/ASProtect_V2X_Registered_Alexey_Solodovnikov YRP/ASProtect_133_21_Registered_Alexey_Solodovnikov YRP/VMProtect_1704_phpbb3 YRP/ASProtect_v12_additional YRP/ASProtect_123_RC4_130824_Solodovnikov_Alexey YRP/ASProtect_133_21_Registered_Alexey_Solodovnikov_additional YRP/ASProtect13321RegisteredAlexeySolodovnikov YRP/ASProtectv12xNewStrain YRP/ASProtectv123RC1 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked