MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
b306f46da34fb5cd64fec856245278e99cd42e70c6be24319c1c3c81caedeae1	PE32	2024-09-30 09:32:43 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/win_mutex [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
b4ab7aff88f0d3dfcc9140ecbed1245c9fcf45f7557b0b162fc599a8bac1e474	PE32	2024-09-30 09:32:41 UTC	User Submission	YRP/CRC32_poly_Constant YRP/Delphi_Copy YRP/IP [+] YRP/contentis_base64 YRP/domain YRP/url YRP/excel_XML YRP/gif_bitmap YRP/gem YRP/hpgl YRP/pgml YRP/amf YRP/x3d YRP/_3dxml YRP/escalate_priv YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Borland_Delphi_40_additional YRP/Inno_Installer_v512_collides_with_Borland_Delphi_20_Overlay YRP/Inno_Installer_v512 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Inno_Setup_Module_v5 YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/borland_delphi
1ac2debce2d33a06ff0df60e5e0c82cceacf007fa185c79049234168a38d612f	PE32	2024-09-30 09:32:38 UTC	User Submission	YRP/BASE64_table YRP/Delphi_Random YRP/Delphi_CompareCall [+] YRP/Delphi_Copy YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 YRP/domain YRP/gem YRP/anti_dbg YRP/keylogger YRP/win_registry YRP/win_files_operation YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI YRP/borland_delphi
8b6ef43af451d15f62a605925afcd8969cb8b7b24ebd4ff4c73369e8978a2a9d	PE32	2024-09-30 09:32:36 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/anti_dbg [+] YRP/create_service YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/VC8_Microsoft_Corporation YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasDebugData YRP/HasRichSignature
ce35d6740a7983b474fdd649b31050df66e415bd5eaf29baca27a9652050c904	PE32	2024-09-30 09:32:31 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain [+] YRP/suspicious_packer_section YRP/ASPack_v212_additional YRP/ASPack_v21_additional YRP/ASProtect_V2X_DLL_Alexey_Solodovnikov YRP/ASPack_v212 YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/ASPack_v211d YRP/ASProtect_V2X_DLL_Alexey_Solodovnikov_additional YRP/ASPack_212withouth_Poly_Solodovnikov_Alexey YRP/ASPack_v212_Alexey_Solodovnikov YRP/ASPackv212AlexeySolodovnikov YRP/ASProtectV2XDLLAlexeySolodovnikov YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay
099a667bb211916aafea592464bc791f172411280c1c7867348fe6957d3439b6	PE32	2024-09-30 09:32:28 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain [+] YRP/Pack_Master_v10_additional YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/PEX_v099 YRP/PEXv099 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
081b2fd38cf477dcad6988546af97a1ddd9837b4a48289b2c5cd417679dcfde1	PE32	2024-09-30 09:32:26 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain [+] YRP/suspicious_packer_section YRP/ASPack_v212_additional YRP/ASPack_v21_additional YRP/ASProtect_V2X_DLL_Alexey_Solodovnikov YRP/ASPack_v212 YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/ASPack_v211d YRP/ASProtect_V2X_DLL_Alexey_Solodovnikov_additional YRP/ASPack_212withouth_Poly_Solodovnikov_Alexey YRP/ASPack_v212_Alexey_Solodovnikov YRP/ASPackv212AlexeySolodovnikov YRP/ASProtectV2XDLLAlexeySolodovnikov YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay
60ad27295721c4b511d1e9dacb121470709cc3ed5a652727e8110822e371922e	Zip	2024-09-30 09:32:21 UTC	User Submission	CuckooSandbox/shellcode YRP/contentis_base64 YRP/domain [+] YRP/png YRP/excel_2007 YRP/ai_compressed YRP/corel_draw_compressed YRP/odg YRP/rip YRP/_3dxml_compressed YRP/android_meterpreter YRP/suspicious_packer_section
623c4a25cae812d9afbcff4d3f0c29f95c76c626e89f301f8fea2f0045541e85	PE32	2024-09-30 09:32:11 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/win_registry [+] YRP/Visual_Cpp_2003_EXE_Microsoft YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature
e702e00f42a362c6646a18417c16af57cf2cb005f0e3362b5635cc713077f498	PE32	2024-09-30 09:32:09 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/screenshot [+] YRP/suspicious_packer_section YRP/UPX YRP/ACProtect_13x_14x_DLL_Risco_Software_Inc YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature