MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
028d82650ea225e40f8facb0ab8ac6415bde5d162997126a95beaa35822fdba2	PE32	2024-09-27 09:11:52 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/prc [+] YRP/screenshot YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/suspicious_packer_section YRP/UPX YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature
51961abdce48048f67dacce4b7b0d33b75024046f31061a045738e63c4600e88	PE32	2024-09-27 09:11:47 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/gif_bitmap [+] YRP/jpeg YRP/gem YRP/wmf YRP/SEH__vba YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature
630e79b92a2389944b903236eefc6e47b2436e22f1dd1c38f42ce355a2938110	PE32	2024-09-27 09:11:44 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 YRP/domain [+] YRP/prc YRP/win_files_operation YRP/Microsoft_Visual_Basic_v50 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/IsPacked
97f78647c1f0f5ff39548565287ab89872e092760f5c3f2aa3a63e1d0b115289	PE32	2024-09-27 09:11:31 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/url YRP/excel_XML YRP/pgml YRP/amf YRP/x3d YRP/_3dxml YRP/Misc_Suspicious_Strings YRP/ThreadControl__Context YRP/win_files_operation YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature
c952687224bb9c62e0801e3530d2d35c58825ce8c7ce41c1f2c9da023efa6146	PE32	2024-09-27 09:11:28 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/nullsoft_streaming_video [+] YRP/screenshot YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/suspicious_packer_section YRP/UPX YRP/UPX_v30_EXE_LZMA_Markus_Oberhumer_Laszlo_Molnar_John_Reiser_additional YRP/UPX_302 YRP/PackerUPX_CompresorGratuito_wwwupxsourceforgenet YRP/UPX_293_LZMA YRP/UPX_wwwupxsourceforgenet_additional YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/UPX_293_300_LZMA YRP/UPX_293_LZMA_additional YRP/UPX_v30_EXE_LZMA_Markus_Oberhumer_Laszlo_Molnar_John_Reiser YRP/UPX_293_300_LZMA_Markus_Oberhumer_Laszlo_Molnar_John_Reiser YRP/UPX_wwwupxsourceforgenet YRP/UPXv20MarkusLaszloReiser YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/UPX293300LZMAMarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature
4b0f9f1ba6b410db84a50e2969c113b6812c4c9425da1609174f3037c8db6840	PE32	2024-09-27 09:11:20 UTC	User Submission	YRP/Big_Numbers1 YRP/Big_Numbers2 YRP/Big_Numbers3 [+] YRP/Big_Numbers4 YRP/Big_Numbers5 YRP/CRC32_poly_Constant YRP/Delphi_CompareCall YRP/IP YRP/contentis_base64 YRP/domain YRP/url YRP/excel_XML YRP/hpgl YRP/pgml YRP/rip YRP/amf YRP/x3d YRP/_3dxml YRP/disable_dep YRP/escalate_priv YRP/win_registry YRP/win_token YRP/win_files_operation YRP/android_meterpreter YRP/suspicious_packer_section YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/borland_delphi
307dd4b02d3719935565c4ec95211920b7aee40aa52242a462fc186036217b15	PE32	2024-09-27 09:11:11 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/gif_animated [+] YRP/gif_bitmap YRP/gif89a_bitmap YRP/jpeg YRP/gem YRP/win_files_operation YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature
77b2348b64c95e0d4f3cebe6dee98081f8b0212099bd2c98fcb86985311665ea	PE32	2024-09-27 09:11:02 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain [+] YRP/url YRP/Safeguard_103_Simonzh YRP/IsPE32 YRP/IsConsole YRP/Cygwin FlorianRoth/DragonFly_APT_Sep17_3
cdd8082678f0d619a51a379a65aa32574ba400b8859cfe9b42141bfa483518b5	data	2024-09-27 09:10:59 UTC	User Submission	CuckooSandbox/shellcode YRP/Delphi_Random YRP/Delphi_FormShow [+] YRP/contentis_base64 YRP/domain YRP/gif_bitmap YRP/gem YRP/prc YRP/Antivirus YRP/Misc_Suspicious_Strings YRP/Borland
c3315240cd7bb85eaba0da5de908feeae712bf103d66a6325be7938430293df7	PDF	2024-09-27 09:10:55 UTC	User Submission	YRP/invalid_xref_numbers YRP/contentis_base64 YRP/domain [+] YRP/android_meterpreter