MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
cdf632ba4b19cb5fff6afe5d5a048026ef186954ed5ef7948d8582698ec86789	PE32	2024-09-30 10:50:06 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/gem [+] YRP/screenshot YRP/win_mutex YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDebugData YRP/HasRichSignature
01c922e82aad17cca0aff9d625e47c73bbf296116d7cd065520bd27ce484d4b0	PE32	2024-09-30 10:50:00 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 YRP/domain [+] YRP/tElock_V099_10_Private_tE YRP/tElock_V099_V10_Private_tE YRP/tElock_099_10_private_tE YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/IsPacked
f72880db4fad8ae65ae7eb24ba51506daf6ff086856186ba97d80c39312a3a14	PE32	2024-09-30 10:49:53 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/gem [+] YRP/SEH__vba YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature
240e94bf8a28e2104c6aded0c7ffffd0ed3d5f34af20defac6db69abf08b1b32	C++	2024-09-30 10:49:50 UTC	User Submission	YRP/ak74shell_php_php YRP/WebShell_AK_74_Security_Team_Web_Shell_Beta_Version YRP/contentis_base64 [+] YRP/domain YRP/url YRP/android_meterpreter YRP/php_uname
c9344bcf3b9937135c5abbecfc901f0216f336e5345082639aeaa8e644555579	PE32	2024-09-30 10:49:46 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/Antivirus [+] YRP/network_dropper YRP/win_private_profile YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Armadillo_v1xx_v2xx_additional YRP/Microsoft_Visual_Cpp_60_DLL_additional YRP/Microsoft_Visual_Cpp_v70_DLL YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_60_DLL_Debug YRP/Armadillo_v1xx_v2xx YRP/Microsoft_Visual_Cpp_v60_DLL YRP/Microsoft_Visual_Cpp_60_DLL YRP/Microsoft_Visual_Cpp_60 YRP/Armadillov1xxv2xx YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
0238a932f3aa9abf3034b69743478b81a6a83b711d77050282266ca2da75f311	PE32	2024-09-30 10:49:44 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/ThreadControl__Context [+] YRP/network_tcp_socket YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/suspicious_packer_section YRP/UPX YRP/Armadillo_v2xx_CopyMem_II_additional YRP/Microsoft_Visual_Cpp_70_MFC YRP/UPXv20MarkusLaszloReiser YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature
7045bc7dc92eec993626f60c79df95a175087d441e20c30787a4850dd9f40d51	PE32	2024-09-30 10:49:39 UTC	User Submission	YRP/TEAN YRP/maldoc_find_kernel32_base_method_1 YRP/IP [+] YRP/contentis_base64 YRP/domain YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/escalate_priv YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasDebugData YRP/HasRichSignature
a3c836cbae1fb9617e73e8cb9f3c1c3653cd2cf1e35a0776ee0c88f2fd911e97	PE32	2024-09-30 10:49:37 UTC	User Submission	YRP/BASE64_table YRP/contentis_base64 YRP/domain [+] YRP/rip YRP/prc YRP/System_Tools YRP/Browsers YRP/Antivirus YRP/VM_Generic_Detection YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/inject_thread YRP/create_service YRP/network_tcp_listen YRP/network_tcp_socket YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/sniff_audio YRP/rat_rdp YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Installer_VISE_Custom_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Installer_VISE_Custom YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature FlorianRoth/ZxShell_Related_Malware_CN_Group_Jul17_1 FlorianRoth/Gen_Net_LocalGroup_Administrators_Add_Command FlorianRoth/GhostDragon_Gh0stRAT
d4fa6e682e7257083ba6c39253103e67f3a12303566f56e21c781dd14fe56cda	PE32	2024-09-30 10:49:34 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/win_files_operation [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature
6411e09d5ad0fdf56d7058a7a8cdd0191eddc1bc362657f64f095bc7d29286e0	PE32	2024-09-30 10:49:32 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/DebuggerException__SetConsoleCtrl [+] YRP/escalate_priv YRP/win_token YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Borland_Cpp_DLL YRP/Borland_Cpp_for_Win32_1999 YRP/Borland YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay