MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
b2cf94e98a8d9206aaa12c505c763f0ef393f5685c30bb7f6cb22cd9384a096f	PE32	2024-10-01 04:51:58 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/hpgl [+] YRP/keylogger YRP/win_registry YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/suspicious_packer_section YRP/ASPack_v212_additional YRP/ASPack_v21_additional YRP/ASProtect_V2X_DLL_Alexey_Solodovnikov YRP/ASPack_v212 YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/ASPack_v211d YRP/ASProtect_V2X_DLL_Alexey_Solodovnikov_additional YRP/ASPack_212withouth_Poly_Solodovnikov_Alexey YRP/ASPack_v212_Alexey_Solodovnikov YRP/ASPackv212AlexeySolodovnikov YRP/ASProtectV2XDLLAlexeySolodovnikov YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay
b9079aa967baa788fddbd24626af0718c923a9500d1ac6c239f7c8a0bd6c5f31	PE32	2024-10-01 04:51:55 UTC	User Submission	YRP/Big_Numbers0 YRP/contentis_base64 YRP/domain [+] YRP/url YRP/png YRP/jt YRP/prc YRP/System_Tools YRP/Antivirus YRP/network_dropper YRP/screenshot YRP/win_mutex YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature
9a80228d92d742895a6c281876fce99cf1aa1c8c2d2922698c024079dca52390	PE32	2024-10-01 04:51:53 UTC	User Submission	YRP/maldoc_indirect_function_call_3 YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/gem YRP/screenshot YRP/suspicious_packer_section YRP/UPX YRP/UPX_wwwupxsourceforgenet_additional YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/Netopsystems_FEAD_Optimizer_1 YRP/UPX_290_LZMA YRP/UPX_290_LZMA_Markus_Oberhumer_Laszlo_Molnar_John_Reiser YRP/UPX_290_LZMA_additional YRP/UPX_wwwupxsourceforgenet YRP/UPXv20MarkusLaszloReiser YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/UPX20030XMarkusOberhumerLaszloMolnarJohnReiser YRP/UPX290LZMAMarkusOberhumerLaszloMolnarJohnReiser YRP/upx_3 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay
b3837544e557b26f031e063f4fa5f54ebf4fbc807574453130afcfa96ff2a71a	Java	2024-10-01 04:51:48 UTC	User Submission	YRP/Big_Numbers0 YRP/contentis_base64 YRP/domain [+] YRP/png YRP/ogg YRP/nullsoft_streaming_video YRP/sqlite YRP/excel_2007 YRP/gif_bitmap YRP/corel_draw_compressed YRP/gem YRP/hvif YRP/odg YRP/rip YRP/_3dxml_compressed YRP/Qemu_Detection YRP/suspicious_packer_section YRP/with_sqlite YRP/JavaDropper YRP/possible_includes_base64_packed_functions KevTheHermit/JavaDropper
a075376bd0e6711f73f2997dc32f6be24555702830cb38a58dc6deff930ede28	PE32	2024-10-01 04:51:42 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/suspicious_packer_section [+] YRP/ASPack_v212_additional YRP/ASPack_v21_additional YRP/ASProtect_V2X_DLL_Alexey_Solodovnikov YRP/ASPack_v212 YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/ASPack_v211d YRP/ASProtect_V2X_DLL_Alexey_Solodovnikov_additional YRP/ASPack_212withouth_Poly_Solodovnikov_Alexey YRP/ASPack_v212_Alexey_Solodovnikov YRP/ASPackv212AlexeySolodovnikov YRP/ASProtectV2XDLLAlexeySolodovnikov YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature
aca1cd2e43b6279f90e11340e493e7ea231e59ba015f9364f1b65bf9152896fd	PE32	2024-10-01 04:51:40 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/suspicious_packer_section [+] YRP/UPX YRP/PackerUPX_CompresorGratuito_wwwupxsourceforgenet YRP/UPX_wwwupxsourceforgenet_additional YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/Netopsystems_FEAD_Optimizer_1 YRP/UPX_290_LZMA YRP/UPX_290_LZMA_Markus_Oberhumer_Laszlo_Molnar_John_Reiser YRP/UPX_290_LZMA_additional YRP/UPX_wwwupxsourceforgenet YRP/UPXv20MarkusLaszloReiser YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/UPX290LZMAMarkusOberhumerLaszloMolnarJohnReiser YRP/upx_3 YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature
ed00f77767519569f84ba0457df67688851011b8aca302f15f0f38cc2d9f0ee5	PE32	2024-10-01 04:51:37 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/png YRP/excel_XML YRP/pgml YRP/amf YRP/prc YRP/xaml YRP/x3d YRP/_3dxml YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/disable_dep YRP/keylogger YRP/Njrat YRP/njrat1 YRP/win_exe_njRAT YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI FlorianRoth/RAT_njRat KevTheHermit/njRat BAMFDetect/njrat
f0a4d0f221169aaf1d24fda090e11e01f825078b644ca82c37a0a8e87e196e19	PE32	2024-10-01 04:51:35 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/XOR_4byte_Key [+] YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message FlorianRoth/XOR_4byte_Key
a674f02df207d02d8452579a881af7ba5c79d2624ed03b9bf33c5ad07e684af5	PE32	2024-10-01 04:51:32 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 YRP/domain [+] YRP/DebuggerException__SetConsoleCtrl YRP/escalate_priv YRP/win_token YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Borland_Cpp_DLL YRP/Borland_Cpp_for_Win32_1999 YRP/Borland YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay
1d8f5b5a4339a0eb846e10109010e4447aba84757b939675e1ad03905de69771	PE32	2024-10-01 04:51:24 UTC	User Submission	YRP/CRC32_poly_Constant YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/gem YRP/_7z YRP/win_files_operation YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature