MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
f45f58bdc1cabbd6df590012db9b4408b758fda711aed8064a0752574522f274	PE32	2024-09-28 03:08:28 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 YRP/domain [+] YRP/prc YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
2194437f81ba66a8d54bd85fdd062e77faa196e6161f567a8d6445c7baebc0f0	PE32	2024-09-28 03:08:26 UTC	User Submission	YRP/CRC32_poly_Constant YRP/CRC32_table YRP/MD5_Constants [+] YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 YRP/domain YRP/url YRP/excel_2007 YRP/corel_draw_compressed YRP/gem YRP/odg YRP/rip YRP/_3dxml_compressed YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasModified_DOS_Message
946bfc3c1bfdbaaf5b830a6aa2a488037aff8c95304adde7b34a7a39158decdb	PE32	2024-09-28 03:08:23 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/gem [+] YRP/ThreadControl__Context YRP/XtremeRATCode YRP/XtremeRATStrings YRP/XtremeRAT YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/MinGW_1
d983508bbb2e7758e895911b6ca9607a04a940abdd260dac8aadb0f56fecea4b	PE32	2024-09-28 03:08:18 UTC	User Submission	YRP/Advapi_Hash_API YRP/CRC32_poly_Constant YRP/CRC32_table [+] YRP/BASE64_table YRP/IP YRP/contentis_base64 YRP/domain YRP/url YRP/jpeg YRP/gem YRP/prc YRP/Browsers YRP/anti_dbg YRP/network_tcp_socket YRP/network_dns YRP/screenshot YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section YRP/UPX YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/UPXv20MarkusLaszloReiser YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature
f21a7e31319c982d4bf9e834ed7237cf0ec53a7139fc7a016e7a9a0f15c81772	PE32	2024-09-28 03:08:14 UTC	User Submission	YRP/BASE64_table YRP/contentis_base64 YRP/domain [+] YRP/gem YRP/prc YRP/System_Tools YRP/DebuggerCheck__QueryInfo YRP/DebuggerHiding__Thread YRP/ThreadControl__Context YRP/network_http YRP/escalate_priv YRP/screenshot YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/suspicious_packer_section YRP/UPX YRP/Armadillo_v1xx_v2xx_additional YRP/Microsoft_Visual_Cpp_60_DLL_additional YRP/Microsoft_Visual_Cpp_v70_DLL YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_60_DLL_Debug YRP/Armadillo_v1xx_v2xx YRP/Microsoft_Visual_Cpp_v60_DLL YRP/Microsoft_Visual_Cpp_60_DLL YRP/Microsoft_Visual_Cpp_60 YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/Armadillov1xxv2xx YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasRichSignature
9fa5dc4eaa6ae499d3dc802e6a8bb3cac6d39ea60741977b5d77d50f872ac161	PE32	2024-09-28 03:08:11 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/gif_animated [+] YRP/gif_bitmap YRP/gif89a_bitmap YRP/SEH__vba YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature
00521de493a8e794745e410268d554e16bd00a2fb9a5ee88e1eaec4f11e88da9	PE32	2024-09-28 03:08:02 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsConsole FlorianRoth/DragonFly_APT_Sep17_3
cf4fb35a7ed265aaab751d0aaf3e8bf20563b631890b7962daf57086222128ad	PDF	2024-09-28 03:07:56 UTC	User Submission	YRP/invalid_trailer_structure YRP/multiple_versions YRP/contentis_base64 [+] YRP/domain YRP/url YRP/pdf YRP/jpeg
2ec7480e132804279df356f40f779eeaf8b4f7fdc80be5d2c24f0a385079ec0a	PE32	2024-09-28 03:07:40 UTC	User Submission	YRP/Big_Numbers1 YRP/Advapi_Hash_API YRP/MD5_Constants [+] YRP/VC8_Random YRP/maldoc_getEIP_method_1 YRP/IP YRP/contentis_base64 YRP/domain YRP/url YRP/avi YRP/gif_animated YRP/anime_music_video YRP/gif_bitmap YRP/gif89a_bitmap YRP/corel_draw_graohic YRP/gem YRP/rip YRP/wmf YRP/prc YRP/Misc_Suspicious_Strings YRP/inject_thread YRP/hijack_network YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Armadillo_v1xx_v2xx_additional YRP/Microsoft_Visual_Cpp_v70_DLL YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_60_DLL_Debug YRP/Armadillo_v1xx_v2xx YRP/Microsoft_Visual_Cpp_v60_DLL YRP/Microsoft_Visual_Cpp_60 YRP/Armadillov1xxv2xx YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasRichSignature
95dba0c5bfbaf9c07c8af7120048cf27f6f39ea542a540c92c95f8e513caf166	PE32	2024-09-28 03:07:33 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/url YRP/excel_XML YRP/gem YRP/pgml YRP/wmf YRP/amf YRP/prc YRP/xaml YRP/x3d YRP/_3dxml YRP/DebuggerException__SetConsoleCtrl YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Microsoft_Visual_Cpp_V80_Debug YRP/Microsoft_Visual_Cpp_80_Debug_ YRP/Microsoft_Visual_Cpp_80_Debug YRP/NeoLite_vxx YRP/IsPE32 YRP/IsWindowsGUI YRP/HasDebugData YRP/HasRichSignature