MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
be89c0537d29fc4eae3b68b6ca8c02539b949d209261b905024ced667fec2faf	PE32	2024-09-29 20:23:27 UTC	User Submission	YRP/CRC32_poly_Constant YRP/CRC32_table YRP/MD5_Constants [+] YRP/contentis_base64 YRP/domain YRP/prc YRP/screenshot YRP/keylogger YRP/win_files_operation YRP/Microsoft_Visual_Basic_v50 YRP/PureBasic_4x_Neil_Hodgson_additional YRP/PureBasic_4x_Neil_Hodgson YRP/PureBasic4xNeilHodgson YRP/IsPE32 YRP/IsConsole YRP/PureBasic
0c5bc6b9db666e5eb3fcac282d9aac3782d15a6c8ab8e1167836bc4e1735ec99	PE32	2024-09-29 20:23:23 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/url YRP/png YRP/gem YRP/prc YRP/anti_dbg YRP/screenshot YRP/win_registry YRP/win_files_operation YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature
10c2a5ffbf8bf0c3ba087c9d2165a57158844eab065f0e50bcb486d73ba659a4	PE32	2024-09-29 20:23:21 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/gem YRP/Armadillo_v2xx_CopyMem_II_additional YRP/Microsoft_Visual_Cpp_70_MFC YRP/IsPE32 YRP/IsWindowsGUI YRP/HasDebugData
3644015c4cc46007ab9cec5467002bafa7a9920b1f48951f5acb8e1c6ead73bc	PE32	2024-09-29 20:23:18 UTC	User Submission	YRP/Big_Numbers1 YRP/Big_Numbers2 YRP/Big_Numbers3 [+] YRP/Big_Numbers4 YRP/Big_Numbers5 YRP/contentis_base64 YRP/domain YRP/gem YRP/wmf YRP/Antivirus YRP/SEH__vba YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature
7a99b260323282c3fba4a9ccbd2267e02942a42026541c232e71113689044553	MS-DOS	2024-09-29 20:23:15 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/Microsoft_Visual_Cpp_v50v60_MFC [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/ImportTableIsBad YRP/HasModified_DOS_Message FlorianRoth/DragonFly_APT_Sep17_3
58fc4f2ba3b412db67fd6cbedc934a024b63c33d3dbedfb0a28d9dfeb6beda7a	PE32	2024-09-29 20:23:05 UTC	User Submission	YRP/CRC32_poly_Constant YRP/Delphi_Copy YRP/IP [+] YRP/contentis_base64 YRP/domain YRP/url YRP/excel_XML YRP/pgml YRP/amf YRP/x3d YRP/_3dxml YRP/disable_dep YRP/escalate_priv YRP/win_registry YRP/win_token YRP/win_files_operation YRP/suspicious_packer_section YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/borland_delphi
d2972c4bf59aa09704785a2356d0e4e0c0be27d0cd5d8741c14c6f6438230089	PDF	2024-09-29 20:23:02 UTC	User Submission	YRP/Big_Numbers1 YRP/invalid_trailer_structure YRP/multiple_versions [+] YRP/contentis_base64 YRP/domain YRP/url YRP/pdf YRP/jpeg
cc13964c493f57c2a0feb78b666c16acad87530e68520efe4e9c30ae80302259	PE32	2024-09-29 20:22:50 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/gem [+] YRP/wmf YRP/anti_dbg YRP/keylogger YRP/win_registry YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasRichSignature
1e2f3fb4e9e03d3b17c61d7c985619f58e294d9eedbb3d41d2e0ed495df64ea9	PDF	2024-09-29 20:22:47 UTC	User Submission	YRP/invalid_trailer_structure YRP/multiple_versions YRP/contentis_base64 [+] YRP/domain YRP/url YRP/pdf
1af58f6991628f7c4d0017301a97aacfeae68d0462e01ba84356113b44cdbe59	PE32	2024-09-29 20:22:44 UTC	User Submission	YRP/domain YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsBeyondImageSize YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3