MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
61106fe9d5b7e231b3c6f076069cd4c277b88c0c2248802e2644d683d3fb8972	PE32	2024-10-01 13:11:09 UTC	User Submission	YRP/Delphi_Copy YRP/contentis_base64 YRP/domain [+] YRP/gem YRP/Browsers YRP/ThreadControl__Context YRP/network_dropper YRP/rat_webcam YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDebugData YRP/HasModified_DOS_Message YRP/borland_delphi
f98048455a4ff94b8302ae12da921c8f6ee7d7d599e2e9eb0754adb0ec8787ac	PE32	2024-10-01 13:11:07 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 YRP/domain [+] YRP/DebuggerException__SetConsoleCtrl YRP/escalate_priv YRP/win_token YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Borland_Cpp_DLL YRP/Borland_Cpp_for_Win32_1999 YRP/Borland YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay
eeaf1f1ff3a6b2da87a5ac8d34d3ae99c1ab4d4a6daef19e501c0b2182f09d26	PE32	2024-10-01 13:11:04 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain [+] YRP/EXECryptor_V22X_V24X_StrongBit_Technology_SignByfly YRP/EXE_Cryptor_v240_v241_or_newer YRP/EXECryptor_V22X_V24X_StrongBit_Technology YRP/EXECryptor2223compressedcodewwwstrongbitcom YRP/EXECryptor224StrongbitSoftCompleteDevelopmenth3 YRP/EXECryptor2xxmaxcompressedresources YRP/EXECryptorV22Xsoftcompletecom YRP/EXECryptor2223protectedIAT YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature
4e35819d2c2d8236b883ca043ab3ea3255276b906dd1b79c848f863c0d4fb6d9	PE32	2024-10-01 13:11:01 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/prc YRP/Misc_Suspicious_Strings YRP/EXECryptor_V22X_V24X_StrongBit_Technology_SignByfly YRP/EXE_Cryptor_v240_v241_or_newer YRP/EXECryptor_V22X_V24X_StrongBit_Technology YRP/Borland YRP/EXECryptor2223compressedcodewwwstrongbitcom YRP/EXECryptor224StrongbitSoftCompleteDevelopmenth3 YRP/EXECryptor2xxcompressedresources YRP/EXECryptorV22Xsoftcompletecom YRP/EXECryptor2223protectedIAT YRP/IsPE32 YRP/IsConsole YRP/IsPacked YRP/HasOverlay
faa4b946ff83ef52cee088ef05d4a282902562d1da8a212755eb7cafa0833654	PE32	2024-10-01 13:10:47 UTC	User Submission	YRP/CRC32_poly_Constant YRP/VC8_Random YRP/domain [+] YRP/Armadillo_v1xx_v2xx_additional YRP/Microsoft_Visual_Cpp_v70_DLL YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_60_DLL_Debug YRP/Armadillo_v1xx_v2xx YRP/Microsoft_Visual_Cpp_v60_DLL YRP/Microsoft_Visual_Cpp_60 YRP/Armadillov1xxv2xx YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature
6f6cfe638331e2aca785101201198e3d6fd68c10fcc380dda11450090c321379	PE32	2024-10-01 13:10:43 UTC	User Submission	YRP/Big_Numbers0 YRP/Big_Numbers1 YRP/Delphi_Random [+] YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/contentis_base64 YRP/domain YRP/gem YRP/prc YRP/network_dropper YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_files_operation YRP/win_hook YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/BobSoft_Mini_Delphi_BoB_BobSoft_additional YRP/Borland_Delphi_v60_v70 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/BobSoftMiniDelphiBoBBobSoft YRP/IsPE32 YRP/IsWindowsGUI YRP/borland_delphi
bbb3c9e397c6e82dbc56d7005d46f87bf567c1044ed2738b31bcc6cb88e0cfb0	PE32	2024-10-01 13:10:37 UTC	User Submission	YRP/CRC32_poly_Constant YRP/contentis_base64 YRP/domain [+] YRP/excel_2007 YRP/corel_draw_compressed YRP/odg YRP/_3dxml_compressed YRP/keylogger YRP/Symantec_Visual_Cafe_v30_additional YRP/WinZip_32_bit_SFX_v8x_module_additional YRP/WinZip_32_bit_SFX_v8x_module YRP/WinZip32bitSFXv8xmodule YRP/IsPE32 YRP/IsWindowsGUI YRP/IsBeyondImageSize YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
f7a77ad9188f65a35fd0702990698f8d2fda4ceeb28642b7435c426ca61eceff	PE32	2024-10-01 13:10:35 UTC	User Submission	YRP/CRC32_poly_Constant YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/excel_XML YRP/pgml YRP/amf YRP/prc YRP/x3d YRP/_3dxml YRP/Misc_Suspicious_Strings YRP/escalate_priv YRP/screenshot YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/Nullsoft_PiMP_Stub_SFX YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature
6a746210db0a6931771f8cd9e51d29977e9f5a4a87fff9d19609b8783888d57a	PE32	2024-10-01 13:10:28 UTC	User Submission	YRP/MD5_Constants YRP/contentis_base64 YRP/domain [+] YRP/url YRP/DebuggerException__SetConsoleCtrl YRP/win_mutex YRP/win_private_profile YRP/win_files_operation YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Installer_VISE_Custom_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Installer_VISE_Custom YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature
a4c80ead7b1118fe1d242920794f9327cfb99f8bbf59dd8c2ce4619f5e022ae5	PE32	2024-10-01 13:10:22 UTC	User Submission	YRP/BASE64_table YRP/Delphi_Random YRP/Delphi_FormShow [+] YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/IP YRP/contentis_base64 YRP/domain YRP/gem YRP/wmf YRP/prc YRP/System_Tools YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/network_ssl YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/BobSoft_Mini_Delphi_BoB_BobSoft_additional YRP/Borland_Delphi_v60_v70 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/BobSoftMiniDelphiBoBBobSoft YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/borland_delphi