MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
e5e955d0e65dc8c52751ea5974433eecc951772def9f84fdce5f3dd7b53927f8	PE32	2024-09-28 14:28:38 UTC	User Submission	YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/contentis_base64 [+] YRP/domain YRP/Antivirus YRP/Dropper_Strings YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI YRP/IsBeyondImageSize YRP/borland_delphi FlorianRoth/DragonFly_APT_Sep17_3
c4aa5c283bb59a1e439a9aad64c91ac6b454b6e16b7c5ce01dbe8881b7a81946	PE32	2024-09-28 14:28:33 UTC	User Submission	YRP/Delphi_Random YRP/Delphi_CompareCall YRP/Delphi_Copy [+] YRP/Delphi_StrToInt YRP/contentis_base64 YRP/domain YRP/gem YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/keylogger YRP/win_registry YRP/win_files_operation YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/BobSoft_Mini_Delphi_BoB_BobSoft_additional YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/BobSoftMiniDelphiBoBBobSoft YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/borland_delphi
55602b36ca1082087b63bd3bde44307e8d9704375cdcc043027d45098fc0ac1a	PE32	2024-09-28 14:28:25 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/domain YRP/IsPE32 [+] YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasModified_DOS_Message FlorianRoth/DragonFly_APT_Sep17_3 FlorianRoth/Sality_Malware_Oct16
56d5aeee6498f234257aaba3471d31076a7c38af79287769873036d40e056859	PE32	2024-09-28 14:28:23 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/win_registry [+] YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/suspicious_packer_section YRP/ASPack_v212_additional YRP/ASPack_v212 YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/ASPack_212withouth_Poly_Solodovnikov_Alexey YRP/ASPack_v212_Alexey_Solodovnikov YRP/ASPackv212AlexeySolodovnikov YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked
2ab89544f222025beebc02a635bcd1ed75a51ff776c33799e39fc1e16e8859d9	PE32	2024-09-28 14:28:21 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/gem [+] YRP/wmf YRP/prc YRP/SEH__vba YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature
1ae59b89250df5c47bf875ebf060588ff739a0a3ecd487f4390a2caa333a554f	PE32	2024-09-28 14:28:18 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/url YRP/excel_2007 YRP/corel_draw_compressed YRP/odg YRP/_3dxml_compressed YRP/network_dropper YRP/screenshot YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/suspicious_packer_section YRP/UPX YRP/UPX_v30_EXE_LZMA_Markus_Oberhumer_Laszlo_Molnar_John_Reiser_additional YRP/UPX_302 YRP/UPX_293_LZMA YRP/UPX_wwwupxsourceforgenet_additional YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/UPX_293_300_LZMA YRP/UPX_293_LZMA_additional YRP/UPX_v30_EXE_LZMA_Markus_Oberhumer_Laszlo_Molnar_John_Reiser YRP/UPX_293_300_LZMA_Markus_Oberhumer_Laszlo_Molnar_John_Reiser YRP/UPX_wwwupxsourceforgenet YRP/UPXv20MarkusLaszloReiser YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/UPX293300LZMAMarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature
5642916b63b6c45d4eb8c1f515c8d12dc1b305c6cf63eb653a62098fcf03cf18	PDF	2024-09-28 14:28:13 UTC	User Submission	YRP/invalid_trailer_structure YRP/multiple_versions YRP/contentis_base64 [+] YRP/domain YRP/url YRP/pdf
80defe7720bdaf395fae4b5ce60742627bab272f72071f610d1368aecdb64d3e	PE32	2024-09-28 14:28:05 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain [+] YRP/Safeguard_103_Simonzh YRP/PE_Crypt_102 YRP/PE_Crypt32_v102_additional YRP/PE_Crypt_v102 YRP/PE_Crypt32_v102 YRP/PE_Crypt32_102_randomkilla_and_acpizer YRP/PE_Crypt_v100v101_additional YRP/PE_Crypt_v102_additional YRP/PE_Crypt32_Console_v10_v101_v102_additional YRP/FSG_v110_Eng_dulekxt_Microsoft_Visual_C_Basic_NET YRP/PE_Crypt_102_randomkilla_and_acpizer YRP/Borland YRP/PECrypt32v102 YRP/PECrypt102 YRP/PECryptv102 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked
def993e1f34872ee795b269c175e9a89261f880251f1cce13c7352de2c5f2c9a	PE32	2024-09-28 14:28:03 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/Antivirus [+] YRP/SEH__vba YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature
19ba9bd8be14df5b29951611d22523be92f655ea33691264a4588cb9e8941bd7	GIF	2024-09-28 14:27:52 UTC	User Submission	YRP/Big_Numbers1 YRP/webshell_Shell_ci_Biz_was_here_c100_v_xxx YRP/Webshell_c100 [+] YRP/IP YRP/contentis_base64 YRP/domain YRP/url YRP/gif_bitmap YRP/stl YRP/android_meterpreter