MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
caa35de2da307c029895d1092fed2881c768114323d4cdd2cd3734c9ff533ea3	PE32	2024-09-27 05:51:16 UTC	User Submission	CuckooSandbox/vmdetect YRP/CRC32_poly_Constant YRP/CRC32_table [+] YRP/MD5_Constants YRP/IP YRP/contentis_base64 YRP/domain YRP/url YRP/Antivirus YRP/VMWare_Detection YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/vmdetect YRP/anti_dbg YRP/network_http YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature
f80886c88c1d6471943d0242568907d30a9178be10d948a5ef5abc90a77a43d6	PDF	2024-09-27 05:51:01 UTC	User Submission	YRP/invalid_xref_numbers YRP/contentis_base64 YRP/domain [+] YRP/url YRP/pdf YRP/android_meterpreter
7862062f396c59579248a204f21d00d1ea7324234d4036e076f5ce7486669c1a	PE32	2024-09-27 05:50:57 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/anti_dbg YRP/win_registry YRP/Visual_Cpp_2005_Release_Microsoft YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature
725e001adf030967d9e0c24a275174fc07323de6e46c2441a282c837ab5b3189	PE32	2024-09-27 05:50:51 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain [+] YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/inject_thread YRP/escalate_priv YRP/screenshot YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
1a682b551f48ad6350693defbb1048b6101df782b951daac0b6fedd28e819312	PE32	2024-09-27 05:50:48 UTC	User Submission	YRP/Big_Numbers1 YRP/Big_Numbers2 YRP/Big_Numbers3 [+] YRP/contentis_base64 YRP/domain YRP/png YRP/rip YRP/wmf YRP/SEH__vba YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/IsBeyondImageSize YRP/HasRichSignature
089e61460a9154487b7396ba9346da7cc66369233cca06b37ff73cddcfcbf4db	PE32	2024-09-27 05:50:46 UTC	User Submission	YRP/CRC32b_poly_Constant YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/excel_XML YRP/gif_bitmap YRP/pgml YRP/amf YRP/prc YRP/x3d YRP/_3dxml YRP/Str_Win32_Winsock2_Library YRP/Microsoft_Visual_Basic_v50 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasModified_DOS_Message
c10b423f08b9f7320d920d847751d766c0bd27c546a5a9a7b30001af649812af	PE32	2024-09-27 05:50:42 UTC	User Submission	YRP/Big_Numbers1 YRP/Big_Numbers2 YRP/Big_Numbers3 [+] YRP/CRC32_poly_Constant YRP/CRC32_table YRP/MD5_Constants YRP/RIPEMD160_Constants YRP/SHA1_Constants YRP/SHA512_Constants YRP/RijnDael_AES_CHAR YRP/RijnDael_AES_LONG YRP/BASE64_table YRP/maldoc_find_kernel32_base_method_1 YRP/maldoc_getEIP_method_1 YRP/IP YRP/contentis_base64 YRP/domain YRP/url YRP/png YRP/excel_XML YRP/gem YRP/pgml YRP/rip YRP/wmf YRP/amf YRP/prc YRP/xaml YRP/x3d YRP/_3dxml YRP/_7z YRP/Browsers YRP/Dropper_Strings YRP/DebuggerException__SetConsoleCtrl YRP/anti_dbg YRP/network_http YRP/network_dga YRP/escalate_priv YRP/screenshot YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature
ff9167b0b438747203f90aebe214b24304873fd921116addd51be351f3841f6e	PE32	2024-09-27 05:50:39 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/gem [+] YRP/Microsoft_Visual_Cpp_v60 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked
82684609b361f85b40ccb8e8fba8e9522bdd1242c45e03128cee6536c2e6ebac	PE32	2024-09-27 05:50:35 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain [+] YRP/suspicious_packer_section YRP/NsPacK_V36_LiuXingPing_additional YRP/NsPacK_V36_LiuXingPing YRP/NSPack_3x_Liu_Xing_Ping_additional YRP/NSPack_3x_Liu_Xing_Ping YRP/NsPack_3x_Liu_Xing_Ping YRP/NSPack3xLiuXingPing YRP/NsPacKV36LiuXingPing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay
db52e3608c09c7248db96f6ce43ae650988861c792bac6b1e08a042f3b02d451	Dalvik	2024-09-27 05:50:32 UTC	User Submission	YRP/Big_Numbers1 YRP/Big_Numbers3 YRP/CRC32_poly_Constant [+] YRP/CRC32b_poly_Constant YRP/MD5_Constants YRP/RijnDael_AES_CHAR YRP/RijnDael_AES_LONG YRP/BASE64_table YRP/possible_exploit YRP/ppaction YRP/IP YRP/contentis_base64 YRP/domain YRP/url YRP/avi YRP/anime_music_video YRP/excel_2007 YRP/excel_XML YRP/gif_bitmap YRP/ai_compressed YRP/corel_draw_graohic YRP/corel_draw_compressed YRP/gem YRP/odg YRP/pgml YRP/rip YRP/wmf YRP/amf YRP/jt YRP/prc YRP/u3d YRP/x3d YRP/_3dxml YRP/_3dxml_compressed YRP/Qemu_Detection YRP/android_meterpreter YRP/suspicious_packer_section YRP/possible_includes_base64_packed_functions