MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
4da30282ab9270c42909e4dabcbf4e8cdd67e0e316352d8593935e15d506fcd8	PDF	2024-09-27 08:13:57 UTC	User Submission	YRP/invalid_xref_numbers YRP/contentis_base64 YRP/domain [+] YRP/url YRP/pdf
05f7ae9e9064f6f152004dc510752258e0f1776c7bd5b0f9b5466de2bc686277	data	2024-09-27 08:13:52 UTC	User Submission	YRP/Big_Numbers1 YRP/contentis_base64 YRP/domain [+] YRP/url YRP/xaml
f544157af4b7e7c46e0c36b78ef98219312ed2bc9b3d7906a28f2615936f7f04	PE32	2024-09-27 08:13:49 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/wmf YRP/prc YRP/screenshot YRP/keylogger YRP/win_mutex YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasDebugData YRP/HasRichSignature
c806e84bc73aaa9ec105003ba9f7daf5e5d3a7ea936cf2671586e97c6d9256ca	Windows	2024-09-27 08:13:43 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/gif_bitmap [+] YRP/rip YRP/prc
ad11c4070f019f4a87e991e2da008f5540d19c1ae16a138cf6d00756e7a953c2	PE32	2024-09-27 08:13:32 UTC	User Submission	YRP/MD5_Constants YRP/Delphi_Random YRP/Delphi_FormShow [+] YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/IP YRP/contentis_base64 YRP/domain YRP/gem YRP/rip YRP/wmf YRP/prc YRP/System_Tools YRP/Browsers YRP/VM_Generic_Detection YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/ThreadControl__Context YRP/disable_antivirus YRP/inject_thread YRP/hijack_network YRP/create_service YRP/network_udp_sock YRP/network_tcp_listen YRP/network_dropper YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/sniff_audio YRP/spreading_share YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/DarkComet_1 YRP/DarkComet_3 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI YRP/borland_delphi FlorianRoth/RAT_DarkComet KevTheHermit/DarkComet
673984468a5c441cb496699ae8565ef1c360c633e95dfd07ca43dac68af0ef97	PDF	2024-09-27 08:13:29 UTC	User Submission	YRP/invalid_trailer_structure YRP/multiple_versions YRP/contentis_base64 [+] YRP/domain YRP/url YRP/pdf
df8c2a40c95c32cfd14666d8b595fe44df58f34784dece3ff661220ef5566527	PE32	2024-09-27 08:13:26 UTC	User Submission	YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/maldoc_find_kernel32_base_method_1 [+] YRP/contentis_base64 YRP/domain YRP/gem YRP/wmf YRP/inject_thread YRP/win_registry YRP/win_files_operation YRP/suspicious_packer_section YRP/UPX YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/UPXv20MarkusLaszloReiser YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/UPX20030XMarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 YRP/IsWindowsGUI YRP/borland_delphi
c7a28126c1763e75e69bd78452e830643a6e29283f50065d403734195f375165	Zip	2024-09-27 08:13:17 UTC	User Submission	CuckooSandbox/shellcode YRP/Big_Numbers1 YRP/IP [+] YRP/contentis_base64 YRP/domain YRP/url YRP/png YRP/avi YRP/gif_animated YRP/anime_music_video YRP/nullsoft_streaming_video YRP/excel_2007 YRP/gif_bitmap YRP/gif89a_bitmap YRP/jpeg YRP/jpg_with_EXIF YRP/corel_draw_graohic YRP/corel_draw_compressed YRP/gem YRP/hpgl YRP/odg YRP/rip YRP/wmf YRP/jt YRP/stl YRP/_3dxml_compressed YRP/android_meterpreter YRP/suspicious_packer_section YRP/JavaDropper KevTheHermit/JavaDropper
47f7f64de24a2ec62d506be2d548d922724e1b6f5afbac5753bb65254d42308e	GIF	2024-09-27 08:13:02 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/gif_bitmap YRP/stl YRP/android_meterpreter
57d4b3b8d2cfca090b5646d62a705aa2c53eb30a3f755873b9da4e569bb33db7	PE32	2024-09-27 08:12:55 UTC	User Submission	YRP/domain YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsBeyondImageSize YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3