MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
1356a5fd4fc5cf564472f4658a366f59f3a60a8371e97918bd283ed5f5b75af9	PE32	2024-09-26 18:39:01 UTC	User Submission	YRP/CRC32_poly_Constant YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/url YRP/excel_XML YRP/pgml YRP/amf YRP/prc YRP/x3d YRP/_3dxml YRP/escalate_priv YRP/screenshot YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/Nullsoft_PiMP_Stub_SFX YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature
ffa0a3e9fd60d5b313286e07408eb5b74899ef315fcfef66fb4ca0fbeee2c86e	PE32	2024-09-26 18:38:58 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/prc YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/screenshot YRP/win_registry YRP/win_token YRP/win_files_operation YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasModified_DOS_Message FlorianRoth/DragonFly_APT_Sep17_3
9e5013384c9e89111d87680ef0d7a1d04ace94dfc94287649b23805cd8eb5a82	PE32	2024-09-26 18:38:56 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/ThreadControl__Context [+] YRP/SEH__vectored YRP/win_registry YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section YRP/UPX YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature
529b941af1d2842ffd8048ebf767e0abc38850a4d8b7273c71b2d28c96286a49	PE32	2024-09-26 18:38:46 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/domain YRP/Microsoft_Visual_Cpp_v50v60_MFC [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasDebugData YRP/IsBeyondImageSize
43e52ec623105cc57747c303d9974afdf55b847cb14bd1717579f46dfeaa5429	XML	2024-09-26 18:38:40 UTC	User Submission	YRP/Big_Numbers1 YRP/contentis_base64 YRP/domain [+] YRP/url YRP/excel_XML YRP/pgml YRP/amf YRP/x3d YRP/_3dxml
340a076b0bb89ce054bc2e9630288dacecf93668197de021e013a4f145f2291f	PE32	2024-09-26 18:38:32 UTC	User Submission	YRP/Advapi_Hash_API YRP/CRC32_poly_Constant YRP/CRC32_table [+] YRP/BASE64_table YRP/IP YRP/contentis_base64 YRP/domain YRP/url YRP/jpeg YRP/gem YRP/prc YRP/Browsers YRP/anti_dbg YRP/network_tcp_socket YRP/network_dns YRP/screenshot YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section YRP/UPX YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/UPXv20MarkusLaszloReiser YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature
11e88ea2b9e181d9ef0403e56fade6bf2b2ffce6ce81e0389a8576d8434b0fef	Zip	2024-09-26 18:38:18 UTC	User Submission	YRP/Big_Numbers1 YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/url YRP/png YRP/avi YRP/gif_animated YRP/anime_music_video YRP/nullsoft_streaming_video YRP/excel_2007 YRP/gif_bitmap YRP/gif89a_bitmap YRP/jpeg YRP/ai_compressed YRP/corel_draw_graohic YRP/corel_draw_compressed YRP/gem YRP/hpgl YRP/odg YRP/rip YRP/wmf YRP/jt YRP/stl YRP/_3dxml_compressed YRP/android_meterpreter YRP/suspicious_packer_section YRP/JavaDropper KevTheHermit/JavaDropper
9f2d214853e5050bdda3310957a3ed743a60eaa9692f2d5baf96a1417134a6f9	PE32	2024-09-26 18:38:06 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/GenerateTLSClientHelloPacket_Test [+] YRP/Armadillo_v1xx_v2xx_additional YRP/Microsoft_Visual_Cpp_v70_DLL YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_60_DLL_Debug YRP/Armadillo_v1xx_v2xx YRP/Microsoft_Visual_Cpp_v60_DLL YRP/Microsoft_Visual_Cpp_60 YRP/Armadillov1xxv2xx YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasRichSignature
d30d6966e389761be3c6f90e429fa0e5eb16bd6d42e89fe79abc58a0a79d288b	PE32	2024-09-26 18:37:57 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/keylogger [+] YRP/win_registry YRP/Borland_Delphi_40_additional YRP/Borland_Delphi_v60_v70_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/BobSoft_Mini_Delphi_BoB_BobSoft_additional YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/BobSoftMiniDelphiBoBBobSoft YRP/D1S1Gv11betaD1N YRP/IsPE32 YRP/IsWindowsGUI YRP/borland_delphi YRP/borland_delphi_dll FlorianRoth/DragonFly_APT_Sep17_3
4739c4d9a87a690ed71ffae08d770b298a00953655d089da877ca2efb948e5d0	PE32	2024-09-26 18:37:52 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/maldoc_getEIP_method_1 YRP/contentis_base64 [+] YRP/domain YRP/gem YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_private_profile YRP/win_hook YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked