MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
113f4f807b7735598be885bde1e7291f025def8967491bde1f89bea72bc0c797	PE32	2024-09-28 18:31:56 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/url [+] YRP/gem YRP/anti_dbg YRP/win_files_operation YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasModified_DOS_Message
8182c6e0636b72bd77613c0472e02362aa2b586e62e7e101448f21f3399fb042	PE32	2024-09-28 18:31:51 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain [+] YRP/suspicious_packer_section YRP/NsPack_29_North_Star YRP/nSpack_V2x_LiuXingPing YRP/nSpack_V2x_LiuXingPing_additional YRP/nSpack_V29_LiuXingPing YRP/nSPack_1x2x_North_StarLiu_Xing_Ping YRP/nSpackV2xLiuXingPing YRP/NsPack29NorthStar YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature
0f3b5dba26459219abb003aee890fe9f70c85a3a0cc643501e97653d6d1596fd	PE32	2024-09-28 18:31:48 UTC	User Submission	YRP/MD5_Constants YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/excel_XML YRP/gem YRP/pgml YRP/amf YRP/prc YRP/x3d YRP/_3dxml YRP/AutoIT_compiled_script YRP/Misc_Suspicious_Strings YRP/anti_dbg YRP/inject_thread YRP/network_http YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/AutoIt_2 YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/AutoIt
ee90d7b2d00bccaf7df3417f26592b4e037fb3fad75d3c366fed64097d004445	PE32	2024-09-28 18:31:43 UTC	User Submission	YRP/Big_Numbers1 YRP/contentis_base64 YRP/domain [+] YRP/Misc_Suspicious_Strings YRP/win_registry YRP/win_files_operation YRP/IsPE32 YRP/IsWindowsGUI FlorianRoth/DragonFly_APT_Sep17_3
18c0a2a2856a3c328fc5dd72a34dcc1823772e856b8b343012fda9e529230237	PE32	2024-09-28 18:31:41 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/Check_OutputDebugStringA_iat [+] YRP/anti_dbg YRP/screenshot YRP/win_registry YRP/Armadillo_v1xx_v2xx_additional YRP/Microsoft_Visual_Cpp_60_DLL_additional YRP/Microsoft_Visual_Cpp_v70_DLL YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_60_DLL_Debug YRP/Armadillo_v1xx_v2xx YRP/Microsoft_Visual_Cpp_v60_DLL YRP/Microsoft_Visual_Cpp_60_DLL YRP/Microsoft_Visual_Cpp_60 YRP/Armadillov1xxv2xx YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature
491c1c301330c4e9e3f1da795bf30e58c9c6a31426c82ef1ceb8c340de4f41e6	PDF	2024-09-28 18:31:38 UTC	User Submission	YRP/suspicious_creator YRP/invalid_trailer_structure YRP/multiple_versions [+] YRP/contentis_base64 YRP/domain YRP/url YRP/pdf
af4a2348e70547660f603cae8765c699e8d513d4d7c3ed7c91bf0e1e14e94c81	PE32	2024-09-28 18:31:31 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/gem [+] YRP/xaml YRP/anti_dbg YRP/win_files_operation YRP/android_meterpreter YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature
a0d1d1822293a2b70acf088dffe7194c9f5bf924b76df84e48e1467b3b8d7f15	PE32	2024-09-28 18:31:25 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/suspicious_packer_section [+] YRP/UPX YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
e36950de1717e5146f606a42c79483cc875b3bc0738e145f057e69be8df950fc	PE32	2024-09-28 18:31:15 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/SEH__vba [+] YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature
d7cd65c20d2eb033486e164a03732c0c26d2f13e685054ea8cf28ff2dc9db710	PE32	2024-09-28 18:31:02 UTC	User Submission	YRP/domain YRP/suspicious_packer_section YRP/UPX [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/IsBeyondImageSize YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3