MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
abf7479f8f70c4c9633bc3d973d88ed1e99ae205c571f290fd313f77fd962971	PE32	2024-09-30 08:55:15 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/url [+] YRP/SEH__vba YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
d3c2c5b1af9e0b72ec4314d5c9ff621e802dd3efc2346a99ec58718137b9ebf2	PE32	2024-09-30 08:55:13 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/gem [+] YRP/wmf YRP/SEH__vba YRP/escalate_priv YRP/win_mutex YRP/win_registry YRP/win_token YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature
1f7c899d661744d696adb52facf81ffcfcb588c9cd8419a0dfa653f7ddc57663	PE32	2024-09-30 08:55:10 UTC	User Submission	CuckooSandbox/vmdetect YRP/CRC32_poly_Constant YRP/CRC32_table [+] YRP/CRC32b_poly_Constant YRP/MD5_Constants YRP/BASE64_table YRP/IP YRP/contentis_base64 YRP/domain YRP/url YRP/excel_XML YRP/gem YRP/pgml YRP/rip YRP/wmf YRP/amf YRP/jt YRP/x3d YRP/_3dxml YRP/_7z YRP/System_Tools YRP/Browsers YRP/RE_Tools YRP/Antivirus YRP/VMWare_Detection YRP/VirtualBox_Detection YRP/Qemu_Detection YRP/vmdetect YRP/anti_dbg YRP/anti_dbgtools YRP/antivm_virtualbox YRP/antivm_vmware YRP/create_com_service YRP/escalate_priv YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/vmdetect_misc YRP/android_meterpreter YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature
f6f375b2256e84e7578302550e20f43e8fee86cf0ba17cbf1ea53b591b6550f2	PE32	2024-09-30 08:55:08 UTC	User Submission	CuckooSandbox/vmdetect YRP/VC8_Random YRP/maldoc_getEIP_method_1 [+] YRP/IP YRP/contentis_base64 YRP/domain YRP/url YRP/gem YRP/prc YRP/System_Tools YRP/Browsers YRP/Antivirus YRP/VMWare_Detection YRP/VirtualBox_Detection YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/vmdetect YRP/anti_dbg YRP/inject_thread YRP/create_service YRP/network_http YRP/network_dropper YRP/network_tcp_socket YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/vmdetect_misc YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI YRP/HasDebugData YRP/HasModified_DOS_Message YRP/HasRichSignature
bd1734ea2e63a1bd816b23ba05eea4b14c1fd1597c50e545cf581ae44d7b96ec	PE32	2024-09-30 08:55:05 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/screenshot [+] YRP/win_registry YRP/suspicious_packer_section YRP/UPX YRP/UPX_v30_EXE_LZMA_Markus_Oberhumer_Laszlo_Molnar_John_Reiser_additional YRP/UPX_302 YRP/PackerUPX_CompresorGratuito_wwwupxsourceforgenet YRP/UPX_293_LZMA YRP/UPX_wwwupxsourceforgenet_additional YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/UPX_293_300_LZMA YRP/UPX_293_LZMA_additional YRP/UPX_v30_EXE_LZMA_Markus_Oberhumer_Laszlo_Molnar_John_Reiser YRP/UPX_293_300_LZMA_Markus_Oberhumer_Laszlo_Molnar_John_Reiser YRP/UPX_wwwupxsourceforgenet YRP/UPXv20MarkusLaszloReiser YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/UPX293300LZMAMarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature
87cbae9350025d45b056c2e01aa7d2239e061024cad466103d28afe687e4fea8	PE32	2024-09-30 08:55:02 UTC	User Submission	YRP/maldoc_indirect_function_call_3 YRP/maldoc_getEIP_method_1 YRP/IP [+] YRP/contentis_base64 YRP/domain YRP/url YRP/gem YRP/jt YRP/prc YRP/stl YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_files_operation YRP/win_hook YRP/android_meterpreter YRP/suspicious_packer_section YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDebugData YRP/HasRichSignature
1b6474158eb333b0897b59a9e9a955cd299419858ba5a1bde09ef5b28d979af8	PDF	2024-09-30 08:54:59 UTC	User Submission	YRP/invalid_trailer_structure YRP/multiple_versions YRP/contentis_base64 [+] YRP/domain YRP/url YRP/pdf YRP/jpeg
95620d7891d2a58a4c597291545255470b62155a66a8cf65ee54d07392c6002a	PE32	2024-09-30 08:54:56 UTC	User Submission	YRP/Advapi_Hash_API YRP/MD5_Constants YRP/contentis_base64 [+] YRP/domain YRP/gem YRP/prc YRP/Antivirus YRP/antisb_threatExpert YRP/screenshot YRP/win_mutex YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Typical_Malware_String_Transforms YRP/Armadillo_v1xx_v2xx_additional YRP/Microsoft_Visual_Cpp_60_DLL_additional YRP/Microsoft_Visual_Cpp_v70_DLL YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_60_DLL_Debug YRP/Armadillo_v1xx_v2xx YRP/Microsoft_Visual_Cpp_v60_DLL YRP/Microsoft_Visual_Cpp_60_DLL YRP/Microsoft_Visual_Cpp_60 YRP/Armadillov1xxv2xx YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3 FlorianRoth/Typical_Malware_String_Transforms
7845382cac107af5296312afb0f8f1d4ea2d48a433533b0fa8d7d903394a60bc	PE32	2024-09-30 08:54:53 UTC	User Submission	YRP/Big_Numbers3 YRP/CRC32_poly_Constant YRP/RIPEMD160_Constants [+] YRP/SHA1_Constants YRP/IP YRP/contentis_base64 YRP/domain YRP/url YRP/nullsoft_streaming_video YRP/excel_2007 YRP/excel_XML YRP/corel_draw_compressed YRP/gem YRP/odg YRP/pgml YRP/amf YRP/prc YRP/x3d YRP/_3dxml YRP/_3dxml_compressed YRP/Antivirus YRP/Misc_Suspicious_Strings YRP/DebuggerException__SetConsoleCtrl YRP/disable_antivirus YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/Borland_Cpp_DLL YRP/Borland_Cpp_for_Win32_1999 YRP/Borland_Cpp_DLL_additional YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/borland_cpp
b61fa0d9b35b1dab7772c63a87d39fc29e0461743c95678a9267b74fde02562b	Microsoft	2024-09-30 08:54:50 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/gem [+] YRP/rip