MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
7b34351c6706552d32b3af2887cf8a0bb1eca3164710e9d30b9497a12af6a6e2	PE32	2024-10-01 02:17:13 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/Stelth_PE_101_BGCorp [+] YRP/Stelth_PE_101_BGCorp_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/ImportTableIsBad YRP/HasRichSignature
0545361a88c212bad4896c90d55f57c1e47af1f90d61c028c09be895d97a6fee	PE32	2024-10-01 02:17:09 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/url [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasDebugData YRP/HasRichSignature
6da21797c815abfafd9eafe7a8f003aeffa68ffad2c711a83d849135b8849d32	PE32	2024-10-01 02:17:06 UTC	User Submission	YRP/CRC32_poly_Constant YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/url YRP/excel_XML YRP/gem YRP/pgml YRP/amf YRP/x3d YRP/_3dxml YRP/screenshot YRP/win_registry YRP/suspicious_packer_section YRP/UPX YRP/UPX_v0896_v102_v105_v122_Delphi_stub_additional YRP/UPX_v0896_v102_v105_v122_Delphi_stub_Laszlo_Markus YRP/PackerUPX_CompresorGratuito_wwwupxsourceforgenet YRP/UPX_wwwupxsourceforgenet_additional YRP/MSLRH_V031_emadicius YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/UPX_v0896_v102_v105_v122_Delphi_stub YRP/UPX_wwwupxsourceforgenet YRP/UPXv20MarkusLaszloReiser YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/UPXProtectorv10x2 YRP/UPX20030XMarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature
d849fff76d6eb6752484a96ed68adafec3a1bf25a4ccb248306361dd33041bf2	PE32	2024-10-01 02:16:59 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/suspicious_packer_section [+] YRP/UPX YRP/PackerUPX_CompresorGratuito_wwwupxsourceforgenet YRP/UPX_wwwupxsourceforgenet_additional YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/UPX_v0896_v102_v105_v124_Markus_Laszlo_overlay YRP/UPX_v0896_v102_v105_v124_Markus_Laszlo_overlay_additional YRP/UPX_wwwupxsourceforgenet YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasModified_DOS_Message
0a40b462610d7132faaea76024de9c3113c8c7b8547a280f2de5a448e685063f	PE32	2024-10-01 02:16:53 UTC	User Submission	CuckooSandbox/vmdetect YRP/Advapi_Hash_API YRP/Delphi_CompareCall [+] YRP/Delphi_Copy YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 YRP/domain YRP/Browsers YRP/Sandboxie_Detection YRP/VirtualPC_Detection YRP/VirtualBox_Detection YRP/Dropper_Strings YRP/Obfuscated_Strings YRP/Check_Dlls YRP/vmdetect YRP/anti_dbg YRP/anti_dbgtools YRP/antisb_joesanbox YRP/antisb_anubis YRP/antisb_threatExpert YRP/antisb_sandboxie YRP/antisb_cwsandbox YRP/antivm_virtualbox YRP/inject_thread YRP/dyndns YRP/keylogger YRP/cred_local YRP/cred_ff YRP/cred_ie7 YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/CyberGate YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/borland_delphi FlorianRoth/RAT_CyberGate KevTheHermit/CyberGate BAMFDetect/CyberGate
f64191cf4c3ee849ba003cf3de20302e6de64d1c5ee8a2b3eacc25288f4d2274	PE32	2024-10-01 02:16:44 UTC	User Submission	YRP/VC8_Random YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/url YRP/gem YRP/wmf YRP/prc YRP/Browsers YRP/Dropper_Strings YRP/anti_dbg YRP/network_http YRP/network_dropper YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature
3c67bd502101dc75ed51e4c6b75ab80402c3d2ea7214cca2526f75be9383e9b5	MS-DOS	2024-10-01 02:16:39 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/url YRP/MPRESS_V200_V20X_MATCODE_Software_20090423 YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/mpress_2_xx_x86 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasModified_DOS_Message
faac788b1e22160b5516b6756e95868364350b8e7effff7f6ec3d765ceecd89e	PE32	2024-10-01 02:16:36 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/gem [+] YRP/keylogger YRP/win_registry YRP/suspicious_packer_section YRP/ASProtect_v123_RC1 YRP/ASProtect_v12x_New_Strain_additional YRP/Microsoft_Visual_Basic_v50 YRP/ASProtect_v12x_New_Strain YRP/ASProtect_v11_BRS YRP/ASProtect_V2X_Registered_Alexey_Solodovnikov YRP/ASProtect_133_21_Registered_Alexey_Solodovnikov YRP/VMProtect_1704_phpbb3 YRP/ASProtect_v12_additional YRP/ASProtect_123_RC4_130824_Solodovnikov_Alexey YRP/ASProtect_133_21_Registered_Alexey_Solodovnikov_additional YRP/ASProtectSKE21xexeAlexeySolodovnikov YRP/ASProtect13321RegisteredAlexeySolodovnikov YRP/ASProtectv12xNewStrain YRP/ASProtectv123RC1 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay
97cdcd5f11be5862c0062a038a261f20160a39cbf4a667eedf3335ca9823379e	PE32	2024-10-01 02:16:28 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 YRP/domain [+] YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature
d5259f2e017ca81d76e76fdf43908f62b4d7a21cc2ac4d78147f8983d6323b4e	PE32	2024-10-01 02:16:25 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/disable_antivirus [+] YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Nullsoft_PIMP_Install_System_v13x_Nullsoft YRP/Nullsoft_PIMP_Install_System_v13x YRP/NullsoftPIMPInstallSystemv13x YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3