MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
27e541d8355650c94c1f2e9eee4c64b73101a706001b72f7a36ecd1ae75689aa	PE32	2024-09-29 14:56:05 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/excel_2007 YRP/excel_XML YRP/corel_draw_compressed YRP/gem YRP/odg YRP/pgml YRP/amf YRP/xaml YRP/x3d YRP/_3dxml YRP/_3dxml_compressed YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/IsPacked
e3ed8ea3d6be3f5b09a771057ab2f01d5724a2c7ad8840375ef74039781f20f2	PE32	2024-09-29 14:55:56 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/png [+] YRP/gem YRP/win_private_profile YRP/win_files_operation YRP/MoleBoxPro_2522_Mole_Studio YRP/Safeguard_103_Simonzh YRP/MoleBox_V23X_MoleStudiocom YRP/MoleBox_V2X_MoleStudiocom_additional YRP/MoleBox_v20_additional YRP/MoleBox_v20 YRP/MoleBox_V2X_MoleStudiocom YRP/MoleBoxv20 YRP/MoleBoxV23XMoleStudiocom YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature
421fc6978ddb5dfacdb8d835c84e83ffc8e5dfc55f2e6dd4995b82572170bbcb	PE32	2024-09-29 14:55:51 UTC	User Submission	YRP/CRC32_poly_Constant YRP/CRC32_table YRP/RijnDael_AES [+] YRP/RijnDael_AES_CHAR YRP/RijnDael_AES_LONG YRP/contentis_base64 YRP/domain YRP/nullsoft_streaming_video YRP/excel_2007 YRP/gif_bitmap YRP/corel_draw_compressed YRP/odg YRP/_3dxml_compressed YRP/Misc_Suspicious_Strings YRP/win_registry YRP/win_files_operation YRP/WannaDecryptor YRP/ransom_telefonica YRP/Wanna_Cry_Ransomware_Generic YRP/WannaCry_Ransomware YRP/WannaCry_Ransomware_Dropper YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature FlorianRoth/WannaCry_Ransomware
dc87eb9bc4839b8ab49789a2a49a34b7546a2d6b45938e15f59c7c0a33c143b2	Zip	2024-09-29 14:55:42 UTC	User Submission	CuckooSandbox/shellcode KevTheHermit/JavaDropper
3a84215d6634c38e7da6ad6482e047978babd6e94ebcaaec3653ddcbe16fb5aa	PE32	2024-09-29 14:55:27 UTC	User Submission	YRP/CRC32_poly_Constant YRP/CRC32_table YRP/maldoc_find_kernel32_base_method_1 [+] YRP/contentis_base64 YRP/domain YRP/prc YRP/Dropper_Strings YRP/DebuggerException__SetConsoleCtrl YRP/create_service YRP/network_tcp_socket YRP/escalate_priv YRP/screenshot YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/suspicious_packer_section YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature
dea87d29818d029540aefe5f2616453281a8d9823a1488969700866378927e4f	PE32	2024-09-29 14:55:25 UTC	User Submission	YRP/CRC32_poly_Constant YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/url YRP/gem YRP/screenshot YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section YRP/UPX YRP/PackerUPX_CompresorGratuito_wwwupxsourceforgenet YRP/UPX_wwwupxsourceforgenet_additional YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/UPX_v0896_v102_v105_v124_Markus_Laszlo_overlay YRP/UPX_v0896_v102_v105_v124_Markus_Laszlo_overlay_additional YRP/UPX_wwwupxsourceforgenet YRP/UPXv20MarkusLaszloReiser YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature
25e312b34b52032b86171fcede0d97cbce95f3f67fe3955befd62a69984b3b5b	Zip	2024-09-29 14:55:20 UTC	User Submission	CuckooSandbox/shellcode YRP/Big_Numbers1 YRP/Big_Numbers2 [+] YRP/contentis_base64 YRP/domain YRP/url YRP/png YRP/excel_2007 YRP/jpeg YRP/jpg_with_EXIF YRP/ai_compressed YRP/corel_draw_compressed YRP/gem YRP/hpgl YRP/odg YRP/wmf YRP/_3dxml_compressed YRP/suspicious_packer_section
211da2fd02d506db82c9d81082f5bf78d52909def7b7300f32beaf8d7bec62af	PE32	2024-09-29 14:54:57 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/win_registry [+] YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/IsPacked
2ded21829a6e898e2f6cda861428c8d8cc771c12403cf890dd124aaf18ac969c	PE32	2024-09-29 14:54:55 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/antisb_threatExpert [+] YRP/win_registry YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature
551d6546bf7da172351f252603ea7107a5a5aefdcbd65fe37e211a4a7c16c1aa	PE32	2024-09-29 14:54:52 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain [+] YRP/suspicious_packer_section YRP/_v10_Li_Jianjun YRP/ASPack_1083 YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/ASPack_102b_or_10803 YRP/ASPack_v10803 YRP/ASPack_v10803_Alexey_Solodovnikov YRP/ASPackv10803AlexeySolodovnikov YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature