MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
f4cf352e39baa1aa55d8abdf059d06f13529d7a4ea6a05d00b05f2f30f113e11	PE32	2024-09-30 23:48:36 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/gem [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature
0c9dea10b6b43cfacdcf55eb1e860bb4c8d3ec71eb03f4c75391aa106ba11b8f	PDF	2024-09-30 23:48:32 UTC	User Submission	YRP/Big_Numbers1 YRP/invalid_trailer_structure YRP/multiple_versions [+] YRP/contentis_base64 YRP/domain YRP/url YRP/pdf YRP/jpeg
e2ffd572211d37b55a4de2051a5c0fdb38f74e3a047fd090441ef62598ea6f08	PE32	2024-09-30 23:48:30 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/IsPE32 [+] YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature
6de09e8c091f3ab484b26a47cf7b8b49cf9f91e60570469b69557d8407f39fa0	GIF	2024-09-30 23:48:26 UTC	User Submission	YRP/webshell_Shell_ci_Biz_was_here_c100_v_xxx YRP/Webshell_c100 YRP/IP [+] YRP/contentis_base64 YRP/domain YRP/url YRP/gif_bitmap YRP/stl YRP/android_meterpreter
8d8f2da6de4a30977d81f1c7eedc31fcbdda95e9b656094f7b8fc5c743b47ad2	PE32	2024-09-30 23:48:17 UTC	User Submission	YRP/CRC32_poly_Constant YRP/CRC32_table YRP/IP [+] YRP/contentis_base64 YRP/domain YRP/url YRP/gif_animated YRP/excel_2007 YRP/excel_XML YRP/gif_bitmap YRP/gif89a_bitmap YRP/corel_draw_compressed YRP/gem YRP/odg YRP/pgml YRP/amf YRP/prc YRP/xaml YRP/x3d YRP/_3dxml YRP/_3dxml_compressed YRP/anti_dbg YRP/escalate_priv YRP/screenshot YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature
e3b42369944efd9a4641cdda445f84651771c4dda48cb3e000aa9c0703a238fe	PE32	2024-09-30 23:48:14 UTC	User Submission	YRP/Big_Numbers1 YRP/CRC32_poly_Constant YRP/CRC32_table [+] YRP/MD5_Constants YRP/contentis_base64 YRP/domain YRP/url YRP/gem YRP/prc YRP/screenshot YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Microsoft_Visual_Cpp_8_additional YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature
e55ce675dfb887354b07161d22f3daba7dfde90c565baec9827abe89cc071771	PE32	2024-09-30 23:48:11 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/wmf YRP/screenshot YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked
6319aed5bcc8f71609847b30634d15edc1de8199a14acbcaa7381e61bc2178d4	PE32	2024-09-30 23:48:08 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/Microsoft_Visual_Cpp_v50v60_MFC [+] YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/IsPE32 YRP/IsWindowsGUI YRP/HasDebugData YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
b7134b1972152108e4072bbdc35dc933a09b8761ad453e5d04e98475c1c06810	PE32	2024-09-30 23:48:02 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/screenshot YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasDebugData YRP/HasRichSignature
768fa8e19bc5d9454e599db9afa4f28888d31d0ef9dc93c9395e85a4638b0376	PE32	2024-09-30 23:47:58 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/gem [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/IsPE32 FlorianRoth/DragonFly_APT_Sep17_3