MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
767046153d00a6ed3374568ca759d5148bafebbee2de6c9dc7004a8a749d56e3	MS-DOS	2024-09-28 16:39:17 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain [+] YRP/win_files_operation YRP/android_meterpreter YRP/suspicious_packer_section YRP/CrunchPE_10xx_BitArts YRP/CrunchPE_v10xx YRP/CrunchPE_BitArts YRP/CrunchPE YRP/CrunchPEv10xx YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasModified_DOS_Message
a94a95f2895c299ff681607d4cd6c9fc7ba3c815d5340129d61b165a1f80658e	PE32	2024-09-28 16:39:11 UTC	User Submission	YRP/CRC32_poly_Constant YRP/Delphi_Copy YRP/IP [+] YRP/contentis_base64 YRP/domain YRP/url YRP/png YRP/excel_XML YRP/gif_bitmap YRP/gif87a_bitmap YRP/ai_compressed YRP/hpgl YRP/pgml YRP/amf YRP/x3d YRP/_3dxml YRP/escalate_priv YRP/win_registry YRP/win_token YRP/win_files_operation YRP/suspicious_packer_section YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/borland_delphi
06f453737852ada07d7ba904de48c928397fef3e77f37bd874d3c81f774bc19c	PE32	2024-09-28 16:39:05 UTC	User Submission	YRP/CRC32b_poly_Constant YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/Dropper_Strings YRP/win_mutex YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
96e6e6d8eeb0ac165f22ee0e915438f5da3829aa42b640cf7099587bafeab8ca	PE32	2024-09-28 16:38:59 UTC	User Submission	YRP/CRC32_poly_Constant YRP/SHA1_Constants YRP/contentis_base64 [+] YRP/domain YRP/_7z YRP/suspicious_packer_section YRP/UPX YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/IsBeyondImageSize YRP/HasRichSignature
5bc47a0114e251780438dfd32c9d5217be02716c2d5f513530b5a47a3fb00099	Dalvik	2024-09-28 16:38:55 UTC	User Submission	YRP/Big_Numbers1 YRP/Big_Numbers5 YRP/BASE64_table [+] YRP/IP YRP/contentis_base64 YRP/domain YRP/url YRP/excel_XML YRP/gif_bitmap YRP/ai_compressed YRP/gem YRP/rip YRP/wmf YRP/jt YRP/prc YRP/u3d YRP/x3d YRP/Qemu_Detection YRP/android_meterpreter
dc24b34f665217022bb96d46f96035111565dcd6384c9cbe7e4db6bd32b952eb	PE32	2024-09-28 16:38:51 UTC	User Submission	YRP/CRC32_poly_Constant YRP/Delphi_Copy YRP/IP [+] YRP/contentis_base64 YRP/domain YRP/url YRP/excel_XML YRP/pgml YRP/amf YRP/x3d YRP/_3dxml YRP/disable_dep YRP/escalate_priv YRP/win_registry YRP/win_token YRP/win_files_operation YRP/suspicious_packer_section YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/borland_delphi
b32bbea1acc2c93c0b6e651cf00fa05fbfdb4241a8be05c4c20b3a20004221d7	PE32	2024-09-28 16:38:47 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/excel_XML YRP/prc YRP/x3d YRP/anti_dbg YRP/screenshot YRP/win_files_operation YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI YRP/HasDebugData YRP/HasRichSignature
314be11b835ec9b432cabb04a0475c4f37f995ff38e7d2656f3d0b3c631c695c	PE32	2024-09-28 16:38:44 UTC	User Submission	YRP/CRC32_poly_Constant YRP/CRC32_table YRP/contentis_base64 [+] YRP/domain YRP/win_files_operation YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature
32c6515f7845d7c24e2e1bfbed65671f5ab1f468883b735b823ddd0f7b8e90c0	PE32	2024-09-28 16:38:37 UTC	User Submission	YRP/CRC32_poly_Constant YRP/CRC32_table YRP/VC8_Random [+] YRP/IP YRP/contentis_base64 YRP/domain YRP/excel_2007 YRP/corel_draw_compressed YRP/gem YRP/odg YRP/prc YRP/_3dxml_compressed YRP/anti_dbg YRP/inject_thread YRP/escalate_priv YRP/screenshot YRP/win_token YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature
3df9001fb5d86770fd9cee80a596823c8c9df7f7e82b4cf598377835f04a12ec	PDF	2024-09-28 16:38:33 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/url [+] YRP/pdf