MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
0f3b5dba26459219abb003aee890fe9f70c85a3a0cc643501e97653d6d1596fd	PE32	2024-09-28 18:31:48 UTC	User Submission	YRP/MD5_Constants YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/excel_XML YRP/gem YRP/pgml YRP/amf YRP/prc YRP/x3d YRP/_3dxml YRP/AutoIT_compiled_script YRP/Misc_Suspicious_Strings YRP/anti_dbg YRP/inject_thread YRP/network_http YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/AutoIt_2 YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/AutoIt
ee90d7b2d00bccaf7df3417f26592b4e037fb3fad75d3c366fed64097d004445	PE32	2024-09-28 18:31:43 UTC	User Submission	YRP/Big_Numbers1 YRP/contentis_base64 YRP/domain [+] YRP/Misc_Suspicious_Strings YRP/win_registry YRP/win_files_operation YRP/IsPE32 YRP/IsWindowsGUI FlorianRoth/DragonFly_APT_Sep17_3
18c0a2a2856a3c328fc5dd72a34dcc1823772e856b8b343012fda9e529230237	PE32	2024-09-28 18:31:41 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/Check_OutputDebugStringA_iat [+] YRP/anti_dbg YRP/screenshot YRP/win_registry YRP/Armadillo_v1xx_v2xx_additional YRP/Microsoft_Visual_Cpp_60_DLL_additional YRP/Microsoft_Visual_Cpp_v70_DLL YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_60_DLL_Debug YRP/Armadillo_v1xx_v2xx YRP/Microsoft_Visual_Cpp_v60_DLL YRP/Microsoft_Visual_Cpp_60_DLL YRP/Microsoft_Visual_Cpp_60 YRP/Armadillov1xxv2xx YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature
491c1c301330c4e9e3f1da795bf30e58c9c6a31426c82ef1ceb8c340de4f41e6	PDF	2024-09-28 18:31:38 UTC	User Submission	YRP/suspicious_creator YRP/invalid_trailer_structure YRP/multiple_versions [+] YRP/contentis_base64 YRP/domain YRP/url YRP/pdf
af4a2348e70547660f603cae8765c699e8d513d4d7c3ed7c91bf0e1e14e94c81	PE32	2024-09-28 18:31:31 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/gem [+] YRP/xaml YRP/anti_dbg YRP/win_files_operation YRP/android_meterpreter YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature
a0d1d1822293a2b70acf088dffe7194c9f5bf924b76df84e48e1467b3b8d7f15	PE32	2024-09-28 18:31:25 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/suspicious_packer_section [+] YRP/UPX YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
e36950de1717e5146f606a42c79483cc875b3bc0738e145f057e69be8df950fc	PE32	2024-09-28 18:31:15 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/SEH__vba [+] YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature
d7cd65c20d2eb033486e164a03732c0c26d2f13e685054ea8cf28ff2dc9db710	PE32	2024-09-28 18:31:02 UTC	User Submission	YRP/domain YRP/suspicious_packer_section YRP/UPX [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/IsBeyondImageSize YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
734749c0f14b81846f4137922600b7c1f9dded7aaab0b840e2bf9664f498aaa8	PE32	2024-09-28 18:30:58 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/Misc_Suspicious_Strings [+] YRP/SEH__vba YRP/suspicious_packer_section YRP/Microsoft_Visual_Basic_v50 YRP/VMProtect_1704_phpbb3 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature
c4c72203a847cd0bffdb4db756c0e8002bdbd837ca020e9b1f9e321881ac6ef6	PE32	2024-09-28 18:30:55 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/nullsoft_streaming_video [+] YRP/rip YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature