MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
3f458b6e9ec3e5e6cc21febd700a5e9320e599904029a0bf87ced9f0e3226b2b	PDF	2024-09-29 10:41:14 UTC	User Submission	YRP/invalid_trailer_structure YRP/multiple_versions YRP/contentis_base64 [+] YRP/domain YRP/url YRP/pdf
440cc8b6c410dff2dbf4a9edfbdbcc44a73c53bb320a984195ae46c3545cacde	PE32	2024-09-29 10:41:11 UTC	User Submission	YRP/Big_Numbers1 YRP/CRC32_poly_Constant YRP/CRC32_table [+] YRP/MD5_Constants YRP/BASE64_table YRP/VC8_Random YRP/maldoc_getEIP_method_1 YRP/IP YRP/contentis_base64 YRP/domain YRP/url YRP/excel_XML YRP/gem YRP/prc YRP/ThreadControl__Context YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/inject_thread YRP/network_http YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/suspicious_packer_section YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI YRP/HasDebugData YRP/HasRichSignature
34de8a7201209fdcde613180911c57dca9acbbf5fd6bc29c87a372372bbe2e63	PE32	2024-09-29 10:41:06 UTC	User Submission	YRP/Delphi_Copy YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 [+] YRP/domain YRP/Obfuscated_Strings YRP/keylogger YRP/win_registry YRP/win_files_operation YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/borland_delphi
8cb87ca1698ebb44715ac8f9dfec6d4bf031acd209d04f22e71a5a028f2c124f	PE32	2024-09-29 10:41:02 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain [+] YRP/url YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section YRP/Safeguard_103_Simonzh YRP/RPoly_crypt_10b_from_Vaska_18032007_1906 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature
f4f268da862ea6d093f2ea5fd4d7120b4b01183e60604a1d90c2945d33c647f9	PE32	2024-09-29 10:40:58 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/spyeye [+] YRP/MingWin32_GCC_3x YRP/Microsoft_Visual_Cpp_v71_DLL_Debug_additional YRP/MingWin32_v_h_additional YRP/MinGW_GCC_3x_additional YRP/Microsoft_Visual_Cpp_v71_DLL_Debug YRP/MinGW_GCC_3x YRP/MingWin32_GCC_3x_additional YRP/MingWin32_v_h YRP/MingWin32_Dev_Cpp_v4x_h_additional YRP/MingWin32_v YRP/MingWin32_Dev_Cpp_v4x_h YRP/MinGWGCC3x YRP/IsPE32 YRP/IsConsole YRP/HasOverlay YRP/MinGW_1
068cf922227ffe80485a800f7f9b3942db88af2db2acef58a4da301d896b5793	PE32	2024-09-29 10:40:52 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/gem [+] YRP/rip YRP/xaml YRP/network_dropper YRP/network_tcp_socket YRP/screenshot YRP/rat_webcam YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/suspicious_packer_section YRP/UPX YRP/UPX_v0896_v102_v105_v122_Delphi_stub_additional YRP/UPX_v0896_v102_v105_v122_Delphi_stub_Laszlo_Markus YRP/PackerUPX_CompresorGratuito_wwwupxsourceforgenet YRP/UPX_wwwupxsourceforgenet_additional YRP/MSLRH_V031_emadicius YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/UPX_v0896_v102_v105_v122_Delphi_stub YRP/UPX_wwwupxsourceforgenet YRP/Borland YRP/UPXv20MarkusLaszloReiser YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/UPXProtectorv10x2 YRP/UPX20030XMarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked
eab5b1a0a12b07ea10e10f0031e24ee3c228d9f63c5364fd6f63970a8feb19ff	MS-DOS	2024-09-29 10:40:49 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/Upack_v010_v012Beta_Sign_by_hot_UNP_additional [+] YRP/Upack_v036_beta_Dwing_additional YRP/Upack_V037_V039_Dwing YRP/Upack_v010_v012Beta_Sign_by_hot_UNP YRP/Upack_0399_Dwing YRP/Upack_V037_Dwing YRP/Upackv039finalDwing YRP/Upackv0399Dwing YRP/UpackV037Dwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasModified_DOS_Message FlorianRoth/DragonFly_APT_Sep17_3
b69927fbfd7eb038b59aa9b7e9f49cb02d127d48fcf6517e65a379e982e806bc	PE32	2024-09-29 10:40:40 UTC	User Submission	YRP/Big_Numbers1 YRP/Big_Numbers3 YRP/IP [+] YRP/contentis_base64 YRP/domain YRP/png YRP/excel_XML YRP/pgml YRP/amf YRP/prc YRP/xaml YRP/x3d YRP/_3dxml YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/IsPacked
3bc605b91da7b77da7a50955f65ff4a79a71c8db05e35dad98da288e549556af	PE32	2024-09-29 10:40:38 UTC	User Submission	YRP/Advapi_Hash_API YRP/contentis_base64 YRP/domain [+] YRP/nullsoft_streaming_video YRP/prc YRP/screenshot YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked
13f7c4b412e43f24ec10108f33b66cc16917dae60d99c2477e793245677bbb5c	PE32	2024-09-29 10:40:33 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/gem [+] YRP/SEH__vba YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature