MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
080ae43972327a4a50a35f321c0d32696e9be20dbe672169d2190524e1c8830f	PE32	2024-09-28 15:16:26 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/url [+] YRP/Microsoft_Visual_Cpp_70 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature
2f40f3db61e65e76a3fdd368d3393011d96b6af39f6fe68773ad6e17b2831c0a	PE32	2024-09-28 15:16:23 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain [+] YRP/suspicious_packer_section YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/ASPack_102b_or_10803 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked
f61306ce992defb0486c23d8fa92d0fa7c776a3154bdfc0e930f5fc56d07e7f2	PDF	2024-09-28 15:16:21 UTC	User Submission	YRP/invalid_trailer_structure YRP/contentis_base64 YRP/domain [+] YRP/url YRP/pdf YRP/Misc_Suspicious_Strings
68612979445059ccec978c2ee4a9e7e51ec0b17234df3046424f75129a2fe4fb	PE32	2024-09-28 15:16:07 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/url [+] YRP/gem YRP/jt YRP/network_irc YRP/spyeye YRP/IsPE32 YRP/IsConsole YRP/HasOverlay YRP/Cygwin
3d7694110c1bc46fbc65e6db65d70d5041654e9bb3c955b7e4e583cfeabbe673	PE32	2024-09-28 15:16:05 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/screenshot [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
93a9f7235e433ea4ffb027fe84fc78f6e93df15a55e6689cda71d8f7552267b4	MS-DOS	2024-09-28 15:16:00 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/IsPE32 [+] YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message
9f1854842213b8fe9d72822dc705e00fc9873494649135d72b6b33ceb7b76295	PE32	2024-09-28 15:15:58 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/win_registry [+] YRP/win_files_operation YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/IsPE32 YRP/IsConsole YRP/borland_delphi
9ede7ada59aa82654fbc296536bde3f5124da98522d04c94cc333928f94cfcde	PE32	2024-09-28 15:15:55 UTC	User Submission	YRP/Big_Numbers1 YRP/CRC32_poly_Constant YRP/CRC32_table [+] YRP/CRC32b_poly_Constant YRP/BASE64_table YRP/VC8_Random YRP/IP YRP/contentis_base64 YRP/domain YRP/url YRP/excel_2007 YRP/gif_bitmap YRP/jpeg YRP/corel_draw_compressed YRP/gem YRP/odg YRP/rip YRP/prc YRP/_3dxml_compressed YRP/Browsers YRP/VM_Generic_Detection YRP/anti_dbg YRP/disable_antivirus YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/Str_Win32_Http_API YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature
178adfe898a4a9287301e991249f1c49460584d60203c18242dccb3d1c242879	data	2024-09-28 15:15:53 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/android_meterpreter
8ad076c978664638b09c11fb14105fbd00bdbd48fdc963993d9a1e28f6be83d1	PE32	2024-09-28 15:15:44 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/ai_compressed [+] YRP/prc YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature