MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
bdd9939b262084087631daf5a035ba1d1ea41965993e3a5b25d666834136b2e5	PE32	2024-09-30 09:20:24 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/gem [+] YRP/wmf YRP/SEH__vba YRP/escalate_priv YRP/win_mutex YRP/win_registry YRP/win_token YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature
4e8d826dcf9ee8456d61d07f416453229e8ea5011336fae13f6f829b649d0fb3	PE32	2024-09-30 09:20:21 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/url YRP/excel_XML YRP/pgml YRP/amf YRP/x3d YRP/_3dxml YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasDebugData YRP/HasRichSignature
013f08dff069d10e0cc80c8b30910d35ce1c356b1c9c3e60a6fa8c90e95889e2	PE32	2024-09-30 09:20:19 UTC	User Submission	YRP/CRC32_poly_Constant YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/url YRP/excel_XML YRP/pgml YRP/amf YRP/prc YRP/x3d YRP/_3dxml YRP/escalate_priv YRP/screenshot YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/ASProtect_v132 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature
b24feb7c1fc907746a4e24bc045fa7aed91a9e30e3724dc3f89d675804728b43	PE32	2024-09-30 09:20:16 UTC	User Submission	YRP/CRC32_poly_Constant YRP/CRC32_table YRP/MD5_Constants [+] YRP/BASE64_table YRP/IP YRP/contentis_base64 YRP/domain YRP/url YRP/excel_XML YRP/gem YRP/pgml YRP/amf YRP/jt YRP/prc YRP/x3d YRP/_3dxml YRP/network_http YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature
45849c4f28d8f5cd3b64cf838309801a7f791432dea0fe9ee1263f6fe9284bc0	PE32	2024-09-30 09:20:10 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/url YRP/excel_XML YRP/pgml YRP/amf YRP/x3d YRP/_3dxml YRP/win_registry YRP/win_files_operation YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature
b05e166e1070fd13c72cffaf927edcd4433b87e49bbe5641d7401e4177ff4be4	PE32	2024-09-30 09:20:05 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain [+] YRP/_v10_Li_Jianjun YRP/ASPack_1083 YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/ASPack_102b_or_10803 YRP/ASPack_v10803 YRP/ASPack_v10803_Alexey_Solodovnikov YRP/ASPackv10803AlexeySolodovnikov YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
e0e5b803cd88baaa6cedd61bcbedf8f51171e7c8750aa9891a35592d83643a56	PDF	2024-09-30 09:20:02 UTC	User Submission	YRP/invalid_trailer_structure YRP/multiple_versions YRP/contentis_base64 [+] YRP/domain YRP/url YRP/pdf YRP/jpeg YRP/android_meterpreter
a49de7d382e7ae10d1739adffdcb097317d9d3fb6578871e6bcdb155b8e95ba6	ASCII	2024-09-30 09:20:00 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/url [+] YRP/android_meterpreter
b47c5f5f0db004d9e83385c104f498fe41c161524406a73b8d576b6f5dde1f35	PE32	2024-09-30 09:19:57 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 YRP/domain [+] YRP/gem YRP/DebuggerException__SetConsoleCtrl YRP/escalate_priv YRP/win_token YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Borland_Cpp_DLL YRP/Borland_Cpp_for_Win32_1999 YRP/Borland YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay
e426980e61602dc9c5cd26f4f31bc2654fdb874df59bf06751d5c35691e21480	PE32	2024-09-30 09:19:55 UTC	User Submission	YRP/CRC32_poly_Constant YRP/RIPEMD160_Constants YRP/SHA1_Constants [+] YRP/maldoc_getEIP_method_1 YRP/maldoc_getEIP_method_4 YRP/IP YRP/contentis_base64 YRP/domain YRP/excel_XML YRP/pgml YRP/amf YRP/prc YRP/x3d YRP/_3dxml YRP/Browsers YRP/Antivirus YRP/Dropper_Strings YRP/hijack_network YRP/create_service YRP/network_dropper YRP/network_dns YRP/escalate_priv YRP/spreading_file YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/suspicious_packer_section YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked FlorianRoth/Unspecified_Malware_Oct16_A