MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
88d5518f1acd006926004781c73b3b0edfb595089be01c69f38640e0c7a9218a	PE32	2024-09-28 09:22:48 UTC	User Submission	YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt [+] YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain YRP/gem YRP/prc YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/borland_delphi
b8307e816b2763bc304cf77c5f4f4bea22282f2ae7c6acaa942d3f3ccd8d72f9	Zip	2024-09-28 09:22:38 UTC	User Submission	CuckooSandbox/shellcode YRP/Big_Numbers1 YRP/Big_Numbers2 [+] YRP/IP YRP/contentis_base64 YRP/domain YRP/url YRP/png YRP/gif_animated YRP/nullsoft_streaming_video YRP/excel_2007 YRP/gif_bitmap YRP/gif89a_bitmap YRP/jpeg YRP/jpg_with_EXIF YRP/ai_compressed YRP/corel_draw_compressed YRP/gem YRP/hpgl YRP/odg YRP/rip YRP/wmf YRP/jt YRP/mb YRP/_3dxml_compressed YRP/android_meterpreter YRP/suspicious_packer_section YRP/JavaDropper KevTheHermit/JavaDropper
458a635dbcd246b923f6eb8b0fb5bd29486671a0f6dd69d2fdd4d9be05716c67	PE32	2024-09-28 09:22:25 UTC	User Submission	YRP/Big_Numbers1 YRP/CRC32_poly_Constant YRP/CRC32_table [+] YRP/BLOWFISH_Constants YRP/MD5_Constants YRP/IP YRP/contentis_base64 YRP/domain YRP/url YRP/png YRP/excel_2007 YRP/jpg_with_EXIF YRP/corel_draw_compressed YRP/gem YRP/odg YRP/prc YRP/_3dxml_compressed YRP/Dropper_Strings YRP/WMI_strings YRP/anti_dbg YRP/network_http YRP/screenshot YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature
335934c7086d35f949289ebc36dd9c9ec91e33a36fd185c8a1cf692233bedafb	Zip	2024-09-28 09:22:14 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/png [+] YRP/excel_2007 YRP/gif_bitmap YRP/corel_draw_compressed YRP/odg YRP/_3dxml_compressed
b7f9a697a4ddc923ac37584aff70ab4407c8b4920ea06526a8ab822114b299e9	PE32	2024-09-28 09:22:05 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 YRP/domain [+] YRP/prc YRP/DebuggerException__SetConsoleCtrl YRP/win_mutex YRP/win_files_operation YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature
16eb7c5e5223cdbcfb91beeda693234f4d04184485ae1f650dd7d668240ad4d8	PE32	2024-09-28 09:22:03 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/gem [+] YRP/prc YRP/screenshot YRP/keylogger YRP/MingWin32_GCC_3x YRP/Microsoft_Visual_Cpp_v71_DLL_Debug_additional YRP/MingWin32_v_h_additional YRP/MinGW_GCC_3x_additional YRP/Microsoft_Visual_Cpp_v71_DLL_Debug YRP/MinGW_GCC_3x YRP/MingWin32_GCC_3x_additional YRP/MingWin32_v_h YRP/MingWin32_Dev_Cpp_v4x_h_additional YRP/MingWin32_v YRP/MingWin32_Dev_Cpp_v4x_h YRP/MinGWGCC3x YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay
0e25142ec691766ed62b3353545087fd97a9021ee7fed6ab7e2fc72c31071136	MS-DOS	2024-09-28 09:22:01 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 YRP/domain [+] YRP/anti_dbg YRP/win_files_operation YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasDebugData YRP/IsBeyondImageSize YRP/HasModified_DOS_Message
be5c7c03649c5ce742d98fcff8aaa31b896c44656786c42d15583151ef3ef6e1	Zip	2024-09-28 09:21:55 UTC	User Submission	CuckooSandbox/shellcode
8d5c23f4f4d26d11b0bbaccdf0fbe57247e6b6cac6d959629ec04db1cc42b244	PE32	2024-09-28 09:21:36 UTC	User Submission	YRP/MD5_Constants YRP/contentis_base64 YRP/domain [+] YRP/prc YRP/antisb_threatExpert YRP/screenshot YRP/win_private_profile YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Typical_Malware_String_Transforms YRP/Armadillo_v1xx_v2xx_additional YRP/Microsoft_Visual_Cpp_60_DLL_additional YRP/Microsoft_Visual_Cpp_v70_DLL YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_60_DLL_Debug YRP/Armadillo_v1xx_v2xx YRP/Microsoft_Visual_Cpp_v60_DLL YRP/Microsoft_Visual_Cpp_60_DLL YRP/Microsoft_Visual_Cpp_60 YRP/Armadillov1xxv2xx YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3 FlorianRoth/Typical_Malware_String_Transforms
216004401087bcd19e6faef9db17b6c6904e5954e20e8d1eac244c8af4bae0ad	PE32	2024-09-28 09:21:21 UTC	User Submission	YRP/Advapi_Hash_API YRP/BASE64_table YRP/Delphi_Random [+] YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/IP YRP/contentis_base64 YRP/domain YRP/url YRP/avi YRP/anime_music_video YRP/corel_draw_graohic YRP/gem YRP/wmf YRP/prc YRP/Dropper_Strings YRP/SEH__vba YRP/antivm_vmware YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/screenshot YRP/keylogger YRP/cred_local YRP/win_mutex YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/BobSoft_Mini_Delphi_BoB_BobSoft_additional YRP/Borland_Delphi_v60_v70 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/ProtectSharewareV11eCompservCMS YRP/BobSoftMiniDelphiBoBBobSoft YRP/IsPE32 YRP/IsWindowsGUI YRP/borland_delphi YRP/borland_delphi_dll