MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
bcbedc5b6c8472fd60d0efc097a876f9f4bb9373a5fd2ed61e24a015d3ab588d	PE32	2024-09-29 18:36:33 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/gif_bitmap [+] YRP/prc YRP/escalate_priv YRP/win_registry YRP/win_token YRP/win_hook YRP/Visual_Cpp_2003_DLL_Microsoft YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature
1ee1a05a83198874fc1178e61f39017af15279e3ae82ba2c5ad357c1e4313a7d	PE32	2024-09-29 18:36:27 UTC	User Submission	YRP/CRC32_poly_Constant YRP/CRC32_table YRP/maldoc_getEIP_method_1 [+] YRP/contentis_base64 YRP/domain YRP/gif_bitmap YRP/gem YRP/prc YRP/DebuggerHiding__Active YRP/ThreadControl__Context YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section YRP/Armadillo_V3X_V6X_Silicon_Realms_Toolworks YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/Armadillo_3X_5X_Silicon_Realms_Toolworks YRP/Armadillo_v430_440_Silicon_Realms_Toolworks YRP/Armadillo_3X_5X_Silicon_Realms_Toolworks_additional YRP/Armadillo_v4x YRP/UPXProtectorv10x2 YRP/Armadillo3X5XSiliconRealmsToolworks YRP/Armadillov430v440SiliconRealmsToolworks YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked
8366268d7c19ba1833a48603994496b14b916120f4799d38e91c7d53c310a43b	Zip	2024-09-29 18:36:22 UTC	User Submission	CuckooSandbox/shellcode YRP/contentis_base64 YRP/domain [+] YRP/url YRP/png YRP/gif_animated YRP/excel_2007 YRP/gif_bitmap YRP/gif89a_bitmap YRP/ai_compressed YRP/corel_draw_compressed YRP/odg YRP/rip YRP/_3dxml_compressed YRP/android_meterpreter YRP/suspicious_packer_section
90185b83e2753314ea1f77aa63e6d54f5921d1dc2b7c149830b9fc4651caab58	data	2024-09-29 18:36:16 UTC	User Submission	CuckooSandbox/vmdetect
81c9acb8d778f7b862104ba62373daed433e57d284c0ac60189c44bb33253459	PDF	2024-09-29 18:36:13 UTC	User Submission	YRP/Big_Numbers1 YRP/invalid_trailer_structure YRP/multiple_versions [+] YRP/contentis_base64 YRP/domain YRP/url YRP/pdf YRP/jpeg
99850df980da07dfa204640a0b4338bb5199e84570f1ee6dd57ca2a10f5b7490	PE32	2024-09-29 18:36:06 UTC	User Submission	YRP/CRC32_poly_Constant YRP/RIPEMD160_Constants YRP/SHA1_Constants [+] YRP/IP YRP/contentis_base64 YRP/domain YRP/excel_XML YRP/pgml YRP/amf YRP/prc YRP/x3d YRP/_3dxml YRP/escalate_priv YRP/win_registry YRP/win_token YRP/win_files_operation YRP/RAR_SFX YRP/RAR_SFX_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay
c91a0577ff0656dd7666caee278b7d8a30ebef79380841b83375e80bdf2074ac	data	2024-09-29 18:36:03 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/url YRP/stl
72f329956786cefe69f705830a6b2ce2b2266620c9597282dab90270fc3edb66	PDF	2024-09-29 18:35:52 UTC	User Submission	YRP/Big_Numbers1 YRP/invalid_trailer_structure YRP/multiple_versions [+] YRP/contentis_base64 YRP/domain YRP/url YRP/pdf
fee2bcfdf9c64f73d0b7a737c2bf90b3523f30cd46675271daf75dbf7b907929	PE32	2024-09-29 18:35:50 UTC	User Submission	CuckooSandbox/vmdetect
f12976db18e312a77a4bcd61ba3e927dcd20f8da046c5a2b2c041aa4d566cfa6	PE32	2024-09-29 18:35:45 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message FlorianRoth/DragonFly_APT_Sep17_3