MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
d22e47f0348af580b71b5279fe58e2894c09ef31229e47d6e3f340de005963dc	PE32	2024-09-28 16:30:21 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/prc [+] YRP/SEH__vba YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature
dbb857eb55e223d193e4077fd48732a6456853c546102569f8ac0cfdfd25c1ef	PE32	2024-09-28 16:30:18 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/url YRP/gem YRP/Dropper_Strings YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature
b3a280422cef5aa2e3cf7fa3a69977aced0fcaf7cb15b17155e16271d58adb33	PE32	2024-09-28 16:30:16 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/url YRP/excel_XML YRP/pgml YRP/wmf YRP/amf YRP/x3d YRP/_3dxml YRP/screenshot YRP/suspicious_packer_section YRP/UPX YRP/PackerUPX_CompresorGratuito_wwwupxsourceforgenet YRP/UPX_wwwupxsourceforgenet_additional YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/UPX_v0896_v102_v105_v124_Markus_Laszlo_overlay YRP/UPX_v0896_v102_v105_v124_Markus_Laszlo_overlay_additional YRP/UPX_wwwupxsourceforgenet YRP/UPXv20MarkusLaszloReiser YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature
e8c07a9b82d5375a795de2cb7a48007e9585492a32ac4d2b057bfeadf7d75142	PE32	2024-09-28 16:30:09 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/wmf [+] YRP/win_registry YRP/Visual_Cpp_2003_EXE_Microsoft YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature
cb56430c7f0c52467feaf51c005f804606139a05c42b363ecb14351fc935639a	PE32	2024-09-28 16:30:04 UTC	User Submission	YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy [+] YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain YRP/url YRP/gem YRP/rip YRP/wmf YRP/prc YRP/Antivirus YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/SEH__vba YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional YRP/Microsoft_Visual_Basic_v50v60_additional YRP/Borland YRP/NsPack14byNorthStarLiuXingPing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature
2aeba6a7b20d6bb1cc459dd0507a0392ea8c4de0679f421c26c9781d69420a21	PE32	2024-09-28 16:30:01 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/domain YRP/Safeguard_103_Simonzh [+] YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasModified_DOS_Message FlorianRoth/Sality_Malware_Oct16
308a162aa59c99d38a3bd86ad1a4d19544ec0e81a5afa534a0368deec3cc5ac8	PE32	2024-09-28 16:29:55 UTC	User Submission	YRP/CRC32_poly_Constant YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/url YRP/png YRP/excel_XML YRP/hpgl YRP/pgml YRP/amf YRP/prc YRP/x3d YRP/_3dxml YRP/escalate_priv YRP/screenshot YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/Nullsoft_PiMP_Stub_SFX YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature
5b705a9417d7b850f17d108b0bc434c0cfd540ca62a53b2886b670d5bbd4d36b	Zip	2024-09-28 16:29:43 UTC	User Submission	CuckooSandbox/embedded_macho CuckooSandbox/shellcode YRP/Big_Numbers1 [+] YRP/contentis_base64 YRP/domain YRP/url YRP/png YRP/gif_animated YRP/nullsoft_streaming_video YRP/excel_2007 YRP/gif_bitmap YRP/gif89a_bitmap YRP/jpeg YRP/jpg_with_EXIF YRP/ai_compressed YRP/corel_draw_compressed YRP/gem YRP/hpgl YRP/odg YRP/rip YRP/wmf YRP/_3dxml_compressed YRP/android_meterpreter YRP/suspicious_packer_section YRP/JavaDropper KevTheHermit/JavaDropper
c549ae53623f8593de6626083d688ae1ce1b923b22dc6ec14d42bbe916ba5fc4	PE32	2024-09-28 16:29:25 UTC	User Submission	CuckooSandbox/vmdetect YRP/Advapi_Hash_API YRP/Delphi_CompareCall [+] YRP/Delphi_Copy YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 YRP/domain YRP/Browsers YRP/Sandboxie_Detection YRP/VirtualPC_Detection YRP/VirtualBox_Detection YRP/Dropper_Strings YRP/Obfuscated_Strings YRP/Check_Dlls YRP/vmdetect YRP/anti_dbg YRP/anti_dbgtools YRP/antisb_joesanbox YRP/antisb_anubis YRP/antisb_threatExpert YRP/antisb_sandboxie YRP/antisb_cwsandbox YRP/antivm_virtualbox YRP/inject_thread YRP/dyndns YRP/cred_local YRP/cred_ff YRP/cred_ie7 YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/CyberGate YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v4x YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/borland_delphi FlorianRoth/RAT_CyberGate KevTheHermit/CyberGate BAMFDetect/CyberGate
216ef4a1e6adfca2d18db03269537e535f00aa774c8f6da1f9b5fb958824532b	PE32	2024-09-28 16:29:22 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/url [+] YRP/excel_XML YRP/gem YRP/x3d YRP/anti_dbg YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature