MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
936a41bcbc2a79edfd5e4d64ecd9ae7f1bd9308df3f0c0f0b740c0e5d193d26b	PE32	2024-09-29 18:18:23 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/gif_animated [+] YRP/excel_2007 YRP/gif_bitmap YRP/gif89a_bitmap YRP/corel_draw_compressed YRP/odg YRP/_3dxml_compressed YRP/screenshot YRP/win_files_operation YRP/WinZip_32_bit_SFX_v6x_module_additional YRP/WinZip_32_bit_SFX_v6x_module YRP/WinZip_32_bit_6x_additional YRP/WinZip32bitSFXv6xmodule YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked
02f1e6c93f0b3a352e1d0bace8b5d84484cf07358569e794b33c42bd8e4d1a8e	Dalvik	2024-09-29 18:18:19 UTC	User Submission	CuckooSandbox/embedded_win_api YRP/without_attachments YRP/without_images [+] YRP/with_urls YRP/contentis_base64 YRP/domain YRP/url YRP/gif_bitmap YRP/rip YRP/wmf YRP/jt YRP/prc YRP/network_smtp_raw YRP/android_meterpreter YRP/possible_includes_base64_packed_functions
ac43476afb4158c1bda964a6f84f661fa3c4c678177c52ea3c836f20e028598e	PE32	2024-09-29 18:18:14 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/screenshot [+] YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/suspicious_packer_section YRP/UPX YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay FlorianRoth/DragonFly_APT_Sep17_3
aeac14842bc446a31c714874164513a85484457c4f5a47d64c4e09a0c05a58c3	PE32	2024-09-29 18:18:08 UTC	User Submission	YRP/BASE64_table YRP/Delphi_Random YRP/Delphi_FormShow [+] YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/IP YRP/contentis_base64 YRP/domain YRP/avi YRP/anime_music_video YRP/corel_draw_graohic YRP/gem YRP/wmf YRP/prc YRP/Browsers YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/borland_delphi_dll
1ab6b578f270f0f4a29e0e2192da7c2649dd5fbd25043c18cc0bbd32cfcbf071	PE32	2024-09-29 18:17:54 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain [+] YRP/Safeguard_103_Simonzh YRP/Yodas_Protector_v1032_Beta2_Ashkbiz_Danehkar YRP/kryptor_6_additional YRP/yodas_Protector_V1032_Ashkbiz_Danehkar_Sign_by_fly_additional YRP/yodas_Protector_102_Ashkibiz_Danehlar YRP/yodas_Protector_v102b_Ashkbiz_Danehkar YRP/yodas_Protector_102_103_Ashkbiz_Danehkar YRP/yodas_Protector_v1032_dllocx_Ashkbiz_Danehkar YRP/Yodas_Protector_v1032_Beta2_Ashkbiz_Danehkar_additional YRP/yodas_Protector_v1032_dllocx_Ashkbiz_Danehkar_h YRP/yodas_Protector_v1032_exescrcom_Ashkbiz_Danehkar_h_additional YRP/yodas_Protector_v1032_by_Ashkbiz_Danehkar YRP/yodas_Protector_102_exescrcom_Ashkbiz_Danehkar_h YRP/yodas_Protector_V1032_Ashkbiz_Danehkar YRP/SLVc0deProtector_v11_SLV_h_additional YRP/yodas_Protector_V1032_Ashkbiz_Danehkar_Sign_by_fly YRP/Eagle_Protector_V22_AntiDebugLIB_20081008 YRP/yodas_Protector_v1032_exescrcom_Ashkbiz_Danehkar_h YRP/yodas_Protector_102b_Ashkbiz_Danehkar YRP/yodas_Protector_102_103_Ashkbiz_Danehkar_additional YRP/YodasProtectorv1032Beta2AshkbizDanehkar YRP/yodasProtector102103AshkbizDanehkar YRP/yodasProtectorV1032AshkbizDanehkar YRP/yodasProtector102AshkibizDanehlar YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature
a2b55308e0405a15d5f2bcb4dac282df4113c4115285e81f232ba49ebf227e4e	PE32	2024-09-29 18:17:51 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/anti_dbg [+] YRP/Visual_Cpp_2005_DLL_Microsoft YRP/Visual_Cpp_2003_DLL_Microsoft YRP/IsPE32 YRP/IsDLL YRP/IsConsole YRP/HasDebugData YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
352ba88e2cea086e3a75938e3d4b77130beaf8d73c795502d5488490b169ccc3	PE32	2024-09-29 18:17:46 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/screenshot [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature
56d96ddc9fce8beb9d04bf1c72e9df04b0f67655831e61c6bba69bb7c16b28cc	PE32	2024-09-29 18:17:36 UTC	User Submission	YRP/BLOWFISH_Constants YRP/DES_sbox YRP/RijnDael_AES [+] YRP/contentis_base64 YRP/domain YRP/win_registry YRP/win_private_profile YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature
5430def8abbeb6347ae7b69fbd6e0682971bd9131caf42856bf8fab174cfdfcd	PE32	2024-09-29 18:17:34 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/png YRP/excel_XML YRP/pgml YRP/amf YRP/xaml YRP/x3d YRP/_3dxml YRP/inject_thread YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsConsole
b281a833cd126a5066d9d9efd5cf854b425cdd05ec03d65ee2167eb30d37be70	PDF	2024-09-29 18:17:27 UTC	User Submission	YRP/invalid_trailer_structure YRP/multiple_versions YRP/contentis_base64 [+] YRP/domain YRP/url YRP/pdf