MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
fdc88cecfa4444ef132d58627cb3ae72a1675e3ab80de4c02d64a33d41e0b828	MS-DOS	2024-09-29 20:39:38 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain [+] YRP/win_registry YRP/suspicious_packer_section YRP/MPRESS_V200_V20X_MATCODE_Software_20090423 YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/mpress_2_xx_x86 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message FlorianRoth/DragonFly_APT_Sep17_3
404ba77a8b288a944aa2bfc17d17795b100f3aad0ae842df9831f76c48ba11eb	data	2024-09-29 20:39:35 UTC	User Submission	CuckooSandbox/vmdetect
e2374fae1bf1a27142ce3d2fc4b17cff368b87ea17e6cef08be79d289e2de2ad	PE32	2024-09-29 20:39:30 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/url [+] YRP/network_dropper YRP/keylogger YRP/win_registry YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/BobSoft_Mini_Delphi_BoB_BobSoft_additional YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/BobSoftMiniDelphiBoBBobSoft YRP/IsPE32 YRP/IsWindowsGUI YRP/borland_delphi FlorianRoth/DragonFly_APT_Sep17_3
ba452399d3d257523fcae00c1ebdd9b1b2b474217bdd9ff3e4f4ff7a14e08488	Java	2024-09-29 20:39:27 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/png YRP/excel_2007 YRP/corel_draw_compressed YRP/gem YRP/hpgl YRP/odg YRP/wmf YRP/_3dxml_compressed YRP/suspicious_packer_section
bcbd7fd0f92ef204d90a800391f498b0f50848ae9b5b7f29c66c12cc65a328f0	PE32	2024-09-29 20:39:11 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain [+] YRP/win_registry YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/suspicious_packer_section YRP/ASPack_v212_additional YRP/ASPack_v21_additional YRP/ASProtect_V2X_DLL_Alexey_Solodovnikov YRP/ASPack_v212 YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/ASPack_v211d YRP/ASProtect_V2X_DLL_Alexey_Solodovnikov_additional YRP/ASPack_212withouth_Poly_Solodovnikov_Alexey YRP/ASPack_v212_Alexey_Solodovnikov YRP/ASPackv212AlexeySolodovnikov YRP/ASProtectV2XDLLAlexeySolodovnikov YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDebugData YRP/HasRichSignature
17cef094d00cd56e2523671e7b3405a2c3686d128097c68e8e440d10e4e6eaa0	GIF	2024-09-29 20:39:01 UTC	User Submission	YRP/webshell_Shell_ci_Biz_was_here_c100_v_xxx YRP/Webshell_c100 YRP/IP [+] YRP/contentis_base64 YRP/domain YRP/url YRP/gif_bitmap YRP/stl YRP/android_meterpreter
f3cb2eb07f65ccef576b3ebcd83d0a1859ca25e800fff919f4578c7dd109cfbd	PDF	2024-09-29 20:38:54 UTC	User Submission	YRP/invalid_xref_numbers YRP/contentis_base64 YRP/domain [+] YRP/url YRP/pdf
88fda46992ffec0a63e89655772638b05a2efa7f8021ac44e1c8145e95217a40	PE32	2024-09-29 20:38:44 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain [+] YRP/ai_compressed YRP/android_meterpreter YRP/suspicious_packer_section YRP/ThemidaWinLicenseV1XNoCompressionSecureEngineOreansTechnologies YRP/Themida10xx18xxnocompressionOreansTechnologies YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature
35d36a9c53982d9dd3518a6b03c229d0b6248bf02714cf48d0abd0d34223d7c9	data	2024-09-29 20:38:36 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/url [+] YRP/stl YRP/android_meterpreter
8ee12564bb0b6924283010e44a5eb31e902f9fe49a836b60480c0499ef248432	gzip	2024-09-29 20:38:30 UTC	User Submission	YRP/domain