MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
4b299e1a06658521991bb2e444f9cc1777b93baaefaf116c8fed68210b9d98c6	PE32	2024-09-26 14:41:00 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/url [+] YRP/anti_dbg YRP/win_files_operation YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature
0d3f6754bbd76bcd7016b6040ec163ac73ebad794ce8e5ffdcbdae3e39b2f24d	PE32	2024-09-26 14:40:58 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/wmf YRP/prc YRP/anti_dbg YRP/keylogger YRP/win_hook YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature
51269b0fee67b7716b090875e95dcff9069cf4df3fb0978dec3dbd87a7484b5e	PE32	2024-09-26 14:40:56 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/maldoc_getEIP_method_1 YRP/contentis_base64 [+] YRP/domain YRP/excel_XML YRP/pgml YRP/amf YRP/prc YRP/x3d YRP/_3dxml YRP/ThreadControl__Context YRP/inject_thread YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/suspicious_packer_section YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/ExportTableIsBad
2062f7bd88e8ed2594f7d63f329302b6118aee419b12fe6b37d769683dca8ede	UTF-8	2024-09-26 14:40:51 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/url [+] YRP/Misc_Suspicious_Strings
6d993530a584087b84a569231d6c10aaf26be8d9412afe90e5551375311db31c	data	2024-09-26 14:40:48 UTC	User Submission	CuckooSandbox/vmdetect
9975bbc15eb4cf3b4cd5f238abde43bc19708c974aed3687b33af52edc07e997	PE32	2024-09-26 14:40:40 UTC	User Submission	YRP/BASE64_table YRP/Delphi_Random YRP/Delphi_FormShow [+] YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/IP YRP/contentis_base64 YRP/domain YRP/avi YRP/anime_music_video YRP/corel_draw_graohic YRP/gem YRP/wmf YRP/prc YRP/Browsers YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/borland_delphi_dll
c0acccf422cdd2463172c89877ec91b0a0ae3149517f5fd8b574095a42d5ec26	PE32	2024-09-26 14:40:37 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/Microsoft_Visual_Cpp_v50v60_MFC [+] YRP/IsPE32 YRP/HasDebugData YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
9915d8d241f78446c17dfe83ca3dcd1cef0fae15c15e029f3a744c44054a447a	PE32	2024-09-26 14:40:35 UTC	User Submission	YRP/CRC32_poly_Constant YRP/contentis_base64 YRP/domain [+] YRP/gem YRP/rip YRP/prc YRP/suspicious_packer_section YRP/UPX YRP/ACProtect_13x_14x_DLL_Risco_Software_Inc YRP/UPX_v0896_v102_v105_v122_DLL_additional YRP/UPX_v0896_v102_v105_v122 YRP/UPX_v0896_v102_v105_v122_DLL_Laszlo_Markus YRP/UPX_v0896_v102_v105_v122_DLL YRP/UPX_v0896_v102_v105_v122_additional YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature
5b52c700d8cb65c2d83b93ae8f919839a107476c6769971f0f8ad200f5292543	PE32	2024-09-26 14:40:31 UTC	User Submission	YRP/CRC32_poly_Constant YRP/Delphi_Random YRP/Delphi_Copy [+] YRP/IP YRP/contentis_base64 YRP/domain YRP/url YRP/excel_XML YRP/pgml YRP/amf YRP/x3d YRP/_3dxml YRP/escalate_priv YRP/keylogger YRP/win_registry YRP/win_token YRP/win_files_operation YRP/suspicious_packer_section YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/borland_delphi
1c1883de4e21e69edcc485bf478c0df33c214af6daac9d32da642fe6de0535d9	data	2024-09-26 14:40:25 UTC	User Submission	YRP/contentis_base64 YRP/domain