MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
98a5820f7901a63783de2277835cfec7598672ad996e156b1e490b2638c527ac	PE32	2024-09-28 15:21:04 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/anti_dbg [+] YRP/Safeguard_103_Simonzh YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked
c4b408fbce06bbeb9f71a06fbc92811cf8833b6ed8dc50c86d33df386a72f13e	ASCII	2024-09-28 15:21:02 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/android_meterpreter [+] YRP/generic_javascript_obfuscation
e98e568fe32067ae0406251961fb95a05cc2263e63e738f1c36518315a8d470e	PE32	2024-09-28 15:20:57 UTC	User Submission	YRP/Big_Numbers1 YRP/Big_Numbers2 YRP/Big_Numbers3 [+] YRP/Big_Numbers4 YRP/Big_Numbers5 YRP/CRC32_poly_Constant YRP/CRC32_table YRP/MD5_Constants YRP/BASE64_table YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/IP YRP/contentis_base64 YRP/domain YRP/url YRP/png YRP/gif_animated YRP/excel_XML YRP/gif_bitmap YRP/gif89a_bitmap YRP/gem YRP/pgml YRP/wmf YRP/amf YRP/prc YRP/stl YRP/x3d YRP/_3dxml YRP/Misc_Suspicious_Strings YRP/anti_dbg YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/BobSoft_Mini_Delphi_BoB_BobSoft_additional YRP/Borland_Delphi_v60_v70 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/BobSoftMiniDelphiBoBBobSoft YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/borland_delphi
17ae48c218dd0bf7f88e6e5e25c5bb9c62c110f01606d8b4ea15f0a1ee8e4a1d	PE32	2024-09-28 15:20:51 UTC	User Submission	YRP/Delphi_CompareCall YRP/contentis_base64 YRP/domain [+] YRP/gem YRP/Dropper_Strings YRP/ThreadControl__Context YRP/network_dropper YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/win_hook YRP/Xtreme YRP/xtreme_rat YRP/xtremrat YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI YRP/borland_delphi FlorianRoth/Xtreme_Sep17_1 FlorianRoth/RAT_Xtreme KevTheHermit/Xtreme BAMFDetect/Xtreme
dd9a4301018543619867577a36fb8ad87b6a2938a45ae2eb2365384384709c1d	PE32	2024-09-28 15:20:49 UTC	User Submission	YRP/CRC32_poly_Constant YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/url YRP/excel_XML YRP/ai_compressed YRP/gem YRP/pgml YRP/amf YRP/prc YRP/x3d YRP/_3dxml YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Nullsoft_PiMP_Stub_SFX YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature
9fb8c9f90423fb7a0e6612b993dbf2e5c47b7fc97356278d1ecd8dbd22a3d43f	PDF	2024-09-28 15:20:42 UTC	User Submission	YRP/invalid_trailer_structure YRP/multiple_versions YRP/contentis_base64 [+] YRP/domain YRP/url YRP/pdf YRP/jpeg
db04427f737aa52f884fe7fcde744ee36300979c70490f840e1d854f9b1b8c44	PE32	2024-09-28 15:20:39 UTC	User Submission	YRP/CRC32_poly_Constant YRP/CRC32_table YRP/contentis_base64 [+] YRP/domain YRP/png YRP/excel_2007 YRP/ai_compressed YRP/corel_draw_compressed YRP/gem YRP/odg YRP/_3dxml_compressed YRP/System_Tools YRP/anti_dbg YRP/win_registry YRP/win_files_operation YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasDebugData YRP/HasRichSignature
6e8af4de86d3264e2b2b19cb318f5948ceba5bcdd2f1e7a04bb89d6ca30dead9	PE32	2024-09-28 15:20:36 UTC	User Submission	YRP/Prime_Constants_char YRP/MD5_Constants YRP/RIPEMD160_Constants [+] YRP/SHA1_Constants YRP/IP YRP/contentis_base64 YRP/domain YRP/url YRP/ai_compressed YRP/gem YRP/rip YRP/System_Tools YRP/Browsers YRP/Antivirus YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/DebuggerCheck__QueryInfo YRP/DebuggerException__SetConsoleCtrl YRP/SEH__vba YRP/anti_dbg YRP/create_service YRP/escalate_priv YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/suspicious_packer_section YRP/UPX YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature
e472c6873b5d50a2973a9dda82f886b5500c8f38e087bd324ca4f730e1f3a300	PE32	2024-09-28 15:20:33 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/prc [+] YRP/win_mutex YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked
103afb1596c0d26115f1fe3136395307ace77953577d21bc9a71185f49263e34	PE32	2024-09-28 15:20:29 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/gem [+] YRP/network_udp_sock YRP/network_tcp_socket YRP/Str_Win32_Winsock2_Library YRP/HackTool_Samples YRP/Armadillo_v1xx_v2xx_additional YRP/Microsoft_Visual_Cpp_v70_DLL YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_60_DLL_Debug YRP/Armadillo_v1xx_v2xx YRP/Microsoft_Visual_Cpp_v60_DLL YRP/Microsoft_Visual_Cpp_60 YRP/Armadillov1xxv2xx YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasRichSignature