MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
f4f8205863613dfc8ba131c3237345bdfc07f20b6a53f2bdaf96dc9aa5014ad7	PE32	2024-09-29 00:57:25 UTC	User Submission	YRP/CRC32_poly_Constant YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/url YRP/excel_XML YRP/gem YRP/pgml YRP/wmf YRP/amf YRP/prc YRP/x3d YRP/_3dxml YRP/escalate_priv YRP/screenshot YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/Nullsoft_PiMP_Stub_SFX YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature
b38eb21c7dcf8a10c609642c5b30880eaab0a8c29630bf38f365266a79c40a79	PE32	2024-09-29 00:57:16 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/gem YRP/suspicious_packer_section YRP/UPX YRP/PackerUPX_CompresorGratuito_wwwupxsourceforgenet YRP/UPX_wwwupxsourceforgenet_additional YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/Netopsystems_FEAD_Optimizer_1 YRP/UPX_290_LZMA YRP/UPX_290_LZMA_Markus_Oberhumer_Laszlo_Molnar_John_Reiser YRP/UPX_290_LZMA_additional YRP/UPX_wwwupxsourceforgenet YRP/UPXv20MarkusLaszloReiser YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/UPX20030XMarkusOberhumerLaszloMolnarJohnReiser YRP/UPX290LZMAMarkusOberhumerLaszloMolnarJohnReiser YRP/upx_3 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature
fb2019dd106082e1cd7bd190d539cbcdc0eec37a23a539bec394e329dfdf1c5f	PE32	2024-09-29 00:57:01 UTC	User Submission	CuckooSandbox/vmdetect YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 [+] YRP/domain YRP/VMWare_Detection YRP/Dropper_Strings YRP/vmdetect YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/IsPE32 YRP/IsDLL YRP/IsConsole YRP/HasDebugData YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
893fb9d285ae53e7c9141c7ddf1675e6ab078963ef69e15086177044785b65e2	PE32	2024-09-29 00:56:57 UTC	User Submission	YRP/CRC32_poly_Constant YRP/CRC32_table YRP/IP [+] YRP/contentis_base64 YRP/domain YRP/url YRP/excel_XML YRP/gem YRP/pgml YRP/amf YRP/prc YRP/u3d YRP/x3d YRP/_3dxml YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_files_operation YRP/win_hook YRP/suspicious_packer_section YRP/UPX YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/BobSoft_Mini_Delphi_BoB_BobSoft_additional YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/UPXv20MarkusLaszloReiser YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/UPXProtectorv10x2 YRP/UPX20030XMarkusOberhumerLaszloMolnarJohnReiser YRP/BobSoftMiniDelphiBoBBobSoft YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature
04ed719489ad862624dca302df9a4dd27b9ca81542d59797fcbb1b3447ea4b04	PE32	2024-09-29 00:56:51 UTC	User Submission	YRP/CRC32_poly_Constant YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/url YRP/gem YRP/screenshot YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section YRP/UPX YRP/PackerUPX_CompresorGratuito_wwwupxsourceforgenet YRP/UPX_wwwupxsourceforgenet_additional YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/UPX_v0896_v102_v105_v124_Markus_Laszlo_overlay YRP/UPX_v0896_v102_v105_v124_Markus_Laszlo_overlay_additional YRP/UPX_wwwupxsourceforgenet YRP/UPXv20MarkusLaszloReiser YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature
168f9d19ef44b44e8e93f6f0fa6c911f14c71d291287cc6698fd2543d2009835	data	2024-09-29 00:56:48 UTC	User Submission	YRP/Big_Numbers1 YRP/contentis_base64 YRP/domain [+] YRP/url YRP/rip YRP/android_meterpreter YRP/generic_javascript_obfuscation YRP/possible_includes_base64_packed_functions
373974d934affac9a17ce27c8dc95dde15182b6947c0e2cfeb8be8131101368b	PE32	2024-09-29 00:56:45 UTC	User Submission	YRP/CRC32_poly_Constant YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/url YRP/excel_XML YRP/pgml YRP/amf YRP/prc YRP/x3d YRP/_3dxml YRP/escalate_priv YRP/screenshot YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/ASProtect_v132 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature
037943788600d2555f8c9dd6becd1d84e35ba6891e9b28cd95974b53807fdf84	PE32	2024-09-29 00:56:41 UTC	User Submission	YRP/CRC32_poly_Constant YRP/powershell YRP/contentis_base64 [+] YRP/domain YRP/System_Tools YRP/Antivirus YRP/antisb_threatExpert YRP/win_token YRP/win_files_operation YRP/IsPE32 YRP/IsWindowsGUI YRP/HasDebugData YRP/IsBeyondImageSize YRP/HasRichSignature
af43548f7f9fb197a7d76e7e9cb774696dd4604ebbdebd790109f28181d3fc5b	PE32	2024-09-29 00:56:39 UTC	User Submission	YRP/domain YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/IsBeyondImageSize YRP/HasRichSignature
be0502430fe46391968d39df8985de206f33d073c00ca6b412c4d371da2d7237	PE32	2024-09-29 00:56:34 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/wmf YRP/prc YRP/screenshot YRP/win_registry YRP/fasm_Tomasz_Grysztar_additional YRP/fasm_Tomasz_Grysztar YRP/Microsoft_Visual_Cpp_DLL YRP/Microsoft_Visual_C_v70_Basic_NET YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasRichSignature