MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
b371de162d56e357fa2c6529ed9e288249e0883b83aabba0fe661995ce92b846	PE32	2024-09-29 23:15:25 UTC	User Submission	YRP/BASE64_table YRP/Delphi_FormShow YRP/Delphi_Copy [+] YRP/Delphi_StrToInt YRP/IP YRP/contentis_base64 YRP/domain YRP/url YRP/gem YRP/wmf YRP/jt YRP/prc YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/BobSoft_Mini_Delphi_BoB_BobSoft_additional YRP/Borland_Delphi_v60_v70 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/BobSoftMiniDelphiBoBBobSoft YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature
4bf7312de1926474fec1d310f458228050e9edec2135723ac1657e895b47c099	PE32	2024-09-29 23:15:16 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/UPX_v30_EXE_LZMA_Markus_Oberhumer_Laszlo_Molnar_John_Reiser_additional [+] YRP/UPX_302 YRP/PackerUPX_CompresorGratuito_wwwupxsourceforgenet YRP/UPX_293_LZMA YRP/UPX_wwwupxsourceforgenet_additional YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/UPX_293_300_LZMA YRP/UPX_293_LZMA_additional YRP/UPX_v30_EXE_LZMA_Markus_Oberhumer_Laszlo_Molnar_John_Reiser YRP/UPX_293_300_LZMA_Markus_Oberhumer_Laszlo_Molnar_John_Reiser YRP/UPX_wwwupxsourceforgenet YRP/UPX293300LZMAMarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
a86519d3e38eddc7b5ceb44d28a79ba0be1a7ff131d69484eab8a3cbfb804027	data	2024-09-29 23:15:13 UTC	User Submission	CuckooSandbox/shellcode YRP/domain
d7fa6ccab785d881f625229f6223132b8112fb31b192cb8525e6efe08da96af7	PDF	2024-09-29 23:14:59 UTC	User Submission	YRP/Big_Numbers1 YRP/contentis_base64 YRP/domain [+] YRP/pdf
378a74c526d5e1ac169bcf3ffe521caad1c2af76c82be7e25c16dc96463e639b	PE32	2024-09-29 23:14:53 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/wmf YRP/Str_Win32_Wininet_Library YRP/suspicious_packer_section YRP/UPX YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/Armadillo_v4x YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/UPXv20MarkusLaszloReiser YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/UPX20030XMarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 YRP/IsWindowsGUI
0190f7f233534f987233a99732510f50b4c500559f2a24fe9dc5564de75165e8	PE32	2024-09-29 23:14:44 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain [+] YRP/Antivirus YRP/Misc_Suspicious_Strings YRP/SEH__vba YRP/escalate_priv YRP/win_registry YRP/win_token YRP/suspicious_packer_section YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature
13ee6e5d8ba268b069120c8c4b326f5341ff038a6b476a15987fcb5c2bfa31f4	PE32+	2024-09-29 23:14:39 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/spyeye [+] YRP/Microsoft_Visual_Cpp_80_DLL YRP/IsPE64 YRP/IsConsole YRP/HasOverlay
6a1c5265cdef5869aebf7b3cf67545a1b80ad79fa57a76dd594bb1fdaaa14415	data	2024-09-29 23:14:36 UTC	User Submission	YRP/Big_Numbers1 YRP/contentis_base64 YRP/domain [+] YRP/url YRP/Browsers YRP/win_mutex
b8a236d6e036e81241d215a79bcd298950a71e801cd6c1d406cb7e2aa682e2ea	PE32	2024-09-29 23:14:31 UTC	User Submission	YRP/Delphi_FormShow YRP/Delphi_Copy YRP/Delphi_StrToInt [+] YRP/IP YRP/contentis_base64 YRP/domain YRP/url YRP/gem YRP/jt YRP/prc YRP/System_Tools YRP/Browsers YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/hijack_network YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/suspicious_packer_section YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/borland_delphi
bfb87008cd83b8c46a06a434b82351e21cb5c5aa300473a7b17bbf37dc59a740	Zip	2024-09-29 23:14:21 UTC	User Submission	CuckooSandbox/shellcode YRP/Big_Numbers1 YRP/contentis_base64 [+] YRP/domain YRP/url YRP/png YRP/nullsoft_streaming_video YRP/excel_2007 YRP/gif_bitmap YRP/jpg_with_EXIF YRP/corel_draw_compressed YRP/gem YRP/odg YRP/wmf YRP/_3dxml_compressed YRP/suspicious_packer_section