MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
d305c421018be9a43349a75848e2b59044321553ed6405007cbc5a56f1f4b4c0	PE32	2024-09-30 15:23:00 UTC	User Submission	CuckooSandbox/vmdetect YRP/VC8_Random YRP/IP [+] YRP/contentis_base64 YRP/domain YRP/url YRP/gem YRP/System_Tools YRP/Browsers YRP/VirtualPC_Detection YRP/SEH__vba YRP/vmdetect YRP/anti_dbg YRP/antivm_vmware YRP/inject_thread YRP/network_http YRP/win_files_operation YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature
7c1bc28d3a442a4c0f75cdeef5c2ab16f898c0ca4244b79b083a69dc117c5142	PE32	2024-09-30 15:22:57 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 YRP/domain [+] YRP/DebuggerException__SetConsoleCtrl YRP/escalate_priv YRP/win_token YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Borland_Cpp_DLL YRP/Borland_Cpp_for_Win32_1999 YRP/Borland YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay
e7a56f070c1c5019d5bc6b31f17c74191a5c2e3b6626bb2e7b8d060a96978959	PE32	2024-09-30 15:22:54 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/keylogger [+] YRP/win_registry YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/suspicious_packer_section YRP/ASPack_v212_additional YRP/ASPack_v21_additional YRP/ASProtect_V2X_DLL_Alexey_Solodovnikov YRP/ASPack_v212 YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/ASPack_v211d YRP/ASProtect_V2X_DLL_Alexey_Solodovnikov_additional YRP/ASPack_212withouth_Poly_Solodovnikov_Alexey YRP/ASPack_v212_Alexey_Solodovnikov YRP/ASPackv212AlexeySolodovnikov YRP/ASProtectV2XDLLAlexeySolodovnikov YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay
a50d6511bf43382b31b28d6f2579423ff512957cecad5d0ed5a9cb3d598d72d9	PE32	2024-09-30 15:22:52 UTC	User Submission	YRP/BASE64_table YRP/Delphi_Random YRP/Delphi_FormShow [+] YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/IP YRP/contentis_base64 YRP/domain YRP/url YRP/gem YRP/prc YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/borland_delphi
9b1a4e6bd63418704270921fdfa4b88cd4f8ad0e42acb66480092df196b2c3af	PE32	2024-09-30 15:22:40 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/DebuggerException__SetConsoleCtrl [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature
9d223e408c1bfafdf7e0b26ea0bcd428d7c1cfc59672acfa133f42d8e6619149	PE32	2024-09-30 15:22:37 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/url YRP/excel_XML YRP/gem YRP/pgml YRP/amf YRP/jt YRP/x3d YRP/_3dxml YRP/screenshot YRP/win_registry YRP/Str_Win32_Wininet_Library YRP/suspicious_packer_section YRP/UPX YRP/UPX_v0896_v102_v105_v122_Delphi_stub_additional YRP/UPX_v0896_v102_v105_v122_Delphi_stub_Laszlo_Markus YRP/UPX_wwwupxsourceforgenet_additional YRP/MSLRH_V031_emadicius YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/UPX_v0896_v102_v105_v122_Delphi_stub YRP/UPX_wwwupxsourceforgenet YRP/UPXProtectorv10x2 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay
c4ccc72cafcc7fefdc677d66dfd364cf8c484543d1a4bddfc75daee5ada4a10a	PE32	2024-09-30 15:22:31 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/win_registry [+] YRP/win_hook YRP/suspicious_packer_section YRP/PeCompact_v208_Bitsum_Technologiessignature_by_loveboom YRP/PECompact_2x_Jeremy_Collake YRP/PECompact_2xx_BitSum_Technologies YRP/PECompact_V2X_Bitsum_Technologies_additional YRP/PECompact_V2X_Bitsum_Technologies YRP/PECompact_v20_additional YRP/PeCompact_2xx_BitSum_Technologies YRP/PeCompact_253_DLL_BitSum_Technologies_additional YRP/PECompact_v20 YRP/PeCompact_253_DLL_BitSum_Technologies YRP/Armadillo_v4x YRP/PECompactV2XBitsumTechnologies YRP/PECompact2xxBitSumTechnologies YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature
a32b4a281c790e307bbfd8b803626608ba193ce186abb3b98c7f58c668929a06	PE32	2024-09-30 15:22:29 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/wmf YRP/prc YRP/Misc_Suspicious_Strings YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section YRP/Microsoft_Visual_Basic_v50 YRP/VMProtect_1704_phpbb3 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature
e4c4a2ebc29b4d6c5075ef6501107f484545b61c1324765ae94a2b02287efce2	PE32	2024-09-30 15:22:26 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/suspicious_packer_section [+] YRP/UPX YRP/PackerUPX_CompresorGratuito_wwwupxsourceforgenet YRP/UPX_wwwupxsourceforgenet_additional YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/Netopsystems_FEAD_Optimizer_1 YRP/UPX_290_LZMA YRP/UPX_290_LZMA_Markus_Oberhumer_Laszlo_Molnar_John_Reiser YRP/UPX_290_LZMA_additional YRP/UPX_wwwupxsourceforgenet YRP/UPXv20MarkusLaszloReiser YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/UPX20030XMarkusOberhumerLaszloMolnarJohnReiser YRP/UPX290LZMAMarkusOberhumerLaszloMolnarJohnReiser YRP/upx_1_00_to_1_07 YRP/upx_3 YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
7810921d8bbb0bec2d4ab48fefd1fb86aec48cacb25559f61d78c2f194c134f8	PE32	2024-09-30 15:22:24 UTC	User Submission	YRP/Big_Numbers2 YRP/contentis_base64 YRP/domain [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/IsPE32 YRP/HasDebugData YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3