MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
d89312227bb9ab2c776747b18728ca9db1cc1e08e6112608e2291411a765facb	MS-DOS	2024-09-29 11:39:39 UTC	User Submission	YRP/MD5_Constants YRP/contentis_base64 YRP/domain [+] YRP/win_files_operation
774d14fe46b40fb8017b7294fab74a81a166593e2adcaa19a76f8ceaca0e92ad	PE32	2024-09-29 11:39:34 UTC	User Submission	CuckooSandbox/vmdetect YRP/Advapi_Hash_API YRP/Delphi_CompareCall [+] YRP/Delphi_Copy YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 YRP/domain YRP/Browsers YRP/Sandboxie_Detection YRP/VirtualPC_Detection YRP/VirtualBox_Detection YRP/Dropper_Strings YRP/Obfuscated_Strings YRP/Check_Dlls YRP/vmdetect YRP/anti_dbg YRP/anti_dbgtools YRP/antisb_joesanbox YRP/antisb_anubis YRP/antisb_threatExpert YRP/antisb_sandboxie YRP/antisb_cwsandbox YRP/antivm_virtualbox YRP/inject_thread YRP/dyndns YRP/cred_local YRP/cred_ff YRP/cred_ie7 YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/CyberGate YRP/suspicious_packer_section YRP/UPX YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v4x YRP/UPXv20MarkusLaszloReiser YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/UPX20030XMarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/borland_delphi FlorianRoth/RAT_CyberGate KevTheHermit/CyberGate BAMFDetect/CyberGate
e742b777612dcabf11703f3ff57e32e5397b08160545c9c4820011b2e165cafd	PE32	2024-09-29 11:39:29 UTC	User Submission	YRP/CRC32_poly_Constant YRP/contentis_base64 YRP/domain [+] YRP/url YRP/nullsoft_streaming_video YRP/gem YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Microsoft_Visual_Cpp_v71_EXE YRP/Microsoft_Visual_Cpp_v71_EXE_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature
420b74724ac6e6615b7e38a9d97e191a0bbb837dc383a122121a9194b9103e37	PE32	2024-09-29 11:39:24 UTC	User Submission	YRP/Big_Numbers0 YRP/Delphi_FormShow YRP/Delphi_CompareCall [+] YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/contentis_base64 YRP/domain YRP/url YRP/avi YRP/anime_music_video YRP/excel_2007 YRP/gif_bitmap YRP/corel_draw_graohic YRP/corel_draw_compressed YRP/gem YRP/hpgl YRP/odg YRP/jt YRP/prc YRP/_3dxml_compressed YRP/network_dropper YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/win_hook YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/borland_delphi
28d1a418365222de882f0a47bf5df9a1ac17ec5dd49fb646827f0de805f3fd0e	PE32	2024-09-29 11:39:07 UTC	User Submission	YRP/Big_Numbers1 YRP/contentis_base64 YRP/domain [+] YRP/nullsoft_streaming_video YRP/rip YRP/VM_Generic_Detection YRP/Dropper_Strings YRP/anti_dbg YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/spreading_share YRP/check_patchlevel YRP/win_registry YRP/win_token YRP/win_private_profile YRP/Str_Win32_Winsock2_Library YRP/Visual_Cpp_2005_Release_Microsoft YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature
89b0583443c25f836a2aae1385888f9a165b292d6f7f2780068667934809ca98	PE32	2024-09-29 11:38:58 UTC	User Submission	YRP/Big_Numbers1 YRP/contentis_base64 YRP/domain [+] YRP/System_Tools YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/win_registry YRP/win_files_operation YRP/win_hook YRP/android_meterpreter YRP/Str_Win32_Wininet_Library YRP/suspicious_packer_section YRP/UPX YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Microsoft_Visual_Cpp YRP/UPXv20MarkusLaszloReiser YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature
3f84d535d5d144d1bfd904010e7e34cd96c21eeab2104f0e6eb9e70141185b7a	PE32	2024-09-29 11:38:54 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/ai_compressed YRP/gem YRP/xaml YRP/anti_dbg YRP/win_files_operation YRP/android_meterpreter YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature
1efd0598b32768e84c279391d3b7769b169fec6cae7195f4024ec7dd000907c9	PE32	2024-09-29 11:38:51 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/screenshot YRP/android_meterpreter YRP/suspicious_packer_section YRP/UPX YRP/UPX_v30_EXE_LZMA_Markus_Oberhumer_Laszlo_Molnar_John_Reiser_additional YRP/UPX_302 YRP/UPX_293_LZMA YRP/UPX_wwwupxsourceforgenet_additional YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/UPX_293_300_LZMA YRP/UPX_293_LZMA_additional YRP/UPX_v30_EXE_LZMA_Markus_Oberhumer_Laszlo_Molnar_John_Reiser YRP/UPX_293_300_LZMA_Markus_Oberhumer_Laszlo_Molnar_John_Reiser YRP/UPX_wwwupxsourceforgenet YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/UPX293300LZMAMarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature
8de7fc22c2120df00fb76f24ff081faa07b2acdf665326fac19a06ebae428be2	ELF	2024-09-29 11:38:45 UTC	User Submission	YRP/BASE64_table YRP/maldoc_getEIP_method_1 YRP/IP [+] YRP/contentis_base64 YRP/domain YRP/url YRP/Misc_Suspicious_Strings YRP/android_meterpreter YRP/ldpreload YRP/DDosTf
258d4de549ce27028efc0fd3f9e0f08f4d2c1150655eeb950701536f510043b0	PE32	2024-09-29 11:38:37 UTC	User Submission	CuckooSandbox/vmdetect YRP/maldoc_getEIP_method_1 YRP/contentis_base64 [+] YRP/domain YRP/VirtualPC_Detection YRP/vmdetect YRP/suspicious_packer_section YRP/Xtreme_Protector_100_105_Rafael_Ahucha_Sergio_Lara YRP/WinRAR_32_bit_SFX_Module_additional YRP/Xtreme_Protector_v105 YRP/ThemidaWinLicenseV1XNoCompressionSecureEngineOreansTechnologies YRP/Themida10xx18xxnocompressionOreansTechnologies YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/IsBeyondImageSize YRP/HasRichSignature