MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
bd2328b977cbb72be247544cb1bd356c51edf6d68936d070eb71a0e24453a98a	PE32	2024-10-01 06:48:20 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 YRP/domain [+] YRP/DebuggerException__SetConsoleCtrl YRP/escalate_priv YRP/win_token YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Borland_Cpp_DLL YRP/Borland_Cpp_for_Win32_1999 YRP/Borland YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay
6572fc20a86026ea97c95e309e02f429515c959ba24dc5c192c2f01a15c4a8bd	PE32	2024-10-01 06:48:14 UTC	User Submission	YRP/CRC32_poly_Constant YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/url YRP/png YRP/excel_XML YRP/pgml YRP/amf YRP/prc YRP/x3d YRP/_3dxml YRP/escalate_priv YRP/screenshot YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/Nullsoft_PiMP_Stub_SFX YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature
56d983fa57df1ffe76225d4bcd4725f42637b5c8dbd2bd7f88b89a72902c2e22	RAR	2024-10-01 06:48:10 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/hpgl
91bae6f2b17f3eadf307bba933021b8568c2d90247c638187a6a34d20a045d25	PE32	2024-10-01 06:48:06 UTC	User Submission	YRP/MD5_Constants YRP/contentis_base64 YRP/domain [+] YRP/prc YRP/Antivirus YRP/antisb_threatExpert YRP/screenshot YRP/win_mutex YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Typical_Malware_String_Transforms YRP/Armadillo_v1xx_v2xx_additional YRP/Microsoft_Visual_Cpp_60_DLL_additional YRP/Microsoft_Visual_Cpp_v70_DLL YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_60_DLL_Debug YRP/Armadillo_v1xx_v2xx YRP/Microsoft_Visual_Cpp_v60_DLL YRP/Microsoft_Visual_Cpp_60_DLL YRP/Microsoft_Visual_Cpp_60 YRP/Armadillov1xxv2xx YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3 FlorianRoth/Typical_Malware_String_Transforms
a5d9cf6c65da7336ed44094a9a4e1b99d79ff5a0c99072448755f21bff81ad02	PE32	2024-10-01 06:48:04 UTC	User Submission	YRP/CRC32_poly_Constant YRP/RIPEMD160_Constants YRP/SHA1_Constants [+] YRP/IP YRP/contentis_base64 YRP/domain YRP/url YRP/excel_XML YRP/pgml YRP/amf YRP/prc YRP/x3d YRP/_3dxml YRP/escalate_priv YRP/screenshot YRP/win_registry YRP/win_token YRP/win_files_operation YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDebugData YRP/HasRichSignature
6a5e10f27d61bb6eb623c345e8762d3d9cb049df1d5695cde3bfe6c94e396c26	GIF	2024-10-01 06:48:01 UTC	User Submission	YRP/webshell_Shell_ci_Biz_was_here_c100_v_xxx YRP/Webshell_c100 YRP/IP [+] YRP/contentis_base64 YRP/domain YRP/url YRP/gif_bitmap YRP/stl YRP/android_meterpreter
dfecaac75e4c8e2b8c4e4aa909634fb246eb784b7b5f61d4108d08ef3b4c78d2	PE32	2024-10-01 06:47:55 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/domain YRP/Safeguard_103_Simonzh [+] YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasModified_DOS_Message FlorianRoth/Sality_Malware_Oct16
a60f6cd82d98479c722226a5d972c5eedf19e544e4204655045570106c69a0c2	RAR	2024-10-01 06:47:52 UTC	User Submission	YRP/domain
bcfff27b516d8d102f6018ac4342f4407b55685c8ff0b59ce86fbf6bd9c17e9f	PE32	2024-10-01 06:47:50 UTC	User Submission	YRP/CRC32_poly_Constant YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/gif_animated YRP/excel_XML YRP/gif_bitmap YRP/gif89a_bitmap YRP/gem YRP/pgml YRP/amf YRP/x3d YRP/_3dxml YRP/network_dns YRP/screenshot YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/suspicious_packer_section YRP/UPX YRP/UPX_v0896_v102_v105_v122_Delphi_stub_additional YRP/UPX_v0896_v102_v105_v122_Delphi_stub_Laszlo_Markus YRP/PackerUPX_CompresorGratuito_wwwupxsourceforgenet YRP/UPX_wwwupxsourceforgenet_additional YRP/MSLRH_V031_emadicius YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/UPX_v0896_v102_v105_v122_Delphi_stub YRP/UPX_wwwupxsourceforgenet YRP/UPXv20MarkusLaszloReiser YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/UPXProtectorv10x2 YRP/UPX20030XMarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked
67182089ab311672aab19b86b0be7acfb920a11a65b952c8e4bd53a60a04e35a	PE32	2024-10-01 06:47:47 UTC	User Submission	YRP/SHA1_Constants YRP/contentis_base64 YRP/domain [+] YRP/gem YRP/suspicious_packer_section YRP/PackerUPX_CompresorGratuito_wwwupxsourceforgenet YRP/UPX_wwwupxsourceforgenet_additional YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/Netopsystems_FEAD_Optimizer_1 YRP/UPX_290_LZMA YRP/UPX_290_LZMA_Markus_Oberhumer_Laszlo_Molnar_John_Reiser YRP/UPX_290_LZMA_additional YRP/UPX_wwwupxsourceforgenet YRP/UPXv20MarkusLaszloReiser YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/UPX20030XMarkusOberhumerLaszloMolnarJohnReiser YRP/UPX290LZMAMarkusOberhumerLaszloMolnarJohnReiser YRP/upx_3 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay