MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
5dbc9fddb247fe7de3b6e7bf973ed84f23470eadc0bb461bacfa778360154f3d	PE32	2024-09-29 01:59:31 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 YRP/domain [+] YRP/Obfuscated_Strings YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
f74f6497e37bf9121e8fe6c7432cc138be9a5586bdff46847fe2d439e72a2ff4	data	2024-09-29 01:59:28 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/url YRP/gif_bitmap
5fa48920308380c37d2452d75dc44a8f6b0242e22d244c0a106da60cfe5bd049	ASCII	2024-09-29 01:59:23 UTC	User Submission	YRP/contentis_base64 YRP/domain
2d8cc138382870455d8b4f26d4f090b524372f39da001a4cf5435e403df3a2e6	PE32	2024-09-29 01:59:17 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/Dropper_Strings [+] YRP/anti_dbg YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Str_Win32_Wininet_Library YRP/IsPE32 YRP/IsWindowsGUI YRP/IsBeyondImageSize YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
6a33a22d5c7ffd0f4cfea06157fdf811870e5de8523eca79028e6867b37d7118	PE32	2024-09-29 01:59:14 UTC	User Submission	YRP/VC8_Random YRP/contentis_base64 YRP/domain [+] YRP/gem YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Microsoft_Visual_Cpp_70 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature
7ed8bfaba412c707cd685750b78eed818aade0791c39b424d1d013e8fd05d22a	PE32	2024-09-29 01:59:01 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/Str_Win32_Wininet_Library [+] YRP/Str_Win32_Internet_API YRP/suspicious_packer_section YRP/UPX YRP/PackerUPX_CompresorGratuito_wwwupxsourceforgenet YRP/UPX_wwwupxsourceforgenet_additional YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/UPX_v0896_v102_v105_v124_Markus_Laszlo_overlay YRP/UPX_v0896_v102_v105_v124_Markus_Laszlo_overlay_additional YRP/UPX_wwwupxsourceforgenet YRP/UPXv20MarkusLaszloReiser YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
189276d2404aebc1f3ea269f09b6ab5b28fba00ff321ef799c3239d9947fb44b	PE32	2024-09-29 01:58:58 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/excel_XML YRP/gif_bitmap YRP/x3d YRP/anti_dbg YRP/win_files_operation YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI YRP/HasDebugData YRP/HasRichSignature
34e32c5befd35e8fb4dd32432c3748f470a46146ee82ad2b726f18adbbf8286a	PE32	2024-09-29 01:58:49 UTC	User Submission	YRP/CRC32_poly_Constant YRP/CRC32_table YRP/contentis_base64 [+] YRP/domain YRP/excel_2007 YRP/corel_draw_compressed YRP/odg YRP/rip YRP/jt YRP/prc YRP/_3dxml_compressed YRP/screenshot YRP/win_registry YRP/win_private_profile YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature
9a895c6d91f398c587fb45ed2dfd54157803fae21a9905cc76b9fe7432404a28	PE32	2024-09-29 01:58:44 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/url YRP/excel_XML YRP/gem YRP/pgml YRP/rip YRP/amf YRP/prc YRP/x3d YRP/_3dxml YRP/System_Tools YRP/Browsers YRP/Antivirus YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/DebuggerCheck__QueryInfo YRP/DebuggerHiding__Thread YRP/DebuggerException__SetConsoleCtrl YRP/SEH__vba YRP/anti_dbg YRP/create_service YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/spreading_share YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/suspicious_packer_section YRP/UPX YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature
006b6300680df2c2187355ab75f9ad4395116c6b664623abedc5093280228461	PE32	2024-09-29 01:58:38 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/suspicious_packer_section [+] YRP/UPX YRP/PackerUPX_CompresorGratuito_wwwupxsourceforgenet YRP/UPX_wwwupxsourceforgenet_additional YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/UPX_wwwupxsourceforgenet YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/upx_3 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature