MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
0118fc18b3fd9ec5a891790a2fc28fd5f49b134890d9a115e9966b9bdf6fe812	PE32	2024-09-28 08:19:42 UTC	User Submission	YRP/Delphi_FormShow YRP/Delphi_Copy YRP/Delphi_StrToInt [+] YRP/IP YRP/contentis_base64 YRP/domain YRP/url YRP/gem YRP/jt YRP/prc YRP/System_Tools YRP/Browsers YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/hijack_network YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/suspicious_packer_section YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland YRP/PECompactv2xx YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/borland_delphi
d44b8b97f20e3740542ecab9952db7a3f534afa3266c6b577e5c515a221b2273	PE32	2024-09-28 08:19:39 UTC	User Submission	YRP/BASE64_table YRP/Delphi_FormShow YRP/Delphi_CompareCall [+] YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/IP YRP/contentis_base64 YRP/domain YRP/gem YRP/prc YRP/anti_dbg YRP/antivm_vmware YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/network_ssl YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/BobSoft_Mini_Delphi_BoB_BobSoft_additional YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/BobSoftMiniDelphiBoBBobSoft YRP/IsPE32 YRP/IsWindowsGUI YRP/borland_delphi YRP/borland_delphi_dll
21839b051fb149d1767960d0e4d545d65e53d266fdb67bfb23e2e141d7c63988	PE32	2024-09-28 08:19:30 UTC	User Submission	YRP/BASE64_table YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/url YRP/gem YRP/prc YRP/Browsers YRP/Dropper_Strings YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/disable_antivirus YRP/network_http YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature
fff4044f1cb4ed188acb11c7a4314fb2fce2211bf3407cc3db373a91ae812bd2	PE32	2024-09-28 08:19:25 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/url YRP/excel_XML YRP/gem YRP/pgml YRP/amf YRP/xaml YRP/x3d YRP/_3dxml YRP/anti_dbg YRP/win_private_profile YRP/win_files_operation YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature
564fb65801d99f46aa937a9269faf727860848c1060e9db98e98bdd6b43b924c	PE32	2024-09-28 08:19:23 UTC	User Submission
acdfaad6b4f8465b4a2f457e4b1484fc9f2c1203bb8a9cd069746afd55288845	PE32	2024-09-28 08:19:20 UTC	User Submission	YRP/Big_Numbers1 YRP/MD5_Constants YRP/VC8_Random [+] YRP/without_attachments YRP/without_images YRP/without_urls YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain YRP/gem YRP/DebuggerException__SetConsoleCtrl YRP/network_smtp_raw YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay
06ba1fbe39f7415311556bc028c6b8858d3ae3f79a6b7f1fe0e3a2d443bfacce	Zip	2024-09-28 08:19:10 UTC	User Submission	CuckooSandbox/shellcode YRP/contentis_base64 YRP/domain [+] YRP/png YRP/nullsoft_streaming_video YRP/excel_2007 YRP/gif_bitmap YRP/corel_draw_compressed YRP/hpgl YRP/odg YRP/_3dxml_compressed YRP/android_meterpreter YRP/suspicious_packer_section
db2761265dc43850144f493bdad45ced0ab61e6e7580b4acd66eb97a4da624fd	PE32	2024-09-28 08:19:02 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/maldoc_getEIP_method_1 YRP/contentis_base64 [+] YRP/domain YRP/Qemu_Detection YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/ImportTableIsBad FlorianRoth/DragonFly_APT_Sep17_3
74f1204af1eaf0473013fde35e3af092867f56d9dd20bda08ad5689be4873532	PDF	2024-09-28 08:18:58 UTC	User Submission	YRP/Big_Numbers1 YRP/invalid_trailer_structure YRP/multiple_versions [+] YRP/contentis_base64 YRP/domain YRP/url YRP/pdf YRP/jpeg
18b660fc4bd6359d4df3df354e303a56436de274a52e5c688688867b82962006	PE32	2024-09-28 08:18:53 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/Safeguard_103_Simonzh [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3