MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
7aeaf699de57d9dd0649805e05ff7c3e0889e7065c3e706c7f63e4525ba94f07	PE32	2024-09-26 19:05:46 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/suspicious_packer_section [+] YRP/Upack_036_beta_Dwing_additional YRP/Upack_V028_V0399_Dwing_20080321 YRP/Upack_028_0399_relocated_image_base_Delphi_NET_DLL_or_something_else_Dwing_h YRP/Upack_V03X_Dwing_additional YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/WinUpack_v039_final_relocated_image_base_By_Dwing_c2005_h2_additional YRP/WinUpack_v039_final_relocated_image_base_By_Dwing_c2005_h2 YRP/Upack_028_0399_relocated_image_base_Delphi_NET_DLL_or_something_else_Dwing YRP/Upack_v028_0399_relocated_image_base_Delphi_NET_DLL_or_something_else_img_srcimagessmiliessmilegif_ YRP/Upack_Patch_or_any_Version_Sign_by_hot_UNP YRP/Upack_Patch_or_any_Version_Dwing YRP/Upack_v028_039_relocated_image_base_Delphi_NET_DLL_or_something_else_Dwing YRP/Upack_v028_039_relocated_image_base_Delphi_NET_DLL_or_something_else_Dwing_h YRP/Upack_V03X_Dwing YRP/Upack_V036_V037_DLL_Dwing YRP/Upack_V028_V0399_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_036_beta_Dwing YRP/WinUpackv039finalrelocatedimagebaseByDwingc2005h2 YRP/Upack_PatchoranyVersionDwing YRP/UpackV037Dwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message FlorianRoth/DragonFly_APT_Sep17_3
9024f3291d489435157fa5352eafd001793dc867fa3c68370118c7afba836845	PE32	2024-09-26 19:05:40 UTC	User Submission	YRP/BLOWFISH_Constants YRP/Delphi_CompareCall YRP/Delphi_Copy [+] YRP/contentis_base64 YRP/domain YRP/ThreadControl__Context YRP/keylogger YRP/win_registry YRP/win_files_operation YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/borland_delphi
eeac2dc71ac9015cadef869666607fbc2760328d00c4417466cd832efab8d64e	PE32	2024-09-26 19:05:37 UTC	User Submission	YRP/CRC32_poly_Constant YRP/maldoc_getEIP_method_1 YRP/contentis_base64 [+] YRP/domain YRP/prc YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/IsBeyondImageSize
99ee535b31b00a6223bf294c6eebbe18bc3d53aa5c418eaec01a9c432c4ca8e9	PE32	2024-09-26 19:05:32 UTC	User Submission	YRP/Big_Numbers1 YRP/Advapi_Hash_API YRP/MD5_Constants [+] YRP/VC8_Random YRP/maldoc_getEIP_method_1 YRP/IP YRP/contentis_base64 YRP/domain YRP/url YRP/avi YRP/anime_music_video YRP/gif_bitmap YRP/corel_draw_graohic YRP/gem YRP/rip YRP/wmf YRP/prc YRP/Misc_Suspicious_Strings YRP/inject_thread YRP/hijack_network YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature
06f19beaa8245ee56e20cf8e9839b9e191d3a1469fecab62ea15ec85353374d4	PE32	2024-09-26 19:05:10 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/ai_compressed YRP/network_udp_sock YRP/network_tcp_listen YRP/network_dropper YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/rat_webcam YRP/win_token YRP/android_meterpreter YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section YRP/ASProtect_v123_RC1 YRP/ASProtect_v12x_New_Strain_additional YRP/Microsoft_Visual_Basic_v50 YRP/ASProtect_v12x_New_Strain YRP/ASProtect_v11_BRS YRP/ASProtect_V2X_Registered_Alexey_Solodovnikov YRP/ASProtect_133_21_Registered_Alexey_Solodovnikov YRP/VMProtect_1704_phpbb3 YRP/ASProtect_v12_additional YRP/ASProtect_123_RC4_130824_Solodovnikov_Alexey YRP/ASProtect_133_21_Registered_Alexey_Solodovnikov_additional YRP/ASProtectSKE21xexeAlexeySolodovnikov YRP/ASProtect13321RegisteredAlexeySolodovnikov YRP/ASProtectv12xNewStrain YRP/ASProtectv123RC1 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked
8e1357bda3f092918523d7e8c709e14b650e3e277cda380fc0f332687fa48a7a	PE32	2024-09-26 19:05:07 UTC	User Submission	YRP/Big_Numbers0 YRP/Big_Numbers1 YRP/Big_Numbers2 [+] YRP/CRC32_poly_Constant YRP/CRC32_table YRP/BASE64_table YRP/IP YRP/contentis_base64 YRP/domain YRP/url YRP/excel_2007 YRP/excel_XML YRP/corel_draw_compressed YRP/gem YRP/odg YRP/pgml YRP/amf YRP/prc YRP/x3d YRP/_3dxml YRP/_3dxml_compressed YRP/Browsers YRP/Misc_Suspicious_Strings YRP/network_http YRP/network_tcp_socket YRP/escalate_priv YRP/screenshot YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/android_meterpreter YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/suspicious_packer_section YRP/UPX YRP/Nullsoft_PiMP_Stub_SFX YRP/Borland YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature
acc47fb704a0c94893989777ed06be4fd52146be56f021dafcabe2c5d9ad6694	Java	2024-09-26 19:04:58 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/png [+] YRP/ogg YRP/excel_2007 YRP/corel_draw_compressed YRP/gem YRP/odg YRP/rip YRP/_3dxml_compressed
a869d3c43711359b7a38b0ba1155c5efbe003efb01d1315d681221f63fcc5965	PE32	2024-09-26 19:04:46 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/Microsoft_Visual_Cpp_v50v60_MFC [+] YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/IsBeyondImageSize YRP/HasRichSignature
aa8eb0f78217ad657888cbad168eff82b1ee0ad4fab4722ec55a2a74628a1d44	PE32	2024-09-26 19:04:39 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/domain YRP/Safeguard_103_Simonzh [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature
1313923a7ae6ee9f178505f621acb0d9ff5d71c5ebf24b48c21baec360c8f872	PE32	2024-09-26 19:04:32 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/wmf [+] YRP/win_files_operation YRP/Armadillo_v2xx_CopyMem_II_additional YRP/Microsoft_Visual_Cpp_70_MFC YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature