MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
7faeb20b3cbf50849cef4438734792d19e43dd5b5fbbacf50a8bb08ac040c9ca	PE32	2024-10-01 12:35:13 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 YRP/domain [+] YRP/DebuggerException__SetConsoleCtrl YRP/escalate_priv YRP/win_token YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Borland_Cpp_DLL YRP/Borland_Cpp_for_Win32_1999 YRP/Borland YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay
74cc5be448e97b379d2c209ff6ec0bde5aa781615b385d3b3e00936bf43f2d0d	PE32	2024-10-01 12:35:10 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 YRP/domain [+] YRP/DebuggerException__SetConsoleCtrl YRP/escalate_priv YRP/win_token YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Borland_Cpp_DLL YRP/Borland_Cpp_for_Win32_1999 YRP/Borland YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay
6ba045a33736d269fa33bd0df7ace366ec0f2430bc9d57a802fc95ba0732db46	PE32	2024-10-01 12:35:08 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/suspicious_packer_section [+] YRP/PeCompact_v208_Bitsum_Technologiessignature_by_loveboom YRP/PECompact_2x_Jeremy_Collake YRP/PECompact_20x_Heuristic_Mode_Jeremy_Collake YRP/PECompact_2xx_BitSum_Technologies YRP/PECompact_v2xx YRP/PECompact_V2X_Bitsum_Technologies_additional YRP/PECompact_V2X_Bitsum_Technologies YRP/PECompact_v20_additional YRP/PeCompact_2xx_BitSum_Technologies YRP/PeCompact_253_DLL_BitSum_Technologies_additional YRP/PECompact_v20 YRP/PeCompact_253_DLL_BitSum_Technologies YRP/PECompact_v2xx_additional YRP/PECompactV2XBitsumTechnologies YRP/PECompact2xxBitSumTechnologies YRP/PECompactv2xx YRP/pecompact2 YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
581d958fe534ee7acf952df84336154debdb2ceb0e2e877851cc17f82b7b3cea	PE32	2024-10-01 12:35:05 UTC	User Submission	YRP/Big_Numbers0 YRP/Big_Numbers1 YRP/CRC32_poly_Constant [+] YRP/CRC32_table YRP/MD5_Constants YRP/MD5_API YRP/DES_sbox YRP/BASE64_table YRP/VC8_Random YRP/maldoc_getEIP_method_1 YRP/IP YRP/contentis_base64 YRP/domain YRP/url YRP/png YRP/avi YRP/anime_music_video YRP/excel_XML YRP/gif_bitmap YRP/jpeg YRP/jpg_with_EXIF YRP/corel_draw_graohic YRP/gem YRP/pgml YRP/rip YRP/amf YRP/prc YRP/x3d YRP/_3dxml YRP/SEH__vba YRP/inject_thread YRP/hijack_network YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/ASPack_v212_additional YRP/ASPack_v21_additional YRP/ASProtect_V2X_DLL_Alexey_Solodovnikov YRP/ASPack_v212 YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/ASPack_v211d YRP/ASProtect_V2X_DLL_Alexey_Solodovnikov_additional YRP/ASPack_212withouth_Poly_Solodovnikov_Alexey YRP/ASPack_v212_Alexey_Solodovnikov YRP/ASPackv212AlexeySolodovnikov YRP/ASProtectV2XDLLAlexeySolodovnikov YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature
abdb631c24ceb96464401e7f8172fb7c3831d9c8c5d2c7e1c0550d92f3d991ba	PE32	2024-10-01 12:35:01 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 YRP/domain [+] YRP/DebuggerException__SetConsoleCtrl YRP/escalate_priv YRP/win_token YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Borland_Cpp_DLL YRP/Borland_Cpp_for_Win32_1999 YRP/Borland YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay
5d5ae67537d0bf6f74f410f534988900dc30d2ba3df0db10d25d0a6661ec0783	MS-DOS	2024-10-01 12:34:57 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/url YRP/MPRESS_V200_V20X_MATCODE_Software_20090423 YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/mpress_2_xx_x86 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasModified_DOS_Message
3f0a36c761620e89341659184b43bf016b52ac4357efc1e7e0f3f4588f4d834c	PE32	2024-10-01 12:34:55 UTC	User Submission	YRP/CRC32_poly_Constant YRP/CRC32_table YRP/VC8_Random [+] YRP/contentis_base64 YRP/domain YRP/gem YRP/System_Tools YRP/network_http YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/GenerateTLSClientHelloPacket_Test YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature
4a9a16cef75def24daa52922f3285f1008622f5b45adcbc85272f25fe5567c62	PE32	2024-10-01 12:34:52 UTC	User Submission	CuckooSandbox/vmdetect YRP/VC8_Random YRP/maldoc_getEIP_method_1 [+] YRP/IP YRP/contentis_base64 YRP/domain YRP/url YRP/gem YRP/prc YRP/System_Tools YRP/Browsers YRP/Antivirus YRP/VMWare_Detection YRP/VirtualBox_Detection YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/vmdetect YRP/anti_dbg YRP/inject_thread YRP/create_service YRP/network_http YRP/network_dropper YRP/network_tcp_socket YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/vmdetect_misc YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI YRP/HasDebugData YRP/HasModified_DOS_Message YRP/HasRichSignature
22d89f41addaa25097826ea8b388c0e2814f8fd7ac62545bf4256d218537101f	Zip	2024-10-01 12:34:45 UTC	User Submission	YRP/domain YRP/excel_2007 YRP/corel_draw_compressed [+] YRP/odg YRP/_3dxml_compressed
dcb1416ec221e6bc53ffe0163a619fe1ab5928095cf4ce4cd5257a5e592d4de2	PE32	2024-10-01 12:34:43 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/Browsers [+] YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/screenshot YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/Armadillo_v4x YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasDebugData YRP/HasRichSignature