MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
1ee4fde46cfdc12312743d98b8ad42bbf189ba443a140e1309d3960415cbbd43	PE32	2024-09-30 11:28:51 UTC	User Submission	YRP/Big_Numbers0 YRP/contentis_base64 YRP/domain [+] YRP/png YRP/suspicious_packer_section YRP/PECompact_2xx_Slim_Loader_BitSum_Technologies YRP/PECompact_2x_Jeremy_Collake YRP/PECompact_V2X_Bitsum_Technologies_additional YRP/PECompact_V2X_Bitsum_Technologies YRP/PeCompact_2xx_Slim_Loader_BitSum_Technologies YRP/PeCompact2_253_276_Slim_Loader_BitSum_Technologies YRP/PECompact2xxSlimLoaderBitSumTechnologies YRP/PECompactV2XBitsumTechnologies YRP/pecompact2 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature
b9466c8215ceb12fb213a883dfc84a1042dc58c662f3dd73fddc0a8222f7cbf2	PE32	2024-09-30 11:28:49 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 YRP/domain [+] YRP/DebuggerException__SetConsoleCtrl YRP/escalate_priv YRP/win_token YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Borland_Cpp_DLL YRP/Borland_Cpp_for_Win32_1999 YRP/Borland YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay
fad6946706f90c2e29ce190b6d6869c75645503fc723bdc378278655804b6e93	PE32	2024-09-30 11:28:45 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/IsPE32 [+] YRP/IsWindowsGUI YRP/HasRichSignature
aa7c8ca3b76d54abb6576ebc2687979a55d5fab4311ba5e0fc9775bc2f45af87	PE32	2024-09-30 11:28:36 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/win_files_operation [+] YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature
9c727f5867d712281a3491c1401a8427e7ab2ad10476b30631dee3c977138f5b	PE32	2024-09-30 11:28:33 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 YRP/domain [+] YRP/url YRP/anti_dbg YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/VC8_Microsoft_Corporation YRP/FSG_v110_Eng_dulekxt_Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature
c57742b71927d45bb6d88f1510295afa91574e4534f2d1d7c203f13cb8cae5e6	PE32	2024-09-30 11:28:31 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/win_files_operation [+] YRP/Armadillo_v1xx_v2xx_additional YRP/Microsoft_Visual_Cpp_60_DLL_additional YRP/Microsoft_Visual_Cpp_v70_DLL YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_60_DLL_Debug YRP/Armadillo_v1xx_v2xx YRP/Microsoft_Visual_Cpp_v60_DLL YRP/Microsoft_Visual_Cpp_60_DLL YRP/Microsoft_Visual_Cpp_60 YRP/Armadillov1xxv2xx YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature
d1078c161223a476c046297dcb2b9f1a54abbbf68a3ca3019daa1d44ed2413f6	PE32	2024-09-30 11:28:28 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/IsPE32 [+] YRP/IsConsole FlorianRoth/DragonFly_APT_Sep17_3
eba03084768859aabfe915e8ac2c46c3c2c5fd1f341cd0be0098ea0fcd73b053	PE32	2024-09-30 11:28:23 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/win_private_profile [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature
b66d4574ab04714c7e616fe622fe8f31a3978cb790f8b8d1bd821e92c356a106	PE32	2024-09-30 11:28:18 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/DebuggerException__SetConsoleCtrl [+] YRP/escalate_priv YRP/win_token YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Borland_Cpp_DLL YRP/Borland_Cpp_for_Win32_1999 YRP/Borland YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay
b9888e253e783df35e28cae9ce849c27369121d9702e1dd881ed7afb9fb3af2f	PE32	2024-09-30 11:28:16 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/IsPE32 [+] YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3