MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
2e91edd8f3fa35801295e044716e985cf53396e45e7ba98646c6750fe23f124e	PE32	2024-09-29 14:43:13 UTC	User Submission	YRP/VC8_Random YRP/contentis_base64 YRP/domain [+] YRP/gem YRP/Antivirus YRP/Dropper_Strings YRP/keylogger YRP/win_registry YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Armadillo_v1xx_v2xx_additional YRP/Microsoft_Visual_Cpp_v70_DLL YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_60_DLL_Debug YRP/Armadillo_v1xx_v2xx YRP/Microsoft_Visual_Cpp_v60_DLL YRP/Microsoft_Visual_Cpp_60 YRP/Armadillov1xxv2xx YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature FlorianRoth/GhostDragon_Gh0stRAT
20d16b152f116dd88efe6359bbd5eeea7d2ee9fe6bcd8eac1f6a017450374d60	PE32	2024-09-29 14:43:11 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/url YRP/gif_animated YRP/gif_bitmap YRP/gif89a_bitmap YRP/ai_compressed YRP/gem YRP/hpgl YRP/wmf YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Safeguard_103_Simonzh YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message
f6fdbc47b7be3b041d63a13c0263ccc8faadcad7618bd9ef058f6bab01c55445	Macromedia	2024-09-29 14:43:06 UTC	User Submission	YRP/domain
4b6a9950196e54d78d99cd405ad892e8959ae7bd87d300e4be3f40c7e646a652	ELF	2024-09-29 14:43:03 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/url
6d463a14f05da0609137585bfa38353873c2895bfbf51cac06a11daa1481a46c	PE32	2024-09-29 14:43:01 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/Misc_Suspicious_Strings YRP/anti_dbg YRP/network_tcp_socket YRP/Str_Win32_Winsock2_Library YRP/Visual_Cpp_2005_Release_Microsoft YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsConsole YRP/HasOverlay YRP/HasDebugData YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
2c390ca69216740ea9472054f24428d6528e01ee488af78546eb3e2c3c0d0c8b	PE32	2024-09-29 14:42:55 UTC	User Submission	YRP/CRC32_poly_Constant YRP/contentis_base64 YRP/domain [+] YRP/gem YRP/prc YRP/Misc_Suspicious_Strings YRP/escalate_priv YRP/screenshot YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/Nullsoft_PiMP_Stub_SFX YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature
40a3be65d70f81c113ad78a22ca62249b2300bdc066096add10af580dafbab3d	PE32	2024-09-29 14:42:42 UTC	User Submission	YRP/MD5_Constants YRP/BASE64_table YRP/Delphi_FormShow [+] YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/IP YRP/contentis_base64 YRP/domain YRP/url YRP/nullsoft_streaming_video YRP/jpeg YRP/gem YRP/wmf YRP/prc YRP/Antivirus YRP/Dropper_Strings YRP/network_udp_sock YRP/network_tcp_listen YRP/network_smtp_raw YRP/network_tcp_socket YRP/network_dns YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/CookieTools YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v60_v70 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI YRP/borland_delphi
174463086b77f7d50f929349516326e687c6b5ed321ce141d170a365db361862	PE32	2024-09-29 14:42:39 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsConsole FlorianRoth/DragonFly_APT_Sep17_3
efd04615f9f8db664cc0a848c94a31bbcb4dce6e0653cc8888d4ead8e2b0adcc	RAR	2024-09-29 14:42:34 UTC	User Submission	YRP/domain
98e88b6eae76ef145bb948da9b728f9ff22145a8dd9e349205b85b969f53a1a0	PE32	2024-09-29 14:42:27 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/IsPE32 [+] YRP/IsDLL YRP/IsWindowsGUI YRP/IsBeyondImageSize YRP/ImportTableIsBad FlorianRoth/DragonFly_APT_Sep17_3