MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
69a0a6624f4915fe5ae677ccf41e1078eb00e016d1928e2207be0a3642f12387	PE32	2024-10-01 12:12:57 UTC	User Submission	YRP/CRC32_poly_Constant YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/url YRP/gif_animated YRP/excel_XML YRP/gif_bitmap YRP/gif89a_bitmap YRP/gem YRP/pgml YRP/amf YRP/x3d YRP/_3dxml YRP/screenshot YRP/win_registry YRP/suspicious_packer_section YRP/UPX YRP/UPX_v0896_v102_v105_v122_Delphi_stub_additional YRP/UPX_v0896_v102_v105_v122_Delphi_stub_Laszlo_Markus YRP/PackerUPX_CompresorGratuito_wwwupxsourceforgenet YRP/UPX_wwwupxsourceforgenet_additional YRP/MSLRH_V031_emadicius YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/UPX_v0896_v102_v105_v122_Delphi_stub YRP/UPX_wwwupxsourceforgenet YRP/UPXv20MarkusLaszloReiser YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/UPXProtectorv10x2 YRP/UPX20030XMarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature
a913947b43ff853f00a6c4192c59d96e69a68e868001a368c473a0c8d47d2070	PE32	2024-10-01 12:12:55 UTC	User Submission	YRP/BASE64_table YRP/Delphi_FormShow YRP/Delphi_CompareCall [+] YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/IP YRP/contentis_base64 YRP/domain YRP/url YRP/gem YRP/prc YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/network_ssl YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library YRP/Borland_Delphi_40_additional YRP/Borland_Delphi_v60_v70_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/BobSoft_Mini_Delphi_BoB_BobSoft_additional YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/BobSoftMiniDelphiBoBBobSoft YRP/IsPE32 YRP/IsWindowsGUI YRP/borland_delphi
478f711c1ff08dd7f1291cd838d4f5dfff2d0ea90ff3f54488ccf44cefeacce5	PE32	2024-10-01 12:12:51 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/nullsoft_streaming_video [+] YRP/hpgl YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/suspicious_packer_section YRP/UPX_v30_EXE_LZMA_Markus_Oberhumer_Laszlo_Molnar_John_Reiser_additional YRP/UPX_302 YRP/PackerUPX_CompresorGratuito_wwwupxsourceforgenet YRP/UPX_293_LZMA YRP/UPX_wwwupxsourceforgenet_additional YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/UPX_293_300_LZMA YRP/UPX_293_LZMA_additional YRP/UPX_v30_EXE_LZMA_Markus_Oberhumer_Laszlo_Molnar_John_Reiser YRP/UPX_293_300_LZMA_Markus_Oberhumer_Laszlo_Molnar_John_Reiser YRP/UPX_wwwupxsourceforgenet YRP/UPXv20MarkusLaszloReiser YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/UPX293300LZMAMarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature
a1444bcf869c9cff24f975d5d29a4a839cf9e46330bb20cd73ad477c3f2b8e0b	MS-DOS	2024-10-01 12:12:45 UTC	User Submission	YRP/CRC32_poly_Constant YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/gif_animated YRP/excel_XML YRP/gif_bitmap YRP/gif89a_bitmap YRP/jpeg YRP/gem YRP/hpgl YRP/pgml YRP/wmf YRP/amf YRP/prc YRP/x3d YRP/_3dxml YRP/Qemu_Detection YRP/Misc_Suspicious_Strings YRP/escalate_priv YRP/screenshot YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/Nullsoft_Install_System_20_additional YRP/Nullsoft_Install_System_v20a0_additional YRP/Nullsoft_Install_System_20 YRP/Nullsoft_PiMP_Install_System_additional YRP/Nullsoft_PiMP_Install_System YRP/Nullsoft_Install_System_20a0_additional YRP/Nullsoft_Install_System_v20 YRP/NullsoftInstallSystemv20 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasModified_DOS_Message
e4a185b9f85f6f73a45264fc4021a58e1c4dbf8e783e35a699567a7bc04a2624	PE32	2024-10-01 12:12:34 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/gem [+] YRP/SEH__vba YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
4dc941262c9ff9513bd08559cddfaacb3749cc52a27470165a87e5ced690b6e8	PE32	2024-10-01 12:12:29 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/url YRP/gem YRP/suspicious_packer_section YRP/UPX YRP/PackerUPX_CompresorGratuito_wwwupxsourceforgenet YRP/UPX_wwwupxsourceforgenet_additional YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/UPX_v0896_v102_v105_v124_Markus_Laszlo_overlay YRP/UPX_v0896_v102_v105_v124_Markus_Laszlo_overlay_additional YRP/UPX_wwwupxsourceforgenet YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature
b6f1fce1983af6dc90e85cfee26d01069ff2b8a88363b8443c9de4266b2f518e	PE32	2024-10-01 12:12:27 UTC	User Submission	YRP/TEAN YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 [+] YRP/domain YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature
6923d34946bf338dc0bd0ffe3dca70c02e3cee2a0658545ae2f07db11a68af1e	PE32	2024-10-01 12:12:23 UTC	User Submission	YRP/CRC32_poly_Constant YRP/RIPEMD160_Constants YRP/SHA1_Constants [+] YRP/maldoc_getEIP_method_1 YRP/IP YRP/contentis_base64 YRP/domain YRP/excel_XML YRP/pgml YRP/amf YRP/prc YRP/x3d YRP/_3dxml YRP/escalate_priv YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked
ad958862420b6c9d8e6bdb3e53a780915a1c0865c7cf3cbde61e0832f08b175e	data	2024-10-01 12:12:15 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/url YRP/Borland
a34ed2ffcee0fef89d218e9791c9b6514aa1e0b361f1f4a33e0f8d2f9f55788d	PE32	2024-10-01 12:12:12 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 YRP/domain [+] YRP/DebuggerException__SetConsoleCtrl YRP/escalate_priv YRP/win_token YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Borland_Cpp_DLL YRP/Borland_Cpp_for_Win32_1999 YRP/Borland YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay