MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
3daebdd61e21004e86ef9181295786baffcac07b2263a30a61cdccafc3322483	PE32	2024-09-28 10:30:35 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/url YRP/excel_XML YRP/pgml YRP/amf YRP/x3d YRP/_3dxml YRP/screenshot YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/suspicious_packer_section YRP/UPX YRP/UPX_v30_EXE_LZMA_Markus_Oberhumer_Laszlo_Molnar_John_Reiser_additional YRP/UPX_302 YRP/PackerUPX_CompresorGratuito_wwwupxsourceforgenet YRP/UPX_293_LZMA YRP/UPX_wwwupxsourceforgenet_additional YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/UPX_293_300_LZMA YRP/UPX_293_LZMA_additional YRP/UPX_v30_EXE_LZMA_Markus_Oberhumer_Laszlo_Molnar_John_Reiser YRP/UPX_293_300_LZMA_Markus_Oberhumer_Laszlo_Molnar_John_Reiser YRP/UPX_wwwupxsourceforgenet YRP/UPXv20MarkusLaszloReiser YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/UPX293300LZMAMarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature
1bf566e8faff0df76009c7bc1159f8260fc74c27340cd495b596f44b69c31ff5	PE32	2024-09-28 10:30:32 UTC	User Submission	YRP/MD5_Constants YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/excel_XML YRP/gem YRP/pgml YRP/amf YRP/prc YRP/x3d YRP/_3dxml YRP/AutoIT_compiled_script YRP/Misc_Suspicious_Strings YRP/anti_dbg YRP/inject_thread YRP/network_http YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/AutoIt_2 YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/AutoIt
cf741070ade2829b45c22e61748af9b797a71f28f4743474bfc3f444338a8fe2	MS-DOS	2024-09-28 10:30:24 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/excel_XML YRP/pgml YRP/amf YRP/x3d YRP/_3dxml YRP/suspicious_packer_section YRP/MPRESS_V107_V125_MATCODE_Softwarenbsp_nbsp_SignByfly_20080730 YRP/MPRESS_V107_V125_MATCODE_Software_20080730 YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/Armadillo_v4x YRP/MPRESS_V107_V12X_MATCODE_Software_20080730 YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasModified_DOS_Message FlorianRoth/DragonFly_APT_Sep17_3
2d60fb040f832f87fe021fde4aa85244a7e604349478ee45c69278c94da26b16	data	2024-09-28 10:30:16 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/url
f257be66781e3121212f1b23dd55139fe6c76600b589223d375affb2669d182b	PDF	2024-09-28 10:29:53 UTC	User Submission	YRP/invalid_trailer_structure YRP/multiple_versions YRP/contentis_base64 [+] YRP/domain YRP/url YRP/pdf
dae062fd42fcc786ecc400b8fb8a4cbe71281df2d696553f1b00e30be644b61f	ASCII	2024-09-28 10:29:48 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/android_meterpreter [+] YRP/generic_javascript_obfuscation
4ed45dfc81456f73f2a080f6d95b7b07225c6034bf5906cf08fc9af3fb563453	Zip	2024-09-28 10:29:40 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/excel_2007 [+] YRP/corel_draw_compressed YRP/odg YRP/_3dxml_compressed YRP/suspicious_packer_section
1607575b07c96510b0e28b653376bb98707cc8355eca714d333c077feb17714f	PE32	2024-09-28 10:29:32 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain [+] YRP/suspicious_packer_section YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay FlorianRoth/DragonFly_APT_Sep17_3
b36e00cf6836c82ca276b9b2164e5f9b4f9b5dde37caadc6e806b118d06844ea	XML	2024-09-28 10:29:28 UTC	User Submission	YRP/Big_Numbers1 YRP/contentis_base64 YRP/domain [+] YRP/url YRP/excel_XML YRP/pgml YRP/amf YRP/stl YRP/x3d YRP/_3dxml
e80399cc248cf474026fd489a856dddb23cd2ebff17599a82a2cea2ca1fbe970	PDF	2024-09-28 10:29:26 UTC	User Submission	YRP/invalid_trailer_structure YRP/multiple_versions YRP/contentis_base64 [+] YRP/domain YRP/url YRP/pdf