MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
b898cd8ac99351d21d0a47219e6fc3f2d89293586ead28806e762a9cae2b1d67	GIF	2024-09-30 17:46:41 UTC	User Submission	YRP/webshell_Shell_ci_Biz_was_here_c100_v_xxx YRP/Webshell_c100 YRP/IP [+] YRP/contentis_base64 YRP/domain YRP/url YRP/gif_bitmap YRP/stl YRP/android_meterpreter
53ba37fa3fbd28291575b52e86f68d2b9d2a968b437ed071b50a636db135b0bc	PE32	2024-09-30 17:46:35 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/IsPE32 [+] YRP/IsConsole FlorianRoth/DragonFly_APT_Sep17_3
e2deef48a86e7865d5aceb29812ae70c767754fba7f706a744788eca2677ec31	PE32	2024-09-30 17:46:32 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/anti_dbg [+] YRP/network_tcp_socket YRP/network_dns YRP/screenshot YRP/win_private_profile YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature
b1e48f52e5fba67a9c911a9296fd0c5a72e3cc48d83974eea8556a13dc1cd47f	PE32	2024-09-30 17:46:25 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain [+] YRP/url YRP/gem YRP/wmf YRP/Dropper_Strings YRP/screenshot YRP/win_mutex YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDebugData YRP/HasRichSignature
bbb8674fc37045cb2e09da0827898949ccb8077cf3923ba894c1d5d56ce8d48a	MS-DOS	2024-09-30 17:46:19 UTC	User Submission	YRP/CRC32_poly_Constant YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/url YRP/excel_XML YRP/gem YRP/pgml YRP/amf YRP/prc YRP/x3d YRP/_3dxml YRP/escalate_priv YRP/screenshot YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/Nullsoft_PiMP_Stub_SFX YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasModified_DOS_Message
699d21ec5e0592d3f897acded0d61c991a2f1b61b3312c8d1c9ac7b23ce9e768	Zip	2024-09-30 17:46:16 UTC	User Submission	YRP/domain YRP/excel_2007 YRP/corel_draw_compressed [+] YRP/odg YRP/_3dxml_compressed
9059db0163a7467c523fbaf36a8c62c2f7e1237528d8f76a709f663975eceb5e	MS-DOS	2024-09-30 17:46:13 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/url YRP/MPRESS_V200_V20X_MATCODE_Software_20090423 YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/mpress_2_xx_x86 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasModified_DOS_Message
b4ba191b6f1872fb6795cc60b577d95266955d48e1d1be2e7776694f7a179c18	PE32	2024-09-30 17:46:10 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/keylogger [+] YRP/win_private_profile YRP/win_files_operation YRP/IsPE32 YRP/IsWindowsGUI
0b39f9c82099d4f861105f1f8565d8bc198cb22a24049e9a15e275bd0724f561	PE32	2024-09-30 17:46:08 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/domain YRP/Safeguard_103_Simonzh [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasModified_DOS_Message FlorianRoth/Sality_Malware_Oct16
adcaf697e2e3f8557cc468bb9e4815cc613db1b9945ec0ac263f34f0b8c9e69c	PE32	2024-09-30 17:46:05 UTC	User Submission	CuckooSandbox/vmdetect YRP/Delphi_CompareCall YRP/Delphi_Copy [+] YRP/maldoc_find_kernel32_base_method_1 YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain YRP/png YRP/wmf YRP/Browsers YRP/Sandboxie_Detection YRP/VirtualPC_Detection YRP/VirtualBox_Detection YRP/Dropper_Strings YRP/Check_Dlls YRP/vmdetect YRP/anti_dbg YRP/anti_dbgtools YRP/antisb_threatExpert YRP/antisb_sandboxie YRP/antisb_cwsandbox YRP/antivm_virtualbox YRP/dyndns YRP/cred_local YRP/cred_ff YRP/suspicious_packer_section YRP/Microsoft_Visual_Basic_v50 YRP/ThemidaWinLicenseV1XNoCompressionSecureEngineOreansTechnologies YRP/Themida10xx18xxnocompressionOreansTechnologies YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/borland_delphi