MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
7a37148d5f28defc3d8bfe79ffc8c223e1c627a18ef3cb71f33bcbc78871ab80	PE32	2024-09-30 04:36:23 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain [+] YRP/url YRP/gem YRP/win_files_operation YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/IsPE32 YRP/IsDLL YRP/IsConsole YRP/MinGW_1
19d028f0b744a0839c1b321ba0a82748932aa3b990f1c49039808432dfaed26f	PE32	2024-09-30 04:36:09 UTC	User Submission	YRP/CRC32_poly_Constant YRP/BASE64_table YRP/without_images [+] YRP/without_urls YRP/contentis_base64 YRP/domain YRP/excel_2007 YRP/corel_draw_compressed YRP/odg YRP/_3dxml_compressed YRP/network_dns YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay
1d0f472f9cf883d2bee30fc8217522684e4ebc9e2bda8200023940633504d5c2	PE32	2024-09-30 04:36:05 UTC	User Submission	CuckooSandbox/vmdetect YRP/Big_Numbers1 YRP/CRC32_poly_Constant [+] YRP/MD5_Constants YRP/BASE64_table YRP/maldoc_find_kernel32_base_method_1 YRP/IP YRP/contentis_base64 YRP/domain YRP/url YRP/excel_XML YRP/gem YRP/pgml YRP/rip YRP/amf YRP/x3d YRP/_3dxml YRP/_7z YRP/System_Tools YRP/Browsers YRP/VMWare_Detection YRP/Misc_Suspicious_Strings YRP/BITS_CLSID YRP/vmdetect YRP/anti_dbg YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/android_meterpreter YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature
5820d7c026fd61c4f23f4813584f713075dfcda6671debf2af5231e04c34391b	PDF	2024-09-30 04:36:01 UTC	User Submission	YRP/Big_Numbers0 YRP/invalid_trailer_structure YRP/multiple_versions [+] YRP/contentis_base64 YRP/domain YRP/url YRP/gif_bitmap YRP/pdf
e3d9658d0951d104d41a062afed4f091d434f720adce24b866f3d4b4ee990ac5	Microsoft	2024-09-30 04:35:48 UTC	User Submission	YRP/office_document_vba YRP/Contains_VBA_macro_code YRP/contentis_base64 [+] YRP/domain YRP/excel_2007 YRP/corel_draw_compressed YRP/odg YRP/_3dxml_compressed
29f79574327e1a7e70c27bef8b7a959a420415cb9315e28d89170ab0bac789c8	PE32	2024-09-30 04:35:46 UTC	User Submission	YRP/BLOWFISH_Constants YRP/BASE64_table YRP/contentis_base64 [+] YRP/domain YRP/win_mutex YRP/win_registry YRP/win_hook YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/Armadillo_v1xx_v2xx_additional YRP/Microsoft_Visual_Cpp_60_DLL_additional YRP/Microsoft_Visual_Cpp_v70_DLL YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_60_DLL_Debug YRP/Armadillo_v1xx_v2xx YRP/Microsoft_Visual_Cpp_v60_DLL YRP/Microsoft_Visual_Cpp_60_DLL YRP/Microsoft_Visual_Cpp_60 YRP/Armadillov1xxv2xx YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI
5a89e76c8ae5e506030715781d00a6bf0a19b9ed2aefd6bac8cbd487db321032	PE32	2024-09-30 04:35:42 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/Armadillo_v1xx_v2xx_additional [+] YRP/Microsoft_Visual_Cpp_60_DLL_additional YRP/Microsoft_Visual_Cpp_v70_DLL YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_60_DLL_Debug YRP/Armadillo_v1xx_v2xx YRP/Microsoft_Visual_Cpp_v60_DLL YRP/Microsoft_Visual_Cpp_60_DLL YRP/Microsoft_Visual_Cpp_60 YRP/Armadillov1xxv2xx YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDebugData YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
d8ab604dfadeaf08c181d8ed8f38b8fd8a1653da60692a4fe9e0c1ce69acf45c	PE32	2024-09-30 04:35:40 UTC	User Submission	YRP/Big_Numbers1 YRP/Big_Numbers2 YRP/Delphi_FormShow [+] YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/contentis_base64 YRP/domain YRP/url YRP/jpeg YRP/gem YRP/prc YRP/Misc_Suspicious_Strings YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_files_operation YRP/win_hook YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/BobSoft_Mini_Delphi_BoB_BobSoft_additional YRP/Borland_Delphi_v60_v70 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/BobSoftMiniDelphiBoBBobSoft YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/borland_delphi
2911203bcc3af91062dc63cbbcb5fd8c1ed48e7f65ae9fca96d178c0b89c495b	compiled	2024-09-30 04:35:37 UTC	User Submission	YRP/contentis_base64 YRP/domain
50cef0b101005d0b08b97dfe77edcfab614264bb22664525c8a7877118b7dcd0	PE32	2024-09-30 04:35:30 UTC	User Submission	YRP/CRC32_poly_Constant YRP/CRC32_table YRP/BASE64_table [+] YRP/IP YRP/contentis_base64 YRP/domain YRP/gem YRP/anti_dbg YRP/network_http YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/Visual_Cpp_2005_DLL_Microsoft YRP/Visual_Cpp_2003_DLL_Microsoft YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasDebugData YRP/HasRichSignature