MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
7341f52be7c15789952d01b4e52f8834120c8e1a867c1b8bdad6ea3a8646dbf4	PE32	2024-09-29 18:54:01 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/rip YRP/Antivirus YRP/Misc_Suspicious_Strings YRP/win_registry YRP/suspicious_packer_section YRP/UPX YRP/PackerUPX_CompresorGratuito_wwwupxsourceforgenet YRP/UPX_wwwupxsourceforgenet_additional YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/Netopsystems_FEAD_Optimizer_1 YRP/UPX_290_LZMA YRP/UPX_290_LZMA_Markus_Oberhumer_Laszlo_Molnar_John_Reiser YRP/UPX_290_LZMA_additional YRP/UPX_wwwupxsourceforgenet YRP/UPXv20MarkusLaszloReiser YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/UPX20030XMarkusOberhumerLaszloMolnarJohnReiser YRP/UPX290LZMAMarkusOberhumerLaszloMolnarJohnReiser YRP/upx_3 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature
30ee53ab34dc4b3ab9332616a0172dff1e08f3d611de39927dc9a8c796596a83	PE32	2024-09-29 18:53:56 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/gem [+] YRP/SEH__vba YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature
ffd9a269cfb48f38af533b8b4e38a50cbf41bb3bb32ada45a6632405d4849348	PE32	2024-09-29 18:53:51 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/Dropper_Strings [+] YRP/disable_firewall YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/keylogger YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/D1S1Gv11betaD1N YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/borland_delphi_dll FlorianRoth/DragonFly_APT_Sep17_3
91d6c02d1acb29ec3e6b2bd9b95787f03d27d77c88e5fda0fe774e27bc257ed5	PE32	2024-09-29 18:53:44 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain [+] YRP/gem YRP/UPX_wwwupxsourceforgenet_additional YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/UPX_wwwupxsourceforgenet YRP/IsPE32 YRP/IsPacked YRP/HasModified_DOS_Message
9b6d2254866872ea922ecb55c944b680ec3420212595c2453191090816fd193a	PE32	2024-09-29 18:53:39 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/win_registry [+] YRP/suspicious_packer_section YRP/FSG_v110_Eng_dulekxt_ YRP/Armadillo_v4x YRP/MoleBoxv20 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature
560a99f8f91175f99e5331320416aa96a570f308958980b6a6dbbb84e5f44569	Zip	2024-09-29 18:53:36 UTC	User Submission	YRP/Big_Numbers1 YRP/Big_Numbers2 YRP/contentis_base64 [+] YRP/domain YRP/url YRP/png YRP/excel_2007 YRP/corel_draw_compressed YRP/gem YRP/odg YRP/wmf YRP/jt YRP/_3dxml_compressed YRP/android_meterpreter YRP/suspicious_packer_section
7373c4f613b94ede532ed35723a3f48d810094220ab4a1a931f76293454a7f19	PE32	2024-09-29 18:53:28 UTC	User Submission	YRP/domain YRP/suspicious_packer_section YRP/UPX [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/IsBeyondImageSize YRP/HasRichSignature
f2e0dc649b6d8bcbc56bd7d5791a181c443e97e55e3b0ef100e2cd610fcb0443	PE32	2024-09-29 18:53:25 UTC	User Submission	YRP/Big_Numbers1 YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 [+] YRP/domain YRP/wmf YRP/prc YRP/SEH__vba YRP/IsPE32 YRP/IsWindowsGUI
bac8587938f7729419dd1d930893d843138d121bac9276534833eda7ff50b979	MS	2024-09-29 18:53:08 UTC	User Submission	YRP/powershell YRP/contentis_base64 YRP/domain [+] YRP/Antivirus
4e4d52e0a2e4980e6b04bbaf81f633967da880b0e34b0863e03f4016c185d578	PDF	2024-09-29 18:53:06 UTC	User Submission	YRP/invalid_trailer_structure YRP/multiple_versions YRP/contentis_base64 [+] YRP/domain YRP/url YRP/pdf