MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
2257eee557fef893462692d1dc85e0e52c3035c97275814a87ed176bfb78646a	PE32	2024-10-01 13:25:12 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked
2702d36dd5caa94bec7caec3303686ef1ef6b82d876d75ce1978dc80ea421d23	PE32	2024-10-01 13:25:01 UTC	User Submission	YRP/BASE64_table YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/excel_XML YRP/pgml YRP/amf YRP/x3d YRP/_3dxml YRP/Antivirus YRP/Dropper_Strings YRP/escalate_priv YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Typical_Malware_String_Transforms YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3 FlorianRoth/Typical_Malware_String_Transforms
07ddc8796d67a169caf0ca0cbbdb2454157caa094bd8ff5ab4f1ff1721762e7d	PE32	2024-10-01 13:24:53 UTC	User Submission	YRP/CRC32_poly_Constant YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/url YRP/excel_XML YRP/gem YRP/pgml YRP/wmf YRP/amf YRP/prc YRP/x3d YRP/_3dxml YRP/escalate_priv YRP/screenshot YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/Nullsoft_PiMP_Stub_SFX YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature
efd2186f57879256ee8fd6f73c66e3a7f295d792ece672dc6c8760ed20ed47bd	PE32	2024-10-01 13:24:51 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/excel_XML YRP/pgml YRP/amf YRP/x3d YRP/_3dxml YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature
bdd360e8dd388738cd7f03a490f0651c33a594973d81f10b78fb4533e552caa3	PE32	2024-10-01 13:24:46 UTC	User Submission	YRP/CRC32_poly_Constant YRP/CRC32_table YRP/IP [+] YRP/contentis_base64 YRP/domain YRP/url YRP/excel_XML YRP/pgml YRP/rip YRP/amf YRP/prc YRP/x3d YRP/_3dxml YRP/Antivirus YRP/VM_Generic_Detection YRP/VMWare_Detection YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/escalate_priv YRP/screenshot YRP/rat_rdp YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature
01ee6b434ddef7e9953dd835ed1d0a85bd865cfac2151f8cb6027ece09325114	PE32	2024-10-01 13:24:40 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/UPX_Scrambler_RC_v1x [+] YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/ASPack_v106b_additional YRP/UPXProtectorv10x2 YRP/UPXScramblerRCv1x YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
a7c0f5295c79ac55ec296d8ad6a4c0be31fb37e8ea01006394bd6cc4624bc756	PE32	2024-10-01 13:24:37 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 YRP/domain [+] YRP/DebuggerException__SetConsoleCtrl YRP/escalate_priv YRP/win_token YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Borland_Cpp_DLL YRP/Borland_Cpp_for_Win32_1999 YRP/Borland YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay
e5d6a2d26ac0b5e50257d564e9c2fec90581aada78ab3b229e413b149e262872	PE32	2024-10-01 13:24:35 UTC	User Submission	YRP/Big_Numbers3 YRP/contentis_base64 YRP/domain [+] YRP/dirac YRP/gem YRP/suspicious_packer_section YRP/UPX YRP/UPX_v30_EXE_LZMA_Markus_Oberhumer_Laszlo_Molnar_John_Reiser_additional YRP/UPX_302 YRP/PackerUPX_CompresorGratuito_wwwupxsourceforgenet YRP/UPX_293_LZMA YRP/UPX_wwwupxsourceforgenet_additional YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/UPX_293_300_LZMA YRP/UPX_293_LZMA_additional YRP/UPX_v30_EXE_LZMA_Markus_Oberhumer_Laszlo_Molnar_John_Reiser YRP/UPX_293_300_LZMA_Markus_Oberhumer_Laszlo_Molnar_John_Reiser YRP/UPX_wwwupxsourceforgenet YRP/UPXv20MarkusLaszloReiser YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/UPX293300LZMAMarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 YRP/IsWindowsGUI YRP/FASM
e8745b146cf364508ab94e6f888ac310263cae41ec318ca26b7d079f3b65282c	Zip	2024-10-01 13:24:28 UTC	User Submission	YRP/domain YRP/excel_2007 YRP/corel_draw_compressed [+] YRP/odg YRP/_3dxml_compressed
9fc8f65732bae3e8a2ecb7ea56e3f4c1834b7115adc36bb1537e82ac639cc8d7	PE32	2024-10-01 13:24:22 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/gem YRP/Misc_Suspicious_Strings YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/IsBeyondImageSize YRP/HasRichSignature