MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
b3202d7edb142beeb40650af2b697b80ba6a397e5795b9b4ab09a258b7623ae1	PE32	2024-09-30 06:56:25 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/url YRP/gif_animated YRP/nullsoft_streaming_video YRP/gif_bitmap YRP/gif89a_bitmap YRP/gem YRP/prc YRP/Browsers YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Wininet_Library YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI YRP/HasDebugData YRP/HasRichSignature
8838cf9faa22d8d6cbac7ca993480950347a1f487850d73de818b8e96a15113c	PE32	2024-09-30 06:56:22 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/ThreadControl__Context [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
928dca8dc3af7bcc7f279ee2d5738e0788c149389a1c58df3797b28986d12eda	PE32	2024-09-30 06:56:17 UTC	User Submission	YRP/CRC32_poly_Constant YRP/CRC32_table YRP/VC6_Random [+] YRP/IP YRP/contentis_base64 YRP/domain YRP/url YRP/nullsoft_streaming_video YRP/excel_2007 YRP/excel_XML YRP/corel_draw_compressed YRP/odg YRP/pgml YRP/amf YRP/prc YRP/x3d YRP/_3dxml YRP/_3dxml_compressed YRP/disable_antivirus YRP/escalate_priv YRP/screenshot YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/android_meterpreter YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature
80bbceb983bcf69cd95f2049675f0ec78e60f92386d62d7f4ab425458c076a13	PE32	2024-09-30 06:56:13 UTC	User Submission	YRP/CRC32_poly_Constant YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/url YRP/gem YRP/screenshot YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section YRP/UPX YRP/PackerUPX_CompresorGratuito_wwwupxsourceforgenet YRP/UPX_wwwupxsourceforgenet_additional YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/UPX_v0896_v102_v105_v124_Markus_Laszlo_overlay YRP/UPX_v0896_v102_v105_v124_Markus_Laszlo_overlay_additional YRP/UPX_wwwupxsourceforgenet YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature
e8a96c4f55b405b78c0060351c9068a8aeeeff6349a05cd6c2f1e4e8247e1669	PE32	2024-09-30 06:56:10 UTC	User Submission	YRP/Big_Numbers1 YRP/MD5_Constants YRP/contentis_base64 [+] YRP/domain YRP/url YRP/gem YRP/prc YRP/Browsers YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/disable_antivirus YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Armadillo_v1xx_v2xx_additional YRP/Microsoft_Visual_Cpp_v70_DLL YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_60_DLL_Debug YRP/Armadillo_v1xx_v2xx YRP/Microsoft_Visual_Cpp_v60_DLL YRP/Microsoft_Visual_Cpp_60 YRP/Armadillov1xxv2xx YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasRichSignature
b006b83345af816a5d9632e87ee27d61627880bc134792f7cf8e9b5740bb655e	PE32	2024-09-30 06:56:08 UTC	User Submission	YRP/domain YRP/suspicious_packer_section YRP/UPX [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/IsBeyondImageSize YRP/HasRichSignature
1c1a694cb26b9b785d77830b5b6bb1ca357d268cd7a0957f18db1a0ea3fc94ec	PE32	2024-09-30 06:56:01 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/Misc_Suspicious_Strings YRP/anti_dbg YRP/network_tcp_socket YRP/Str_Win32_Winsock2_Library YRP/Visual_Cpp_2005_Release_Microsoft YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsConsole YRP/HasOverlay YRP/HasDebugData YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
9d5f7a42cd710d85836e3b60d94116bfdae8d17d025b3038f6653ca7848aa6f2	PE32	2024-09-30 06:55:59 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/antisb_threatExpert [+] YRP/win_registry YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature
05aa6086243117add921136b4a7d3274706bd85066cc133b26d16f244f8612e7	PE32	2024-09-30 06:55:57 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 YRP/domain [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/FASM
a786ff96afd9c9e79fdbce554257739c94a9f7c1ce5725af0aa9342cac71d585	PE32	2024-09-30 06:55:54 UTC	User Submission	YRP/Advapi_Hash_API YRP/VC8_Random YRP/IP [+] YRP/contentis_base64 YRP/domain YRP/gem YRP/prc YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature