MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
21f6df4e1db2eeed6cff30745d176725961c981f3e86b717fe990789f4cd5776	MS-DOS	2024-09-28 15:09:59 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 YRP/domain [+] YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/IsPE32 YRP/IsWindowsGUI YRP/HasModified_DOS_Message
4836eba1973e822940f6894e90fe4038bbc8d4ad18b2f00cb540175f6f18549a	PE32	2024-09-28 15:09:56 UTC	User Submission	YRP/Delphi_Random YRP/Delphi_CompareCall YRP/Delphi_Copy [+] YRP/IP YRP/contentis_base64 YRP/domain YRP/url YRP/excel_XML YRP/pgml YRP/rip YRP/wmf YRP/amf YRP/x3d YRP/_3dxml YRP/Dropper_Strings YRP/network_tcp_socket YRP/screenshot YRP/keylogger YRP/spreading_share YRP/win_mutex YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/suspicious_packer_section YRP/UPX YRP/WARNING_TROJAN_HuiGeZi_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/WARNING_TROJAN_HuiGeZi YRP/Borland YRP/WARNINGTROJANHuiGeZi YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/borland_delphi
97270f637d891c2c5cba47575daf1e82235e0790cf72790bd907b9abd37779e3	PE32	2024-09-28 15:09:51 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/Str_Win32_Winsock2_Library [+] YRP/suspicious_packer_section YRP/UPX YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
c71d28131482ec9e1878612ce115118b350ccb7ec917e8dd585adecde9a1fcd7	PE32	2024-09-28 15:09:46 UTC	User Submission	YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/contentis_base64 [+] YRP/domain YRP/url YRP/Dropper_Strings YRP/suspicious_packer_section YRP/Borland_Delphi_40_additional YRP/Borland_Delphi_v60_v70_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_v50_KOL YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/BobSoft_Mini_Delphi_BoB_BobSoft_additional YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/BobSoftMiniDelphiBoBBobSoft YRP/IsPE32 YRP/IsWindowsGUI YRP/IsBeyondImageSize YRP/borland_delphi
d22db20d92124e9d102b6f017c7b6e9fd803a37e16aab6e7b6b38df0937815c0	PE32	2024-09-28 15:09:43 UTC	User Submission	YRP/Big_Numbers3 YRP/maldoc_getEIP_method_1 YRP/IP [+] YRP/contentis_base64 YRP/domain YRP/dirac YRP/tElock_v098_tE YRP/tElock_v098_additional YRP/tElock_v098b1_tHE_EGOiSTE YRP/tElock_098_tE YRP/tElock_10_private_tE_additional YRP/tElock_098_tE_additional YRP/NeoLite_v200_additional YRP/tElock_v098 YRP/tElock_v098b1 YRP/tElock_v098b1_additional YRP/tElock_v096 YRP/tElock_v098_tHE_EGOiSTE_h YRP/tElock_V099_10_Private_tE YRP/tElock_098_tHE_EGOiSTE_h YRP/CodeCrypt_v016b_v0163b_additional YRP/tElock_098_Special_Build_forgot_heXer_additional YRP/tElock_v098_tHE_EGOiSTE_h_additional YRP/tElock_V099_V10_Private_tE YRP/tElock_v098_tHE_EGOiSTE YRP/tElock_098_Special_Build_forgot_heXer YRP/tElock_099_10_private_tE YRP/tElock_10_private_tE YRP/tElockv098 YRP/tElockv098tE YRP/tElock098tE YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked
57d61f0d5cab636a136c14d31c200de28cf07b76324b81e6ba1fcc5c7bebcff4	Zip	2024-09-28 15:09:39 UTC	User Submission	YRP/domain YRP/excel_2007 YRP/corel_draw_compressed [+] YRP/odg YRP/_3dxml_compressed
b695f2f8a139cb30fb5dc465acc71f4cbe0d5835dce3be4c4bf6d136f7290bcc	MS-DOS	2024-09-28 15:09:34 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/url YRP/excel_XML YRP/pgml YRP/amf YRP/x3d YRP/_3dxml YRP/win_mutex YRP/win_files_operation YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature
163978fd8452b2b221ffd3d9db96162ca24239215c08ece9426ac000b19d2c34	PE32	2024-09-28 15:09:24 UTC	User Submission	YRP/Advapi_Hash_API YRP/Crypt32_CryptBinaryToString_API YRP/contentis_base64 [+] YRP/domain YRP/url YRP/nullsoft_streaming_video YRP/excel_XML YRP/gem YRP/x3d YRP/WMI_strings YRP/anti_dbg YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Str_Win32_Http_API YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature
4592b9038eb8720b2eac8958a0d36adfdf43ec405933804654af6cd715ba16ce	PE32	2024-09-28 15:09:22 UTC	User Submission	YRP/SHA1_Constants YRP/contentis_base64 YRP/domain [+] YRP/hpgl YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section YRP/ASProtect_v123_RC1 YRP/ASProtect_v12x_New_Strain_additional YRP/Microsoft_Visual_Basic_v50 YRP/ASProtect_v12x_New_Strain YRP/ASProtect_v11_BRS YRP/ASProtect_V2X_Registered_Alexey_Solodovnikov YRP/ASProtect_133_21_Registered_Alexey_Solodovnikov YRP/VMProtect_1704_phpbb3 YRP/ASProtect_v12_additional YRP/ASProtect_123_RC4_130824_Solodovnikov_Alexey YRP/ASProtect_133_21_Registered_Alexey_Solodovnikov_additional YRP/ASProtectSKE21xexeAlexeySolodovnikov YRP/ASProtect13321RegisteredAlexeySolodovnikov YRP/ASProtectv12xNewStrain YRP/ASProtectv123RC1 YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature
1cab9123660508e5c95e05b6fe5fc7868025e8075bce6247174056bbdc7af93b	PE32	2024-09-28 15:09:19 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/gem [+] YRP/System_Tools YRP/DebuggerHiding__Active YRP/anti_dbg YRP/keylogger YRP/win_hook YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature