MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
95cc38f9960a3cff8ec30454cbeedae1cbefa8ea808fbc8b312335f2b3d5c2f7	PE32	2024-09-30 17:43:36 UTC	User Submission	YRP/Big_Numbers1 YRP/Big_Numbers2 YRP/Big_Numbers3 [+] YRP/Big_Numbers4 YRP/contentis_base64 YRP/domain YRP/gem YRP/wmf YRP/SEH__vba YRP/suspicious_packer_section YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature
29349c00739512f95dc6e6d5df20fc4ad1b737ed867024c9dcd522b94b37ea59	PDF	2024-09-30 17:43:33 UTC	User Submission	YRP/invalid_trailer_structure YRP/multiple_versions YRP/contentis_base64 [+] YRP/domain YRP/url YRP/pdf YRP/jpeg
1356a3790b76bac65c9986b305734f56f6da19f4c9fffbefa5ed5444c8fb53fd	PE32	2024-09-30 17:43:30 UTC	User Submission	CuckooSandbox/vmdetect YRP/Prime_Constants_char YRP/CRC32_poly_Constant [+] YRP/CRC32_table YRP/MD5_Constants YRP/RIPEMD160_Constants YRP/SHA1_Constants YRP/BASE64_table YRP/IP YRP/contentis_base64 YRP/domain YRP/url YRP/png YRP/nullsoft_streaming_video YRP/excel_XML YRP/gem YRP/pgml YRP/wmf YRP/amf YRP/prc YRP/x3d YRP/_3dxml YRP/vmdetect YRP/anti_dbg YRP/disable_dep YRP/network_http YRP/network_dropper YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/suspicious_packer_section YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature
1e3302e2a33c31696001f5457c4a9e7e0a16d35b24cf9c8c4cc5b2488070ac30	PE32	2024-09-30 17:43:27 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/IsPE32 [+] YRP/IsWindowsGUI YRP/IsBeyondImageSize YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
d41898cfc3753f71edce8e1e33498b26babe2774f52f3138e9634be1293e925f	PE32	2024-09-30 17:43:23 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain [+] YRP/suspicious_packer_section YRP/ASPack_v212_additional YRP/ASPack_v21_additional YRP/ASProtect_V2X_DLL_Alexey_Solodovnikov YRP/ASPack_v212 YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/ASPack_v211d YRP/ASProtect_V2X_DLL_Alexey_Solodovnikov_additional YRP/ASPack_212withouth_Poly_Solodovnikov_Alexey YRP/ASPack_v212_Alexey_Solodovnikov YRP/ASPackv212AlexeySolodovnikov YRP/ASProtectV2XDLLAlexeySolodovnikov YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay
ef4145a889a706265988e15c420a1416d7cafa611622cb96c1a8236d153e4f42	PE32	2024-09-30 17:43:19 UTC	User Submission	YRP/Big_Numbers1 YRP/CRC32_poly_Constant YRP/IP [+] YRP/contentis_base64 YRP/domain YRP/url YRP/excel_XML YRP/pgml YRP/amf YRP/prc YRP/x3d YRP/_3dxml YRP/escalate_priv YRP/screenshot YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/ASProtect_v132 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature
f99018c03951591844c9a672320c4be97651103d7b5bef3bec4eacd01383cbe1	PDF	2024-09-30 17:43:16 UTC	User Submission	YRP/invalid_trailer_structure YRP/contentis_base64 YRP/domain [+] YRP/url YRP/pdf YRP/Misc_Suspicious_Strings
09d12ee61b9da9d31635f1bc6196441f35b6b2e5face218df8cc18db4a2d88ef	PE32	2024-09-30 17:43:11 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/anti_dbg [+] YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/IsBeyondImageSize
6c97540a68fff54debb1013332d2ed4b122ebbc35c986e65a82917cfe8e5dc0e	PDF	2024-09-30 17:43:09 UTC	User Submission	YRP/invalid_trailer_structure YRP/invalid_xref_numbers YRP/contentis_base64 [+] YRP/domain YRP/url YRP/jpeg
9d13c7629e47dafce05f42d3366f74feed00ba613c0057e10ecc8ac11c8a6750	Dalvik	2024-09-30 17:43:07 UTC	User Submission	YRP/contentis_base64 YRP/domain