MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
1a3193d363f0ae753aa2b01fa65deaac6d549b794839d9f912035f83b28366e5	PE32	2024-10-01 01:46:26 UTC	User Submission	YRP/Big_Numbers0 YRP/maldoc_find_kernel32_base_method_1 YRP/IP [+] YRP/contentis_base64 YRP/domain YRP/excel_XML YRP/pgml YRP/amf YRP/x3d YRP/_3dxml YRP/win_registry YRP/win_files_operation YRP/Microsoft_Visual_Basic_v50 YRP/IsPE32 YRP/IsWindowsGUI
7405119b4bbbfdd9ec7e8596b4d9119cb22355e6b0803c7b6e964c19e18a4b9f	PE32	2024-10-01 01:46:23 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 YRP/domain [+] YRP/DebuggerException__SetConsoleCtrl YRP/escalate_priv YRP/win_token YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Borland_Cpp_DLL YRP/Borland_Cpp_for_Win32_1999 YRP/Borland YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay
ba7ae09bf0e1b50475431335bf92b0ff0f15e146f86652f3faaecc1b9b7473d8	PE32	2024-10-01 01:46:20 UTC	User Submission	YRP/CRC32_poly_Constant YRP/VC8_Random YRP/IP [+] YRP/contentis_base64 YRP/domain YRP/url YRP/gem YRP/prc YRP/Browsers YRP/Dropper_Strings YRP/antisb_threatExpert YRP/screenshot YRP/win_mutex YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Wininet_Library YRP/Armadillo_v1xx_v2xx_additional YRP/Microsoft_Visual_Cpp_v70_DLL YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_60_DLL_Debug YRP/Armadillo_v1xx_v2xx YRP/Microsoft_Visual_Cpp_v60_DLL YRP/Microsoft_Visual_Cpp_60 YRP/Armadillov1xxv2xx YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature
b0ef367cc1be3ded43b8855991bb2a8558a7199753cc2312f15b1cec248925cd	PE32	2024-10-01 01:46:16 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/gem [+] YRP/Browsers YRP/win_files_operation YRP/win_hook YRP/Armadillo_v1xx_v2xx_additional YRP/Microsoft_Visual_Cpp_v70_DLL YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_60_DLL_Debug YRP/Armadillo_v1xx_v2xx YRP/Microsoft_Visual_Cpp_v60_DLL YRP/Microsoft_Visual_Cpp_60 YRP/Armadillov1xxv2xx YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature
71e76b825003735750cb9d29e0e8e3012c77791e4d78201579027f25c142ee79	PE32	2024-10-01 01:46:14 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/DebuggerException__SetConsoleCtrl [+] YRP/escalate_priv YRP/win_token YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Borland_Cpp_DLL YRP/Borland_Cpp_for_Win32_1999 YRP/Borland YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay
b055c2f86f734add16e3abf2feec7f6709ffa47e44fe75c91d01c64a9815bde6	PE32	2024-10-01 01:46:08 UTC	User Submission	YRP/Big_Numbers1 YRP/CRC32_poly_Constant YRP/BLOWFISH_Constants [+] YRP/maldoc_find_kernel32_base_method_1 YRP/IP YRP/maldoc_OLE_file_magic_number YRP/contentis_base64 YRP/domain YRP/url YRP/jpeg YRP/gem YRP/Misc_Suspicious_Strings YRP/DebuggerHiding__Active YRP/anti_dbg YRP/hijack_network YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Installer_VISE_Custom_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Installer_VISE_Custom YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay
6b7833cce0623b8269d676046fe4ededfaf2cf8d59c421e387e27b830a9ce607	PE32	2024-10-01 01:46:05 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/keylogger YRP/win_registry YRP/suspicious_packer_section YRP/ASPack_v21 YRP/ASPack_v2001_additional YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/ASPack_v10804_additional YRP/ASPack_v21_Alexey_Solodovnikov YRP/ASPack_v10804_Hint_WIN_EP YRP/ASPack_v2000 YRP/ASPack_v2001 YRP/ASPackv21AlexeySolodovnikov YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked
b36aa17dd9be0907e52fa1d6744ebfcf09401fb4cc26c42edc9f9996f1a25913	PE32	2024-10-01 01:45:53 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain [+] YRP/Str_Win32_Winsock2_Library YRP/NsPack_v37_North_Star YRP/NsPack_v37_North_Star_h YRP/NsPack_v37_North_Star_h_additional YRP/NsPacK_V37_LiuXingPing_additional YRP/NSPack_3x_Liu_Xing_Ping_additional YRP/NsPacK_V37_LiuXingPing YRP/NsPack_3x_Liu_Xing_Ping YRP/NsPacKV37LiuXingPing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
0bdf0d64c7c54e663f059c4c2d24056f4a3dab9f2a6adc50b72517479ab767ee	PDF	2024-10-01 01:45:50 UTC	User Submission	YRP/invalid_trailer_structure YRP/multiple_versions YRP/contentis_base64 [+] YRP/domain YRP/url YRP/pdf YRP/jpeg
699a6b4b7cad7e466e9a8595364c7d8f4d654f2497cb54fd069307831ecdb0c7	PE32	2024-10-01 01:45:46 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/DebuggerException__SetConsoleCtrl [+] YRP/escalate_priv YRP/win_token YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Borland_Cpp_DLL YRP/Borland_Cpp_for_Win32_1999 YRP/Borland YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay