MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
19fe8de03dc84b9a9085e4471d3727abc689f38f748a0efd9d847edb49c14fa1	Java	2024-09-30 12:50:14 UTC	User Submission	YRP/Big_Numbers1 YRP/contentis_base64 YRP/domain [+] YRP/url YRP/png YRP/excel_2007 YRP/jpeg YRP/jpg_with_EXIF YRP/corel_draw_compressed YRP/odg YRP/rip YRP/wmf YRP/_3dxml_compressed
5c771c91b546f722c0ae0f6b247584d8750f1bc6d99df02caf0715277c1fbfad	PE32	2024-09-30 12:50:11 UTC	User Submission	YRP/CRC32_poly_Constant YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/url YRP/excel_XML YRP/gem YRP/pgml YRP/amf YRP/prc YRP/x3d YRP/_3dxml YRP/escalate_priv YRP/screenshot YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/ASProtect_v132 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature
f6f8a37b9c6c7bc1b035297372d2eafe7df3206829a3ac5af7240ae6356a9e9e	PE32	2024-09-30 12:50:01 UTC	User Submission	YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/contentis_base64 [+] YRP/domain YRP/System_Tools YRP/Antivirus YRP/Dropper_Strings YRP/anti_dbgtools YRP/keylogger YRP/win_registry YRP/win_files_operation YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/borland_delphi FlorianRoth/DragonFly_APT_Sep17_3
3850c181f0c5d71cb468ea96a3d165a7797e638bf9f45ed73a4e3e68c38f152c	PE32	2024-09-30 12:49:58 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/anti_dbg [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature
f1436028fe7ebe622d70e05e3fe79d3ca9d1e99a4854ba397d6ed5216fcbf0ac	PE32	2024-09-30 12:49:56 UTC	User Submission	CuckooSandbox/vmdetect YRP/VC8_Random YRP/maldoc_getEIP_method_1 [+] YRP/IP YRP/contentis_base64 YRP/domain YRP/url YRP/gem YRP/prc YRP/System_Tools YRP/Browsers YRP/Antivirus YRP/VMWare_Detection YRP/VirtualBox_Detection YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/vmdetect YRP/anti_dbg YRP/inject_thread YRP/create_service YRP/network_http YRP/network_dropper YRP/network_tcp_socket YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/vmdetect_misc YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI YRP/HasDebugData YRP/HasModified_DOS_Message YRP/HasRichSignature
ba893b73e0716a83af7d880ec8aa69d087bca052cb562b9f5483a9c387289b10	Java	2024-09-30 12:49:53 UTC	User Submission	CuckooSandbox/shellcode YRP/Big_Numbers1 YRP/contentis_base64 [+] YRP/domain YRP/url YRP/png YRP/excel_2007 YRP/jpeg YRP/corel_draw_compressed YRP/gem YRP/hpgl YRP/odg YRP/rip YRP/_3dxml_compressed YRP/spreading_file YRP/JavaDropper KevTheHermit/JavaDropper
e655271fd07f92d59938df97d3caa3fd5e8552c24aa6412e115bd9000fc0d8d8	PDF	2024-09-30 12:49:45 UTC	User Submission	YRP/Big_Numbers1 YRP/invalid_trailer_structure YRP/multiple_versions [+] YRP/contentis_base64 YRP/domain YRP/url YRP/pdf YRP/jpeg
1a2b4e142fc758ed048166196c5323a591d59646ffa6082a79c76488a8b16245	PE32	2024-09-30 12:49:43 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/MingWin32_GCC_3x [+] YRP/MingWin32_v_h_additional YRP/MinGW_GCC_3x_additional YRP/MinGW_GCC_3x YRP/MingWin32_GCC_3x_additional YRP/MingWin32_v_h YRP/MingWin32_v YRP/MinGWGCC3x YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/MinGW_1
05d7bfbb78a67a538a9f571864bbaf4aaee181f7ab4047a72bcfb0b4f541b456	PE32	2024-09-30 12:49:38 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain [+] YRP/suspicious_packer_section YRP/Safeguard_103_Simonzh YRP/yodas_Protector_V1033_Ashkbiz_Danehkar_Sign_by_fly YRP/yodas_Protector_v1033_exescrcom_Ashkbiz_Danehkar_h_additional YRP/Hyings_PE_Armor_076_Hying_CCG YRP/yodas_Protector_v102b_Ashkbiz_Danehkar YRP/yodas_Protector_V1033_Ashkbiz_Danehkar YRP/yodas_Protector_v1033_exescrcom_Ashkbiz_Danehkar YRP/yodas_Protector_v1033_exescrcom_Ashkbiz_Danehkar_h YRP/Hyings_PE_Armor_075exe_Hying YRP/Hyings_PE_Armor_076_Hying_CCG_additional YRP/yodas_Protector_102b_Ashkbiz_Danehkar YRP/yodasProtectorV1033AshkbizDanehkar YRP/yodasProtectorv1033exescrcomAshkbizDanehkar YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked FlorianRoth/DragonFly_APT_Sep17_3
08999cabd2755867523ef5d2a6245b6fe4670c55572df1fafe03e7676583cc5d	PE32	2024-09-30 12:49:36 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/gem [+] YRP/Obfuscated_Strings YRP/Armadillo_v1xx_v2xx_additional YRP/Microsoft_Visual_Cpp_60_DLL_additional YRP/Microsoft_Visual_Cpp_v70_DLL YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_60_DLL_Debug YRP/Armadillo_v1xx_v2xx YRP/Microsoft_Visual_Cpp_v60_DLL YRP/Microsoft_Visual_Cpp_60_DLL YRP/Microsoft_Visual_Cpp_60 YRP/Armadillov1xxv2xx YRP/IsPE32 YRP/IsDLL YRP/IsConsole YRP/HasModified_DOS_Message