MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
837eed30d6cfecbbb6d40b70c29ddc42582c35395b7e29ec4059c495f4532bdf	PE32	2024-09-30 14:55:06 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain [+] YRP/suspicious_packer_section YRP/ASPack_v212_additional YRP/ASPack_v21_additional YRP/ASProtect_V2X_DLL_Alexey_Solodovnikov YRP/ASPack_v212 YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/ASPack_v211d YRP/ASProtect_V2X_DLL_Alexey_Solodovnikov_additional YRP/ASPack_212withouth_Poly_Solodovnikov_Alexey YRP/ASPack_v212_Alexey_Solodovnikov YRP/ASPackv212AlexeySolodovnikov YRP/ASProtectV2XDLLAlexeySolodovnikov YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay
56aba891d9bfc5babd0467b41f57822782d5eb6cf573ea76dc1a9a036f4653c4	MS-DOS	2024-09-30 14:55:02 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/url YRP/MPRESS_V200_V20X_MATCODE_Software_20090423 YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/mpress_2_xx_x86 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasModified_DOS_Message
fef12968008f3215fbe3f345d8ae3a0e5c6fbfcdb26ed5c976ca18b3b968e97e	PE32	2024-09-30 14:54:59 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain [+] YRP/suspicious_packer_section YRP/ASPack_v212_additional YRP/ASPack_v21_additional YRP/ASProtect_V2X_DLL_Alexey_Solodovnikov YRP/ASPack_v212 YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/ASPack_v211d YRP/ASProtect_V2X_DLL_Alexey_Solodovnikov_additional YRP/ASPack_212withouth_Poly_Solodovnikov_Alexey YRP/ASPack_v212_Alexey_Solodovnikov YRP/ASPackv212AlexeySolodovnikov YRP/ASProtectV2XDLLAlexeySolodovnikov YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay
532ccf1b7dfd9f75df8f0dc9d8ab0f89936365687d86ed8006c9f24298d3d9c3	PDF	2024-09-30 14:54:55 UTC	User Submission	YRP/invalid_trailer_structure YRP/multiple_versions YRP/contentis_base64 [+] YRP/domain YRP/url YRP/pdf YRP/jpeg
dd0ad9414c6335962c62277ec8a1d268fed2ccc11a911f298d3c0816757a5698	PE32	2024-09-30 14:54:53 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/Armadillo_v2xx_CopyMem_II_additional [+] YRP/Microsoft_Visual_Cpp_70_MFC YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
156cd9141403368fe0a1d1d61775c6fb1dc3dda15f6fdddae01e97b4a220d401	PE32	2024-09-30 14:54:50 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/Antivirus YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/escalate_priv YRP/spreading_file YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature FlorianRoth/Recon_Commands_Windows_Gen1
fb06a7a0c295af6b45c7985eb2680c6218266ef18bb53aef4e993efa485a92dd	data	2024-09-30 14:54:47 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/url [+] YRP/xaml YRP/android_meterpreter
b3d09bfae9a7ba287e498b609388ba74de65e7362e7555addf9365c66bed3f32	PE32	2024-09-30 14:54:43 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/url [+] YRP/gem YRP/win_files_operation YRP/Armadillo_v1xx_v2xx_additional YRP/Microsoft_Visual_Cpp_v70_DLL YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_60_DLL_Debug YRP/Armadillo_v1xx_v2xx YRP/Microsoft_Visual_Cpp_v60_DLL YRP/Microsoft_Visual_Cpp_60 YRP/Armadillov1xxv2xx YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasRichSignature
bb4a821ef98afffb7229d958d3185616fb1508b177d7d65d7a4419ba144781f0	PE32	2024-09-30 14:54:41 UTC	User Submission	YRP/CRC32_poly_Constant YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/url YRP/excel_XML YRP/gem YRP/pgml YRP/rip YRP/amf YRP/x3d YRP/_3dxml YRP/screenshot YRP/win_registry YRP/suspicious_packer_section YRP/UPX YRP/UPX_v0896_v102_v105_v122_Delphi_stub_additional YRP/UPX_v0896_v102_v105_v122_Delphi_stub_Laszlo_Markus YRP/PackerUPX_CompresorGratuito_wwwupxsourceforgenet YRP/UPX_wwwupxsourceforgenet_additional YRP/MSLRH_V031_emadicius YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/UPX_v0896_v102_v105_v122_Delphi_stub YRP/UPX_wwwupxsourceforgenet YRP/Borland YRP/UPXv20MarkusLaszloReiser YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/UPXProtectorv10x2 YRP/UPX20030XMarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature
d3c597d6c6b7cc55d7dac148c1970f0d1776a6329fc503b9ae2babd03fc18ac4	PE32	2024-09-30 14:54:38 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/prc [+] YRP/screenshot YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature