MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
7fc6b3fa73ac6dbd98e86d083bbec21fe9f7a6353cd4a23071891a5ffaabd6ee	PE32	2024-09-30 21:54:28 UTC	User Submission	YRP/CRC32_poly_Constant YRP/CRC32_table YRP/MD5_Constants [+] YRP/maldoc_getEIP_method_1 YRP/IP YRP/contentis_base64 YRP/domain YRP/gem YRP/wmf YRP/prc YRP/AutoIT_compiled_script YRP/anti_dbg YRP/inject_thread YRP/network_http YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/AutoIt_2 YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature YRP/AutoIt
663b1567a5e9656723694b0410419db97608f5c08c3f41c1c7e7d13137b3f52b	PE32	2024-09-30 21:54:25 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 YRP/domain [+] YRP/DebuggerException__SetConsoleCtrl YRP/escalate_priv YRP/win_token YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Borland_Cpp_DLL YRP/Borland_Cpp_for_Win32_1999 YRP/Borland YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay
e73bcc8a5133e17aa1da5acfc274807965b6812dde3ef84b88b304651041d97d	PE32	2024-09-30 21:54:22 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/Dropper_Strings [+] YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/disable_antivirus YRP/escalate_priv YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Install_Shield_2000 YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/InstallShield_2000_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay
392f8ced0e73c6aa5a0292fad1564d29a82de846defe27bcf44d253b41eb9b0e	PE32	2024-09-30 21:54:18 UTC	User Submission	YRP/MD5_Constants YRP/contentis_base64 YRP/domain [+] YRP/prc YRP/Browsers YRP/antisb_threatExpert YRP/screenshot YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Typical_Malware_String_Transforms YRP/Armadillo_v1xx_v2xx_additional YRP/Microsoft_Visual_Cpp_60_DLL_additional YRP/Microsoft_Visual_Cpp_v70_DLL YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_60_DLL_Debug YRP/Armadillo_v1xx_v2xx YRP/Microsoft_Visual_Cpp_v60_DLL YRP/Microsoft_Visual_Cpp_60_DLL YRP/Microsoft_Visual_Cpp_60 YRP/Armadillov1xxv2xx YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3 FlorianRoth/Typical_Malware_String_Transforms
5089e3242bdd6e882f59329eb1f70c557fa1ab07671a4459dd4478f8678ee1e4	PDF	2024-09-30 21:54:15 UTC	User Submission	YRP/Big_Numbers1 YRP/invalid_trailer_structure YRP/multiple_versions [+] YRP/contentis_base64 YRP/domain YRP/url YRP/pdf YRP/jpeg
deea12aca64c55e36bd8b35edc66cb25d9fbbb0d647f3216d40dc99026ef852c	PE32	2024-09-30 21:54:11 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/gem [+] YRP/SEH__vba YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
547948e2e591dcb1c737eb5cf2fa3da7be94252849f0899770786b60583e8dc7	PE32	2024-09-30 21:54:05 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 YRP/domain [+] YRP/DebuggerHiding__Active YRP/DebuggerException__ConsoleCtrl YRP/DebuggerException__SetConsoleCtrl YRP/ThreadControl__Context YRP/SEH__vectored YRP/anti_dbg YRP/inject_thread YRP/migrate_apc YRP/win_private_profile YRP/win_files_operation YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/IsBeyondImageSize YRP/HasRichSignature
43ecca2b71003da726a1a807d48bbf688b3f23e9a61da5a690024d5b3ac3a35a	PE32	2024-09-30 21:53:57 UTC	User Submission	YRP/Advapi_Hash_API YRP/BASE64_table YRP/VC8_Random [+] YRP/IP YRP/contentis_base64 YRP/domain YRP/url YRP/gem YRP/wmf YRP/jt YRP/prc YRP/stl YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/inject_thread YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/cred_local YRP/cred_ie7 YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Http_API YRP/possible_includes_base64_packed_functions YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI YRP/HasDebugData YRP/HasRichSignature
e1a806d4ad6a20206853229904a6002dec1363e65122af23988d20b387ee35ce	PE32	2024-09-30 21:53:54 UTC	User Submission	YRP/VC8_Random YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/url YRP/gem YRP/wmf YRP/prc YRP/Browsers YRP/Dropper_Strings YRP/anti_dbg YRP/network_http YRP/network_dropper YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature
bdb602db0fd8314ecca219f0115de200609e5bab2263c6a623265758d7508647	PE32	2024-09-30 21:53:47 UTC	User Submission	YRP/CRC32_poly_Constant YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/gem YRP/_7z YRP/win_files_operation YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature