MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
ad244b768ca60ad46e408eacb1bcdd6eebc90dd0810f951b2cbc528f8f647c4e	PE32	2024-09-30 01:30:42 UTC	User Submission	YRP/CRC32_poly_Constant YRP/CRC32_table YRP/MD5_Constants [+] YRP/BASE64_table YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/IP YRP/contentis_base64 YRP/domain YRP/url YRP/gif_animated YRP/excel_XML YRP/gif_bitmap YRP/gif89a_bitmap YRP/gem YRP/pgml YRP/amf YRP/prc YRP/stl YRP/x3d YRP/_3dxml YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/win_hook YRP/android_meterpreter YRP/GenerateTLSClientHelloPacket_Test YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/BobSoft_Mini_Delphi_BoB_BobSoft_additional YRP/Borland_Delphi_v60_v70 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/BobSoftMiniDelphiBoBBobSoft YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/borland_delphi
e384a40f9712cd8c1a06b95fd88d5ebdfe17ea4f7966600236bf307090afe905	PE32	2024-09-30 01:30:23 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/gem YRP/network_tcp_socket YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature
04c34cc5431395c290c1fb0f672463826e4c86062f20b2176b528a6fc68ef4d1	PE32	2024-09-30 01:30:20 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/url [+] YRP/anti_dbg YRP/win_files_operation YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasModified_DOS_Message
5fbfa25b4315622f47751d398c0a501e3c6c9d65c38c155ebb80e2360a35dc0c	PE32	2024-09-30 01:30:14 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 YRP/domain [+] YRP/excel_XML YRP/x3d YRP/anti_dbg YRP/win_files_operation YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI YRP/HasDebugData YRP/HasRichSignature
b2edfabbce4dbdc28d6aefacb5194e86d7f2ab46d30a4713c11af7e79babdd00	PE32	2024-09-30 01:30:01 UTC	User Submission	YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/IP [+] YRP/contentis_base64 YRP/domain YRP/prc YRP/Browsers YRP/Antivirus YRP/Misc_Suspicious_Strings YRP/ThreadControl__Context YRP/disable_antivirus YRP/inject_thread YRP/network_tcp_socket YRP/network_dns YRP/keylogger YRP/spreading_file YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section YRP/UPX YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/borland_delphi
125ca4e6ec322e2c1f8bbc6e2bf6b0c4dee4a0325cc541c6a4339f1b33db9371	PE32	2024-09-30 01:29:53 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/screenshot [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasModified_DOS_Message
cfeafb9eefd320f32aaf4a0560aea3fd77d424827fc5831a353532c195fa6ab9	PDF	2024-09-30 01:29:41 UTC	User Submission	YRP/invalid_trailer_structure YRP/multiple_versions YRP/contentis_base64 [+] YRP/domain YRP/url YRP/pdf
4121e467de8fd71784464f546108774c42a2688db9a15f9448dc6c2ce3c26304	PE32	2024-09-30 01:29:35 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/gem [+] YRP/SEH__vba YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
ffcd66751842d333f783080c88ed260beb764dfa32b4f588551cafdbe50fec67	PE32	2024-09-30 01:29:30 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/url [+] YRP/escalate_priv YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Str_Win32_Wininet_Library YRP/Safeguard_103_Simonzh YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
ca7aceca866cd00743a78f7e1fb8ba2e3ec3d72f502802e77afb3d25423de078	PE32	2024-09-30 01:29:27 UTC	User Submission	YRP/Delphi_Random YRP/Delphi_CompareCall YRP/Delphi_Copy [+] YRP/Delphi_StrToInt YRP/contentis_base64 YRP/domain YRP/gem YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/keylogger YRP/win_registry YRP/win_files_operation YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/BobSoft_Mini_Delphi_BoB_BobSoft_additional YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/BobSoftMiniDelphiBoBBobSoft YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/borland_delphi