MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
769fc5c181614d52beda6677b7f5970f1d355287db348a6563453a9eb8e09977	PE32	2024-10-08 00:33:47 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain [+] YRP/network_dropper YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/suspicious_packer_section YRP/NsPack_v37_North_Star YRP/NsPack_v37_North_Star_h YRP/NsPack_v37_North_Star_h_additional YRP/NsPacK_V37_LiuXingPing_additional YRP/NSPack_3x_Liu_Xing_Ping_additional YRP/NsPacK_V37_LiuXingPing YRP/NsPack_3x_Liu_Xing_Ping YRP/NsPacKV37LiuXingPing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/IsBeyondImageSize YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
4ab93c55a638d167d3a7fd8716380c141f44cb92c115fa3e30be04c044546695	PE32	2024-10-08 00:33:45 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/Microsoft_Visual_Cpp_v50v60_MFC [+] YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
bab57706cfa28d1869bf1bfd7db0d5d999c4289fbeb9fa77ac15293a5b9cb39c	PE32	2024-10-08 00:33:36 UTC	User Submission	YRP/CRC32_poly_Constant YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/url YRP/excel_2007 YRP/excel_XML YRP/corel_draw_compressed YRP/odg YRP/pgml YRP/rip YRP/amf YRP/prc YRP/x3d YRP/_3dxml YRP/_3dxml_compressed YRP/escalate_priv YRP/screenshot YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/Nullsoft_PiMP_Stub_SFX YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature
a073e37b9e6724f7804e947880d208e3b1d4a608fcfbe55b047ceb0a9b6abd08	PE32	2024-10-08 00:33:33 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/gem [+] YRP/suspicious_packer_section YRP/PeCompact_v208_Bitsum_Technologiessignature_by_loveboom YRP/PECompact_2x_Jeremy_Collake YRP/PECompact_20x_Heuristic_Mode_Jeremy_Collake YRP/PECompact_2xx_BitSum_Technologies YRP/PECompact_v2xx YRP/PECompact_V2X_Bitsum_Technologies_additional YRP/PECompact_V2X_Bitsum_Technologies YRP/PECompact_v20_additional YRP/PeCompact_2xx_BitSum_Technologies YRP/PeCompact_253_DLL_BitSum_Technologies_additional YRP/PECompact_v20 YRP/PeCompact_253_DLL_BitSum_Technologies YRP/PECompact_v2xx_additional YRP/PECompactV2XBitsumTechnologies YRP/PECompact2xxBitSumTechnologies YRP/PECompactv2xx YRP/pecompact2 YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature
b0476ad99bea620c89a4a582981a14e58dc68ff63d85ec96c26b92773263c485	PE32	2024-10-08 00:33:30 UTC	User Submission	YRP/Big_Numbers1 YRP/Big_Numbers2 YRP/Big_Numbers3 [+] YRP/Big_Numbers4 YRP/Big_Numbers5 YRP/IP YRP/contentis_base64 YRP/domain YRP/png YRP/excel_XML YRP/gem YRP/hpgl YRP/pgml YRP/wmf YRP/amf YRP/prc YRP/xaml YRP/x3d YRP/_3dxml YRP/VMWare_Detection YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI
88eaa4c93cef774fce53578199f4131d977ce554c38ba93792442ba0f168dc6c	PDF	2024-10-08 00:33:26 UTC	User Submission	YRP/Big_Numbers1 YRP/invalid_trailer_structure YRP/multiple_versions [+] YRP/contentis_base64 YRP/domain YRP/url YRP/pdf YRP/jpeg
ad932f8df51440b841f2574d78affdd5bc8ff891c0c84eb29efcd44a2efc436e	PE32	2024-10-08 00:33:24 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/Naked_Packer_V10_BigBoote_additional [+] YRP/NakedPacker_10_by_BigBoote YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/Naked_Packer_V1X_BigBoote_additional YRP/Naked_Packer_V10_BigBoote YRP/NakedPacker_10_by_BigBoote_additional YRP/NakedPacker10byBigBoote YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked
f521964710291699dc377f2c2c7bb214f6fb6e81b3efcba79c629f5301249261	MS-DOS	2024-10-08 00:33:20 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/WinUpack_v039_final_By_Dwing_c2005_additional [+] YRP/Upack_v0399_Dwing_additional YRP/Upack_V037_V039_Dwing YRP/Upack_v039_final YRP/Upack_v039_final_Sign_by_hot_UNP_additional YRP/WinUpack_v039_final_By_Dwing_c2005_h1 YRP/Upack_v039_final_Dwing_h YRP/Upack_v039_final_Sign_by_hot_UNP YRP/Upack_V037_Dwing YRP/WinUpack_v039_final_By_Dwing_c2005_h1_additional YRP/WinUpack_v039_final_By_Dwing_c2005 YRP/WinUpackv039finalByDwingc2005h1 YRP/Upackv039finalDwing YRP/UpackV037Dwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasModified_DOS_Message
769fd1f60b3440f5cd90210ee5e9378c60a8ba8fbfce9ff64cf165ea9d7496ca	PE32	2024-10-08 00:33:18 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/excel_XML YRP/gem YRP/pgml YRP/amf YRP/prc YRP/x3d YRP/_3dxml YRP/System_Tools YRP/anti_dbg YRP/disable_antivirus YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature
e7145230c25cac5b26b84e7385330fa052431c66314ab85d8b5975a91641a0d6	PE32	2024-10-08 00:33:12 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/Browsers [+] YRP/Dropper_Strings YRP/network_tcp_socket YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Microsoft_Visual_Basic_v50 YRP/IsPE32 YRP/IsWindowsGUI YRP/FASM FlorianRoth/DragonFly_APT_Sep17_3