MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
6aaf58b7c5388a947e474efc89b28c36ddf1a6e05c2ae45ed29c02adc0a67cb5	PDF	2024-09-28 23:45:36 UTC	User Submission	YRP/invalid_trailer_structure YRP/invalid_xref_numbers YRP/contentis_base64 [+] YRP/domain YRP/url YRP/Misc_Suspicious_Strings
20647a78f560290c6c41b30491d3990f3ad31f440734f3e05ff9cb2f415be933	PE32	2024-09-28 23:45:25 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/url [+] YRP/gif_bitmap YRP/anti_dbg YRP/win_files_operation YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasModified_DOS_Message
2e5085944356c900dc848eaf5b6e39bb07ff6f694ea1c5c47fa3d1e11562cca3	PE32	2024-09-28 23:44:53 UTC	User Submission	YRP/Big_Numbers1 YRP/Advapi_Hash_API YRP/CRC32_poly_Constant [+] YRP/MD5_Constants YRP/BASE64_table YRP/VC8_Random YRP/maldoc_getEIP_method_1 YRP/IP YRP/contentis_base64 YRP/domain YRP/url YRP/avi YRP/gif_animated YRP/anime_music_video YRP/gif_bitmap YRP/gif89a_bitmap YRP/corel_draw_graohic YRP/gem YRP/rip YRP/wmf YRP/prc YRP/Browsers YRP/Misc_Suspicious_Strings YRP/inject_thread YRP/hijack_network YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature
7feaa39c8e860c28dbfc665cfd147b676fa3719df7adc1e9009a16ae70ad9c8e	PE32	2024-09-28 23:44:49 UTC	User Submission	YRP/CRC32_poly_Constant YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/png YRP/excel_XML YRP/gem YRP/pgml YRP/amf YRP/prc YRP/x3d YRP/_3dxml YRP/Misc_Suspicious_Strings YRP/escalate_priv YRP/screenshot YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/Nullsoft_PiMP_Stub_SFX YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature
3d3971be3b2873ceea2a4f391df94417279ead5bb71ebb837402a4a21bedde0d	PE32	2024-09-28 23:44:42 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/Armadillo_v171 [+] YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature
5869129ba90c0b115173d44e1a8301eeca0394cc6411c17d06c99ee332b77e96	Java	2024-09-28 23:44:37 UTC	User Submission	YRP/Big_Numbers1 YRP/Big_Numbers2 YRP/contentis_base64 [+] YRP/domain YRP/url YRP/png YRP/excel_2007 YRP/corel_draw_compressed YRP/gem YRP/odg YRP/jt YRP/_3dxml_compressed YRP/android_meterpreter
d20322180fec9a85bd67700ec77671a4f7658e4f570e36d544880c8588c20d24	data	2024-09-28 23:44:33 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/url YRP/android_meterpreter
2da42af4ca8a2487bca0be4484088243e70eebb9d1745379f7600807059f2e6c	PE32	2024-09-28 23:44:31 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/wmf [+] YRP/SEH__vba YRP/win_private_profile YRP/Microsoft_Visual_Basic_v50 YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDebugData FlorianRoth/DragonFly_APT_Sep17_3
b4af1a3b07f22f7097bb533dfa95ccc15e85e4887e465ea127dec35406f0046f	PE32	2024-09-28 23:44:14 UTC	User Submission	YRP/CRC32_poly_Constant YRP/contentis_base64 YRP/domain [+] YRP/url YRP/prc YRP/escalate_priv YRP/screenshot YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/Nullsoft_PiMP_Stub_SFX YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature
77ffdd448eb33b6c3dbdec94962a3878d32b2ca96b3147de3ad97212e866bf20	PE32	2024-09-28 23:44:11 UTC	User Submission	YRP/CRC32_poly_Constant YRP/contentis_base64 YRP/domain [+] YRP/url YRP/prc YRP/escalate_priv YRP/screenshot YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/Nullsoft_PiMP_Stub_SFX YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature