MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
de28480628872d3aee500962929d7702b220f652117db00bf965568b3d14fe2e	PE32	2024-09-30 17:43:56 UTC	User Submission	YRP/VC8_Random YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/excel_XML YRP/pgml YRP/amf YRP/prc YRP/x3d YRP/_3dxml YRP/Browsers YRP/Antivirus YRP/VM_Generic_Detection YRP/Misc_Suspicious_Strings YRP/inject_thread YRP/create_service YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Microsoft_Visual_Cpp_70_MFC YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDebugData YRP/HasRichSignature
0c6a0f03cf818db85a2343110107f3bbf09c4051a21180cc07535221ef012e04	Zip	2024-09-30 17:43:53 UTC	User Submission	CuckooSandbox/shellcode YRP/contentis_base64 YRP/domain [+] YRP/png YRP/excel_2007 YRP/jpeg YRP/corel_draw_compressed YRP/odg YRP/_3dxml_compressed
b5f74cd7a504d13d66ce90b55b48919270fbeddd66f99cb3e1e595f02d1e0cff	PE32	2024-09-30 17:43:44 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/excel_XML YRP/pgml YRP/amf YRP/x3d YRP/_3dxml YRP/suspicious_packer_section YRP/PeCompact_v208_Bitsum_Technologiessignature_by_loveboom YRP/PECompact_2x_Jeremy_Collake YRP/PECompact_20x_Heuristic_Mode_Jeremy_Collake YRP/PECompact_2xx_BitSum_Technologies YRP/PECompact_v2xx YRP/PECompact_V2X_Bitsum_Technologies_additional YRP/PECompact_V2X_Bitsum_Technologies YRP/PECompact_v20_additional YRP/PeCompact_2xx_BitSum_Technologies YRP/PeCompact_253_DLL_BitSum_Technologies_additional YRP/PECompact_v20 YRP/PeCompact_253_DLL_BitSum_Technologies YRP/PECompact_v2xx_additional YRP/PECompactV2XBitsumTechnologies YRP/PECompact2xxBitSumTechnologies YRP/PECompactv2xx YRP/pecompact2 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature
95cc38f9960a3cff8ec30454cbeedae1cbefa8ea808fbc8b312335f2b3d5c2f7	PE32	2024-09-30 17:43:36 UTC	User Submission	YRP/Big_Numbers1 YRP/Big_Numbers2 YRP/Big_Numbers3 [+] YRP/Big_Numbers4 YRP/contentis_base64 YRP/domain YRP/gem YRP/wmf YRP/SEH__vba YRP/suspicious_packer_section YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature
29349c00739512f95dc6e6d5df20fc4ad1b737ed867024c9dcd522b94b37ea59	PDF	2024-09-30 17:43:33 UTC	User Submission	YRP/invalid_trailer_structure YRP/multiple_versions YRP/contentis_base64 [+] YRP/domain YRP/url YRP/pdf YRP/jpeg
1356a3790b76bac65c9986b305734f56f6da19f4c9fffbefa5ed5444c8fb53fd	PE32	2024-09-30 17:43:30 UTC	User Submission	CuckooSandbox/vmdetect YRP/Prime_Constants_char YRP/CRC32_poly_Constant [+] YRP/CRC32_table YRP/MD5_Constants YRP/RIPEMD160_Constants YRP/SHA1_Constants YRP/BASE64_table YRP/IP YRP/contentis_base64 YRP/domain YRP/url YRP/png YRP/nullsoft_streaming_video YRP/excel_XML YRP/gem YRP/pgml YRP/wmf YRP/amf YRP/prc YRP/x3d YRP/_3dxml YRP/vmdetect YRP/anti_dbg YRP/disable_dep YRP/network_http YRP/network_dropper YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/suspicious_packer_section YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature
1e3302e2a33c31696001f5457c4a9e7e0a16d35b24cf9c8c4cc5b2488070ac30	PE32	2024-09-30 17:43:27 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/IsPE32 [+] YRP/IsWindowsGUI YRP/IsBeyondImageSize YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
d41898cfc3753f71edce8e1e33498b26babe2774f52f3138e9634be1293e925f	PE32	2024-09-30 17:43:23 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain [+] YRP/suspicious_packer_section YRP/ASPack_v212_additional YRP/ASPack_v21_additional YRP/ASProtect_V2X_DLL_Alexey_Solodovnikov YRP/ASPack_v212 YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/ASPack_v211d YRP/ASProtect_V2X_DLL_Alexey_Solodovnikov_additional YRP/ASPack_212withouth_Poly_Solodovnikov_Alexey YRP/ASPack_v212_Alexey_Solodovnikov YRP/ASPackv212AlexeySolodovnikov YRP/ASProtectV2XDLLAlexeySolodovnikov YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay
ef4145a889a706265988e15c420a1416d7cafa611622cb96c1a8236d153e4f42	PE32	2024-09-30 17:43:19 UTC	User Submission	YRP/Big_Numbers1 YRP/CRC32_poly_Constant YRP/IP [+] YRP/contentis_base64 YRP/domain YRP/url YRP/excel_XML YRP/pgml YRP/amf YRP/prc YRP/x3d YRP/_3dxml YRP/escalate_priv YRP/screenshot YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/ASProtect_v132 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature
f99018c03951591844c9a672320c4be97651103d7b5bef3bec4eacd01383cbe1	PDF	2024-09-30 17:43:16 UTC	User Submission	YRP/invalid_trailer_structure YRP/contentis_base64 YRP/domain [+] YRP/url YRP/pdf YRP/Misc_Suspicious_Strings