MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
e183f97c34d826c560bc336ac23c7127a65a4bd1dcc0ebca0a5c1d75483b3e66	COM	2024-09-30 23:54:53 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/Misc_Suspicious_Strings
2e46ebaa98188eb8e7ea910db75234413642fc7ca4e069f6daf1611c14749ac4	PE32	2024-09-30 23:54:48 UTC	User Submission	YRP/CRC32_poly_Constant YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/gem YRP/_7z YRP/win_files_operation YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature
d6e02496d681a869e694198753f13d31da0050736ced2d0097b4d4d826244b75	PE32	2024-09-30 23:54:42 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/png YRP/prc YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/IsPacked
b2b17f6a791600ec1ebaca00d1530c5cda7ed90e196af5e866e5a636ab31a97c	PE32	2024-09-30 23:54:35 UTC	User Submission	YRP/CRC32_poly_Constant YRP/CRC32_table YRP/CRC32b_poly_Constant [+] YRP/contentis_base64 YRP/domain YRP/gem YRP/Armadillo_v1xx_v2xx_additional YRP/Microsoft_Visual_Cpp_60_DLL_additional YRP/Microsoft_Visual_Cpp_v70_DLL YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_60_DLL_Debug YRP/Armadillo_v1xx_v2xx YRP/Microsoft_Visual_Cpp_v60_DLL YRP/Microsoft_Visual_Cpp_60_DLL YRP/Microsoft_Visual_Cpp_60 YRP/Armadillov1xxv2xx YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasRichSignature
ac7a8a01617c66ef0ffad893d2dc25f931ed86e4ad2d0756a9b4acdc5cd11545	MS-DOS	2024-09-30 23:54:31 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/url YRP/excel_XML YRP/pgml YRP/amf YRP/prc YRP/x3d YRP/_3dxml YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Wininet_Library YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature
4146e27c5b8727784ebde34cbf4676d00971bbe62a2f9fc090ee3099a0914f63	PE32	2024-09-30 23:54:27 UTC	User Submission	YRP/CRC32_poly_Constant YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/url YRP/excel_XML YRP/pgml YRP/amf YRP/prc YRP/x3d YRP/_3dxml YRP/escalate_priv YRP/screenshot YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/ASProtect_v132 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature
bc86259f5550f61f29a0568edf4ecbe24cd1840dabd0fd4abda9d84f66475094	PE32	2024-09-30 23:54:23 UTC	User Submission	YRP/CRC32_poly_Constant YRP/contentis_base64 YRP/domain [+] YRP/url YRP/png YRP/prc YRP/escalate_priv YRP/screenshot YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/Nullsoft_PiMP_Stub_SFX YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature
a0eaaa72b78de3e0dc4082163d8c578922729426eb96f678057f213ca001d246	PE32	2024-09-30 23:54:19 UTC	User Submission	YRP/domain YRP/suspicious_packer_section YRP/UPX [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/IsBeyondImageSize YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
a5b800ea2f006739034f26dd01e895697bbe4fd7482038ee61c6fc73e2659228	PE32	2024-09-30 23:54:16 UTC	User Submission	YRP/CRC32_poly_Constant YRP/maldoc_getEIP_method_1 YRP/IP [+] YRP/contentis_base64 YRP/domain YRP/url YRP/excel_XML YRP/pgml YRP/amf YRP/prc YRP/x3d YRP/_3dxml YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/inject_thread YRP/network_dropper YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section YRP/Nullsoft_PiMP_Stub_SFX YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature
97add6e83ffb84d166e1c7e0ae90fef6fec2d77cfeb4e8700f96c28dc2b1d1cd	PE32	2024-09-30 23:54:13 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/Check_OutputDebugStringA_iat [+] YRP/anti_dbg YRP/win_files_operation YRP/Visual_Cpp_2003_DLL_Microsoft YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasDebugData YRP/IsBeyondImageSize YRP/HasRichSignature