MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
881d7e4c0547a44ca552ebeca58d7b49ca20e34080fcdaad14979dca05acbef2	PE32	2024-09-30 17:11:09 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/gem [+] YRP/wmf YRP/SEH__vba YRP/escalate_priv YRP/win_mutex YRP/win_registry YRP/win_token YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature
cb693fc9e53a0a00557300a595f449288e0f0591ee7f44a00b8367e8d167d733	PE32	2024-09-30 17:11:07 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/gem [+] YRP/Safeguard_103_Simonzh YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked
0a0ff8397ff4f0f9230a3a5c785b8895ce946f80aa4cdda0247d9e4397232b35	PE32	2024-09-30 17:11:04 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain [+] YRP/suspicious_packer_section YRP/ASPack_v212_additional YRP/ASPack_v21_additional YRP/ASProtect_V2X_DLL_Alexey_Solodovnikov YRP/ASPack_v212 YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/ASPack_v211d YRP/ASProtect_V2X_DLL_Alexey_Solodovnikov_additional YRP/ASPack_212withouth_Poly_Solodovnikov_Alexey YRP/ASPack_v212_Alexey_Solodovnikov YRP/ASPackv212AlexeySolodovnikov YRP/ASProtectV2XDLLAlexeySolodovnikov YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay
ba043afbaa50fd8151c6c8c9215e19f4e4045b882dcc6c28b55de4cbed9bdfe6	PE32	2024-09-30 17:10:53 UTC	User Submission	YRP/CRC32_poly_Constant YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/url YRP/excel_XML YRP/gif_bitmap YRP/pgml YRP/amf YRP/prc YRP/x3d YRP/_3dxml YRP/escalate_priv YRP/screenshot YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/Nullsoft_PiMP_Stub_SFX YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature
e0a9ccdadf44166a6d7a9f50852907e063a769953b66b21f0ef06dafa9a0255d	PE32	2024-09-30 17:10:47 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/url [+] YRP/gem YRP/jt YRP/network_dropper YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Armadillo_v1xx_v2xx_additional YRP/Microsoft_Visual_Cpp_v70_DLL YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_60_DLL_Debug YRP/Armadillo_v1xx_v2xx YRP/Microsoft_Visual_Cpp_v60_DLL YRP/Microsoft_Visual_Cpp_60 YRP/Armadillov1xxv2xx YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasRichSignature
c91c30063d4da767c499789570a3d2162080f18e396489479d620cc9fd4119e9	PE32	2024-09-30 17:10:44 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/ThreadControl__Context [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/IsBeyondImageSize YRP/ImportTableIsBad FlorianRoth/DragonFly_APT_Sep17_3
b04d2eb09bec0f45b6902a994290e5cdd331fa9f5c1aa4b62781e07b77e42e80	PE32	2024-09-30 17:10:42 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 YRP/domain [+] YRP/win_private_profile YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Armadillo_v1xx_v2xx_additional YRP/Microsoft_Visual_Cpp_60_DLL_additional YRP/Microsoft_Visual_Cpp_v70_DLL YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_60_DLL_Debug YRP/Armadillo_v1xx_v2xx YRP/Microsoft_Visual_Cpp_v60_DLL YRP/Microsoft_Visual_Cpp_60_DLL YRP/Microsoft_Visual_Cpp_60 YRP/Armadillov1xxv2xx YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/IsBeyondImageSize YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
9499e184f97f08a8e24c21d2babad26bc253283923b6406637f9b2a8ff3543cd	data	2024-09-30 17:10:39 UTC	User Submission	YRP/domain
9811df28f2e0404a99b3de5aae3d888e3898083b9aa98e15309a28169c77f3f7	Zip	2024-09-30 17:10:36 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/png [+] YRP/excel_2007 YRP/corel_draw_compressed YRP/gem YRP/hpgl YRP/odg YRP/_3dxml_compressed YRP/suspicious_packer_section YRP/possible_includes_base64_packed_functions
ae86082b04470c872308d288d60959b22ff7595f124be0ca24240e2bcb29ad8c	data	2024-09-30 17:10:32 UTC	User Submission	CuckooSandbox/vmdetect