MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
608734e070f7e16d0a10afa587f8cc26f100f13bd28846f381ba101684d4fe10	PE32	2024-09-26 12:28:17 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/url YRP/excel_XML YRP/pgml YRP/wmf YRP/amf YRP/xaml YRP/x3d YRP/_3dxml YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI FlorianRoth/DragonFly_APT_Sep17_3
59b1aac5eb861c8a4ec097c9bd4920de1f28f6357ad234626060721ce4ace8e8	PE32	2024-09-26 12:28:02 UTC	User Submission	YRP/CRC32_poly_Constant YRP/CRC32_table YRP/BASE64_table [+] YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/IP YRP/contentis_base64 YRP/domain YRP/gem YRP/prc YRP/network_udp_sock YRP/network_tcp_listen YRP/network_smtp_raw YRP/network_dropper YRP/network_tcp_socket YRP/network_dns YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/CookieTools YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI YRP/borland_delphi
12d3b61a9ff564f9c896942388015ad54602ee26d1fe933cb8851b3f61644590	PE32	2024-09-26 12:27:57 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/url YRP/gem YRP/anti_dbg YRP/win_registry YRP/Visual_Cpp_2005_DLL_Microsoft YRP/Visual_Cpp_2003_DLL_Microsoft YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature
aa7c2678791e36f3c2ed30389f6a87b07c3971560860c7a722da198a7f95cb3f	PE32	2024-09-26 12:27:55 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain [+] YRP/url YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section YRP/Safeguard_103_Simonzh YRP/RPoly_crypt_10b_from_Vaska_18032007_1906 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature
ccbc3bed5f4c709e3dac100a70d62ce03ca23af9a237d518c401e6884ab5799a	PDF	2024-09-26 12:27:36 UTC	User Submission	YRP/Big_Numbers1 YRP/invalid_trailer_structure YRP/multiple_versions [+] YRP/contentis_base64 YRP/domain YRP/url YRP/pdf YRP/jpeg
e2b71bba6654f673b6503eb08d7b45e41e62357d7b6d5a4343432ae50878202b	PE32	2024-09-26 12:27:26 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/DebuggerCheck__RemoteAPI YRP/anti_dbg YRP/screenshot YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasDebugData YRP/HasRichSignature
3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f	PE32+	2024-09-26 12:27:23 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/DebuggerHiding__Active [+] YRP/anti_dbg YRP/disable_dep YRP/IsPE64 YRP/IsDLL YRP/IsWindowsGUI YRP/HasRichSignature
20929dfdd86022f244eb7febdd8f1981236c88fe50947b93eb9560a1e64dffcd	PE32	2024-09-26 12:27:20 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/gem [+] YRP/suspicious_packer_section YRP/spyeye YRP/MingWin32_Dev_Cpp_v4991_h YRP/MingWin32_GCC_3x YRP/Microsoft_Visual_Cpp_v71_DLL_Debug_additional YRP/MingWin32_v_h_additional YRP/MinGW_GCC_3x_additional YRP/Dev_Cpp_4992_Bloodshed_Software_ YRP/Dev_Cpp_4992_Bloodshed_Software YRP/Microsoft_Visual_Cpp_v71_DLL_Debug YRP/MinGW_GCC_3x YRP/MingWin32_GCC_3x_additional YRP/MingWin32_v_h YRP/Dev_Cue_4992_Bloodshed_Software YRP/MingWin32_Dev_Cpp_v4x_h_additional YRP/MingWin32_Dev_Cpp_v4991 YRP/MingWin32_v YRP/MingWin32_Dev_Cpp_v4991_h_additional YRP/MingWin32_Dev_Cpp_v4x_h YRP/MinGWGCC3x YRP/DevC4992BloodshedSoftware YRP/IsPE32 YRP/IsConsole YRP/IsPacked YRP/HasOverlay YRP/MinGW_1
35cf3b95f604d45df4f81019c030c3ba0c7294094744a3928d7c296de27a19dd	PE32	2024-09-26 12:27:18 UTC	User Submission	CuckooSandbox/vmdetect YRP/Big_Numbers1 YRP/CRC32_poly_Constant [+] YRP/CRC32b_poly_Constant YRP/RIPEMD160_Constants YRP/SHA1_Constants YRP/RijnDael_AES_CHAR YRP/RijnDael_AES_LONG YRP/IP YRP/contentis_base64 YRP/domain YRP/url YRP/excel_2007 YRP/corel_draw_compressed YRP/gem YRP/odg YRP/rip YRP/_3dxml_compressed YRP/_7z YRP/Browsers YRP/VMWare_Detection YRP/Dropper_Strings YRP/WMI_strings YRP/DebuggerException__SetConsoleCtrl YRP/vmdetect YRP/escalate_priv YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Microsoft_Visual_C_Basic_NET YRP/NETDLLMicrosoft YRP/IsPE32 YRP/IsNET_DLL YRP/IsDLL YRP/IsConsole YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature
91aacc1beb4dfc8f7b4b738d6bd1ba28f1e949eee316c5af1936ffd62c3b403f	PE32	2024-09-26 12:27:10 UTC	User Submission	YRP/CRC32_poly_Constant YRP/CRC32_table YRP/IP [+] YRP/contentis_base64 YRP/domain YRP/url YRP/excel_XML YRP/gem YRP/pgml YRP/amf YRP/prc YRP/x3d YRP/_3dxml YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_files_operation YRP/win_hook YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/BobSoft_Mini_Delphi_BoB_BobSoft_additional YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/BobSoftMiniDelphiBoBBobSoft YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature