MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
adba99d725d66c2b42166037b7372eb1c3b3a7a67348da5a917a9e3af01837d6	PDF	2024-09-27 14:53:46 UTC	User Submission	YRP/Big_Numbers1 YRP/invalid_trailer_structure YRP/contentis_base64 [+] YRP/domain YRP/url YRP/network_dyndns
5d73067ac4bcc3686adb2334335fd849b48a1c249790087e4cbb4b1e488ce96f	PE32	2024-09-27 14:53:44 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/url YRP/png YRP/prc YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/HasDebugData
fdb77db96e67990fc60d4f95225143d14c0f8aaba5fbb25f8891ae18c99afc61	PE32	2024-09-27 14:53:40 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/url YRP/prc YRP/System_Tools YRP/Dropper_Strings YRP/network_smtp_dotNet YRP/keylogger YRP/win_hook YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI FlorianRoth/DragonFly_APT_Sep17_3
9432b215191e37d163b056d0e5023f79e9b22f0501740042ffe85800b38a1e08	PDF	2024-09-27 14:53:31 UTC	User Submission	YRP/Big_Numbers1 YRP/invalid_trailer_structure YRP/invalid_xref_numbers [+] YRP/contentis_base64 YRP/domain YRP/url YRP/jpeg
5b76f2fc0677fa66e5f268f960814994c175ddadcd86732b02aba64d333a5d48	PE32	2024-09-27 14:53:20 UTC	User Submission	YRP/Big_Numbers0 YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/dirac YRP/excel_XML YRP/gem YRP/pgml YRP/wmf YRP/amf YRP/prc YRP/x3d YRP/_3dxml YRP/System_Tools YRP/Browsers YRP/Dropper_Strings YRP/DebuggerCheck__QueryInfo YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/Visual_Cpp_2003_DLL_Microsoft YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDebugData YRP/HasRichSignature
b4b95ea5d0632e9620d497315239a56a28c458e686d77e21f806464a8b9b1991	PE32	2024-09-27 14:53:15 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/url YRP/gem YRP/wmf YRP/anti_dbg YRP/win_files_operation YRP/Typical_Malware_String_Transforms YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature FlorianRoth/Typical_Malware_String_Transforms
c932b9ebb6806c0c74c1a06762ef2da3d2dae2960b77485abb472e84e3e102d2	PE32	2024-09-27 14:53:10 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/url [+] YRP/win_registry YRP/win_token YRP/win_files_operation YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasDebugData YRP/HasRichSignature
42c2781ef23ebce2c2e2a2af28dc360994b021cb455616520a4fb6c60ac36699	PE32	2024-09-27 14:53:08 UTC	User Submission	YRP/CRC32_poly_Constant YRP/BLOWFISH_Constants YRP/contentis_base64 [+] YRP/domain YRP/gem YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/suspicious_packer_section YRP/UPX YRP/PackerUPX_CompresorGratuito_wwwupxsourceforgenet YRP/UPX_wwwupxsourceforgenet_additional YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/Netopsystems_FEAD_Optimizer_1 YRP/UPX_290_LZMA YRP/UPX_290_LZMA_Markus_Oberhumer_Laszlo_Molnar_John_Reiser YRP/UPX_290_LZMA_additional YRP/UPX_wwwupxsourceforgenet YRP/UPXv20MarkusLaszloReiser YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/UPX290LZMAMarkusOberhumerLaszloMolnarJohnReiser YRP/upx_3 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
1eb57df6316a2da9d164e0dbb1cfc8cb39ec9d4ea51d0bf6db6a1b029d4a0962	PDF	2024-09-27 14:53:05 UTC	User Submission	YRP/invalid_trailer_structure YRP/multiple_versions YRP/contentis_base64 [+] YRP/domain YRP/url YRP/pdf
21761ac5521123f1a47fd8c43d9d4868bf64dafd78d5bb97b8750b603cfa1a6c	PDF	2024-09-27 14:53:02 UTC	User Submission	YRP/invalid_trailer_structure YRP/multiple_versions YRP/contentis_base64 [+] YRP/domain YRP/url YRP/pdf