MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
110eedf789feeb746b14dfc2d1a93aa580dfa110a4cb3073ce4d9460de5309cf	PE32	2024-05-09 08:28:26 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/gem YRP/anti_dbg YRP/win_files_operation YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasDebugData YRP/HasRichSignature
df28bed60f5e2db3250f9f8941280abece4f9ae256a3041a8b77732df3d6c410	PE32	2024-05-09 08:28:18 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/excel_XML YRP/pgml YRP/amf YRP/xaml YRP/x3d YRP/_3dxml YRP/DebuggerCheck__RemoteAPI YRP/anti_dbg YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsConsole YRP/IsPacked FlorianRoth/DragonFly_APT_Sep17_3
f3dce07ef36310e3d43a014c12c02312797d1d1b42c841089e5f02b5a0165780	PE32	2024-05-09 08:28:13 UTC	User Submission	YRP/Big_Numbers1 YRP/Big_Numbers3 YRP/CRC32_poly_Constant [+] YRP/MD5_Constants YRP/RIPEMD160_Constants YRP/SHA1_Constants YRP/Delphi_CompareCall YRP/Contains_VBE_File YRP/maldoc_find_kernel32_base_method_1 YRP/IP YRP/contentis_base64 YRP/domain YRP/url YRP/png YRP/nullsoft_streaming_video YRP/excel_2007 YRP/excel_XML YRP/gif_bitmap YRP/corel_draw_compressed YRP/gem YRP/odg YRP/pgml YRP/rip YRP/wmf YRP/amf YRP/prc YRP/xaml YRP/x3d YRP/_3dxml YRP/_3dxml_compressed YRP/anti_dbg YRP/escalate_priv YRP/screenshot YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/suspicious_packer_section YRP/possible_includes_base64_packed_functions YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/borland_delphi
8a3d0e96ab670914b932cdd86254db25e5e45c5f6a540e331bdc9370863542d9	PE32	2024-05-09 08:27:54 UTC	User Submission	YRP/Big_Numbers1 YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/excel_XML YRP/pgml YRP/amf YRP/xaml YRP/x3d YRP/_3dxml YRP/keylogger YRP/Microsoft_Visual_Studio_NET YRP/Microsoft_Visual_C_v70_Basic_NET_additional YRP/Microsoft_Visual_C_Basic_NET YRP/Microsoft_Visual_Studio_NET_additional YRP/Microsoft_Visual_C_v70_Basic_NET YRP/NET_executable_ YRP/NET_executable YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/IsPacked
b19f0aa82d12597a97e4137e2c7e955c7936297f5c3fa2eaf408d85a1ad1fa23	MS	2024-05-09 08:27:48 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/Misc_Suspicious_Strings
4b3c5f7a9aebb4f7fccc115db963b95d223864eb7aed4b6dd46d31c1a8edb35f	PE32	2024-05-09 08:27:42 UTC	User Submission	YRP/CRC32_poly_Constant YRP/CRC32_table YRP/maldoc_find_kernel32_base_method_1 [+] YRP/IP YRP/contentis_base64 YRP/domain YRP/dirac YRP/excel_OS2worksheet YRP/prc YRP/AutoIT_compiled_script YRP/anti_dbg YRP/inject_thread YRP/network_http YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature YRP/AutoIt
af4df19d8f7e14e06d845bcf79cc84e4d000ddeaf3a8274641cf87353767f6a0	Composite	2024-05-09 08:26:52 UTC	User Submission	YRP/Big_Numbers0 YRP/office_document_vba YRP/Contains_VBA_macro_code [+] YRP/maldoc_OLE_file_magic_number YRP/contentis_base64 YRP/domain YRP/doc YRP/excel_2003 YRP/gem YRP/wmf YRP/dgn
48c02eb2577faf4b4b0dde3fca53730d80fd34ea1a524d85d6b915e45cfc8789	MS	2024-05-09 08:26:46 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/Misc_Suspicious_Strings
864058982beb96e66a925b7eb77b7add2ced0e27d95391ec80c3fba56f95f708	PE32	2024-05-09 08:03:27 UTC	User Submission	YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy [+] YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/contentis_base64 YRP/domain YRP/png YRP/rip YRP/prc YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_files_operation YRP/win_hook YRP/Borland_Delphi_40_additional YRP/Borland_Delphi_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/BobSoft_Mini_Delphi_BoB_BobSoft_additional YRP/Borland_Delphi_v60_v70 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/BobSoftMiniDelphiBoBBobSoft YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/borland_delphi
79bf1d7b027e02bc77218ae134338a62e56923ddd73c26cdd0527fc785f99a20	ELF	2024-05-09 08:03:19 UTC	User Submission	CuckooSandbox/shellcode YRP/CRC32c_poly_Constant YRP/CRC32_poly_Constant [+] YRP/MD5_Constants YRP/RIPEMD160_Constants YRP/SHA1_Constants YRP/SHA512_Constants YRP/RijnDael_AES YRP/IP YRP/contentis_base64 YRP/domain YRP/url YRP/nullsoft_streaming_video YRP/ai_compressed YRP/gem YRP/hpgl YRP/rip YRP/prc YRP/suspicious_packer_section