MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
3ce2ef9bb8118067a3962ea41d30a0f72154cb911c8a981712aabdd3f443ff9a	PE32	2024-05-05 22:17:38 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/gem [+] YRP/screenshot YRP/spyeye YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay
9e495b41518154b5c5cb3fff866aa26c894adf164b2639f05ba23bb5e75be5ef	PE32	2024-05-05 19:25:59 UTC	User Submission	YRP/CRC32_poly_Constant YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/url YRP/excel_XML YRP/gem YRP/pgml YRP/amf YRP/x3d YRP/_3dxml YRP/escalate_priv YRP/screenshot YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature
aa0687832273122eb77be11e11a34bc40f533e38bbbf65262a4bd8fab3987301	PE32	2024-05-05 19:25:57 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 YRP/domain [+] YRP/url YRP/gem YRP/anti_dbg YRP/win_files_operation YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/IsPE32 YRP/IsDLL YRP/IsConsole YRP/HasRichSignature
0b96d8a417da310eaecc0c8b9af513f530a6ccb83f5eb6538796e8841d13d020	Zip	2024-05-05 19:25:56 UTC	User Submission	CuckooSandbox/shellcode YRP/Big_Numbers3 YRP/contentis_base64 [+] YRP/domain YRP/excel_2007 YRP/corel_draw_compressed YRP/gem YRP/odg YRP/_3dxml_compressed
069fd505e4dd686232ae1adc1932be2aa5072f7eff7807dbfee23d69a793190a	pcap	2024-05-05 19:25:52 UTC	User Submission	CuckooSandbox/embedded_pe CuckooSandbox/embedded_win_api CuckooSandbox/shellcode [+] YRP/Big_Numbers0 YRP/Big_Numbers1 YRP/Big_Numbers3 YRP/TEAN YRP/IP YRP/contentis_base64 YRP/domain YRP/url YRP/nullsoft_streaming_video YRP/gif_bitmap YRP/gem YRP/rip YRP/stl YRP/Browsers YRP/ThreadControl__Context YRP/anti_dbg YRP/keylogger YRP/win_mutex YRP/win_files_operation YRP/android_meterpreter YRP/possible_includes_base64_packed_functions
076dce30a2f12d3b790bf6f1d7ed96f2708931647f280b8fb8fa815b6bc995ca	PE32	2024-05-05 19:23:57 UTC	User Submission	YRP/CRC32_poly_Constant YRP/Delphi_Random YRP/maldoc_find_kernel32_base_method_1 [+] YRP/IP YRP/maldoc_OLE_file_magic_number YRP/contentis_base64 YRP/domain YRP/url YRP/png YRP/doc YRP/excel_2003 YRP/excel_XML YRP/gif_bitmap YRP/ai_compressed YRP/gem YRP/hpgl YRP/pgml YRP/rip YRP/wmf YRP/amf YRP/dgn YRP/jt YRP/x3d YRP/_3dxml YRP/Dropper_Strings YRP/BITS_CLSID YRP/anti_dbg YRP/disable_dep YRP/create_service YRP/escalate_priv YRP/keylogger YRP/win_registry YRP/win_token YRP/win_files_operation YRP/android_meterpreter YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/borland_delphi YRP/QtFrameWork
922d28246ea23a3f4e0c51793f200f95ddd58def015353f51cd53f6c39bd3399	Zip	2024-05-05 19:23:50 UTC	User Submission	CuckooSandbox/shellcode YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/excel_2007 YRP/corel_draw_compressed YRP/odg YRP/rip YRP/wmf YRP/_3dxml_compressed
3e06ef048151603c2681ece16965d2bee1885afd12b500b0a44ec0b756413f69	Zip	2024-05-05 19:23:43 UTC	User Submission	YRP/domain YRP/excel_2007 YRP/corel_draw_compressed [+] YRP/odg YRP/_3dxml_compressed
ed175e1fe5408536ec8680c0a294cf9ca3dcf38c4cf9f0e09f23a809bdda6f0e	pcap-ng	2024-05-05 19:23:42 UTC	User Submission	CuckooSandbox/shellcode YRP/contentis_base64 YRP/domain [+] YRP/url YRP/possible_includes_base64_packed_functions
661c18fa2edf1b7b09bf8f1635c34fc20dfdb972d9789bc8728eea1ac51973ee	Zip	2024-05-05 19:23:19 UTC	User Submission	YRP/Big_Numbers3 YRP/contentis_base64 YRP/domain [+] YRP/excel_2007 YRP/gif_bitmap YRP/ai_compressed YRP/corel_draw_compressed YRP/odg YRP/_3dxml_compressed YRP/android_meterpreter