MalwareBazaar Database

You are browsing the malware sample database of MalwareBazaar. If you would like to contribute malware samples to the corpus, you can do so through either using the web upload or the API.


527

Submissions (past 24 hours)

Smoke Loader

Most seen malware family (past 24 hours)

568'460

Malware samples in corpus


Using the form below, you can search for malware samples by a hash (MD5, SHA256, SHA1), imphash, tlsh hash, ClamAV signature, tag or malware family.

Browse Database


Search syntax is as follow: keyword:search_term

Following is a list of accepted keywords along with an example search_term

  • md5:1b109efade90ace7d953507adb1f1563 ( run)
  • sha256:11b16ba733f2f4f10ac58021eecaf5668551a73e2a1acfae99745c50bfccbb44 ( run)
  • signature:CobaltStrike ( run)
  • tag:TA505 ( run)
  • file_type:rtf ( run)
  • user:malware_traffic ( run)
  • clamav:SecuriteInfo.com.Artemis1FBB04F6EAF7.17086.UNOFFICIAL ( run)
  • yara:win_asyncrat_j1 ( run)
  • serial_number:51CD5393514F7ACE2B407C3DBFB09D8D ( run)
  • issuer_cn:Sectigo RSA Code Signing CA ( run)
  • imphash:756fdea446bc618b4804509775306c0d ( run)
  • tlsh:8DD484F440EF10A2F25F852936ADBE9401B2B1C7DBDA5E08137DE5311BBDA633A0564D ( run)
  • telfhash:52d0a7c198b4972c99e60578ed5c5bb29106216620070b20cf10a5d4d83b440f40db59 ( run)
  • gimphash:b43f35a8610180bcb184238555a0858a6c160a2d872566e7e9633221308b34fd ( run)
  • dhash_icon:f8dcbeffbffecee8 ( run)

Date (UTC)SHA256 hashTypeSignatureTagsReporterDL
2022-09-25 04:09be332eb4543ab814514a685bc6448ea764f5bf0d729bf3f89a4f01bfa0967c97Word file docAdwindAdwind doc siparis-listesi @JAMESWT_MHT
2022-09-23 15:46b0fcf47b5ecc249e0e8cafd089892fb156aadbbfdc1aaaf4e695f11d598a12a4Word file doc doc @SecuriteInfoCom
2022-09-23 13:0568a817608fe617b6da71fa248b48281cb3899c76d129eb390baa871141a773e1Word file docAdwindAdwind doc @adrian__luca
2022-09-21 12:11fd2e3b5351b5e39e960710d5a14a658759b3d1c3b52c3b63f43056b86647de13unknown @SecuriteInfoCom
2022-09-20 11:40d8ab152fc343d67857859adb61b2415508bcb55c9c79344e3dd4eed134307fc9Word file doc doc @SecuriteInfoCom
2022-09-20 10:187866aa8771bf9fe93f062e05dbb2f14bfe7c01c34415ef4baa9bed5cc75aa909Word file docAdwindAdwind doc @SecuriteInfoCom
2022-09-20 10:185af15c2c4024ff3b8ce851ec963bd45f3708fb03948fc3cbb249f62d663ee9afJava file jar jar @SecuriteInfoCom
2022-09-16 12:27bfbcd4cc4172bb7685b8bfeeabf7ebad9a001e958fc0c95e8e7cdf3b23f5a6e5Word file docAdwindAdwind doc @adrian__luca
2022-09-15 11:04035d59d40fed8d87d58e85dc599fe341167da0ea7aa6bf07fad9e71ba98070e4Word file docAdwindAdwind doc docx Anonymous
2022-09-15 08:176849de17a031d0443d8ea45da241796343dd9f80bd22d86dcf004b10fc7338f0Word file docAdwindAdwind doc @adrian__luca
2022-09-14 11:44d80fb486ac5ecde32137098e7c6965ad8c5f46eabb55cd7fbc502237973af32fWord file docAdwindAdwind doc docx Anonymous
2022-09-14 10:09978ef2598a67ed3fd18cf7f79a716fa34750f69057626826cab906d3114faa17Word file docAdwindAdwind doc @adrian__luca
2022-09-14 10:0179ffb409ed6230c57e62cc03dee44611825ab5dd50ec7d3b3a53e10e2529ebafWord file docAdwindAdwind doc @adrian__luca
2022-09-13 14:30622ba00d105e39cd4fb63978c0dccebca17b0a05708a07e1157cd3cd1bd1cacaWord file docAdwindAdwind doc docx Anonymous
2022-09-12 11:437859fd95c60a0d76fa99eb42277501b20f76a377c1395b504acff5dd22533027Word file docAdwindAdwind doc @adrian__luca
2022-09-01 02:30dd11f6bc61b6451aa645e0f1b9efc09411433bb94a1dc6503e97bf85c196c340Word file doc doc @SecuriteInfoCom
2022-08-22 14:4584262cac91a2f98584a15c71b4147abcf837581dd6833831e125c06e93e9f56dWord file doc doc @SecuriteInfoCom
2022-08-19 14:2006c65c7c0bea1a42fb25ba59da3cb81b0746e7065a307aa4f5a21e8ab06610b6Word file docAdwindAdwind doc @ankit_anubhav
2022-08-18 12:54e1f97c157f054b7fad11e7f06737a835dcb894da72c777b22342cd7622d1ff8eWord file docAdwindAdwind doc docx Anonymous
2022-08-17 11:05122661866914db6f67347ba163d75480e968eb4e1a936ef77f8658b1c70a36e5Word file docAdwindAdwind doc @pr0xylife
2022-08-16 12:094480f3dae5c50c2a6d994b11fdf4ffb5c90dbf9208270b57cb0bf0cdb74170d3Word file docAdwindAdwind doc @lowmal3
2022-08-15 12:259f7ef8d16861b56b9f600237e4a883ba0e4b73f25be2a51e8c4ea3aba3740f47Word file doc doc @lowmal3
2022-08-15 11:34454e907ad4d0746c66051e7c02dd1c1827ab96d086e3e7b9e2cdb091f7722b32Word file doc doc @lowmal3
2022-08-12 02:300355a43eda3d4d5f71b22bcb34f8273658dc53c012b5a5afc30d74d8fe4c9299Word file doc doc @SecuriteInfoCom
2022-08-11 14:11d0ca583d06fdfdad5f5db73ecb88e0036736b8cebfee66e117a8edf7d52c22e5Word file docAdwindAdwind doc docx Anonymous
2022-08-10 12:44ae15d92f716a409a83ca57197333ed2e690a8d8427b6693a581f4100f7f77546Word file doc doc docx Anonymous
2022-08-09 13:51d073902b673d9243ec93d615a42ae11e048c4913ca9b2163bc578d1224cdb84eWord file doc doc @lowmal3
2022-08-09 08:5403265b3f9c94dc5e6bcb827c70638b786ac3023f91a3669978552318af5ebca5Word file doc doc geo TUR @adrian__luca
2022-08-09 08:28844ebca8f7ddb670546010281644aed3f385ddec657e16c8cc67e1ac2bee507bWord file doc doc @lowmal3
2022-08-08 13:17a435e282c8e8778c6f8d693c284ffc7f539dd0f4e1570a5836b76bf8a2ef78fdWord file doc doc docx Anonymous
2022-08-08 06:2616ea9412ac0f734ddf9656a4f028dcbbb0ad052dabb57708f98567da64819e7fWord file doc doc @lowmal3
2022-08-06 00:148cc655d313bd34af55ce92eb0ce5667b174f4de9d4841ff71359e8333b63cf4eWord file doc doc @SecuriteInfoCom
2022-08-06 00:1406d0dc4ac96ed7b5864e5579dc26f2293bea997279af68f714ad7349079de0c6unknown @SecuriteInfoCom
2022-08-06 00:142386084b54b517dff1092496d4d4e5b558cf2ea50d51944bb8ac1f13fa1bbc05Word file doc doc @SecuriteInfoCom
2022-08-06 00:141e93da86133631f8ceb8381d96b6f67ad18dd38a1f5b658aa94f4dd3c1478842Word file doc doc @SecuriteInfoCom
2022-08-06 00:1425fdc6b2fde162b2dc67589f1737ef83508f1b125d748ccd8f5d7f72faf3c156Word file doc doc @SecuriteInfoCom
2022-08-05 13:31c26c99eeb30da221f74dd0951f4b8de0207e5801b64cd8d2a1abf1f906668096Word file docAdwindAdwind doc geo TUR @lowmal3
2022-08-05 12:103a0d915cf32e53b3d79b94917673b08f7dc7a9fd332662797d3dbcdd151444a0Word file doc doc docx Anonymous
2022-08-05 06:4573bf20af21a2f6b15e3c701dc2235cd55d573922f98a92a8e487eeca2474daddWord file doc doc @lowmal3
2022-08-02 12:35449c2d0f66cb4c9acaa508adfb09ad62512f46a64d5491ef508f00313fd4f89eWord file doc doc docx Anonymous
2022-08-01 06:2224abe021a80f26a695e141437e1aa2d7d6bc41ed95ede191902d69a091ff6298Word file doc doc @lowmal3
2022-07-29 07:38487c26a50dee2b2e822de9a4d3cc3450366a6c423cefa5e6e90c87594863e4d3Word file doc doc @lowmal3
2022-07-28 10:431c6f7cf9de690b1c97b36804621f5638d896cda70ca881a6fb1cd7fd00aae27eWord file doc doc @SecuriteInfoCom
2022-07-28 10:4333f3b3fc8b7a6a4c14ae37b4523eae843f10106601ad24c1581f1a3bbe91cdf8Word file doc doc @SecuriteInfoCom
2022-07-28 09:511003382a8adab71ecc80613f53f8f82f68944584ce76cc22705df680632ae1baWord file doc doc @SecuriteInfoCom
2022-07-27 13:45b04c5e2faebb16f06088fafe8d1b29748c4d221062e8e57df78f9a822c537318Word file doc doc Anonymous
2022-07-27 11:17169cb700a4d8d467e715fee7d9d50d58a4c4218fc3fd865ab4e999178501a13eWord file doc doc Anonymous
2022-07-27 06:06043bee93df0c94b17f2c52747b3fc0507dfa84c5808a0e9cf34f3ef95ec1b608Word file doc doc @lowmal3
2022-07-27 05:552838f552f0bf64ff546d31528d0dab1020f34e34e7382989bbbf0e7af2401477Word file doc doc Anonymous
2022-07-05 09:061754bc8d6b04b89533b44e3ab94b0cf41897a948b6ea3e7c1292d4cd0da71e1fWord file doc doc @lowmal3
2022-07-04 12:50cb9cc7841fdd46b14f48ac6f26836e7b38912b2c7a00d378837a8b92f55bdabaExcel file xlsx xlsx @SecuriteInfoCom
2022-07-04 10:17e3e3fbfd7c1f7f33b3236f90b04ecca44be563500161901455956dc3806afafcWord file doc doc @lowmal3
2022-07-04 10:08563f31ac3a81be4eefa375175476e2744aafe396f0ee79690f8dca9f7279e5c9Word file doc doc @lowmal3
2022-07-04 10:06627cb7160a9656b9f2919d3bd596147c6f042805f044adb3dde6f3b5838907aeWord file doc doc @lowmal3
2022-07-01 08:53134bf3eee1df913ce48e2d80e60d9a0929930a20b43e48d188eb900597aa14e4Word file doc doc @adrian__luca
2022-06-17 12:25ea1fc94f7c60196a723a5656ea203c5eb023a1b42a347ab6916dabfbe6dbe330Word file doc doc @adrian__luca
2022-06-14 11:269c657520ef5426e4bb861bf280216297d299dd418bac2f950abbf889399c1239Word file doc @SecuriteInfoCom
2022-06-13 11:0209e1c3385a3e324905b6dffa7a87aa28a13bae3bb9d5a22e418a15cfcf220b8aWord file doc @SecuriteInfoCom
2022-06-13 07:44ccf1e1dd90fe6751b6e768956988cfbbe3ba5d04d19a02a7cc99b5d55abd6f88Word file doc doc Anonymous
2022-06-10 09:5054f6c4c3c26e607d32b405f79043fa5bf33dadda9e0e2ec3650aecdcc4df1d03Word file doc @SecuriteInfoCom
2022-06-06 11:42d4f6d17fee89fee0c817eaa80098606ea149a11fc41230ec233e193f4f7be8beWord file doc doc @adrian__luca
2021-11-09 10:05317398e617675f2fe503edb40ed10c8cbd2642d1d5c157108e9426067fe007f6Word file doc doc @adrian__luca
2021-11-09 10:02a61e84c84a04da94ab4321aedd54e9aa87d1c58ef16167fa0fd2ce12798dd3e0Word file doc doc @adrian__luca
2021-11-04 11:27be03005a47b6229c2a4fd08922107ae8a369493c8571f6254bf4372257624b8aWord file doc doc @lowmal3
2021-11-02 22:431e2da72e82ca01f50c14d2806735d1540cb335096d2215d2a0dfd9bfcc9f269bWord file doc doc Anonymous
2021-11-02 07:04e31af2802b761ea10e2133bb52ecac110ef691d616989eaecc95b9a8ff0eaed6Word file doc doc @lowmal3
2021-10-28 10:472311c7cc164dd8395ecc706d5a8d42132bb9c9a6d889cb8d680e4260089c84ffWord file doc doc @lowmal3
2021-10-27 15:31cef98b5dd1d1d3c5c81b57a92f7e4b025d7810eabe3e83d3929787b6342d012aWord file doc doc @info_sec_ca
2021-10-27 08:577322921e28c9c513936609869b0f2e2bef04c52f44ab6e1e1fa20c219d0bb2e0Word file doc doc @lowmal3
2021-10-26 12:42abeb9ed173946d7a7e6662eacb5341b62b14fd32a4ad0604ab8614f1810a8788Word file doc doc docx @info_sec_ca
2021-10-21 21:532bbc2dd5e5bf5ab22b736c2e3e958425c47b25005543ec19ef2a14a725105252Word file doc doc Anonymous
2021-10-20 12:0074526a4d66ecfcc5463c486344870179112308875f76b133766e19fc546de2f0Word file doc doc @lowmal3
2021-10-19 10:13b47fd51389538222a45377b86c2c26d39b7603da970251802ba2d6fa2963417eWord file doc doc @lowmal3
2021-07-05 12:3318236bab1f6789ee8728b712647385baa79403cafa235214530acc32be3314adWord file doc doc @info_sec_ca