Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
46 2024-03-27 07:39 nesdij.exe  

4f2752fcd683bfff201108b2091510ce


Suspicious_Script_Bin Malicious Library UPX PE File PE32 OS Processor Check Browser Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Check memory Checks debugger unpack itself Browser Email ComputerName crashed
4.6 M 37 ZeroCERT

47 2024-03-26 07:19 newaboyo.exe  

41685eda86fd0c3580849308a25b4a9d


Suspicious_Script_Bin Malicious Library UPX PE File PE32 OS Processor Check Browser Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Check memory Checks debugger unpack itself Browser Email ComputerName crashed
4.4 28 ZeroCERT

48 2024-03-25 09:24 go.exe  

4e937db554cf18265ab7f3915db42b2c


Malicious Library UPX AntiDebug AntiVM PE File PE32 OS Processor Check MSOffice File VirusTotal Malware Code Injection Check memory Checks debugger buffers extracted RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed
8 8 1 5.6 39 ZeroCERT

49 2024-03-22 07:42 wininit.exe  

589ddf53393fe19f58105dfdf56879e3


Process Kill Malicious Library FindFirstVolume CryptGenKey UPX PE File Device_File_Check PE32 OS Processor Check Remcos VirusTotal Malware AutoRuns Malicious Traffic Check memory Checks debugger Creates executable files unpack itself AppData folder Windows
1 4 1 6.8 M 26 ZeroCERT

50 2024-03-20 08:01 wininit.exe  

b26007c701f550b1bff5150c37f824f7


Process Kill Malicious Library FindFirstVolume CryptGenKey UPX PE File Device_File_Check PE32 OS Processor Check VirusTotal Malware AutoRuns Checks debugger Creates executable files unpack itself AppData folder Windows
3.8 31 ZeroCERT

51 2024-03-02 18:56 well.exe  

6b70d4e5e8c5d3f1a7290e216e72e40a


Client SW User Data Stealer browser info stealer Generic Malware Google Chrome User Data Downloader Malicious Library UPX Http API PWS Code injection Create Service Socket DGA ScreenShot Escalate priviledges Steal credential Sniff Audio HTTP DNS BitCoin I Browser Info Stealer VirusTotal Malware Code Injection Check memory Checks debugger exploit crash unpack itself malicious URLs installed browsers check Exploit Browser crashed
6.2 M 25 ZeroCERT

52 2024-02-20 08:25 fu.exe  

d09970b966577e4e5bdf10badfda4672


Client SW User Data Stealer browser info stealer Generic Malware Google Chrome User Data Downloader Malicious Library UPX Http API PWS Code injection Create Service Socket DGA ScreenShot Escalate priviledges Steal credential Sniff Audio HTTP DNS BitCoin I Browser Info Stealer MachineGuid Code Injection Check memory Checks debugger buffers extracted RWX flags setting exploit crash unpack itself Windows utilities malicious URLs installed browsers check Tofsee Ransomware Windows Exploit Browser DNS crashed
8 6 1 9.8 M ZeroCERT

53 2024-02-16 16:41 reader_update.exe  

a74ae422391a22b5469135ae7f0cbf7d


Malicious Library UPX PE File PE64 OS Processor Check Malware download VirusTotal Malware Malicious Traffic Checks debugger Creates executable files unpack itself Windows Update DNS
2 1 4 3.4 M 16 ZeroCERT

54 2024-02-13 14:23 fu.exe  

e82d97943c5c255462d8a1ff9fa84a0b


Client SW User Data Stealer browser info stealer Generic Malware Google Chrome User Data Downloader Malicious Library UPX Code injection Http API PWS Create Service Socket DGA ScreenShot Escalate priviledges Steal credential Sniff Audio HTTP DNS BitCoin I Browser Info Stealer VirusTotal Malware MachineGuid Code Injection Check memory Checks debugger buffers extracted RWX flags setting exploit crash unpack itself Windows utilities malicious URLs installed browsers check Tofsee Ransomware Windows Exploit Browser DNS crashed
8 6 1 11.6 23 ZeroCERT

55 2024-02-12 20:06 well.exe  

fc157bf81ab006d1bb0a542aaf499c53


Client SW User Data Stealer browser info stealer Generic Malware Google Chrome User Data Downloader Malicious Library UPX Http API PWS Code injection Create Service Socket DGA ScreenShot Escalate priviledges Steal credential Sniff Audio HTTP DNS BitCoin I Browser Info Stealer VirusTotal Malware Code Injection Check memory Checks debugger exploit crash unpack itself malicious URLs installed browsers check Exploit Browser crashed
6.0 M 17 ZeroCERT

56 2024-02-07 08:02 fu.exe  

9f011690f3ff8d1190f70fb656bc0152


Malicious Library UPX AntiDebug AntiVM PE32 PE File OS Processor Check MSOffice File Code Injection Check memory Checks debugger buffers extracted RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed
8 7 1 4.6 ZeroCERT

57 2024-02-05 09:53 fu.exe  

271cd22262cd08a27b71bdde7e56a102


Client SW User Data Stealer browser info stealer Generic Malware Google Chrome User Data Downloader Malicious Library UPX Http API PWS Code injection Create Service Socket DGA ScreenShot Escalate priviledges Steal credential Sniff Audio HTTP DNS BitCoin I Browser Info Stealer MachineGuid Code Injection Check memory Checks debugger buffers extracted RWX flags setting exploit crash unpack itself Windows utilities malicious URLs installed browsers check Tofsee Ransomware Windows Exploit Browser DNS crashed
8 6 1 9.8 ZeroCERT

58 2024-02-05 09:27 fu.exe  

c34697903d0b829f48d0c2b7c3d65978


Malicious Library UPX AntiDebug AntiVM PE32 PE File OS Processor Check MSOffice File icon VirusTotal Malware Code Injection Check memory Checks debugger buffers extracted RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed
8 6 1 5.4 25 ZeroCERT

59 2024-02-02 13:46 no.exe  

28b38ccdc05a8aff57014c2bccf49af2


Malicious Library UPX AntiDebug AntiVM PE32 PE File OS Processor Check MSOffice File VirusTotal Malware Code Injection Check memory Checks debugger buffers extracted RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed
8 6 1 6.0 23 ZeroCERT

60 2024-01-28 10:00 ko.exe  

f7942f50665070dee333d0df2bebc4c6


Generic Malware Malicious Library UPX Code injection AntiDebug AntiVM PE32 PE File OS Processor Check MSOffice File Browser Info Stealer VirusTotal Malware MachineGuid Code Injection Check memory Checks debugger buffers extracted RWX flags setting exploit crash unpack itself Windows utilities malicious URLs installed browsers check Tofsee Ransomware Windows Exploit Browser DNS crashed
8 6 1 10.4 16 ZeroCERT