Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
1381 2024-05-31 10:08 reverse_http.ps1  

01afbe1110a8dc2eb754291bd28685a5


Generic Malware Antivirus VirusTotal Malware Check memory Checks debugger RWX flags setting unpack itself ComputerName crashed
3.2 M 34 ZeroCERT

1382 2024-06-03 07:27 abc.ps1  

33d57171c178785001cbdb8aff121710


Generic Malware Antivirus VirusTotal Malware unpack itself
1.4 M 36 ZeroCERT

1383 2024-06-03 14:14 Safety Manager JD (General Dyn...  

8346d90508b5d41d151b7098c7a3e868


Client SW User Data Stealer browser info stealer Generic Malware Hide_EXE Google Chrome User Data Downloader Malicious Library UPX Antivirus Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Sniff Audio HTTP DNS Code Browser Info Stealer VirusTotal Malware powershell AutoRuns suspicious privilege Code Injection Check memory Checks debugger Creates shortcut exploit crash unpack itself Windows utilities Auto service suspicious process malicious URLs WriteConsoleW installed browsers check Windows Exploit Browser ComputerName Cryptographic key crashed
1 1 12.6 8 ZeroCERT

1384 2024-06-04 11:06 BjDYewiY.vbs  

7b5b8d04475bc1ebbb77601f57e3e625


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process Tofsee Windows ComputerName Cryptographic key
3 3 1 8.6 23 ZeroCERT

1385 2024-06-05 09:18 Archvisitor.cur  

e55f25384365d8cb1cc6ffb71600ff50


Suspicious_Script_Bin VirusTotal Malware
0.4 1 ZeroCERT

1386 2024-06-07 09:34 envio.js  

0eea6ce45e121ed22b89a006b3a4c1c3


Generic Malware Antivirus Hide_URL AntiDebug AntiVM PowerShell VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger Creates shortcut unpack itself suspicious process WriteConsoleW Windows ComputerName Cryptographic key
1 6.6 M 21 ZeroCERT

1387 2024-06-07 09:41 www.ps1  

b8d18d049050e1e12c378dd2c71cadc6


Generic Malware Antivirus ZIP Format VirusTotal Malware powershell Malicious Traffic Check memory buffers extracted unpack itself Check virtual network interfaces WriteConsoleW Windows ComputerName Cryptographic key
1 2 1 5.2 M 4 ZeroCERT

1388 2024-06-07 09:51 liitletigersearchingforfoodwhi...  

077e4cfa6534a69f9e8de8e5b83ba08c


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware Malicious Traffic buffers extracted exploit crash unpack itself Tofsee Exploit DNS crashed
2 4 2 4.6 M 37 ZeroCERT

1389 2024-06-09 09:38 SharpHound.ps1  

310d06e1da8a16b5121ead4874f634fa


Generic Malware Antivirus VirusTotal Malware Check memory unpack itself
1.6 M 35 ZeroCERT

1390 2024-06-11 14:43 sign_now.vbs  

539544ea65b5ecdb757d49fd92cc335d

VirusTotal Malware wscript.exe payload download Tofsee
2 1 1.8 11 ZeroCERT

1391 2024-06-11 14:45 DocuSign.vbs  

73999f3f3808981c1470956082ebc738

VirusTotal Malware wscript.exe payload download Tofsee
2 1 1.6 7 ZeroCERT

1392 2024-06-11 14:47 DocuSign.url  

1bb21d7cfa769080240279276bf0da2e


AntiDebug AntiVM URL Format MSOffice File Malware Code Injection Malicious Traffic RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed
2 1 2 4.2 ZeroCERT

1393 2024-06-12 09:56 noncontrabandsVB1.ps1  

183df9ec9ef6dbd453bcee91c8939534


Generic Malware Antivirus VirusTotal Malware Check memory Checks debugger unpack itself WriteConsoleW Windows ComputerName Cryptographic key crashed
1 3.0 21 ZeroCERT

1394 2024-06-12 09:56 wizeninglYZn.ps1  

e9c90b339939ce08b126a6f4e5a5cd5a


Generic Malware Antivirus VirusTotal Malware Check memory Checks debugger unpack itself WriteConsoleW Windows ComputerName Cryptographic key crashed
1 3.0 26 ZeroCERT

1395 2024-06-12 13:25 bas.bat  

c3d227e82f84533c2918a6239b99ff2d


Generic Malware Downloader Antivirus Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Sniff Audio HTTP DNS Code injection Internet API FTP KeyLogger P2P AntiDebug AntiVM PNG Format MSOffice File JPEG Format powershell suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut RWX flags setting exploit crash unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW Tofsee Windows Exploit ComputerName Cloudflare DNS Cryptographic key crashed
2 4 2 7.0 ZeroCERT