popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
1 2025-04-21 12:59 download.php  

29e24525c83a49e30fc532e59f769b09


Gen1 Emotet Generic Malware Themida Downloader Malicious Library UPX Antivirus Admin Tool (Sysinternals etc ...) Malicious Packer Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Hijack Network Sniff Audio HTTP DNS C Malware download Amadey VirusTotal Malware AutoRuns PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger Creates shortcut Creates executable files unpack itself Checks Bios Detects VMWare suspicious process AppData folder malicious URLs AntiVM_Disk sandbox evasion WriteConsoleW VMware anti-virtualization VM Disk Size Check Tofsee Windows ComputerName RCE DNS Cryptographic key crashed 		12 4 11 16.2 M 45 ZeroCERT

2 2025-04-21 10:10 download.php  

7fabf8c4efb42fd2239eadae059e533e


RedLine stealer Gen1 Emotet XMRig Miner RedlineStealer Generic Malware Themida Downloader Malicious Library UPX Antivirus Admin Tool (Sysinternals etc ...) Malicious Packer .NET framework(MSIL) Create Service Socket DGA Http API ScreenShot Escalate privil Browser Info Stealer RedLine Malware download Amadey VirusTotal Malware powershell Microsoft AutoRuns PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files unpack itself Windows utilities Checks Bios Detects VMWare suspicious process AppData folder malicious URLs AntiVM_Disk sandbox evasion WriteConsoleW VMware anti-virtualization VM Disk Size Check installed browsers check Stealer Windows Browser ComputerName RCE DNS Cryptographic key crashed 		5 3 12 19.4 M 42 ZeroCERT

3 2025-04-21 09:47 d4940780-7f90-11e9-8b57-4bd4b6...  

74ff57825e5256a5e145c246bdf55a48


Gen1 Emotet Malicious Library UPX Admin Tool (Sysinternals etc ...) PE File PE64 CAB .NET EXE PE32 VirusTotal Malware AutoRuns PDB Check memory Checks debugger Creates executable files unpack itself AppData folder Windows RCE 		4.2 49 ZeroCERT

4 2025-03-20 10:05 KX7TDcm.exe  

b3ed4a5d880de0e32a6e2a886cc03d9b


Emotet Gen1 Malicious Library UPX AntiDebug AntiVM PE File PE64 CAB VirusTotal Malware AutoRuns PDB MachineGuid Code Injection Check memory Checks debugger Creates executable files suspicious process Windows ComputerName RCE 		5.6 32 ZeroCERT

5 2025-03-08 12:38 download.php  

4677605b34f1e7f4b7c691bd1fddb6a3


Amadey Emotet Gen1 Generic Malware Themida Malicious Library UPX Malicious Packer Antivirus Anti_VM PE File CAB PE32 PE64 DLL OS Processor Check MZP Format .NET EXE Browser Info Stealer Malware download FTP Client Info Stealer Vidar VirusTotal Email Client Info Stealer Malware c&c Cryptocurrency wallets Cryptocurrency powershell Buffer PE AutoRuns PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files ICMP traffic unpack itself Windows utilities Checks Bios Collect installed applications Detects VMWare suspicious process AppData folder AntiVM_Disk sandbox evasion WriteConsoleW VMware anti-virtualization VM Disk Size Check installed browsers check Tofsee Stealc Stealer Windows Browser Email ComputerName RCE DNS Cryptographic key Software crashed plugin 		16 10 23 2 23.0 M 48 ZeroCERT

6 2025-03-03 14:55 kinddevelopers.exe  

8199d03b6325b026657ac08f637e78de


Emotet Gen1 Generic Malware Malicious Library UPX Antivirus PE File PE64 CAB VirusTotal Malware powershell AutoRuns PDB suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Check virtual network interfaces suspicious process WriteConsoleW Windows ComputerName RCE DNS Cryptographic key 		1 1 10.8 35 ZeroCERT

7 2025-03-03 14:55 tg01985462ss.exe  

73ff439239900589550d046df99566f7


Emotet Gen1 Generic Malware Malicious Library UPX Antivirus PE File PE64 CAB VirusTotal Malware powershell AutoRuns PDB suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW Windows ComputerName RCE DNS Cryptographic key 		1 1 11.4 39 ZeroCERT

8 2025-02-28 10:12 MCxU5Fj.exe  

9ab697112003c683415084d22b11e2ed


Emotet Gen1 Generic Malware Malicious Library UPX Antivirus PE File PE64 CAB PowerShell VirusTotal Malware powershell AutoRuns PDB suspicious privilege MachineGuid Check memory Checks debugger Creates shortcut Creates executable files unpack itself Windows utilities powershell.exe wrote Check virtual network interfaces suspicious process Windows ComputerName RCE Cryptographic key crashed 		3 4 8.6 M 16 ZeroCERT

9 2025-02-18 17:35 update.exe  

2b3324576857269e5bd626110108ee53


Emotet Gen1 Malicious Library UPX Admin Tool (Sysinternals etc ...) .NET framework(MSIL) PE File PE64 CAB DLL PE32 .NET DLL .NET EXE icon AutoRuns PDB Creates executable files unpack itself AppData folder Windows RCE crashed 		3.4 M guest

10 2025-02-10 16:21 bitcoin3000.exe  

1e039f12c51a941bb072c73fe2def232


Emotet Gen1 Malicious Library UPX PE File PE64 CAB VirusTotal Malware AutoRuns PDB Checks debugger Creates executable files WriteConsoleW Windows RCE DNS 		1 4.0 M 29 ZeroCERT

11 2025-02-03 10:30 goodboy.exe  

11ad0f71caabbadba8ca08663690ca39


Gen1 Emotet Malicious Library UPX .NET framework(MSIL) Malicious Packer PE File PE64 CAB .NET EXE PE32 OS Processor Check Browser Info Stealer FTP Client Info Stealer VirusTotal Malware AutoRuns PDB suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger Creates executable files unpack itself Check virtual network interfaces AppData folder IP Check Windows Browser ComputerName RCE DNS Cryptographic key Software 		1 2 2 8.6 42 ZeroCERT

12 2025-01-08 13:51 same.exe  

09bfd52dfee36db96073d2340182affc


Gen1 Emotet Themida Malicious Library UPX Anti_VM PE File CAB PE32 OS Processor Check VirusTotal Malware AutoRuns PDB Checks debugger Creates executable files unpack itself Checks Bios Detects VMWare AppData folder AntiVM_Disk VMware anti-virtualization VM Disk Size Check Windows RCE DNS crashed 		2 11.2 42 ZeroCERT

13 2025-01-08 13:48 none.exe  

c2e8e44c11c1001f4072f7733187351c


Gen1 Emotet Themida Malicious Library UPX Anti_VM PE File CAB PE32 VirusTotal Malware AutoRuns PDB Checks debugger Creates executable files unpack itself Checks Bios Detects VMWare AppData folder AntiVM_Disk VMware anti-virtualization VM Disk Size Check Windows RCE DNS crashed 		2 11.0 39 ZeroCERT

14 2024-11-26 14:14 TikTok18.exe  

602876c49237a426d0e27ea8e6b1e0d6


Emotet Gen1 Malicious Library UPX PE64 CAB PE File VirusTotal Malware AutoRuns PDB Check memory Checks debugger Creates executable files unpack itself Windows RCE crashed 		3.4 14 ZeroCERT

15 2024-11-08 17:14 hell9o.exe  

2e933118fecbaf64bbd76514c47a2164


Emotet Gen1 Malicious Library UPX PE File PE64 CAB VirusTotal Malware AutoRuns PDB Creates executable files Windows utilities WriteConsoleW Windows RCE 		3.6 44 ZeroCERT

keyword