popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
1 2024-05-24 07:50 ChromeSetup.exe  

fe2f9e211bfaf529c92bc28cb847da46


Emotet Generic Malware Malicious Library UPX Malicious Packer PE File PE32 OS Processor Check DLL PE64 DllRegisterServer dll MSOffice File CAB Malware AutoRuns PDB suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself Windows utilities Check virtual network interfaces sandbox evasion Tofsee Ransomware Windows Google ComputerName Remote Code Execution DNS 		4 28 4 7.6 M ZeroCERT

2 2024-04-08 18:28 c32setup.exe  

67fbec9b6576f967be0c088b209232e7


UPX PE64 PE File OS Processor Check VirusTotal Malware 		1.0 M 38 ZeroCERT

3 2024-04-08 18:28 Rokzl.exe  

d43f2191937f519e0ab6f9c60649c37c


.NET framework(MSIL) UPX PE File .NET EXE PE32 OS Processor Check VirusTotal Malware 		1.0 M 37 ZeroCERT

4 2024-04-08 18:28 tfr.exe  

ad429013c23fece896d44024860b06b8


UPX PE64 PE File OS Processor Check VirusTotal Malware 		1.2 M 44 ZeroCERT

5 2024-02-08 08:02 RUN.exe  

1b8ceba270bcec714babe5a0862ef028


Generic Malware Admin Tool (Sysinternals etc ...) UPX Antivirus PE32 PE File PowerShell Malware powershell AutoRuns suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut RWX flags setting unpack itself powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key 		1 1 1 8.2 M ZeroCERT

6 2023-11-03 15:54 1.exe  

1819332f150048eed72a2d891390dad1


Emotet Generic Malware Malicious Library UPX Malicious Packer PE File PE32 OS Processor Check DLL PE64 DllRegisterServer dll MSOffice File CAB Malware AutoRuns PDB suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files ICMP traffic unpack itself Windows utilities Check virtual network interfaces sandbox evasion Tofsee Ransomware Windows Google ComputerName Remote Code Execution DNS 		4 27 4 8.4 ZeroCERT

7 2023-10-19 10:21 EngineChromium.exe  

2f943946efaa3e446ee3cbd43a540f5b


Emotet Gen1 Generic Malware Malicious Library UPX Malicious Packer Antivirus .NET framework(MSIL) PE File PE64 ftp OS Processor Check VirusTotal Malware PDB suspicious privilege Check memory Checks debugger unpack itself Check virtual network interfaces 		3.0 31 ZeroCERT

8 2023-10-19 09:58 EngineChromium.exe  

2f943946efaa3e446ee3cbd43a540f5b


Emotet Gen1 Generic Malware Malicious Library UPX Malicious Packer Antivirus .NET framework(MSIL) PE File PE64 ftp OS Processor Check VirusTotal Malware PDB crashed 		1.6 30 ZeroCERT

9 2023-10-17 16:40 Ermnnolfu.exe  

7ba214f8174004943d83942dda0f9731


Downloader UPX PWS KeyLogger Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential Sniff Audio HTTP DNS Code injection Internet API FTP P2P AntiDebug AntiVM PE File PE32 .NET EXE OS Processor Check VirusTotal Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process AppData folder WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		1 4 1 14.4 48 ZeroCERT

10 2023-05-06 12:18 file.exe  

0e4e3cdacfbe29fdc3e189e52ee8228e


Emotet RAT Themida Packer EnigmaProtector Generic Malware Malicious Packer Antivirus Anti_VM .NET EXE PE32 PE File PE64 VirusTotal Cryptocurrency Miner Malware Cryptocurrency wallets Cryptocurrency powershell Buffer PE AutoRuns PDB suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Windows utilities Checks Bios Detects VirtualBox Detects VMWare powershell.exe wrote Check virtual network interfaces suspicious process AppData folder AntiVM_Disk WriteConsoleW VMware anti-virtualization VM Disk Size Check Tofsee Ransomware Windows ComputerName Remote Code Execution DNS Cryptographic key crashed CoinMiner 		6 5 11 20.4 M 29 ZeroCERT

11 2023-02-09 10:49 f6ad5fe2-5c5e-4386-bdad-f48d7d...  

8868eb2d40741375ce60fc710b00d3bd


Emotet Gen2 Generic Malware Malicious Library UPX Malicious Packer PE32 OS Processor Check PE File DLL PE64 Malware PDB Check memory Creates executable files Ransomware Remote Code Execution crashed 		2.8 guest

12 2023-01-26 10:50 Installer1.exe  

e43bd6491d398710f23436f2cd3bd073


Emotet UPX PE File PE64 VirusTotal Malware Checks debugger Detects VMWare VMware Windows ComputerName crashed 		3.2 M 21 ZeroCERT

13 2022-11-19 09:43 vbc.exe  

a5d90c7d3e393ee48132480fca1532cf


AgentTesla PWS[m] RAT browser info stealer Generic Malware Google Chrome User Data Downloader Antivirus Create Service Socket DNS Internet API Sniff Audio KeyLogger Escalate priviledges AntiDebug AntiVM PE32 .NET EXE PE File VirusTotal Malware powershell AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote suspicious process Windows ComputerName DNS Cryptographic key keylogger 		1 13.2 27 ZeroCERT

14 2022-11-09 09:47 vbc.exe  

7a5019bfbddc908dd05ce3293cd616d0


AgentTesla PWS[m] RAT browser info stealer Generic Malware Google Chrome User Data Downloader Antivirus Create Service Socket DNS Internet API Sniff Audio KeyLogger Escalate priviledges AntiDebug AntiVM PE32 .NET EXE PE File Remcos VirusTotal Malware powershell Buffer PE suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key keylogger 		1 3 1 12.6 M 25 ZeroCERT

15 2022-11-03 10:14 vbc.exe  

2584c82f01d79e34c4eb4a44d58029aa


AgentTesla PWS[m] Emotet RAT browser info stealer Generic Malware Google Chrome User Data Downloader Antivirus Create Service Socket DNS Internet API Sniff Audio KeyLogger Escalate priviledges AntiDebug AntiVM PE32 .NET EXE PE File Remcos VirusTotal Malware powershell AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key keylogger 		1 3 1 13.0 M 41 ZeroCERT

  • First
  • 1
  • 2
  • Last
  • Total : 26cnts
keyword