popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
1 2024-11-11 09:50 ChromeSetup.exe  

de04168171981a90f56a126ec055ba19


Malicious Library PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		5.2 51 ZeroCERT

2 2024-11-11 09:49 ChromeSetup.exe  

de04168171981a90f56a126ec055ba19


Malicious Library PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		5.2 51 ZeroCERT

3 2024-09-20 10:47 66ec3528901bb_winupdate11.exe#...  

4fe072b888cd64ff01d73d8b80bfcf3e


Malicious Library .NET framework(MSIL) PE File .NET EXE MSOffice File PE32 VirusTotal Malware Buffer PE suspicious privilege Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		3.6 M 28 ZeroCERT

4 2024-09-19 10:33 66eaadab755d2_installs.exe#ijs...  

00b2660d589fe136f015a148d7f4dee0


Malicious Library .NET framework(MSIL) PE File .NET EXE PE32 VirusTotal Malware Buffer PE Check memory Checks debugger buffers extracted unpack itself 		3.4 M 44 ZeroCERT

5 2024-08-23 20:12 lum_agent_online.exe  

d09a787b5982cf6eccd6e4bbe6290850


Emotet Generic Malware Malicious Library UPX Malicious Packer PE File PE32 OS Processor Check DLL PE64 DllRegisterServer dll Malware AutoRuns PDB suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself Windows utilities Auto service Check virtual network interfaces Tofsee Ransomware Windows ComputerName Remote Code Execution 		4 7 1 7.4 guest

6 2024-05-24 07:50 ChromeSetup.exe  

fe2f9e211bfaf529c92bc28cb847da46


Emotet Generic Malware Malicious Library UPX Malicious Packer PE File PE32 OS Processor Check DLL PE64 DllRegisterServer dll MSOffice File CAB Malware AutoRuns PDB suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself Windows utilities Check virtual network interfaces sandbox evasion Tofsee Ransomware Windows Google ComputerName Remote Code Execution DNS 		4 28 4 7.6 M ZeroCERT

7 2024-04-08 18:28 c32setup.exe  

67fbec9b6576f967be0c088b209232e7


UPX PE64 PE File OS Processor Check VirusTotal Malware 		1.0 M 38 ZeroCERT

8 2024-04-08 18:28 Rokzl.exe  

d43f2191937f519e0ab6f9c60649c37c


.NET framework(MSIL) UPX PE File .NET EXE PE32 OS Processor Check VirusTotal Malware 		1.0 M 37 ZeroCERT

9 2024-04-08 18:28 tfr.exe  

ad429013c23fece896d44024860b06b8


UPX PE64 PE File OS Processor Check VirusTotal Malware 		1.2 M 44 ZeroCERT

10 2024-02-08 08:02 RUN.exe  

1b8ceba270bcec714babe5a0862ef028


Generic Malware Admin Tool (Sysinternals etc ...) UPX Antivirus PE32 PE File PowerShell Malware powershell AutoRuns suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut RWX flags setting unpack itself powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key 		1 1 1 8.2 M ZeroCERT

11 2023-11-03 15:54 1.exe  

1819332f150048eed72a2d891390dad1


Emotet Generic Malware Malicious Library UPX Malicious Packer PE File PE32 OS Processor Check DLL PE64 DllRegisterServer dll MSOffice File CAB Malware AutoRuns PDB suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files ICMP traffic unpack itself Windows utilities Check virtual network interfaces sandbox evasion Tofsee Ransomware Windows Google ComputerName Remote Code Execution DNS 		4 27 4 8.4 ZeroCERT

12 2023-10-19 10:21 EngineChromium.exe  

2f943946efaa3e446ee3cbd43a540f5b


Emotet Gen1 Generic Malware Malicious Library UPX Malicious Packer Antivirus .NET framework(MSIL) PE File PE64 ftp OS Processor Check VirusTotal Malware PDB suspicious privilege Check memory Checks debugger unpack itself Check virtual network interfaces 		3.0 31 ZeroCERT

13 2023-10-19 09:58 EngineChromium.exe  

2f943946efaa3e446ee3cbd43a540f5b


Emotet Gen1 Generic Malware Malicious Library UPX Malicious Packer Antivirus .NET framework(MSIL) PE File PE64 ftp OS Processor Check VirusTotal Malware PDB crashed 		1.6 30 ZeroCERT

14 2023-10-17 16:40 Ermnnolfu.exe  

7ba214f8174004943d83942dda0f9731


Downloader UPX PWS KeyLogger Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential Sniff Audio HTTP DNS Code injection Internet API FTP P2P AntiDebug AntiVM PE File PE32 .NET EXE OS Processor Check VirusTotal Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process AppData folder WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		1 4 1 14.4 48 ZeroCERT

15 2023-05-06 12:18 file.exe  

0e4e3cdacfbe29fdc3e189e52ee8228e


Emotet RAT Themida Packer EnigmaProtector Generic Malware Malicious Packer Antivirus Anti_VM .NET EXE PE32 PE File PE64 VirusTotal Cryptocurrency Miner Malware Cryptocurrency wallets Cryptocurrency powershell Buffer PE AutoRuns PDB suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Windows utilities Checks Bios Detects VirtualBox Detects VMWare powershell.exe wrote Check virtual network interfaces suspicious process AppData folder AntiVM_Disk WriteConsoleW VMware anti-virtualization VM Disk Size Check Tofsee Ransomware Windows ComputerName Remote Code Execution DNS Cryptographic key crashed CoinMiner 		6 5 11 20.4 M 29 ZeroCERT

keyword