popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
1 2024-08-04 13:42 jf.exe  

d161e13cf0731d0b55ad38d6a38cdc21


CoinMiner Generic Malware Downloader UPX Malicious Library Confuser .NET Malicious Packer Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Hijack Network Sniff Audio HTTP DNS Code injection Internet API persistence F VirusTotal Malware Buffer PE suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Windows utilities suspicious process malicious URLs WriteConsoleW IP Check Tofsee Interception Windows ComputerName Amazon Alibaba DNS 		4 150 5 15.4 M 47 ZeroCERT

2 2024-04-19 13:12 js.exe  

269a3d770289d6442ad0b01e03276a10


Generic Malware Malicious Library UPX PE File DllRegisterServer dll PE32 OS Processor Check VirusTotal Malware Check memory buffers extracted Creates executable files RWX flags setting unpack itself AppData folder AntiVM_Disk sandbox evasion VM Disk Size Check Windows Browser ComputerName Remote Code Execution DNS 		1 1 4 7.6 M 47 ZeroCERT

3 2024-02-22 11:54 RuntimeBroker.exe  

75484c429d668b95a287bde3ebb46fc8


Malicious Library Malicious Packer Admin Tool (Sysinternals etc ...) UPX PE32 PE File MZP Format OS Processor Check VirusTotal Malware Malicious Traffic unpack itself DNS crashed 		3 1 1 4.0 51 ZeroCERT

4 2023-08-28 07:37 religionprosig.exe  

3eb7278ffb8ab7d3f190a56756239e64


Gen1 Emotet Generic Malware Downloader Malicious Library UPX Antivirus Create Service Socket P2P DGA Steal credential Http API Escalate priviledges PWS Sniff Audio HTTP DNS ScreenShot Code injection Internet API FTP KeyLogger AntiDebug AntiVM PE File CAB VirusTotal Malware powershell AutoRuns PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger Creates shortcut Creates executable files unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Remote Code Execution Cryptographic key 		2 2 3 8.8 M 20 ZeroCERT

5 2023-04-16 16:22 113.exe  

9a75a6d3afd26306f563d96dc2517225


Gen1 Emotet PWS .NET framework RAT Malicious Library CAB PE File PE32 .NET EXE VirusTotal Malware AutoRuns PDB Check memory Checks debugger Creates executable files unpack itself Check virtual network interfaces AppData folder AntiVM_Disk VM Disk Size Check Tofsee Windows Remote Code Execution 		2 2 4.6 M 42 ZeroCERT

  • First
  • 1
  • Last
  • Total : 5cnts
keyword