popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
1 2024-02-20 08:10 reals.exe  

4698ad48c64750c5eb431f00e27dfb8f


Client SW User Data Stealer browser info stealer Generic Malware EnigmaProtector Google Chrome User Data Downloader UPX Malicious Library Admin Tool (Sysinternals etc ...) Malicious Packer Code injection Http API PWS Create Service Socket DGA ScreenS Browser Info Stealer Malware download FTP Client Info Stealer Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger Creates shortcut Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Disables Windows Security Checks Bios Collect installed applications Detects VirtualBox Detects VMWare suspicious process AppData folder malicious URLs AntiVM_Disk sandbox evasion WriteConsoleW VMware anti-virtualization IP Check VM Disk Size Check installed browsers check Tofsee Ransomware Windows Update Exploit Browser RisePro Email ComputerName DNS Software crashed Downloader 		14 12 15 5 26.4 M ZeroCERT

2 2024-02-19 07:56 reals.exe  

9980a0d095ef8f4e841acb5be833f334


EnigmaProtector Obsidium protector Malicious Packer Malicious Library UPX Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE32 PE File MSOffice File OS Processor Check icon ZIP Format Lnk Format GIF Format Browser Info Stealer Malware download FTP Client Info Stealer Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Disables Windows Security Checks Bios Collect installed applications Detects VirtualBox Detects VMWare suspicious process AppData folder AntiVM_Disk WriteConsoleW VMware anti-virtualization IP Check VM Disk Size Check installed browsers check Tofsee Ransomware Windows Update Exploit Browser RisePro Email ComputerName DNS Software crashed Downloader 		14 12 13 5 23.4 M ZeroCERT

3 2024-02-18 10:58 reals.exe  

ff6be3e826728411d90a58ffe4834ca3


Client SW User Data Stealer browser info stealer Generic Malware EnigmaProtector Google Chrome User Data Downloader Obsidium protector UPX Malicious Library Malicious Packer Code injection Http API PWS Create Service Socket DGA ScreenShot Escalate pr Browser Info Stealer Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Disables Windows Security Checks Bios Collect installed applications Detects VirtualBox Detects VMWare suspicious process AppData folder malicious URLs AntiVM_Disk WriteConsoleW VMware anti-virtualization IP Check VM Disk Size Check installed browsers check Tofsee Ransomware Windows Update Exploit Browser RisePro Email ComputerName DNS Software crashed Downloader 		14 12 13 5 28.0 M 26 ZeroCERT

4 2024-02-16 08:12 bugai.exe  

04354f40a9b6cd2f8f76d1dd35c798c8


Client SW User Data Stealer browser info stealer Generic Malware EnigmaProtector Themida Packer Google Chrome User Data Downloader UPX Malicious Packer Admin Tool (Sysinternals etc ...) Malicious Library Http API PWS Code injection Create Service Soc Browser Info Stealer Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Disables Windows Security Checks Bios Collect installed applications Detects VirtualBox Detects VMWare suspicious process AppData folder malicious URLs AntiVM_Disk sandbox evasion WriteConsoleW VMware anti-virtualization IP Check VM Disk Size Check installed browsers check Tofsee Ransomware Windows Update Exploit Browser RisePro Email ComputerName DNS Software crashed Downloader 		14 12 13 5 28.4 M 30 ZeroCERT

5 2024-02-13 14:02 plaza.exe  

b391262d30720e42f884893464e82b01


EnigmaProtector Malicious Packer PE32 PE File Malware download VirusTotal Malware AutoRuns MachineGuid unpack itself Windows utilities suspicious process WriteConsoleW IP Check Tofsee Windows RisePro ComputerName DNS crashed 		2 7 4 6.6 37 ZeroCERT

6 2024-02-13 12:41 zara.exe  

e9a17be752fa6e93d9e2f76adb0fa896


Client SW User Data Stealer browser info stealer Generic Malware EnigmaProtector Google Chrome User Data Downloader UPX Malicious Library Malicious Packer Http API PWS Code injection Create Service Socket DGA ScreenShot Escalate priviledges Steal credenti Browser Info Stealer Malware download FTP Client Info Stealer Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Disables Windows Security Checks Bios Collect installed applications Detects VirtualBox Detects VMWare suspicious process AppData folder malicious URLs AntiVM_Disk WriteConsoleW VMware anti-virtualization IP Check VM Disk Size Check installed browsers check Tofsee Ransomware Windows Update Exploit Browser RisePro Email ComputerName DNS Software crashed Downloader 		13 14 13 27.0 M ZeroCERT

7 2024-02-10 15:10 hunta.exe  

ceb083f9f6b650cda498738efb17554a


Client SW User Data Stealer browser info stealer Generic Malware EnigmaProtector Google Chrome User Data Downloader UPX Malicious Packer Malicious Library Code injection Http API PWS Create Service Socket DGA ScreenShot Escalate priviledges Steal cred Browser Info Stealer Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Disables Windows Security Checks Bios Collect installed applications Detects VMWare suspicious process AppData folder malicious URLs AntiVM_Disk WriteConsoleW VMware anti-virtualization IP Check VM Disk Size Check installed browsers check Tofsee Ransomware Windows Update Exploit Browser RisePro Email ComputerName DNS Software crashed Downloader 		14 14 13 4 26.6 M 29 ZeroCERT

  • First
  • 1
  • Last
  • Total : 7cnts
keyword