popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
8836 2023-10-10 10:33 Documenti.url  

b4ae0d79ac63532fcf65494e208cb940


AntiDebug AntiVM URL Format MSOffice File VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		1 1 2 5.8 8 ZeroCERT

8837 2023-10-10 10:33 ig5443.txt.exe  

6de05ad93daca1b6caf769826a404975


Malicious Library UPX Malicious Packer PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Check memory Checks debugger unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS Software crashed keylogger 		2 4 6.4 54 ZeroCERT

8838 2023-10-10 10:33 EXX.vbs  

5d8410c20a0349ff3b5a346180455b76


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 3 1 8.4 1 ZeroCERT

8839 2023-10-10 10:36 Informazioni.txt.url  

0e20d831a104276c6b374d9c01cc9bde


AntiDebug AntiVM URL Format MSOffice File VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		1 1 2 5.8 5 ZeroCERT

8840 2023-10-10 10:42 zip.7z  

854c628dca46bee73c0d90ce447d626e


Escalate priviledges PWS KeyLogger AntiDebug AntiVM Malware download Malware suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself IP Check PrivateLoader Tofsee Windows DNS 		21 24 18 7 5.6 M ZeroCERT

8841 2023-10-10 10:48 zip.7z  

180d73f995d228c51498c4bfaf674d57


Escalate priviledges PWS KeyLogger AntiDebug AntiVM Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself IP Check PrivateLoader Tofsee Windows DNS 		22 24 18 7 6.0 M 7 ZeroCERT

8842 2023-10-10 17:00 Prowf.exe  

3cef8b4a9c9507c112ca5449a03b03e9


PE File PE32 .NET EXE VirusTotal Malware PDB Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee ComputerName 		2 1 2.8 M 48 ZeroCERT

8843 2023-10-10 17:02 windows.exe  

36065d0183df9a022d1cfb4eac70ee71


AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		2 2 3.8 M ZeroCERT

8844 2023-10-10 18:36 북한최고인민회의 결과.lnk  

cc96ba45dd2b6a6d7aa300d77e49c095


Generic Malware Downloader Antivirus HWP PS PostScript Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Sniff Audio HTTP DNS Code injection Internet API FTP KeyLogger P2P Hide_URL AntiDebug AntiVM Lnk Format MSOffice VirusTotal Malware powershell suspicious privilege Code Injection Check memory Checks debugger Creates shortcut Creates executable files unpack itself Windows utilities powershell.exe wrote Check virtual network interfaces suspicious process AppData folder WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		1 2 2 11.2 23 ZeroCERT

8845 2023-10-10 18:46 ac8077e64a8cd818f17039dd74c733...  

8741a228fba24165aac6aac400aada40


Generic Malware Downloader Antivirus Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Sniff Audio HTTP DNS Code injection Internet API FTP KeyLogger P2P Hide_URL AntiDebug AntiVM .NET DLL PE File DLL PE32 powershell suspicious privilege Code Injection Check memory Checks debugger Creates shortcut Creates executable files unpack itself Windows utilities powershell.exe wrote Check virtual network interfaces suspicious process AppData folder WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		1 2 2 9.2 ZeroCERT

8846 2023-10-10 19:49 NMemo1Setp.exe  

f12aa4983f77ed85b3a618f7656807c2


Confuser .NET PE File PE32 .NET EXE VirusTotal Malware MachineGuid Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee Ransomware DNS 		3 3 3.8 M 59 guest

8847 2023-10-10 22:07 ac8077e64a8cd818f17039dd74c733...  

8741a228fba24165aac6aac400aada40


Generic Malware Downloader Antivirus Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Sniff Audio HTTP DNS Code injection Internet API FTP KeyLogger P2P Hide_URL AntiDebug AntiVM .NET DLL PE File DLL PE32 powershell suspicious privilege Code Injection Check memory Checks debugger Creates shortcut Creates executable files unpack itself Windows utilities powershell.exe wrote Check virtual network interfaces suspicious process AppData folder WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		2 2 9.8 guest

8848 2023-10-11 07:52 googluk.exe  

07b8df6ee60cd20723ba20794e15d438


LokiBot .NET framework(MSIL) PWS SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Browser Email ComputerName DNS Software crashed 		2 4 10.4 M 49 ZeroCERT

8849 2023-10-11 07:52 ishost.exe  

f83a1ebac520b7deea9613aa2a7765c4


LokiBot .NET framework(MSIL) PWS SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Browser Email ComputerName DNS Software crashed 		2 4 10.4 M 48 ZeroCERT

8850 2023-10-11 07:57 sihost.exe  

1d2e25e64e7c402540fa6ce6871257f4


Generic Malware .NET framework(MSIL) Antivirus PWS SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell AutoRuns PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key Software crashed 		3 4 15.0 M 41 ZeroCERT

keyword