popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
8881 2023-10-16 11:12 RBY2.exe  

d334fdbe7080a9e36d94001903199491


Amadey Generic Malware UPX Malicious Library Malicious Packer Antivirus PE File PE32 .NET EXE OS Processor Check JPEG Format DLL PE64 Malware download Amadey VirusTotal Cryptocurrency Miner Malware AutoRuns MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process AppData folder suspicious TLD WriteConsoleW Tofsee Windows ComputerName DNS Downloader CoinMiner 		10 27 18 4 9.8 M 59 ZeroCERT

8882 2023-10-16 11:20 fronttechnologicalprores.exe  

5a0d618b0f8ed5b550a811e4b1afdf48


Lumma Gen1 Emotet Malicious Library .NET framework(MSIL) UPX Http API ScreenShot Internet API AntiDebug AntiVM PE File PE64 CAB MSOffice File PNG Format .NET EXE JPEG Format PE32 Browser Info Stealer Malware download VirusTotal Malware Cryptocurrency wallets Cryptocurrency AutoRuns PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Collect installed applications Check virtual network interfaces suspicious process AppData folder sandbox evasion WriteConsoleW installed browsers check Tofsee Ransomware Lumma Stealer Windows Exploit Browser ComputerName Remote Code Execution Firmware DNS Cryptographic key crashed 		3 5 8 3 22.2 M 45 ZeroCERT

8883 2023-10-16 11:22 anykmc.txt.vbs  

02de2b9fc44bc82bf8e627cca8058f0f


Generic Malware Antivirus PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		1 2 1 8.0 26 ZeroCERT

8884 2023-10-16 11:22 bulaeko.vbs  

3e1ff6eefd4496936edf51fb46144380


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 3 1 8.6 18 ZeroCERT

8885 2023-10-16 11:23 droiddfffffffffffffFile.vbs  

81526bd6e81d8efbe8a8a364c2b30b1a


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 3 1 9.2 18 ZeroCERT

8886 2023-10-16 11:51 investorlokiiiiiiFile.vbs  

dd13d2f6e0075f0b9bfa13f4493e6db2


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 3 1 8.6 17 ZeroCERT

8887 2023-10-16 11:52 invlokiwedFile.vbs  

2f91256fa60710cda18cc702684f78ab


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 3 1 9.2 18 ZeroCERT

8888 2023-10-16 12:04 kenjkt.vbs  

5029c7922f007aee3bba22e60cab46c6


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 3 1 8.6 17 ZeroCERT

8889 2023-10-16 12:04 kenspa.vbs  

a32b1ecc7fc8c489e23976d324d5c4aa


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 3 1 8.6 18 ZeroCERT

8890 2023-10-16 12:04 looksoprettyundertheroof.vbs  

c6754754996c3347b6cafe44af0e7cdc


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 3 1 9.2 18 ZeroCERT

8891 2023-10-16 12:50 bulak.txt.exe  

c630301e6fa6e55bbb4eedeafb870f83


PE File PE32 .NET EXE Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Windows utilities Check virtual network interfaces suspicious process AppData folder WriteConsoleW Tofsee Windows ComputerName 		1 2 1 6.8 ZeroCERT

8892 2023-10-16 12:52 kenjkt.txt.exe  

f871241fffd3002353e3ed0eea50daa5


Malicious Library UPX Malicious Packer PE File PE32 .NET EXE OS Name Check OS Memory Check OS Processor Check Browser Info Stealer FTP Client Info Stealer Email Client Info Stealer suspicious privilege Check memory Checks debugger unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS Software crashed keylogger 		3 4 6.8 ZeroCERT

8893 2023-10-16 12:55 gate4.exe  

5c6b1ca0336366662d0f444e01f96a3a


PrivateLoader RedLine stealer Themida Packer Generic Malware UPX Malicious Library VMProtect ScreenShot PWS Socket DGA Http API DNS Internet API SMTP Anti_VM AntiDebug AntiVM PE File PE64 PE32 ZIP Format DLL OS Processor Check PNG Format Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency Microsoft Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files RWX flags setting unpack itself Windows utilities Disables Windows Security Collect installed applications suspicious process AppData folder malicious URLs AntiVM_Disk suspicious TLD sandbox evasion WriteConsoleW anti-virtualization IP Check VM Disk Size Check installed browsers check PrivateLoader Tofsee Ransomware Stealer Windows Update Browser RisePro Email ComputerName Remote Code Execution DNS Cryptographic key Software crashed 		35 54 31 30.4 M 31 ZeroCERT

8894 2023-10-16 18:35 fuljani.exe  

942dbace85ab0d41045bb37a66ccb139


Generic Malware PE File PE32 .NET EXE VirusTotal Malware Buffer PE Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Tofsee ComputerName 		1 2 2 4.8 40 ZeroCERT

8895 2023-10-16 18:35 fuljani.exe  

942dbace85ab0d41045bb37a66ccb139


Generic Malware PE File PE32 .NET EXE VirusTotal Malware Buffer PE Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Tofsee ComputerName 		1 2 2 4.8 40 ZeroCERT

keyword