popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
8956 2023-10-25 09:52 HTMLprofile.dOC  

2885bbb18db2fc076e129a10729faadb


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware exploit crash unpack itself Tofsee Exploit crashed 		2 2 3 3.2 M 30 ZeroCERT

8957 2023-10-25 09:54 HTMLCacheCentos.dOC  

b39f481790c393d21234af0ced69da7a


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware exploit crash unpack itself Tofsee Exploit crashed 		2 3 2.6 M 29 ZeroCERT

8958 2023-10-25 10:37 HTMLCachesClear.dOC  

ae797eafb49080484af9350259e7920a


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware exploit crash Tofsee Exploit crashed 		2 3 2.2 M 29 ZeroCERT

8959 2023-10-25 10:48 HTMLCacheCentos.dOC  

b39f481790c393d21234af0ced69da7a


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware exploit crash Tofsee Exploit crashed 		2 3 2.2 M 29 ZeroCERT

8960 2023-10-25 11:00 HTMLprofile.doc  

5342b58b3951c40f8e5eb08f5d9824be


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic RWX flags setting exploit crash Tofsee Windows Exploit Google DNS crashed 		7 30 9 4.4 28 ZeroCERT

8961 2023-10-25 11:22 FX_432661.exe  

897af5616bfd6af5b687876924f39ee3


Malicious Library UPX AntiDebug AntiVM PE File PE32 OS Processor Check VirusTotal Malware PDB Code Injection Checks debugger wscript.exe payload download Creates executable files suspicious process Tofsee crashed 		2 3 5.4 M 50 ZeroCERT

8962 2023-10-25 12:19 Comprobante_transfer.pdf.js  

c8bb8a34766ec04c304597c76d179f4b


ActiveXObject VirusTotal Malware wscript.exe payload download Check virtual network interfaces Tofsee DNS crashed 		3 5 2 1 3.4 M 15 ZeroCERT

8963 2023-10-25 13:18 HNB.txt.exe  

43ec3cc0836bd759260e8cf120b79a7b


Malicious Library UPX Malicious Packer PE File PE32 .NET EXE OS Name Check OS Memory Check OS Processor Check Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Check memory Checks debugger unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS Software crashed keylogger 		1 5 5 8.0 54 ZeroCERT

8964 2023-10-25 13:18 HTMLbrowser.vbs  

80c07cfd04a28aa0b03f1396fdf81b2d


Generic Malware Antivirus PowerShell powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 3 1 8.0 ZeroCERT

8965 2023-10-25 13:19 HTMLobject.vbs  

74a3ea36669a5bdbeff3775545527a92


LokiBot Generic Malware Antivirus PWS SMTP KeyLogger AntiDebug AntiVM PowerShell Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW IP Check Tofsee Windows Exploit Browser Email ComputerName DNS Cryptographic key Software crashed keylogger 		3 8 6 1 20.0 M 13 ZeroCERT

8966 2023-10-25 13:32 IGCC.vbs  

42bc2a9470984d793673d9aae1a933b8


Generic Malware Antivirus PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 3 1 8.6 13 ZeroCERT

8967 2023-10-25 13:33 MAH.txt.exe  

7ea06a0e6c1e5707a23364ae6984b4f3


Malicious Library UPX Malicious Packer PE File PE32 .NET EXE OS Name Check OS Memory Check OS Processor Check Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Telegram suspicious privilege Check memory Checks debugger unpack itself Check virtual network interfaces IP Check Tofsee Browser Email ComputerName DNS Software crashed 		4 6 5.2 51 ZeroCERT

8968 2023-10-25 13:52 SAN.txt.exe  

6bdb7a11d0eaa407e7a7f34d794fb567


Malicious Library UPX Malicious Packer PE File PE32 .NET EXE OS Name Check OS Memory Check OS Processor Check Browser Info Stealer VirusTotal Email Client Info Stealer Malware Telegram suspicious privilege Check memory Checks debugger unpack itself Check virtual network interfaces IP Check Tofsee Browser Email ComputerName DNS crashed 		4 6 4.6 54 ZeroCERT

8969 2023-10-25 13:52 qasx.vbs  

ff2a2bc8850b1ad61236bd460eb61e01


Generic Malware Antivirus PWS SMTP KeyLogger AntiDebug AntiVM PowerShell Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee EXPLOIT_KIT Windows Exploit Browser Email ComputerName DNS Cryptographic key Software crashed 		2 3 2 1 15.8 M 17 ZeroCERT

8970 2023-10-25 16:50 up.ps1  

21440931518ff0df59af9b94e52a7c84


Lnk Format GIF Format VirusTotal Malware powershell AutoRuns MachineGuid Check memory Creates shortcut Creates executable files unpack itself Windows utilities powershell.exe wrote Check virtual network interfaces WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		4 1 7.2 M 12 ZeroCERT

keyword