popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
9031 2023-11-01 18:42 Archive.rar  

8988dd76e0075a66d1030daa58d220f1


Escalate priviledges PWS KeyLogger AntiDebug AntiVM ftp Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself suspicious TLD IP Check PrivateLoader Tofsee DNS 		5 13 8 2 5.0 M 1 ZeroCERT

9032 2023-11-02 10:05 HTMLIEbrowserHistorycache.vbs  

857f884bf745995ea1ccd1275446201f

VirusTotal Malware wscript.exe payload download Tofsee 		1 2 2 2.0 3 ZeroCERT

9033 2023-11-02 10:09 1stANzasWQA435786990Mqa9.js  

f757a1a6ca3595f7219e80540bcbbf52


Generic Malware Antivirus ActiveXObject PowerShell VirusTotal Malware powershell suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		2 4 2 10.4 M 3 ZeroCERT

9034 2023-11-02 10:11 Firefoxwzexefile.vbs  

0b7f2e1c70bb997a5b6f1b0072c23679


Generic Malware Antivirus PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 3 1 8.4 2 ZeroCERT

9035 2023-11-02 10:30 Limebase.txt.exe  

22df9b6c3a71b8dbbdef5d5bd09e445f


UPX PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee Windows ComputerName DNS Cryptographic key crashed 		1 3 1 6.2 54 ZeroCERT

9036 2023-11-02 10:30 PuttyVbs-File0008765.vbs  

bb57207b20e143102f4256a708c71fd7


Generic Malware Antivirus PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 3 1 9.0 1 ZeroCERT

9037 2023-11-02 10:31 Vbs-File0008765putty.vbs  

359f4448782994c2b42aa0027ee021db


LokiBot Generic Malware Antivirus Socket ScreenShot PWS DNS AntiDebug AntiVM PowerShell FTP Client Info Stealer VirusTotal Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process malicious URLs WriteConsoleW Tofsee Windows ComputerName DNS Cryptographic key Software 		2 3 1 1 16.2 M 17 ZeroCERT

9038 2023-11-02 14:36 File.rar  

c18fbc972354abb0fd945ffccbb93ad3


PrivateLoader Escalate priviledges PWS KeyLogger AntiDebug AntiVM RedLine Malware download Malware c&c Microsoft suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files ICMP traffic unpack itself suspicious TLD IP Check PrivateLoader Tofsee Stealc Stealer Windows RisePro DNS 		40 62 34 8 7.0 M ZeroCERT

9039 2023-11-03 12:06 yulzx.exe  

b38dc9fdc7cb07f8ccd59ed9f1c03b69


LokiBot PWS SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer Email Client Info Stealer PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Browser Email ComputerName DNS Software crashed 		4 5 10.6 ZeroCERT

9040 2023-11-03 12:23 lom30.exe  

701ea7974b3f98830d636e93f836cfce


Amadey RedLine stealer Gen1 Emotet SmokeLoader Generic Malware Malicious Library UPX Antivirus Malicious Packer .NET framework(MSIL) Confuser .NET Admin Tool (Sysinternals etc ...) PWS ScreenShot Javascript_Blob AntiDebug AntiVM PE File PE32 Browser Info Stealer RedLine Malware download Amadey FTP Client Info Stealer Email Client Info Stealer Malware powershell Microsoft AutoRuns PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Disables Windows Security Collect installed applications powershell.exe wrote suspicious process AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check Tofsee Stealc Stealer Windows Update Exploit Browser Email ComputerName Remote Code Execution DNS Cryptographic key Software crashed Downloader 		99 43 19 27.4 M ZeroCERT

9041 2023-11-03 12:33 gRjYtXOvXOp.vbs  

f11a5ac557578737ef391c0b6ad4b333

wscript.exe payload download Tofsee crashed 		2 3 1.4 ZeroCERT

9042 2023-11-03 12:33 JEQnFjDSDMbRhl.vbs  

3acbcc1e0e59f0fa67e43c7e33a413c0

wscript.exe payload download Tofsee crashed 		2 3 1.4 ZeroCERT

9043 2023-11-03 15:54 1.exe  

1819332f150048eed72a2d891390dad1


Emotet Generic Malware Malicious Library UPX Malicious Packer PE File PE32 OS Processor Check DLL PE64 DllRegisterServer dll MSOffice File CAB Malware AutoRuns PDB suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files ICMP traffic unpack itself Windows utilities Check virtual network interfaces sandbox evasion Tofsee Ransomware Windows Google ComputerName Remote Code Execution DNS 		4 27 4 8.4 ZeroCERT

9044 2023-11-03 17:38 setup.rar  

d7b36686b22ecf8da8c34bf6d55ad331


Escalate priviledges PWS KeyLogger AntiDebug AntiVM Malware download Malware suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself PrivateLoader Tofsee DNS 		2 7 2 1 4.8 M ZeroCERT

9045 2023-11-03 18:11 cuzineeeeVBS_FILE.vbs  

6e50413706aceea089f8a8c4f2d44ec6


Generic Malware Antivirus PowerShell powershell suspicious privilege Check memory Checks debugger buffers extracted wscript.exe payload download Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		4 5 2 8.6 ZeroCERT

keyword