popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
9241 2024-01-16 10:23 browserforfindvideoswhichmakey...  

cac7fbeb22725d491739d21ce51d7cf2


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware VBScript Malicious Traffic buffers extracted exploit crash unpack itself Tofsee Exploit DNS crashed 		2 5 3 4.6 M 33 ZeroCERT

9242 2024-01-17 08:10 rty45.exe  

02550318e655f52fa990158a1c709cef


Malicious Packer PE File PE64 VirusTotal Malware PDB MachineGuid unpack itself Check virtual network interfaces Tofsee Remote Code Execution DNS 		2 4 1 4.2 41 ZeroCERT

9243 2024-01-17 08:14 latestrocki.exe  

51a977874c9b190837bc2658396d4dfe


Generic Malware NSIS Malicious Library UPX Antivirus Malicious Packer Admin Tool (Sysinternals etc ...) Anti_VM PE32 PE File .NET EXE PNG Format OS Processor Check PE64 ZIP Format MZP Format JPEG Format BMP Format CHM Format DLL icon CAB MSOffice File W VirusTotal Malware AutoRuns MachineGuid Malicious Traffic Check memory Checks debugger Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check Tofsee Ransomware Windows ComputerName DNS crashed 		4 5 5 2 13.6 M 48 ZeroCERT

9244 2024-01-17 08:14 rty27.exe  

34a7dbf9c978714dd0679079c5445a10


Malicious Packer PE File PE64 VirusTotal Malware PDB MachineGuid unpack itself Check virtual network interfaces Tofsee Remote Code Execution 		2 3 1 3.4 35 ZeroCERT

9245 2024-01-17 08:16 conhost.exe  

be3c89dc0d88fddd3289ac9e6e72360a


AgentTesla .NET framework(MSIL) PWS SMTP KeyLogger AntiDebug AntiVM PE32 PE File .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Browser Email ComputerName DNS Software crashed 		2 4 12.0 M 44 ZeroCERT

9246 2024-01-17 08:23 conhost.exe  

431b955c96a65b12587361ef1e961c2b


AgentTesla Generic Malware .NET framework(MSIL) Antivirus PWS SMTP KeyLogger AntiDebug AntiVM PE32 PE File .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key Software crashed 		2 4 15.0 M 32 ZeroCERT

9247 2024-01-17 08:24 liva.exe  

fb987f700ecaba1d1bced04a45c572e8


Generic Malware EnigmaProtector Malicious Library Malicious Packer UPX Code injection AntiDebug AntiVM PE32 PE File OS Processor Check MSOffice File PNG Format ZIP Format Browser Info Stealer Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency AutoRuns MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files RWX flags setting exploit crash unpack itself Windows utilities suspicious process AppData folder malicious URLs AntiVM_Disk sandbox evasion WriteConsoleW anti-virtualization IP Check VM Disk Size Check installed browsers check Tofsee Ransomware Windows Exploit Browser RisePro Email ComputerName DNS Software crashed Downloader 		20 16 12 19.6 M 45 ZeroCERT

9248 2024-01-17 14:21 msworldwidenamespreadingaround...  

34ac6f63ff7a32a51e98db3c21fd7b1c


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic buffers extracted RWX flags setting exploit crash IP Check Tofsee Windows Exploit DNS crashed 		1 3 9 5.0 M 31 ZeroCERT

9249 2024-01-17 14:25 beautifulhjcreversehissettings...  

c0b8ac37280a20cd4a86808102cc3eb2


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic buffers extracted RWX flags setting exploit crash IP Check Tofsee Windows Exploit DNS crashed 		1 3 9 5.0 M 35 ZeroCERT

9250 2024-01-17 15:19 go.exe  

5d01c27e7807d0c5d9d0076d6a803b55


RedLine stealer Generic Malware Malicious Library UPX Code injection Anti_VM AntiDebug AntiVM PE32 PE File OS Processor Check PNG Format MSOffice File Browser Info Stealer Malware MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files RWX flags setting exploit crash unpack itself Windows utilities malicious URLs installed browsers check Tofsee Ransomware Windows Exploit Browser ComputerName DNS crashed 		17 10 1 12.2 ZeroCERT

9251 2024-01-18 07:57 conhost.exe  

7547a8f171604d74d6436f7983c7a91d


AgentTesla PWS SMTP KeyLogger AntiDebug AntiVM PE32 PE File .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS Software crashed keylogger 		2 4 12.0 31 ZeroCERT

9252 2024-01-18 18:52 JAN-17-2024-765FYDX.url  

0a5062edfd1d56c273a2fa19c695a6a8


AntiDebug AntiVM URL Format MSOffice File VirusTotal Malware Code Injection Malicious Traffic RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		3 1 2 4.6 5 ZeroCERT

9253 2024-01-18 18:54 microbiolagicalthingshappenein...  

6a0bc469af442ab4df602ad5af219b02


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic buffers extracted exploit crash unpack itself IP Check Tofsee Windows Exploit DNS crashed 		1 3 9 5.0 M 35 ZeroCERT

9254 2024-01-18 18:56 microbiolagicalthingshappenein...  

adf6b4115caf260b8f57c1fd9bb618ec


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic buffers extracted RWX flags setting exploit crash IP Check Tofsee Windows Exploit DNS crashed 		1 3 9 5.0 M 34 ZeroCERT

9255 2024-01-19 07:59 rty45.exe  

bfa0a2b457d28d8805a0658b7498c639


Malicious Library UPX PE File PE64 VirusTotal Malware PDB MachineGuid unpack itself Check virtual network interfaces Tofsee Remote Code Execution 		2 3 1 3.4 M 30 ZeroCERT

keyword