popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
10051 2024-06-05 09:19 obiz.scr  

3a050f5830ff95d1858e94f231f7ea4b


AgentTesla Generic Malware Malicious Library .NET framework(MSIL) Antivirus PWS SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key Software crashed keylogger 		1 2 3 14.4 39 ZeroCERT

10052 2024-06-05 09:23 lionsarekingofthejunglewhichcr...  

96094535fe4ae7ea46eb3df5e0b45231


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware Malicious Traffic RWX flags setting exploit crash Tofsee Exploit DNS crashed 		2 3 3 1 4.2 M 39 ZeroCERT

10053 2024-06-05 23:26 ICARUS.Setup.exe  

225fcf1e03e30b492bd0aef35969329b


Emotet Gen1 NSIS Generic Malware Malicious Library UPX Malicious Packer Anti_VM Javascript_Blob PE File PE32 DLL PE64 OS Processor Check DllRegisterServer dll BMP Format Lnk Format GIF Format icon VirusTotal Malware AutoRuns suspicious privilege Check memory Checks debugger Creates shortcut Creates executable files ICMP traffic unpack itself Windows utilities Auto service Check virtual network interfaces AppData folder AntiVM_Disk sandbox evasion VM Disk Size Check Tofsee Ransomware GameoverP2P Interception Zeus Windows ComputerName Trojan Banking 		3 9 2 13.0 1 guest

10054 2024-06-06 14:27 SetupTools.exe  

5ec12277c0679d4761d265dd821f674f


Generic Malware Malicious Library UPX Antivirus PE File PE32 .NET EXE OS Processor Check VirusTotal Malware Cryptocurrency wallets Cryptocurrency powershell Telegram AutoRuns suspicious privilege MachineGuid Check memory Checks debugger Creates shortcut Creates executable files unpack itself Windows utilities powershell.exe wrote Check virtual network interfaces suspicious process AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check Tofsee Ransomware Windows ComputerName DNS Cryptographic key 		2 4 11.4 56 guest

10055 2024-06-07 09:33 lenin.exe  

fb2f90584265d465b4046c9a4e7c9bfa


UPX PE File PE32 ZIP Format Browser Info Stealer Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency AutoRuns MachineGuid Check memory Checks debugger buffers extracted unpack itself Windows utilities Checks Bios Collect installed applications Detects VMWare suspicious process AntiVM_Disk sandbox evasion WriteConsoleW VMware anti-virtualization IP Check VM Disk Size Check installed browsers check Tofsee Ransomware Windows Browser RisePro Email ComputerName DNS Software crashed 		1 5 9 16.0 M 38 ZeroCERT

10056 2024-06-07 09:33 john.doc  

da2543ed3a6567896c950bfeb597814b


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware exploit crash unpack itself suspicious TLD Tofsee Exploit DNS crashed 		25 25 2 4.4 M 33 ZeroCERT

10057 2024-06-07 09:36 lionsarekingofthejunglewhotrul...  

c5af2617421f885a9772a4b51b80cb2a


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware Malicious Traffic exploit crash unpack itself Tofsee Exploit DNS crashed 		2 3 2 4.2 38 ZeroCERT

10058 2024-06-07 09:39 IGCC.exe  

29b2b081df5861fed9651766f37b7738


Process Kill Generic Malware Suspicious_Script_Bin Malicious Library FindFirstVolume CryptGenKey UPX PE File Device_File_Check PE32 OS Processor Check Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Check memory Checks debugger buffers extracted Creates executable files unpack itself Check virtual network interfaces AppData folder IP Check Tofsee Windows Browser Email ComputerName DNS Software crashed 		1 2 3 9.6 28 ZeroCERT

10059 2024-06-07 09:41 DZP.exe  

8cc057c58bd59166922b1a6fbf9a0ec7


Process Kill Generic Malware Suspicious_Script_Bin Malicious Library FindFirstVolume CryptGenKey UPX PE File Device_File_Check PE32 OS Processor Check Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key Software crashed 		1 2 3 7.4 23 ZeroCERT

10060 2024-06-07 09:43 lsass.exe  

e0354350b177887076f4c89567e0af8d


PE File .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee Windows Cryptographic key 		2 3 4.4 M 50 ZeroCERT

10061 2024-06-07 09:43 lionsarekingandtheyalwaysliket...  

f6d2ec2d490d72ee7ba25907db5da25a


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware Malicious Traffic exploit crash unpack itself Tofsee Exploit DNS crashed 		2 3 2 4.2 M 37 ZeroCERT

10062 2024-06-07 09:47 interestedanglesayingsheismost...  

2ae556f4c5d9590b352ad8d26fdee537


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic buffers extracted RWX flags setting exploit crash IP Check Tofsee Windows Exploit DNS crashed 		2 3 8 5.0 M 37 ZeroCERT

10063 2024-06-07 09:47 lionsarekingandudfdidthekingof...  

80190d1b737a846f31133525d9577514


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic exploit crash unpack itself IP Check Tofsee Windows Exploit DNS crashed 		2 3 8 4.6 M 37 ZeroCERT

10064 2024-06-07 09:49 lionsarekingogthejunglewhorule...  

56b4ddf6c247124f9bc633b06b169a84


MS_RTF_Obfuscation_Objects RTF File doc Malware download Malware Malicious Traffic exploit crash unpack itself Tofsee Windows Exploit DNS crashed 		1 3 9 3.2 M ZeroCERT

10065 2024-06-07 09:51 liitletigersearchingforfoodwhi...  

077e4cfa6534a69f9e8de8e5b83ba08c


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware Malicious Traffic buffers extracted exploit crash unpack itself Tofsee Exploit DNS crashed 		2 4 2 4.6 M 37 ZeroCERT

keyword