popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
10216 2024-07-08 17:11 newbuild07.exe  

9adc621f718c8e283e2b946acf914322


RedLine stealer RedlineStealer Generic Malware Malicious Library .NET framework(MSIL) UPX Malicious Packer Anti_VM PE File .NET EXE PE32 OS Processor Check PE64 DllRegisterServer dll Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware Microsoft Buffer PE suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		2 5 7 9.8 57 ZeroCERT

10217 2024-07-09 10:10 file  

4808c478a3cf9d6fae1e1dcb10f4be33


Javascript_Blob AntiDebug AntiVM ftp MSOffice File Code Injection Creates executable files ICMP traffic RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		5 19 2 6.6 M ZeroCERT

10218 2024-07-09 14:18 Update_old.js  

affe7c07da3776a191c69b73e50d491a

VBScript wscript.exe payload download Tofsee crashed Dropper 		2 2 10.0 guest

10219 2024-07-09 21:31 https://l.facebook.com/l.php?u...  

2bec4686337f2e399b71386575535145


Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Hijack Network Sniff Audio HTTP DNS Code injection Internet API persistence FTP KeyLogger P2P AntiDebug AntiVM PNG Format MSOffice File icon Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		12 10 2 4.2 guest

10220 2024-07-09 21:37 https://www.facebook.com/38022...  

1248cb643e2592a6bcce60711dc10617


Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Hijack Network Sniff Audio HTTP DNS Code injection Internet API persistence FTP KeyLogger P2P AntiDebug AntiVM PNG Format icon MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		10 8 2 4.2 guest

10221 2024-07-09 21:37 https://l.facebook.com/l.php?u...  

c896711e056cb6f0df71a7c8e0fac71c


Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Hijack Network Sniff Audio HTTP DNS Code injection Internet API persistence FTP KeyLogger P2P AntiDebug AntiVM PNG Format MSOffice File icon Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		13 10 2 4.8 guest

10222 2024-07-10 09:52 Update.js  

94a69d2789ce8db937bd23160c7cf57b

VBScript wscript.exe payload download Tofsee crashed Dropper 		1 2 2 10.0 guest

10223 2024-07-10 09:52 Update2.js  

1d07102e4ad699b952201104aca88770

VBScript wscript.exe payload download unpack itself Tofsee crashed Dropper 		1 2 2 10.0 guest

10224 2024-07-10 13:39 sostener.vbs  

af7ba7e4a9c914e8497936eb7b6ae725


Generic Malware Antivirus PowerShell VBScript powershell suspicious privilege Check memory Checks debugger wscript.exe payload download Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key Dropper 		2 4 1 10.0 ZeroCERT

10225 2024-07-10 13:43 mg.vbs  

8df76af54c38d5d4c2cd9f6d18eedf92


Generic Malware Antivirus VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		4 3 8.2 19 ZeroCERT

10226 2024-07-10 13:45 wh.vbs  

23454878fb50859c4849ac2b6e256789


Generic Malware Antivirus VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		4 3 8.4 22 ZeroCERT

10227 2024-07-11 09:18 gh.gh.gh.ghghghgh.doc  

feb6e59fff619a84e6e391a4c95a6650


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic exploit crash unpack itself Tofsee Exploit DNS crashed 		3 4 3 4.8 M 40 ZeroCERT

10228 2024-07-11 09:26 builds.exe  

4022bc5f1dcdf1a90d117aa67917cc41


Generic Malware Malicious Library Antivirus UPX AntiDebug AntiVM PE File PE32 OS Processor Check FTP Client Info Stealer VirusTotal Malware Telegram MachineGuid Code Injection Malicious Traffic Check memory WMI unpack itself Windows utilities Collect installed applications suspicious process AppData folder sandbox evasion WriteConsoleW anti-virtualization installed browsers check Tofsee Windows Browser ComputerName DNS Software 		2 5 3 11.6 M 45 ZeroCERT

10229 2024-07-11 13:52 Update.js  

20cbccdda0677598a1c4c04c6c177a19

VBScript wscript.exe payload download Tofsee crashed Dropper 		1 2 2 10.0 guest

10230 2024-07-11 18:12 Books_A0UJKO.pdf.url  

461b3386de6d58f773233d9d5536672e


AntiDebug AntiVM PNG Format MSOffice File JPEG Format VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		2 2 2 1 4.6 6 ZeroCERT

keyword