popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
1 2025-04-10 01:45 CarZ.exe  

33a2df57afcf0e90607ab3a604ab6939


Emotet Generic Malware Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware RWX flags setting 		1.4 7 guest

2 2025-04-09 20:47 Win11_24H2_English_x64.iso.3af...  

96beac72b4b58aecf6ea792711e263fc


AntiDebug AntiVM Email Client Info Stealer suspicious privilege Checks debugger Creates shortcut unpack itself installed browsers check Browser Email ComputerName 		3.4 guest

3 2025-04-09 16:50 2.wsf  

70e7a78686df6013aa8fabe63d2827b8


Generic Malware Antivirus AntiDebug AntiVM PNG Format MSOffice File JPEG Format VirusTotal Malware powershell suspicious privilege Code Injection Check memory Checks debugger Creates shortcut RWX flags setting unpack itself Windows utilities suspicious process AntiVM_Disk WriteConsoleW VM Disk Size Check Tofsee Windows ComputerName Cloudflare DNS Cryptographic key 		5 6 4 1 8.4 M 4 ZeroCERT

4 2025-04-09 13:46 gs.exe  

899e8f69a4b5e13049ab33b475ca98fa


Generic Malware UPX PE File PE32 OS Processor Check VirusTotal Malware 		1.6 M 48 ZeroCERT

5 2025-04-09 13:43 gutschein20.pdf  

287484957ea3b13e976d983365a7eee3


PDF 		ZeroCERT

6 2025-04-09 11:14 weneedbestthingswithgreatnewse...  

69a8457d73f1171b37da05e4c9869b05


Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Sniff Audio HTTP DNS Code injection Internet API persistence FTP KeyLogger P2P AntiDebug AntiVM VBScript Code Injection Check memory wscript.exe payload download Creates executable files suspicious process malicious URLs Tofsee DNS Dropper 		1 2 4 10.0 ZeroCERT

7 2025-04-09 11:10 new_image.jpg.dll  

8e7ded0089b6adfdd951b5d8175078f7


North Korea Generic Malware Malicious Library Malicious Packer UPX PE File DLL PE32 OS Processor Check .NET DLL VirusTotal Malware 		1.2 47 ZeroCERT

8 2025-04-09 10:42 greatnicegirlbackontheearthwit...  

efb65d67dc764eb12f65fc12dd8eb542


Generic Malware Antivirus Downloader AntiDebug AntiVM PE File DLL PE32 .NET DLL VirusTotal Malware VBScript powershell suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger heapspray wscript.exe payload download Creates shortcut Creates executable files RWX flags setting unpack itself Windows utilities powershell.exe wrote suspicious process AppData folder Tofsee Windows ComputerName DNS Cryptographic key Dropper 		2 3 4 10.0 13 ZeroCERT

9 2025-04-09 10:32 new_image.jpg.dll  

8e7ded0089b6adfdd951b5d8175078f7


North Korea Generic Malware Malicious Library Malicious Packer UPX PE File DLL PE32 OS Processor Check .NET DLL VirusTotal Malware 		1.2 47 ZeroCERT

10 2025-04-09 10:29 eneedbestthingswithgreatnewsev...  

30cece81aea584416692dd3eeec38453


MS_RTF_Obfuscation_Objects RTF File doc Vulnerability VirusTotal Malware Malicious Traffic buffers extracted exploit crash unpack itself Tofsee Exploit DNS crashed 		1 3 8 5.0 M 36 ZeroCERT

11 2025-04-09 10:27 tfqHNUJxJdFp8T0.exe  

00d9a8bdd9e0f92deddb0732da1714fc


Loki LokiBot Malicious Library Socket PWS DNS AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName DNS Software 		1 1 7 1 13.0 M 29 ZeroCERT

12 2025-04-09 10:26 Microsoft-Order.pdf.lnk  

8b68173e0f5484fc965d50770f71a08d


Generic Malware Antivirus AntiDebug AntiVM Lnk Format GIF Format VirusTotal Malware powershell suspicious privilege Code Injection Check memory Checks debugger Creates shortcut unpack itself powershell.exe wrote suspicious process Windows ComputerName Cryptographic key 		5.0 31 ZeroCERT

13 2025-04-09 10:25 ori.js  

01e995c96291c13d4ec3a08ebcdca4f6


AgentTesla Hide_EXE Malicious Library Malicious Packer UPX PE File OS Memory Check .NET EXE PE32 OS Processor Check OS Name Check Browser Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Check memory Checks debugger Creates executable files unpack itself Check virtual network interfaces AppData folder Tofsee Windows Gmail Browser Email ComputerName crashed keylogger 		2 2 10.0 M 30 ZeroCERT

14 2025-04-09 10:23 mgh.js  

455952e05525f25fbe0c893828d2a29f


Suspicious_Script_Bin Hide_EXE PE File PE32 Malware download Wshrat NetWireRC VirusTotal Malware VBScript AutoRuns WMI wscript.exe payload download Creates executable files unpack itself AppData folder AntiVM_Disk VM Disk Size Check Windows Houdini ComputerName Dropper 		1 2 4 10.0 22 ZeroCERT

15 2025-04-09 10:02 Artikel-4.png.lnk  

91a93c5a882ec9d46934f5f00bedd453


Generic Malware Downloader Antivirus Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Sniff Audio HTTP DNS Code injection Internet API FTP KeyLogger P2P AntiDebug AntiVM Lnk Format GIF Format PNG Format MSOffice File VirusTotal Malware powershell suspicious privilege Code Injection Check memory Checks debugger Creates shortcut RWX flags setting unpack itself Windows utilities Check virtual network interfaces suspicious process AntiVM_Disk WriteConsoleW VM Disk Size Check Tofsee Windows ComputerName Cloudflare DNS Cryptographic key 		6 5 4 9.4 2 ZeroCERT

keyword