popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
14986 2023-03-09 17:36 bcd4b93a1a85c5ba45a4f7e5980db1...  

b5e1e946ebad560b876703e9675ca326


Emotet Gen2 UPX Malicious Library Malicious Packer OS Processor Check PE32 PE File DLL VirusTotal Malware Check memory buffers extracted WMI Creates executable files AppData folder Tofsee ComputerName crashed 		3 2 1 2 5.2 M 43 ZeroCERT

14987 2023-03-09 17:34 bcd4b93a1a85c5ba45a4f7e5980db1...  

bf48a5cd9169a5826521a8a33b21adee


Emotet Gen2 UPX Malicious Library Malicious Packer OS Processor Check PE32 PE File DLL VirusTotal Malware Check memory buffers extracted WMI Creates executable files AppData folder Tofsee ComputerName crashed 		3 2 1 1 5.2 M 42 ZeroCERT

14988 2023-03-09 17:33 CL.exe  

ed2a38021d3dcadca60d08163d1c7a31


RAT NPKI UPX OS Processor Check .NET EXE PE32 PE File VirusTotal Malware Cryptocurrency wallets Cryptocurrency AutoRuns suspicious privilege MachineGuid Check memory Checks debugger Creates executable files unpack itself Windows utilities suspicious process AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check Ransomware Windows ComputerName 		9.0 M 37 ZeroCERT

14989 2023-03-09 17:12 i3YFqH6uMO3o8pg2Cbx.zip  

5a72267343811d8fe7d72c1f96bac927

VirusTotal Malware Report ICMP traffic DNS 		11 5 3.4 M 6 ZeroCERT

14990 2023-03-09 15:38 8f803ff90bee714e5d243cc3b3ad70...  

1e16074ff6afe068fd5f852ff66eb188


Gen1 UPX Malicious Packer PE File PE64 Remote Code Execution 		0.2 ZeroCERT

14991 2023-03-09 15:38 c95d3e98bd8a782a492370ad69bf82...  

e95942eabc6c7e41201180d1a2219673


Gen1 UPX Malicious Packer PE32 PE File Remote Code Execution 		0.2 ZeroCERT

14992 2023-03-09 15:38 7f55dece1d491b5fd45817b01b4266...  

d649e0919963e72952b7337c45d34d55


Gen1 UPX Malicious Packer PE32 PE File Check memory Remote Code Execution 		0.4 ZeroCERT

14993 2023-03-09 14:47 Fix.exe  

d543b38b01f033815b048cd17cd658dd


UPX Malicious Library Admin Tool (Sysinternals etc ...) AntiDebug AntiVM OS Processor Check PE File PE64 JPEG Format MSOffice File VirusTotal Malware PDB Code Injection Check memory buffers extracted Creates executable files RWX flags setting exploit crash unpack itself Windows utilities suspicious process WriteConsoleW Tofsee Windows Exploit Remote Code Execution DNS crashed 		44 26 1 6.4 2 guest

14994 2023-03-09 13:57 INVOICE 589 03_23.doc  

b59808aba76dd0095aa06133382de9ed


Generic Malware VBA_macro Downloader Create Service DGA Socket ScreenShot DNS Internet API Code injection PWS[m] Hijack Network Sniff Audio HTTP Steal credential KeyLogger P2P Escalate priviledges persistence FTP Http API AntiDebug AntiVM MSOffice File Report unpack itself suspicious process malicious URLs sandbox evasion Tofsee ComputerName DNS 		1 11 6 4.8 27 ZeroCERT

14995 2023-03-09 13:40 FACT.724346.msi  

25b49a59b55af3e0c4082c3ebe4e01ac


Gen2 Generic Malware Malicious Library OS Processor Check CAB MSOffice File VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself AntiVM_Disk IP Check VM Disk Size Check Tofsee ComputerName 		2 2 2.6 7 ZeroCERT

14996 2023-03-09 13:29 VESSEL PARTICULARS.exe  

24f2bf961c5ebc9007ba75b6f029388b


PWS .NET framework .NET EXE PE32 PE File VirusTotal Malware PDB Check memory Checks debugger unpack itself 		2.4 30 ZeroCERT

14997 2023-03-09 11:15 5814 N 17ST.doc  

d44eab3f49c70836c4f7b9524a343f31


emotet Generic Malware VBA_macro MSOffice File VirusTotal Malware Malicious Traffic exploit crash unpack itself Tofsee Exploit crashed 		3 15 3 1 3.8 45 ZeroCERT

14998 2023-03-09 11:10 azienda.url  

c57ce09111a84d1110b24a8505ff5804


AntiDebug AntiVM MSOffice File VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		1 1 2 5.8 3 ZeroCERT

14999 2023-03-09 10:49 htatest1.hta.html  

39d9214d90175864588feedc9e27b5b0


Generic Malware Antivirus AntiDebug AntiVM PowerShell MSOffice File VirusTotal Malware powershell suspicious privilege MachineGuid Code Injection Check memory Checks debugger Creates shortcut exploit crash unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW Tofsee Windows Exploit ComputerName DNS Cryptographic key crashed 		2 9.0 9 ZeroCERT

15000 2023-03-09 10:40 DefendUpdate.exe  

bbabecb60a7d91dc4b01da5359280b92


UPX PE File PE64 VirusTotal Malware crashed 		1.8 M 21 r0d

keyword