popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
151 2024-09-13 09:36 account.aspx  

e73d75e539b7e9acf48683fc6b2cb4ab


Generic Malware Malicious Library UPX PE File DLL PE32 OS Processor Check VirusTotal Malware Checks debugger unpack itself Tofsee crashed 		2 2 1.6 M 9 ZeroCERT

152 2024-09-13 09:35 66e2cce3eae78_Pink_0x000872A65...  

00465490b449aa57d0e1ac7cba51af72


Generic Malware Malicious Library UPX PE File PE64 OS Processor Check crashed 		0.2 M ZeroCERT

153 2024-09-13 09:34 Graphic.bat  

c64838099d6a9eeffb87c15a15c96892


Generic Malware Downloader Antivirus Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Sniff Audio HTTP DNS Code injection Internet API FTP KeyLogger P2P AntiDebug AntiVM VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		4.6 3 ZeroCERT

154 2024-09-13 09:33 1.exe  

95bb292a795c5c517e405f698fbd3fed


Generic Malware Admin Tool (Sysinternals etc ...) UPX PE File PE32 DLL Malware download VirusTotal Malware Malicious Traffic AppData folder suspicious TLD CryptBot DNS 		1 2 3 3.2 M 29 ZeroCERT

155 2024-09-13 09:33 useraccount.aspx  

5fb15984b6312b2de010679b77c2e3b4


Generic Malware Malicious Library UPX PE File DLL PE32 OS Processor Check VirusTotal Malware PDB Check memory Checks debugger unpack itself crashed 		2.6 M 34 ZeroCERT

156 2024-09-13 09:33 66e316a0373e2_crypted.exe#1  

11506bb939332f58920d0a3c8ad1c5c2


RedLine stealer Antivirus ScreenShot PWS AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware Microsoft PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted WMI unpack itself Collect installed applications installed browsers check Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 5 14.2 M 44 ZeroCERT

157 2024-09-13 09:33 frownked2.1.exe  

ab7caff90a8347576988a104a322a916


Generic Malware Malicious Library UPX PE File PE32 OS Processor Check DLL Browser Info Stealer VirusTotal Malware Check memory Checks debugger buffers extracted Creates executable files unpack itself AppData folder suspicious TLD Browser DNS 		18 16 3 7.6 36 ZeroCERT

158 2024-09-13 09:31 seennewthingsentireworldseethe...  

e586cee8737a0875953be251a6b08be7


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		2 1 7.6 M 5 ZeroCERT

159 2024-09-13 09:29 greennicepicturegetmebackwithy...  

fa071ef25a60e1eaea926347f324dd13


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		2 1 7.6 7 ZeroCERT

160 2024-09-13 09:28 66e30a27e0efe_tmpD.exe  

af91873c641aab500eba3a3ad6f17b74


Generic Malware Malicious Library UPX PE File PE64 OS Processor Check VirusTotal Malware PDB MachineGuid Malicious Traffic Check memory Creates executable files RWX flags setting Windows utilities suspicious process Tofsee Windows Remote Code Execution 		1 2 1 8.4 38 ZeroCERT

161 2024-09-13 09:27 setup3.exe  

2ff26b3561bd1921720cc328a0199d4c


Malicious Library UPX PE File PE32 OS Processor Check unpack itself 		1.2 ZeroCERT

162 2024-09-13 09:27 beautifuldaysbeautyofthedayher...  

68862cb17d442aee2608c7216f929e37


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		2 1 7.6 7 ZeroCERT

163 2024-09-13 09:26 useraccount.aspx  

9b73c82d8f0e6cae3bce7b2fc98b3383


Generic Malware Malicious Library UPX PE File DLL PE32 OS Processor Check VirusTotal Malware Checks debugger unpack itself Tofsee crashed 		4 2 2.4 40 ZeroCERT

164 2024-09-13 09:26 gooddaycomingwithgoodthingsent...  

4dada1c43d8218485ddb6a4ae1fd8fa1


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware Malicious Traffic RWX flags setting exploit crash Tofsee Exploit DNS crashed 		1 3 1 4.6 33 ZeroCERT

165 2024-09-13 09:24 vstdlib_s.exe  

3a7af8198a80e2c90488ac8353a5cbd1


North Korea task schedule Downloader Malicious Library .NET framework(MSIL) ScreenShot PWS DNS KeyLogger Create Service Socket DGA Http API Escalate priviledges Steal credential Sniff Audio HTTP Code injection Internet API FTP P2P AntiDebug AntiVM PE File VirusTotal Malware PDB Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities WriteConsoleW Windows ComputerName Cryptographic key 		7.8 49 ZeroCERT

keyword