Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
1636 2025-03-21 10:08 update.exe  

369fb99dbae23164166f27bf37e6fef2


Generic Malware Malicious Library Malicious Packer UPX PE File PE64 OS Processor Check VirusTotal Malware PDB
1.4 43 ZeroCERT

1637 2025-03-21 09:30 casos.exe  

7e45d87c02e2f5736fb0bf91f0b5b71f


Formbook Process Kill Generic Malware Malicious Library FindFirstVolume CryptGenKey Browser Info Stealer VirusTotal Malware Checks debugger buffers extracted Creates executable files unpack itself AppData folder Browser
21 1 20 6.4 54 ZeroCERT

1638 2025-03-21 09:24 sweetbabaygirlwithmybestthinki...  

7c7b35dec47671230514dc3f691dd96d


Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Sniff Audio HTTP DNS Code injection Internet API FTP KeyLogger P2P AntiDebug AntiVM VirusTotal Malware VBScript Code Injection Check memory wscript.exe payload download Creates executable files unpack itself suspicious process Tofsee DNS Dropper
2 4 10.0 20 ZeroCERT

1639 2025-03-21 09:22 nicegirlwithbeautifulsmileande...  

67d981098720f9d22af464722e7c58bc


MS_RTF_Obfuscation_Objects RTF File doc Vulnerability VirusTotal Malware Malicious Traffic buffers extracted exploit crash unpack itself Tofsee Exploit DNS crashed
1 4 8 5.0 37 ZeroCERT

1640 2025-03-21 09:21 hemybestgirlformybestkisseseve...  

4ca83cd1d5efcde0793d1d5ea51d0c62


Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Sniff Audio HTTP DNS Code injection Internet API persistence FTP KeyLogger P2P AntiDebug AntiVM VirusTotal Malware VBScript Code Injection Check memory wscript.exe payload download Creates executable files suspicious process malicious URLs Tofsee DNS Dropper
2 4 10.0 19 ZeroCERT

1641 2025-03-21 09:21 vsse.exe  

cd00eab486d24844b6ae7933c4514271


Formbook Process Kill Generic Malware Malicious Library FindFirstVolume CryptGenKey UPX PE File Device_File_Check PE32 OS Process Browser Info Stealer VirusTotal Malware Checks debugger buffers extracted Creates executable files unpack itself AppData folder Browser
31 16 15 7.2 51 ZeroCERT

1642 2025-03-21 09:21 ssnicegirlwecomebackwithnicepe...  

deb8539ff8039481417fb7b6c81d821f


Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Sniff Audio HTTP DNS Code injection Internet API FTP KeyLogger P2P AntiDebug AntiVM VirusTotal Malware VBScript Code Injection Check memory wscript.exe payload download Creates executable files suspicious process Tofsee DNS Dropper
3 4 10.0 20 ZeroCERT

1643 2025-03-21 09:20 vfc.exe  

907d825de589180257b3cdd1515c7002


Formbook Process Kill Generic Malware Malicious Library FindFirstVolume CryptGenKey Browser Info Stealer VirusTotal Malware Checks debugger buffers extracted Creates executable files unpack itself AppData folder Browser
20 1 20 6.4 44 ZeroCERT

1644 2025-03-21 09:20 konlother2.1.exe  

f704529fe56523850e01f960da08248d


Process Kill Generic Malware Malicious Library FindFirstVolume CryptGenKey UPX PE File Device_File_Check PE32 OS Processor Check FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Checks debugger unpack itself DNS
3 9 1 5.0 43 ZeroCERT

1645 2025-03-21 09:18 cosses.exe  

c338c9cdccb21a6f023987865b4a6269


Formbook Process Kill Generic Malware Malicious Library FindFirstVolume CryptGenKey Browser Info Stealer VirusTotal Malware Checks debugger buffers extracted Creates executable files unpack itself AppData folder Browser
18 1 20 5.8 53 ZeroCERT

1646 2025-03-21 09:17 iaminthebestdutyservicewithgre...  

f416bdb17daf4b30b55b760b1d4884db


Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Sniff Audio HTTP DNS Code injection Internet API FTP KeyLogger P2P AntiDebug AntiVM VirusTotal Malware VBScript Code Injection Check memory wscript.exe payload download Creates executable files suspicious process Tofsee DNS Dropper
2 4 10.0 14 ZeroCERT

1647 2025-03-21 09:11 nicepeoplesgoodpeoplesgreatski...  

7ac028158d3b52f5a3de282ac70e7367


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware Malicious Traffic RWX flags setting exploit crash Tofsee Exploit DNS crashed
1 3 2 4.6 36 ZeroCERT

1648 2025-03-21 09:11 oybestgirlformybestkisseseverm...  

3c78915b2301c96a7384d3d03c00da3b


MS_RTF_Obfuscation_Objects RTF File doc Vulnerability VirusTotal Malware Malicious Traffic buffers extracted exploit crash unpack itself Tofsee Exploit DNS crashed
1 3 8 5.0 38 ZeroCERT

1649 2025-03-21 09:09 cvvs.exe  

17ffd8a0d8bf24a59671db67e0910e80


Admin Tool (Sysinternals etc ...) Malicious Library UPX PE File PE32 MZP Format VirusTotal Malware Code Injection Check memory Checks debugger Creates executable files RWX flags setting unpack itself Windows utilities suspicious process WriteConsoleW Windows
9.0 49 ZeroCERT

1650 2025-03-21 09:09 aminthebestdutyservicewithgrea...  

52978b3c6c5147d528ad875cb55075ae


MS_RTF_Obfuscation_Objects RTF File doc Vulnerability VirusTotal Malware Malicious Traffic buffers extracted RWX flags setting exploit crash Tofsee Exploit DNS crashed
1 3 6 5.0 37 ZeroCERT