popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
1651 2025-03-08 12:42 yUI6F6C.exe  

a62fe491673f0de54e959defbfebd0dd


Themida UPX Anti_VM PE File PE32 VirusTotal Malware Checks debugger unpack itself Checks Bios Detects VMWare VMware anti-virtualization Windows DNS crashed 		1 6.0 M 52 ZeroCERT

1652 2025-03-08 12:42 851ed480-459a-4e09-83d2-9ce8a0...  

12f5c72ed46b4730a3019053bf5cc206


ScreenShot AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware Code Injection Check memory Checks debugger buffers extracted unpack itself crashed 		7.6 M 57 ZeroCERT

1653 2025-03-08 12:41 b1ffae7f-0320-454d-be08-58ace9...  

657d75be7f740e2dbbd6a6f0d7e9de58


njRAT backdoor Generic Malware Malicious Library Antivirus UPX PE File MSOffice File CAB PE32 OS Processor Check OS Name Check DLL VirusTotal Malware PDB suspicious privilege Check memory Checks debugger buffers extracted Creates executable files unpack itself AppData folder AntiVM_Disk VM Disk Size Check human activity check Windows ComputerName RCE DNS Cryptographic key crashed 		3 6.6 M 27 ZeroCERT

1654 2025-03-08 12:40 debd1d6d-b47e-4404-a91b-71d482...  

857dd215dcf687086dc512e0002e6152


Malicious Library .NET framework(MSIL) ScreenShot AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself crashed 		8.0 M 55 ZeroCERT

1655 2025-03-08 12:39 emma.ps1  

74ea4fd17754c1068f111d46d2fce4fa


Hide_EXE Generic Malware Antivirus Confuser .NET UPX AntiDebug AntiVM PE File .NET EXE PE32 DLL FormBook Browser Info Stealer Malware download VirusTotal Malware powershell suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself powershell.exe wrote AppData folder Windows Browser DNS Cryptographic key 		15 15 3 12.6 M 8 ZeroCERT

1656 2025-03-08 12:38 mainstl.exe  

8dff9447ed7aaf297a0bec24a946074a


UPX PE File PE64 VirusTotal Malware 		1.8 M 37 ZeroCERT

1657 2025-03-08 12:38 download.php  

4677605b34f1e7f4b7c691bd1fddb6a3


Amadey Emotet Gen1 Generic Malware Themida Malicious Library UPX Malicious Packer Antivirus Anti_VM PE File CAB PE32 PE64 DLL OS Processor Check MZP Format .NET EXE Browser Info Stealer Malware download FTP Client Info Stealer Vidar VirusTotal Email Client Info Stealer Malware c&c Cryptocurrency wallets Cryptocurrency powershell Buffer PE AutoRuns PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files ICMP traffic unpack itself Windows utilities Checks Bios Collect installed applications Detects VMWare suspicious process AppData folder AntiVM_Disk sandbox evasion WriteConsoleW VMware anti-virtualization VM Disk Size Check installed browsers check Tofsee Stealc Stealer Windows Browser Email ComputerName RCE DNS Cryptographic key Software crashed plugin 		16 10 23 2 23.0 M 48 ZeroCERT

1658 2025-03-08 12:37 dedf7120-f20b-4374-92ed-c79456...  

032f2e9ef6b95a08483283d3901e25b4


Malicious Packer UPX PE File PE64 VirusTotal Malware 		2.0 M 49 ZeroCERT

1659 2025-03-08 12:35 5696bb60-a41f-456f-91c2-d3d7d4...  

788adde317e507ad98de555656fa477c


ScreenShot AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware Code Injection Check memory Checks debugger buffers extracted unpack itself crashed 		8.6 M 58 ZeroCERT

1660 2025-03-08 12:34 files.exe  

06ee2174e93d7559b745655790d2d060


Browser Login Data Stealer Generic Malware Admin Tool (Sysinternals etc ...) Malicious Library Malicious Packer UPX PE File PE64 OS Processor Check VirusTotal Malware 		1.2 M 51 ZeroCERT

1661 2025-03-08 12:33 we.exe  

918f83cd6d935bd729990142f8e276e0


XWorm Hide_EXE WebCam Antivirus UPX AntiDebug AntiVM PE File .NET EXE PE32 DLL OS Processor Check .NET DLL VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files ICMP traffic unpack itself Windows utilities AppData folder AntiVM_Disk VM Disk Size Check Windows ComputerName DNS Cryptographic key 		5 1 13.8 M 42 ZeroCERT

1662 2025-03-08 12:32 xmrig.exe  

4e3c42b8c1558d124457f36cd2870274


PE File PE64 VirusTotal Malware unpack itself crashed 		2.2 M 34 ZeroCERT

1663 2025-03-08 12:31 dressman.exe  

3e4a1eeea0b92fbe4d53fb0cc057a48b


Generic Malware Malicious Library UPX PE File PE32 DLL FormBook Browser Info Stealer Malware download VirusTotal Malware buffers extracted Creates executable files unpack itself AppData folder suspicious TLD Browser DNS 		13 12 3 5.4 M 54 ZeroCERT

1664 2025-03-08 12:29 9458c927-c102-44e9-bc9f-9c3b4e...  

130c3af60db25755ec1c7f19f924885d


PE File PE64 VirusTotal Malware PDB suspicious privilege Check memory Checks debugger unpack itself 		2.0 M 14 ZeroCERT

1665 2025-03-08 12:29 PQkVDtx.exe  

6575f782073ab4fd19e7df1c5e2a73be


Malicious Library Antivirus UPX Anti_VM PE File PE64 OS Processor Check VirusTotal Malware PDB Checks debugger 		1.2 M 29 ZeroCERT

keyword