popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
1651 2024-08-04 14:01 123.exe  

ff886c6dfffaf1abafb52e93b7a69249


UPX PE File PE32 VirusTotal Malware suspicious privilege Windows utilities WriteConsoleW Windows DNS 		1 5.2 M 33 ZeroCERT

1652 2024-08-04 13:58 XClient.exe  

9fe64529733d8081d761fe73bd8bd050


Malicious Library Antivirus UPX PE File .NET EXE PE32 OS Processor Check VirusTotal Malware suspicious privilege MachineGuid Check memory Checks debugger unpack itself AntiVM_Disk VM Disk Size Check Windows ComputerName Cryptographic key 		4.0 M 62 ZeroCERT

1653 2024-08-04 13:56 345.exe  

35a8e22dd6eafbae106923d23eecded3


UPX PE File PE64 VirusTotal Malware 		2.6 M 45 ZeroCERT

1654 2024-08-04 13:56 update.exe  

e79580a75196a17aef6f7240ea67e954


njRAT backdoor Generic Malware Malicious Library Antivirus UPX PE File MSOffice File PE32 CAB OS Name Check OS Processor Check DLL VirusTotal Malware PDB suspicious privilege Check memory Checks debugger Creates executable files unpack itself AppData folder AntiVM_Disk VM Disk Size Check Windows ComputerName Remote Code Execution DNS Cryptographic key 		1 6.6 M 21 ZeroCERT

1655 2024-08-04 13:52 nut.exe  

232e7b89f4be6cbc0c706f8520b1c647


Malicious Library .NET framework(MSIL) UPX PE File .NET EXE PE32 OS Processor Check VirusTotal Malware Check memory Checks debugger unpack itself 		2.0 M 61 ZeroCERT

1656 2024-08-04 13:50 select.exe  

d0e834aed727fe49a51b071c680a282c


Downloader PE File PE32 MZP Format VirusTotal Malware AutoRuns Check memory Windows Trojan 		4.2 M 70 ZeroCERT

1657 2024-08-04 13:48 ss.exe  

61584ce40b3b4c6f5b9ac4fb4f8f0ec9


Malicious Packer UPX PE File PE32 VirusTotal Malware unpack itself DNS 		1 3.6 M 61 ZeroCERT

1658 2024-08-04 13:46 china.exe  

a95e09168ff4b517c1ffa385206543b5


Malicious Library ASPack PE File PE32 CAB MZP Format DLL VirusTotal Malware Check memory Checks debugger unpack itself AppData folder 		2.4 M 13 ZeroCERT

1659 2024-08-04 13:43 uh.ee.uh.ee.uhuheee.doc  

5b88a1a2c13384068ece808b50699d86


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware VBScript Malicious Traffic buffers extracted exploit crash unpack itself Exploit DNS crashed 		1 2 1 6.0 M 38 ZeroCERT

1660 2024-08-04 13:42 jf.exe  

d161e13cf0731d0b55ad38d6a38cdc21


CoinMiner Generic Malware Downloader UPX Malicious Library Confuser .NET Malicious Packer Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Hijack Network Sniff Audio HTTP DNS Code injection Internet API persistence F VirusTotal Malware Buffer PE suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Windows utilities suspicious process malicious URLs WriteConsoleW IP Check Tofsee Interception Windows ComputerName Amazon Alibaba DNS 		4 150 5 15.4 M 47 ZeroCERT

1661 2024-08-04 13:41 JX2goame.exe  

288f1d023c0446d190a28e5f1899667c


EnigmaProtector UPX PE File PE32 VirusTotal Malware unpack itself Windows ComputerName crashed 		4.2 M 42 ZeroCERT

1662 2024-08-04 13:39 win.exe  

67b035c3aac011e498d0e6685fde0c16


UPX PE File PE64 VirusTotal Malware suspicious privilege Windows utilities WriteConsoleW Windows DNS 		1 4.2 M 42 ZeroCERT

1663 2024-08-04 13:37 fremoney.pdf.lnk  

815e6eb6a474f4fcde376762c0e69c37


Generic Malware Antivirus AntiDebug AntiVM Lnk Format GIF Format VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger Creates shortcut unpack itself suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		1 4.2 11 ZeroCERT

1664 2024-08-04 13:37 mimispool.dll  

7185df3dbaa4049c26fe2d6962528577


Generic Malware Malicious Library UPX PE File DLL PE64 OS Processor Check VirusTotal Malware Check memory Checks debugger unpack itself crashed 		2.2 M 44 ZeroCERT

1665 2024-08-04 13:36 DR_Mod_200_2023.PDF.lnk  

0d6f8a03885e85f384584cb2416f859e


Generic Malware Antivirus AntiDebug AntiVM Lnk Format GIF Format VirusTotal Malware powershell suspicious privilege Code Injection Check memory Checks debugger Creates shortcut RWX flags setting unpack itself powershell.exe wrote suspicious process Interception Windows ComputerName Cryptographic key 		1 1 7.2 34 ZeroCERT

keyword