popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
16966 2023-05-23 17:31 003079999209.pdf.scr  

0957864375a690abcea81ce440d762f8


Suspicious_Script_Bin Generic Malware UPX Malicious Library Antivirus DNS AntiDebug AntiVM OS Processor Check PE File PE32 VirusTotal Malware Buffer PE AutoRuns PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates executable files ICMP traffic unpack itself Windows utilities Check virtual network interfaces suspicious process AppData folder sandbox evasion WriteConsoleW human activity check Windows ComputerName RCE DNS DDNS 		4 3 20.2 37 ZeroCERT

16967 2023-05-23 17:28 csrss.exe  

ef9d99538803de5140aa18eeb3b958b3


Generic Malware UPX Malicious Library Malicious Packer PE File PE32 OS Processor Check DLL PE64 PNG Format VirusTotal Malware Check memory Creates executable files unpack itself AppData folder anti-virtualization DNS crashed 		1 4.2 M 21 ZeroCERT

16968 2023-05-23 17:26 aDTUAh4aJrmzMHA.exe  

ae3300545a8b7b614d5d974e70769052


RAT UPX SMTP KeyLogger AntiDebug AntiVM OS Processor Check .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee Windows Browser Email ComputerName DNS Cryptographic key Software crashed keylogger 		3 2 15.0 M 52 ZeroCERT

16969 2023-05-23 17:26 vbc.exe  

864ffb0d2b8f9e7ddabd50be7409046b


Generic Malware UPX Malicious Library Malicious Packer PE File PE32 OS Processor Check DLL PE64 PNG Format VirusTotal Malware Check memory Creates executable files unpack itself AppData folder 		2.6 M 17 ZeroCERT

16970 2023-05-23 17:25 ChatGPT-4.exe  

dce55bbdd6eed9c8208b7e2581566ff0


Gen1 Generic Malware UPX Malicious Library Malicious Packer ASPack Anti_VM OS Processor Check PE64 PE File DLL VirusTotal Malware Check memory Creates executable files unpack itself 		3.4 M 45 ZeroCERT

16971 2023-05-23 17:25 papizx.exe  

e2f5006e1aaef2772f0593ca9e63d13b


AgentTesla PWS .NET framework browser info stealer Google Chrome User Data Downloader Create Service Socket DNS PWS[m] Sniff Audio Internet API Escalate priviledges KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Remcos VirusTotal Malware AutoRuns PDB Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows DNS keylogger 		1 3 1 10.4 M 42 ZeroCERT

16972 2023-05-23 17:24 1.exe  

cc09bb37daeedc24a5029612658ffb7e


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware unpack itself 		1.8 M 36 ZeroCERT

16973 2023-05-23 17:22 Zhazpwadddz.exe  

24781c1e54454da853bef89a12b65975


RAT .NET EXE PE File PE32 VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself 		2.0 M 24 ZeroCERT

16974 2023-05-23 17:21 bld_3s.exe  

44b65c0e74a1c608b202a663318f966d


Emotet PWS .NET framework Loki_b RAT UPX OS Processor Check .NET EXE PE File PE32 VirusTotal Malware suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces IP Check Windows ComputerName DNS Cryptographic key 		15 5 1 13 5.6 M 44 ZeroCERT

16975 2023-05-23 17:20 vbc.exe  

7457fdd20c567bd3c20e7be6ee044726


Generic Malware UPX Malicious Library Malicious Packer PE File PE32 OS Processor Check DLL PE64 PNG Format VirusTotal Malware Check memory Creates executable files unpack itself AppData folder 		2.6 15 ZeroCERT

16976 2023-05-23 17:18 buggzx.exe  

a29fb824aaf242efc1f4d4527c2e8a0a


Loki Loki_b Loki_m PWS .NET framework Socket DNS PWS[m] AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		1 1 7 1 13.6 M 18 ZeroCERT

16977 2023-05-23 17:17 2022_12_PO-note_page-0002.hta  

dada4c04af88637d79abfec8ed74e568

VirusTotal Malware Check memory RWX flags setting unpack itself WriteConsoleW Tofsee Windows Discord DNS 		1 2 3 3.0 26 ZeroCERT

16978 2023-05-23 17:16 llillillillillilli%23%23%23%23...  

05ec34c0d8db1ff6e5def9ab587dadc8


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic RWX flags setting exploit crash Windows Exploit DNS crashed Downloader 		2 1 8 4.6 M 30 ZeroCERT

16979 2023-05-23 17:15 ark.exe  

f40caeb8d127389627cf20e34c70b1ca


PWS .NET framework Admin Tool (Sysinternals etc ...) SMTP KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Windows Browser Email ComputerName Cryptographic key Software crashed 		2 10.6 M 29 ZeroCERT

16980 2023-05-23 17:06 File_pass1234.7z  

59bdba4300a7d636830fa3ff631a8ed0


PWS[m] Escalate priviledges KeyLogger AntiDebug AntiVM VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself IP Check Tofsee DNS 		4 10 3 1 4.6 M 8 ZeroCERT

keyword