popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
16996 2023-05-22 16:34 345534534.exe  

6355c5f8f98ffd7042a07ed616a2bb34


AgentTesla browser info stealer Generic Malware Downloader UPX Malicious Library Create Service DGA Socket DNS BitCoin Code injection HTTP PWS[m] Sniff Audio Steal credential Http API P2P Internet API Escalate priviledges persistence FTP KeyLogger Screen Browser Info Stealer VirusTotal Malware Cryptocurrency wallets Cryptocurrency PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files exploit crash unpack itself Collect installed applications Check virtual network interfaces malicious URLs sandbox evasion installed browsers check Ransomware Windows Exploit Browser ComputerName RCE Firmware DNS Cryptographic key crashed 		1 1 1 1 17.2 M 47 ZeroCERT

16997 2023-05-22 16:32 governorzx.exe  

62a46435c5e579b3f3a7d59f64317a09


PWS .NET framework KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces malicious URLs Tofsee Windows Discord Browser Email ComputerName DNS Cryptographic key Software crashed 		1 2 3 14.8 M 48 ZeroCERT

16998 2023-05-22 16:31 shell.exe  

604e6d6cac22bc2c954367b4a36bb195


Gen1 UPX Malicious Library ASPack Admin Tool (Sysinternals etc ...) Anti_VM OS Processor Check PE64 PE File ZIP Format DLL VirusTotal Malware Check memory Creates executable files crashed 		2.6 M 41 ZeroCERT

16999 2023-05-22 16:28 adolfzx.exe  

372daff38ea8b876b01803b474c7f687


Formbook PWS .NET framework RAT AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted ICMP traffic unpack itself Windows utilities AppData folder Windows 		2 11.6 M 37 ZeroCERT

17000 2023-05-22 16:26 whiteezx.exe  

dc7614d708b3b80811a4c8dde9eb4e1c


Formbook PWS[m] AntiDebug AntiVM .NET EXE PE File PE32 FormBook Malware download VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself DNS 		3 7 1 10.2 M 46 ZeroCERT

17001 2023-05-22 16:25 vbc.exe  

f4fb22b77def98b9cc1231ab69a98f58


Formbook NSIS UPX Malicious Library PE File PE32 DLL FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself AppData folder suspicious TLD ComputerName DNS 		12 15 5 11 5.6 M 53 ZeroCERT

17002 2023-05-22 16:19 Satan_AIO.exe  

c8c82a0f0ee038fddb54cbf156f2e300


Malicious Library Malicious Packer VMProtect PE64 PE File VirusTotal Malware Checks debugger DNS crashed 		1 3.0 30 ZeroCERT

17003 2023-05-22 16:19 WindowsApp6.exe  

5681f190a1d7c696efa487fa0100e96b


Formbook .NET EXE PE File PE32 VirusTotal Malware PDB Check memory Checks debugger unpack itself Windows DNS Cryptographic key 		1 5.0 M 59 ZeroCERT

17004 2023-05-22 16:18 jawazx.exe  

0cf0d018debfce1695e34759289e31db


AgentTesla PWS .NET framework browser info stealer Google Chrome User Data Downloader Create Service Socket DNS PWS[m] Sniff Audio Internet API Escalate priviledges KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Remcos VirusTotal Malware AutoRuns PDB Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows DNS keylogger 		1 3 1 10.4 41 ZeroCERT

17005 2023-05-22 16:17 xmrig32.exe  

cc20a54b21aac972382d5ad53f67e91b


Generic Malware UPX Malicious Library Malicious Packer OS Processor Check PE File PE32 VirusTotal Malware WriteConsoleW 		1.4 59 ZeroCERT

17006 2023-05-22 09:09 goat.dll  

78b53767df514a3d25aed7b2befbf562


UPX Malicious Library OS Processor Check DLL PE64 PE File Checks debugger unpack itself ComputerName DNS crashed 		5 3.8 ZeroCERT

17007 2023-05-22 09:04 Updates%20Windows.exe  

05ea0aa586cd127894ff0bd65566254c


Loki_b Loki_m PWS .NET framework RAT UPX Code injection PWS[m] AntiDebug AntiVM OS Processor Check .NET EXE PE File PE32 VirusTotal Malware Telegram AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces malicious URLs Tofsee Windows ComputerName DNS Cryptographic key crashed 		3 5 4 12.6 M 50 ZeroCERT

17008 2023-05-22 09:03 ilillil%23%23%23%23%23%23%23%2...  

f83050a49383b5c615b9a84543254f4e


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic buffers extracted exploit crash Exploit DNS crashed Downloader 		1 1 3 4.4 M 28 ZeroCERT

17009 2023-05-22 09:02 whiteezx.exe  

2608ea96bd6424120c20e6594827f844


Formbook PWS .NET framework Anti_VM AntiDebug AntiVM .NET EXE PE File PE32 FormBook Malware download VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		2 4 1 9.6 M 52 ZeroCERT

17010 2023-05-22 08:59 ne983n8sn3lks3.exe  

a96ac42f9ccc7d11663f2741d5dfe930


BlackMatter Ransomware PE File PE32 VirusTotal Malware unpack itself 		2.2 M 57 ZeroCERT

keyword