popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
1711 2024-08-01 14:56 faultrep.dll  

d73cecec94d5983755c81711baa7678e


UPX Anti_VM PE File DLL PE64 VirusTotal Malware Checks debugger unpack itself 		1.8 38 ZeroCERT

1712 2024-08-01 14:48 MichelinNight.lnk  

4f35ca4893709a1e9027ccda0c3a1102


Generic Malware UPX Antivirus Anti_VM AntiDebug AntiVM Lnk Format GIF Format PowerShell PE File DLL PE64 VirusTotal Malware powershell suspicious privilege Code Injection Check memory Checks debugger heapspray Creates shortcut Creates executable files unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		8.0 15 ZeroCERT

1713 2024-08-01 14:48 【算法工程师】李子豪.lnk  

e449e8239ec8d3910d2f81ed22ec762c


Generic Malware UPX Antivirus Anti_VM AntiDebug AntiVM Lnk Format GIF Format PowerShell PE File DLL PE64 VirusTotal Malware powershell suspicious privilege Code Injection Check memory Checks debugger heapspray Creates shortcut Creates executable files unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		8.4 31 ZeroCERT

1714 2024-08-01 11:17 random.exe  

28700cd817abafa9a16ad89a0f7ffd86


Amadey Client SW User Data Stealer RedLine stealer browser info stealer EnigmaProtector Generic Malware Downloader Google Chrome User Data Malicious Library Malicious Packer UPX Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal cred Browser Info Stealer Malware download Amadey VirusTotal Malware AutoRuns MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Checks Bios Detects VMWare suspicious process AppData folder malicious URLs VMware anti-virtualization installed browsers check Tofsee Ransomware Windows Exploit Browser ComputerName DNS crashed 		1 4 8 1 20.8 M 38 ZeroCERT

1715 2024-08-01 11:15 dz.js  

198c2e0eddd819cc239e7d79454bc7d2

VirusTotal Malware crashed 		1 0.6 3 ZeroCERT

1716 2024-08-01 11:12 chkup.msi  

10e9e9aff94dd23d61650c7673885f32


MSOffice File VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger unpack itself AntiVM_Disk VM Disk Size Check Tofsee ComputerName 		1 4 2 3.4 M 28 ZeroCERT

1717 2024-08-01 11:00 roseflowergetmeforgirlshairs.g...  

935dee250a117207ad585b612947fa27


Generic Malware Antivirus Hide_URL VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		5.8 M 3 ZeroCERT

1718 2024-08-01 11:00 weneedgreatthingsalwaystogetme...  

4b9305dcc211e64941a71120617c8983


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware Malicious Traffic exploit crash unpack itself Exploit DNS crashed 		1 2 4.6 M 38 ZeroCERT

1719 2024-08-01 10:59 vbs.jpeg.exe  

70e3e9ac5a828e7374199903d3806303


Malicious Library UPX PE File DLL PE32 .NET DLL OS Processor Check VirusTotal Malware PDB 		0.6 1 ZeroCERT

1720 2024-08-01 10:59 gg.exe  

18ff67b2f4d4e3f2a8ae474826fc86c8


Malicious Library PE File PE64 VirusTotal Malware RWX flags setting DNS crashed 		1 4.0 M 58 ZeroCERT

1721 2024-08-01 10:58 buttersmoothflowerwayssmooth.g...  

ed2db1c558d7e56d7d9d67de4d14d60d


Generic Malware Antivirus Hide_URL VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		1 5.8 M 4 ZeroCERT

1722 2024-08-01 10:58 greatdayforeveryonetheyaregrea...  

d559f074ac2f858891395b2d39d93e8e


Formbook MS_RTF_Obfuscation_Objects RTF File doc FormBook Malware download VirusTotal Malware Malicious Traffic exploit crash unpack itself Windows Exploit DNS crashed 		16 15 8 14 5.2 M 40 ZeroCERT

1723 2024-08-01 10:58 random.exe  

d9cb86f07f84abd7359a4b51371db020


Generic Malware Downloader Malicious Library Malicious Packer UPX Code injection Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Sniff Audio HTTP DNS Internet API FTP KeyLogger P2P AntiDebug AntiVM PE File PE32 Browser Info Stealer VirusTotal Malware MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates executable files RWX flags setting exploit crash unpack itself Windows utilities suspicious process malicious URLs installed browsers check Tofsee Ransomware Windows Exploit Browser ComputerName crashed 		2 1 12.4 M 32 ZeroCERT

1724 2024-08-01 10:58 random.exe  

f0bb0592b63ca7c1baf6a12f5d3d867d


EnigmaProtector PE File PE32 VirusTotal Malware unpack itself ComputerName crashed 		2.4 M 32 ZeroCERT

1725 2024-08-01 10:55 js.jpeg.exe  

ca6a65c0bc674566fe409c56a5ea9301


Malicious Library UPX PE File DLL PE32 .NET DLL OS Processor Check VirusTotal Malware PDB 		0.6 1 ZeroCERT

keyword