popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
17281 2023-06-08 17:43 wininit.exe  

4c46bfbd4f6224963065eede69e80f7d


Malicious Library PE File PE32 FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic unpack itself DNS 		16 18 5 3.6 M 47 ZeroCERT

17282 2023-06-08 17:43 wininit.exe  

8f25fe4c31de1a795ca154d7dacad298


UPX Malicious Library PE File PE32 JPEG Format DLL VirusTotal Malware Check memory Creates executable files unpack itself AppData folder Windows crashed 		3.6 M 28 ZeroCERT

17283 2023-06-08 17:41 snappyshop.it_img_docse.php.ps...  

3e2fdbdefa7c8e16b351a46ed1afc33d


Generic Malware Antivirus AutoRuns Check memory unpack itself WriteConsoleW Windows Cryptographic key 		1 2.2 ZeroCERT

17284 2023-06-08 17:40 SY.exe  

1190c6a8211a23925ec5342f1b457192


RAT email stealer Downloader Confuser .NET DNS Code injection PWS[m] Escalate priviledges persistence KeyLogger AntiDebug AntiVM PE64 PE File VirusTotal Malware PDB MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself DNS crashed 		1 9.4 M 39 ZeroCERT

17285 2023-06-08 17:40 clclcllclclclcllclclclclcllclc...  

3abfcd50698f63ec13889697874b0dfd


MS_RTF_Obfuscation_Objects RTF File doc FormBook Malware download VirusTotal Malware Malicious Traffic RWX flags setting exploit crash Windows Exploit DNS crashed 		3 5 7 4.6 M 30 ZeroCERT

17286 2023-06-08 17:39 mdmdmdmdmdmmdmdm%23%23%23%23%2...  

ce692ee68ccc4b7fb7381f0eabfa6891


MS_RTF_Obfuscation_Objects RTF File doc FormBook Malware download VirusTotal Malware Malicious Traffic buffers extracted RWX flags setting exploit crash Windows Exploit DNS crashed 		16 19 11 5.4 M 31 ZeroCERT

17287 2023-06-08 17:38 mimimimimimimiimii%23%23%23%23...  

f773fdea0e32c51ffea025bc50767210


MS_RTF_Obfuscation_Objects RTF File doc FormBook Malware download VirusTotal Malware Malicious Traffic buffers extracted exploit crash unpack itself Windows Exploit DNS crashed 		4 6 7 5.0 M 30 ZeroCERT

17288 2023-06-08 17:36 cleanmgr.exe  

e95742503cd258666b61c5dde8a9003a


UPX Malicious Library PE File PE32 JPEG Format DLL VirusTotal Malware Check memory Creates executable files unpack itself AppData folder DNS 		1 3.4 M 20 ZeroCERT

17289 2023-06-08 17:36 ijoijoijoijoijoijoijoijoijoijo...  

e230816a29bb8af0b5f24adfbe5eff62


MS_RTF_Obfuscation_Objects RTF File doc FormBook Malware download VirusTotal Malware Malicious Traffic buffers extracted RWX flags setting exploit crash Windows Exploit DNS crashed 		4 6 7 5.0 M 30 ZeroCERT

17290 2023-06-08 17:34 remcos_a2.exe  

9aa44989b63c667ede9f25e26497c20f


Generic Malware UPX Malicious Library Downloader Malicious Packer OS Processor Check PE File PE32 Malware download Remcos VirusTotal Malware AutoRuns Malicious Traffic Check memory Windows DNS 		1 3 2 3.6 M 60 ZeroCERT

17291 2023-06-08 17:33 rsrsrsrsrsrrsrsrsrsrsrsrssrsrs...  

39669a47b553f5d6b3ed6b730d7852f9


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware buffers extracted RWX flags setting exploit crash Exploit crashed 		3.6 M 30 ZeroCERT

17292 2023-06-08 14:02 photo250.exe  

e53eb222dce17efcdcac2c00cacb6c45


RedLine stealer[m] Gen1 Emotet UPX Malicious Library Malicious Packer Admin Tool (Sysinternals etc ...) PWS[m] AntiDebug AntiVM CAB PE File PE32 OS Processor Check DLL Browser Info Stealer RedLine Malware download Amadey FTP Client Info Stealer Malware Buffer PE AutoRuns PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Windows utilities Disables Windows Security Collect installed applications suspicious process AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check Stealer Windows Update Browser ComputerName RCE DNS Cryptographic key Software crashed 		3 2 9 3 20.8 M ZeroCERT

17293 2023-06-08 14:00 photo250.exe  

cf66c33d6331c8d39b8058b46d59c108


RedLine stealer[m] Gen1 Emotet UPX Malicious Library Admin Tool (Sysinternals etc ...) Malicious Packer PWS[m] AntiDebug AntiVM CAB PE File PE32 OS Processor Check DLL Browser Info Stealer RedLine Malware download Amadey FTP Client Info Stealer Malware Buffer PE AutoRuns PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Windows utilities Disables Windows Security Collect installed applications suspicious process AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check Stealer Windows Update Browser ComputerName RCE DNS Cryptographic key Software crashed 		3 2 9 3 20.6 M ZeroCERT

17294 2023-06-08 13:59 2.exe  

991184ef5c59ae33725e99a2e828ef8e


Malicious Library PE File PE32 VirusTotal Malware PDB unpack itself 		2.0 M 35 ZeroCERT

17295 2023-06-08 13:47 hostdll.exe  

d8c387e22a23fcdac8444ff9d43ebef8


Generic Malware UPX Malicious Library PE File PE32 VirusTotal Malware AutoRuns Check memory RWX flags setting AntiVM_Disk suspicious TLD sandbox evasion VM Disk Size Check Windows Browser DNS 		2 1 4.2 60 ZeroCERT

keyword