popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
17296 2023-06-08 11:28 File_pass1234.7z  

66448293af6065ecbcfb9038e202d4b6


PWS[m] Escalate priviledges KeyLogger AntiDebug AntiVM RedLine Malware download Malware Telegram suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself suspicious TLD IP Check PrivateLoader Tofsee Stealer Windows Trojan DNS 		20 39 18 6 6.2 M ZeroCERT

17297 2023-06-08 11:15 final.docm  

ea8f8a4cd85177248a08490f05d1b555


VBA_macro ZIP Format Word 2007 file format(docx) VirusTotal Malware exploit crash unpack itself Exploit crashed 		3.8 37 ZeroCERT

17298 2023-06-08 11:08 cleanmgrs.exe  

5acd030fa8d6773c21b19a4468727d05


RAT NSIS UPX Malicious Library PE File PE32 GIF Format PNG Format .NET DLL OS Processor Check DLL PE64 VirusTotal Malware Check memory Creates shortcut Creates executable files unpack itself AppData folder 		2.8 9 ZeroCERT

17299 2023-06-08 09:28 YY.exe  

5a01a667c84893b0ab403b39b3c73b53


AgentTesla RAT browser info stealer Google Chrome User Data Downloader Confuser .NET Create Service Socket DNS PWS[m] Sniff Audio Internet API Escalate priviledges KeyLogger ScreenShot AntiDebug AntiVM PE64 PE File Remcos VirusTotal Malware PDB MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself DNS DDNS 		1 6 3 9.4 M 28 ZeroCERT

17300 2023-06-08 09:28 main.exe  

d24e233cbed550a67e8d56f88632a869


Gen1 Emotet Generic Malware UPX Malicious Library Antivirus CAB PE64 PE File PDB Check memory unpack itself WriteConsoleW Windows RCE Cryptographic key 		1.8 ZeroCERT

17301 2023-06-08 09:27 dot.exe  

0a8ef8b03ea08b3ef952d7b7cc7f3082


Generic Malware Malicious Packer PE64 PE File VirusTotal Malware unpack itself DNS 		1 3.8 M 48 ZeroCERT

17302 2023-06-08 09:26 HH.exe  

66108176e22e6f9513a62c76f2185468


AgentTesla browser info stealer Google Chrome User Data Downloader Confuser .NET Create Service Socket DNS PWS[m] Sniff Audio Internet API Escalate priviledges KeyLogger AntiDebug AntiVM PE64 PE File Remcos VirusTotal Malware PDB MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself DNS DDNS 		2 3 7.4 M 45 ZeroCERT

17303 2023-06-08 09:26 Dollar.exe  

99e770cd68e71c4e1fff20ffbb325624


RAT email stealer Downloader Confuser .NET DNS Code injection PWS[m] Escalate priviledges persistence KeyLogger AntiDebug AntiVM PE64 PE File VirusTotal Malware PDB MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself DNS crashed 		1 10.0 45 ZeroCERT

17304 2023-06-08 09:24 sonne.exe  

f4af549b7d5af2412c9b092cbe5610d1


UPX Malicious Library Malicious Packer Admin Tool (Sysinternals etc ...) OS Processor Check PE File PE32 DLL Malware download Amadey Malware AutoRuns PDB Malicious Traffic Check memory Checks debugger Creates executable files unpack itself Windows utilities suspicious process AppData folder WriteConsoleW Windows ComputerName DNS 		3 1 7 8.2 M ZeroCERT

17305 2023-06-08 09:23 clip64.dll  

a5ed103ec4719a27ab3d3c01dac66f01


UPX Malicious Library Admin Tool (Sysinternals etc ...) OS Processor Check DLL PE File PE32 VirusTotal Malware PDB Checks debugger unpack itself 		2.0 M 56 ZeroCERT

17306 2023-06-08 09:21 qqqqqqqqq  

f2d3c60d35d0213760c48cdfddec36dc


OS Processor Check ZIP Format VirusTotal Malware DNS 		2 1.4 M 20 ZeroCERT

17307 2023-06-08 09:21 metro.exe  

bbae70e8a90c7dee5fab03c19a86f1bb


RedLine stealer[m] UPX Malicious Library AntiDebug AntiVM OS Processor Check PE File PE32 Browser Info Stealer RedLine Malware download FTP Client Info Stealer Malware Buffer PE suspicious privilege Code Injection Check memory Checks debugger buffers extracted WMI unpack itself Collect installed applications installed browsers check Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 3 10.6 ZeroCERT

17308 2023-06-08 09:21 combo.exe  

f693e2f2661b6e5824ccd29e5ba58bb6


PWS .NET framework RAT Downloader Create Service DGA Socket DNS Code injection HTTP PWS[m] Sniff Audio Steal credential Http API P2P Internet API Escalate priviledges FTP KeyLogger ScreenShot AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Report Cryptocurrency wallets Cryptocurrency Telegram AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities Collect installed applications Check virtual network interfaces suspicious process AppData folder WriteConsoleW IP Check Tofsee Ransomware WhiteSnake Stealer Windows Browser Email ComputerName DNS Software 		8 17 6 14.8 M 49 ZeroCERT

17309 2023-06-08 09:19 SS.exe  

b682e3dc1f18c1131f75ff8582aa5703


RAT email stealer Downloader Confuser .NET DNS Code injection PWS[m] Escalate priviledges persistence KeyLogger AntiDebug AntiVM PE64 PE File VirusTotal Malware PDB MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself DNS crashed 		1 9.0 M 26 ZeroCERT

17310 2023-06-08 09:08 fotod25.exe  

16a7613fd06e8be30c74a2392a78fcd4


RedLine stealer[m] Gen1 Emotet UPX Malicious Library Malicious Packer Admin Tool (Sysinternals etc ...) PWS[m] AntiDebug AntiVM CAB PE File PE32 OS Processor Check DLL Browser Info Stealer RedLine Malware download Amadey FTP Client Info Stealer VirusTotal Malware Buffer PE AutoRuns PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files RWX flags setting unpack itself Windows utilities Disables Windows Security Collect installed applications suspicious process AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check Stealer Windows Update Browser ComputerName RCE DNS Cryptographic key Software crashed 		3 2 9 22.0 M 42 ZeroCERT

keyword