popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
17326 2023-06-07 13:34 Install_pass1234.7z  

21c1b0f8d03d57065b96c639b518886d


PWS[m] Escalate priviledges KeyLogger AntiDebug AntiVM RedLine Malware download VirusTotal Malware c&c suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself IP Check PrivateLoader Tofsee Stealc Stealer Windows Browser DNS plugin 		23 35 31 8 6.2 M 7 ZeroCERT

17327 2023-06-07 13:23 File_pass1234.7z  

5dadedcd20637db80749292fb8d55eb8


PWS[m] Escalate priviledges KeyLogger AntiDebug AntiVM RedLine Malware download Malware c&c suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself suspicious TLD IP Check PrivateLoader Tofsee Stealc Stealer Windows Browser DNS plugin 		22 34 31 5 6.2 M ZeroCERT

17328 2023-06-07 10:31 003737.exe  

d93dd4200d1997c9b734bc2b1de77dc8


NSIS UPX Malicious Library PE File PE32 OS Processor Check DLL FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself AppData folder DNS 		4 5 4 5.0 44 ZeroCERT

17329 2023-06-07 10:27 batteryacid.dat  

179d4849f8d096122d05de3c7bebb4bd


UPX Malicious Library OS Processor Check DLL PE File PE32 VirusTotal Malware PDB Checks debugger unpack itself crashed 		2.0 10 ZeroCERT

17330 2023-06-07 10:05 index.html  

e66507bcd2afe260f82a61cb981ec964


AntiDebug AntiVM MSOffice File PNG Format JPEG Format Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		1 2 1 3.8 ZeroCERT

17331 2023-06-07 10:04 ud8qQSCc7kEdZKzblmZWqRhCfNo79m...  

d5b9beaf52a8d268da46a94a6c1b1a4a


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware unpack itself 		1.8 35 ZeroCERT

17332 2023-06-07 09:42 ShippingDetails.js  

e8150ba03200183abce718f6b028b2c3

VirusTotal Malware VBScript AutoRuns WMI heapspray wscript.exe payload download Creates executable files unpack itself AntiVM_Disk VM Disk Size Check Windows ComputerName DNS Dropper 		1 3 10.0 9 ZeroCERT

17333 2023-06-07 09:40 d35u6pvfsr5oqz.cloudfront.net_...  

aeba5b78f9353aba278c46c9c820265c


Generic Malware Antivirus VirusTotal Malware buffers extracted unpack itself Windows utilities WriteConsoleW Windows Cryptographic key 		3.8 1 ZeroCERT

17334 2023-06-07 09:36 update.lnk  

eb08d873d27b94833e738f0df1d6ed26


Generic Malware Antivirus AntiDebug AntiVM GIF Format VirusTotal Malware powershell suspicious privilege Code Injection Check memory Checks debugger Creates shortcut unpack itself powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		1 6.0 21 ZeroCERT

17335 2023-06-07 09:26 INSYy.wsf  

1571f34482e30885cf9ac9ef10df739b


Generic Malware Antivirus powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key 		2 1 3 8.2 M ZeroCERT

17336 2023-06-07 09:18 r.png.ps1  

e11a08cea05e73a3949fb5f54137bf06


Hide_EXE Generic Malware Antivirus Anti_VM VirusTotal Malware Check memory unpack itself WriteConsoleW Windows Cryptographic key 		1.6 12 ZeroCERT

17337 2023-06-07 09:16 194.169.175.124:3002  

5e46335e018a22409430e9b58f8f90a7


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware 		1.4 M 35 ZeroCERT

17338 2023-06-07 09:16 electronics_and_connectors.pif  

582bd6f5d1720c34d07ea51b37b0a15d


RAT .NET EXE PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself ComputerName 		2.0 M 37 ZeroCERT

17339 2023-06-07 09:16 ebc52250faaaa0e22efe35539b006e...  

85f723845b73f7791ecfc84bde974ef7


RAT .NET EXE PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself ComputerName 		2.4 M 35 ZeroCERT

17340 2023-06-07 09:01 index.html  

e66507bcd2afe260f82a61cb981ec964


Generic Malware Browser Info Stealer MachineGuid Code Injection Checks debugger exploit crash unpack itself installed browsers check Exploit Browser crashed 		3.6 ZeroCERT

keyword