Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
17341 2023-06-07 07:50 BMKNJPO87.exe  

1d45466db6f73b1f93161e33b9cad371


Formbook AntiDebug AntiVM PE64 PE File FormBook Malware download VirusTotal Malware PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself suspicious TLD DNS
11 11 5 10 9.6 M 49 ZeroCERT

17342 2023-06-07 07:47 achform.docx  

2a824a7c1f57740354cdf6a3275df44f


Doc XML Downloader ZIP Format Word 2007 file format(docx) Vulnerability unpack itself
1.8 M ZeroCERT

17343 2023-06-07 07:45 Jonh.exe  

99c0cd96d46794e20fa539b20e4cff64


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware unpack itself DNS
1 2.0 M 24 ZeroCERT

17344 2023-06-07 07:43 88999.exe  

ee9f9565049005c3fc1dfd32db706ef8


UPX Malicious Library PE File PE32 VirusTotal Malware AutoRuns suspicious privilege Malicious Traffic Creates executable files unpack itself AppData folder Tofsee Windows RCE DNS
3 4 3 8.0 57 ZeroCERT

17345 2023-06-07 07:41 ceshi.exe  

25214ee067e1480fa57f0ffd143ebb03


Malicious Library PE File PE32 VirusTotal Malware AutoRuns PDB suspicious privilege Malicious Traffic Creates executable files unpack itself suspicious TLD Windows DNS
2 4 4 6.8 58 ZeroCERT

17346 2023-06-07 07:40 Installer.exe  

38b258c567b378058ac5cad63ab59584


UPX OS Processor Check PE File PE32 VirusTotal Malware Checks debugger unpack itself
4 18 2.4 32 ZeroCERT

17347 2023-06-07 07:38 BBHhHhB.exe  

543e32d9617d5851aef813fe77310a84


RAT .NET EXE PE File PE32 VirusTotal Malware PDB Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee
2 1 3.0 M 43 ZeroCERT

17348 2023-06-07 07:37 H.exe  

a5a287e329d02dd5d3d7a33927f8c010


Formbook AntiDebug AntiVM PE64 PE File FormBook Malware download VirusTotal Malware PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself suspicious TLD DNS
19 19 7 18 10.4 M 48 ZeroCERT

17349 2023-06-07 07:36 A.exe  

706c4e397de8260d889cf83ba6707e7c


SMTP PWS[m] KeyLogger AntiDebug AntiVM PE64 PE File Browser Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Browser Email ComputerName DNS DDNS crashed keylogger
1 2 3 10.4 M 50 ZeroCERT

17350 2023-06-07 07:34 NA.exe  

6c432a8b26bc0e068f23e88f69c0f565


DNS AntiDebug AntiVM PE64 PE File VirusTotal Malware Buffer PE AutoRuns PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself human activity check Windows DNS DDNS
3 1 13.4 M 50 ZeroCERT

17351 2023-06-07 07:32 BHHh.exe  

96b0ccf071277093a2e02fd89ae05dcb


RAT .NET EXE PE File PE32 VirusTotal Malware PDB Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee
1 3 1 3.4 51 ZeroCERT

17352 2023-06-07 07:30 wininit.exe  

d39050a4b6ef3f4aaa5808d30501d4fd


RAT PE64 PE File VirusTotal Malware Check memory Checks debugger unpack itself crashed
1.8 20 ZeroCERT

17353 2023-06-07 07:28 Brickbats.exe  

821823659183e8ca89f7d90cb55cae55


PWS .NET framework RAT UPX Confuser .NET OS Processor Check .NET EXE PE File PE32 VirusTotal Malware Check memory Checks debugger ICMP traffic unpack itself Windows Cryptographic key
2 3.8 34 ZeroCERT

17354 2023-06-07 05:38 ddsc.exe  

6156028337e0510bd3535c891ed15029


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware PDB Code Injection buffers extracted unpack itself Windows utilities sandbox evasion Windows Browser
2 9.2 M 46 guest

17355 2023-06-05 21:24 ddsc.exe  

6156028337e0510bd3535c891ed15029


UPX Malicious Library OS Processor Check PE File PE32 Malware download Remcos VirusTotal Malware PDB Code Injection Malicious Traffic Check memory buffers extracted unpack itself Windows utilities sandbox evasion Windows Browser
1 4 2 8.0 36 ZeroCERT