popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
17371 2023-06-04 17:38 secmorganzx.exe  

e5cd98442cbc3af8dbc877ecd99a58d2


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware unpack itself RCE DNS 		1 2.8 M 48 ZeroCERT

17372 2023-06-04 17:37 fotod25.exe  

001ba557c3a6837ac5635bbf859ed645


Redline Gen1 Emotet UPX Malicious Library Admin Tool (Sysinternals etc ...) Malicious Packer CAB PE File PE32 OS Processor Check DLL Browser Info Stealer RedLine Malware download Amadey FTP Client Info Stealer VirusTotal Malware AutoRuns PDB suspicious privilege Malicious Traffic Check memory Checks debugger WMI Creates executable files unpack itself Windows utilities Collect installed applications suspicious process AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check Stealer Windows Browser ComputerName RCE DNS Cryptographic key Software crashed 		5 2 11 3 14.8 M 39 ZeroCERT

17373 2023-06-04 17:37 foto124.exe  

1b28062bf3a3a5e2e681649e4a0d22dc


Redline Gen1 Emotet UPX Malicious Library Admin Tool (Sysinternals etc ...) Malicious Packer CAB PE File PE32 OS Processor Check DLL Browser Info Stealer RedLine Malware download Amadey FTP Client Info Stealer Malware AutoRuns PDB suspicious privilege Malicious Traffic Check memory Checks debugger WMI Creates executable files unpack itself Windows utilities Collect installed applications suspicious process AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check Stealer Windows Browser ComputerName RCE DNS Cryptographic key Software crashed 		3 2 9 3 13.8 M ZeroCERT

17374 2023-06-04 17:33 File_pass1234.7z  

63e2ad5f5f1466a924b0c77048dcc60a


PWS[m] Escalate priviledges KeyLogger AntiDebug AntiVM VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself 		2.0 M 9 guest

17375 2023-06-03 17:31 hkcmd.exe  

53d4ab9c429de02b7efc94d7be3e6059


AgentTesla RAT browser info stealer Google Chrome User Data Downloader Confuser .NET Create Service Socket DNS PWS[m] Sniff Audio Internet API Escalate priviledges KeyLogger AntiDebug AntiVM PE64 PE File Remcos VirusTotal Malware PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW Windows DNS DDNS 		2 5 7 11.2 M 29 ZeroCERT

17376 2023-06-03 17:31 document_C560_Jun_2.js  

3a6a29b0cfe1132fba17d10f096e4104

VirusTotal Malware crashed 		0.6 3 ZeroCERT

17377 2023-06-03 17:31 document_C540_Jun_2.js  

6c6de7c1260f8b8dc6bc8505cac4288a

VirusTotal Malware unpack itself crashed 		1.0 6 ZeroCERT

17378 2023-06-03 17:29 obizx.doc  

bb05581c977504151945ce548b13daf8


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic RWX flags setting exploit crash IP Check Tofsee Windows Exploit DNS crashed 		2 4 6 4.8 M 28 ZeroCERT

17379 2023-06-03 17:29 hkcmd.exe  

616f84ed1a058d9b51efa2eb6007dd4e


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware PDB unpack itself RCE 		2.4 M 49 ZeroCERT

17380 2023-06-03 17:27 H2.exe  

200f70cceffbcc69815d125f1ca40fd8


AgentTesla RAT browser info stealer Google Chrome User Data Downloader Confuser .NET Create Service Socket DNS PWS[m] Sniff Audio Internet API Escalate priviledges KeyLogger AntiDebug AntiVM PE64 PE File Remcos VirusTotal Malware PDB MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself DNS DDNS 		1 4 3 8.6 M 37 ZeroCERT

17381 2023-06-03 17:27 setup.exe  

8072726bf6f29230d619ec971b3d2a29


UPX Malicious Library AntiDebug AntiVM OS Processor Check PE File PE32 Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted WMI unpack itself Collect installed applications installed browsers check Stealer Windows Browser ComputerName RCE DNS Cryptographic key Software crashed 		1 3 12.2 M 42 ZeroCERT

17382 2023-06-03 17:25 teambzx.doc  

8a5c3b0f57f61e18ff31ae4903f479fa


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic RWX flags setting exploit crash IP Check Tofsee Windows Exploit DNS crashed 		3 7 7 5.6 M 33 ZeroCERT

17383 2023-06-03 17:25 iuiiiuiuiuiuiuiuiui%23%23%23%2...  

ff889dabeb89be61eb1ece635fb12ec2


MS_RTF_Obfuscation_Objects RTF File doc LokiBot Malware download VirusTotal Malware c&c Malicious Traffic buffers extracted exploit crash unpack itself Windows Exploit DNS crashed 		2 2 12 5.2 M 20 ZeroCERT

17384 2023-06-03 17:23 hkcmd.exe  

ab22e6f54ff1b1f6862780ca9a7dddaa


Loki Loki_b Loki_m Formbook Socket DNS PWS[m] AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself suspicious process malicious URLs installed browsers check Browser Email ComputerName DNS Software 		1 1 7 1 13.8 M 25 ZeroCERT

17385 2023-06-03 17:22 mimimimimimimi%23%23%23%23%23%...  

f4b2703a921facad2c48fdecca12ae21


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware RWX flags setting exploit crash Exploit crashed 		3.0 M 28 ZeroCERT

keyword