popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
17386 2023-06-02 18:55 Password_2022_Installer.rar  

255ec60f26fc08b0b1a3ef793ad33bfb


PWS[m] Escalate priviledges KeyLogger AntiDebug AntiVM Malware download Malware suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself Lumma Stealer DNS 		1 1 2 3.8 ZeroCERT

17387 2023-06-02 18:51 Password_2022_Installer.rar  

255ec60f26fc08b0b1a3ef793ad33bfb


PWS[m] Escalate priviledges KeyLogger AntiDebug AntiVM suspicious privilege Check memory Checks debugger unpack itself 		1.6 ZeroCERT

17388 2023-06-02 18:46 rh2605.exe  

ed5185618f3583ea107d1aa500e729f6

 ZeroCERT

17389 2023-06-02 18:43 File_pass1234.7z  

63e2ad5f5f1466a924b0c77048dcc60a


Redline PWS[m] Escalate priviledges KeyLogger AntiDebug AntiVM RedLine Malware download Amadey Malware suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files ICMP traffic unpack itself suspicious TLD IP Check PrivateLoader Tofsee Stealer Windows DNS 		17 32 18 8 7.6 M ZeroCERT

17390 2023-06-02 18:40 BandicamScreenRecorder_pass123...  

0dd10d786758af063a14efaff9ebf78e


PWS[m] Escalate priviledges KeyLogger AntiDebug AntiVM Malware download Malware RecordBreaker suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself Tofsee Stealer Windows DNS 		34 12 15 3.8 ZeroCERT

17391 2023-06-02 18:34 ddd.json.ps1  

558632789032f0e8cb4f4be1c784ed08


Hide_EXE Generic Malware Antivirus VirusTotal Malware Check memory unpack itself WriteConsoleW Windows Cryptographic key 		1.6 M 16 ZeroCERT

17392 2023-06-02 18:33 Atm_Fradulent_Transaction_Note...  

0f721b8721fcf53a2f584d1e14576222

VirusTotal Malware VBScript AutoRuns WMI wscript.exe payload download AntiVM_Disk VM Disk Size Check Windows ComputerName Dropper 		2 1 10.0 3 ZeroCERT

17393 2023-06-02 18:29 647935b3df1dc.zip  

2e1d77880b713f913c52773045cae78d


ZIP Format Malware Malicious Traffic NetSupport 		3 4 3 0.8 ZeroCERT

17394 2023-06-02 17:50 hkcmd.exe  

47e139c4d15656a318c89ceab3fd3779


Loki Loki_b Loki_m Formbook Socket DNS PWS[m] AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself suspicious process malicious URLs installed browsers check Browser Email ComputerName DNS Software 		1 1 7 1 14.2 M 40 ZeroCERT

17395 2023-06-02 17:48 hkcmd.exe  

a9ef402dafd9bf3e6ecad54f7a5c5cce


Loki Loki_b Loki_m PWS .NET framework Socket DNS PWS[m] AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself suspicious process malicious URLs installed browsers check Browser Email ComputerName DNS Software 		1 1 7 1 13.8 M 23 ZeroCERT

17396 2023-06-02 17:46 ioioioioioioioioioioio%23%23%2...  

b7317b332d56b95754a97d72aab04605


MS_RTF_Obfuscation_Objects RTF File doc FormBook Malware download VirusTotal Malware Malicious Traffic buffers extracted RWX flags setting exploit crash suspicious TLD Windows Exploit DNS crashed 		5 11 11 6.4 M 30 ZeroCERT

17397 2023-06-02 17:46 grace.exe  

b74a27f1d2f59773c8fc41c831600fe3


Admin Tool (Sysinternals etc ...) .NET EXE PE File PE32 VirusTotal Malware PDB Check memory Checks debugger unpack itself crashed 		2.2 M 30 ZeroCERT

17398 2023-06-02 17:42 cc.exe  

db1d5ad95e2020413ca89f274657f3b1


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware unpack itself RCE 		1.8 M 27 ZeroCERT

17399 2023-06-02 17:40 hkcmd.exe  

79796093d175c7811e14b67d670efdfc


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware PDB unpack itself RCE 		2.2 M 33 ZeroCERT

17400 2023-06-02 17:38 2.exe  

5c3837c38ccbcdd101a0f23550e68443


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware unpack itself RCE 		2.0 M 33 ZeroCERT

keyword