popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
1771 2025-03-01 09:20 27.124.47.29.dll  

a5008c9723d23257805632be4344625f


Malicious Library UPX PE File DLL PE32 VirusTotal Malware Checks debugger unpack itself RCE DNS crashed 		2 3.2 M 17 ZeroCERT

1772 2025-03-01 09:19 setup0038.msi  

5b55d19810ab268ae0d6b5ede9b0b75e


Generic Malware Malicious Library MSOffice File CAB OS Processor Check VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself AntiVM_Disk VM Disk Size Check ComputerName 		2 4 2.4 M 12 ZeroCERT

1773 2025-03-01 09:18 38.91.115.206.dll  

42ea177dfd4e10313fc9bdf44e7a44fb


Generic Malware Malicious Library UPX PE File DLL PE32 OS Processor Check VirusTotal Malware DNS 		1 3.6 M 42 ZeroCERT

1774 2025-02-28 16:09 osnova.ps1  

5e68cbe68666c656fb39e21bfca5cea4


Client SW User Data Stealer browser info stealer Generic Malware Google Chrome User Data Downloader Antivirus Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Sniff Audio HTTP DNS Code injection BitCoin Internet API Browser Info Stealer VirusTotal Malware powershell Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut exploit crash unpack itself powershell.exe wrote Check virtual network interfaces malicious URLs WriteConsoleW installed browsers check Windows Exploit Browser ComputerName DNS Cryptographic key crashed 		2 1 12.2 5 ZeroCERT

1775 2025-02-28 15:58 albion.ps1  

be8a297796619e2e1c2a81ccd6d28273


Generic Malware Antivirus PDF Anti_VM ZIP Format VirusTotal Malware powershell suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote Check virtual network interfaces sandbox evasion WriteConsoleW installed browsers check Windows Browser ComputerName DNS Cryptographic key 		7 1 12.0 5 ZeroCERT

1776 2025-02-28 15:54 fg.exe  

a28240f6a63d655f50bd4febc028455c


XWorm Hide_EXE WebCam Antivirus UPX AntiDebug AntiVM PE File .NET EXE PE32 DLL OS Processor Check .NET DLL VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities AppData folder AntiVM_Disk VM Disk Size Check Windows ComputerName Cryptographic key 		10.8 M 48 ZeroCERT

1777 2025-02-28 15:54 js.exe  

a74be32e719fb0fcce35e9543780aeb9


XWorm Hide_EXE WebCam Antivirus UPX AntiDebug AntiVM PE File .NET EXE PE32 DLL OS Processor Check .NET DLL VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities AppData folder AntiVM_Disk VM Disk Size Check Windows ComputerName Cryptographic key 		11.8 M 47 ZeroCERT

1778 2025-02-28 14:58 VServer.exe  

52990c84b515f04e9d31694dfe132ecd


Emotet Gen1 Generic Malware Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware Check memory unpack itself RCE 		1.8 1 r0d

1779 2025-02-28 10:12 MCxU5Fj.exe  

9ab697112003c683415084d22b11e2ed


Emotet Gen1 Generic Malware Malicious Library UPX Antivirus PE File PE64 CAB PowerShell VirusTotal Malware powershell AutoRuns PDB suspicious privilege MachineGuid Check memory Checks debugger Creates shortcut Creates executable files unpack itself Windows utilities powershell.exe wrote Check virtual network interfaces suspicious process Windows ComputerName RCE Cryptographic key crashed 		3 4 8.6 M 16 ZeroCERT

1780 2025-02-28 10:12 setup1167.msi  

66500e0a73662d769b0483d4a2937236


Generic Malware Malicious Library MSOffice File CAB OS Processor Check VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself AntiVM_Disk VM Disk Size Check ComputerName 		1 2 2.4 M 15 ZeroCERT

1781 2025-02-28 10:07 mAtJWNv.exe  

b60779fb424958088a559fdfd6f535c2


Client SW User Data Stealer LokiBot ftp Client info stealer Malicious Library Socket Http API ScreenShot PWS HTTP DNS Internet API AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs crashed 		8.8 M 29 ZeroCERT

1782 2025-02-28 10:05 DEVM2.exe  

6aff1cf520c23f6c40a35534a9bcd604


Malicious Library ScreenShot AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware Code Injection Check memory Checks debugger buffers extracted unpack itself crashed 		7.6 M 47 ZeroCERT

1783 2025-02-28 10:03 visorfacturamultigestionfebrer...  

71f8a32075bd00161066b175148fce08


Generic Malware Malicious Library ASPack MSOffice File CAB OS Processor Check VirusTotal Malware Buffer PE suspicious privilege Check memory Checks debugger buffers extracted unpack itself AntiVM_Disk VM Disk Size Check ComputerName 		3.2 M 2 ZeroCERT

1784 2025-02-28 10:01 setup7029.msi  

d81d3895c1062240d4a9060914bf7576


Generic Malware Malicious Library MSOffice File CAB OS Processor Check VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself AntiVM_Disk VM Disk Size Check ComputerName 		1 2 2.4 M 14 ZeroCERT

1785 2025-02-28 09:59 FydOzyQ.exe  

231c20b0fbf247fb166c6c0ef7bb268d


Malicious Library ScreenShot AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware Code Injection Check memory Checks debugger buffers extracted unpack itself crashed 		7.4 M 33 ZeroCERT

keyword