popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
1891 2025-02-19 11:42 blaq.exe  

7176873d83d97247c18a9037ffa5964f


Generic Malware Malicious Library UPX PE File PE32 DLL Browser Info Stealer buffers extracted Creates executable files unpack itself AppData folder Browser 		12 13 5.0 ZeroCERT

1892 2025-02-19 11:41 minddd.exe  

cae5f3774bbda4a4fa5f58e42395829a


PE File PE64 MachineGuid Check memory Checks debugger unpack itself Check virtual network interfaces DNS 		1 3.0 ZeroCERT

1893 2025-02-19 11:40 edd.exe  

28be9bba86fa8a13cc6cf36724d28589


PE File PE64 Check memory Checks debugger unpack itself Check virtual network interfaces DNS 		1 2.8 ZeroCERT

1894 2025-02-19 11:40 ed.ps1  

7a20a5ebf46ab756a3781ce55fc8bb63


Hide_EXE Generic Malware UPX Malicious Library Malicious Packer Confuser .NET Antivirus AntiDebug AntiVM PE File DLL PE32 .NET EXE FormBook Browser Info Stealer Malware download Malware powershell Buffer PE Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself powershell.exe wrote AppData folder Browser 		7 7 1 11.8 ZeroCERT

1895 2025-02-19 11:38 Devil.exe  

eb6beba0181a014ac8c0ec040cb1121a


Generic Malware Malicious Packer PE File PE32 Browser Info Stealer FTP Client Info Stealer Email Client Info Stealer suspicious privilege MachineGuid Check memory AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName Software 		1 5.0 ZeroCERT

1896 2025-02-19 11:38 MAGNIFICENT_MAILBOX.exe  

a1d8035b93923215c7d7cbc17e735deb


Malicious Packer UPX PE File PE64 Checks debugger DNS 		1 3.2 ZeroCERT

1897 2025-02-19 11:36 main_mpsl  

e9bcd0799cdb5a780356507ecb0461ff


AntiDebug AntiVM ELF Email Client Info Stealer Code Injection Check memory Checks debugger unpack itself installed browsers check Browser Email 		3.2 ZeroCERT

1898 2025-02-19 11:35 ikpo.ps1  

d8ed066f1231767464642fe846f37d99


Hide_EXE Generic Malware UPX Antivirus Malicious Library Malicious Packer Confuser .NET AntiDebug AntiVM PE File DLL PE32 .NET EXE Browser Info Stealer Phishing powershell Buffer PE Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself powershell.exe wrote AppData folder Browser DNS 		15 15 5 11.2 ZeroCERT

1899 2025-02-19 11:33 mtyihjksfda.exe  

eb12e94f260c4e66eb2dbc74bc44bb84


PE File PE32 unpack itself ComputerName crashed 		1.6 ZeroCERT

1900 2025-02-19 11:33 1358.exe  

a060b37c0ef63cafec92efde7fc6eeb9


Generic Malware Malicious Library .NET framework(MSIL) UPX ScreenShot Escalate priviledges Code injection AntiDebug AntiVM PE File PE32 OS Processor Check .NET EXE PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates executable files ICMP traffic unpack itself Windows utilities suspicious process WriteConsoleW Windows RCE DNS 		1 8.2 ZeroCERT

1901 2025-02-19 11:31 coddee.exe  

3226cbb0e99af57d6574e04c76364877


PE File PE64 Check memory Checks debugger unpack itself Check virtual network interfaces DNS 		1 2.8 ZeroCERT

1902 2025-02-19 11:31 ik.exe  

40a3b67a99299a4f0f3a352b4f7739c9


Generic Malware Malicious Library UPX PE File PE32 DLL Browser Info Stealer Phishing buffers extracted Creates executable files unpack itself AppData folder suspicious TLD Browser DNS 		15 15 5 4.6 ZeroCERT

1903 2025-02-19 11:29 beacon_x64.exe  

77bc5d5c49245b9f88fe6bded397108f


Malicious Library PE File PE64 RWX flags setting unpack itself ComputerName DNS 		1 4.0 ZeroCERT

1904 2025-02-19 11:29 laserrrrrrrr.ps1  

c1a6a13984d7ff91ce8cacc203ad8f99


Formbook Hide_EXE Generic Malware UPX Malicious Library Malicious Packer Confuser .NET Antivirus AntiDebug AntiVM PE File DLL PE32 .NET EXE Browser Info Stealer powershell Buffer PE Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself powershell.exe wrote AppData folder suspicious TLD Browser DNS 		28 16 4 10 12.6 ZeroCERT

1905 2025-02-19 11:27 ksdrgewt.exe  

c86d74db513409a3dc9ac700bd4a33b2


PE File PE32 unpack itself ComputerName crashed 		1.6 ZeroCERT

keyword