Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
1906 2025-02-19 11:26 emgg.ps1  

d3b7a6cbb1106c831806fa680b1dad50


Hide_EXE Generic Malware Confuser .NET Antivirus PE File PE64 powershell MachineGuid Check memory Checks debugger Creates executable files unpack itself powershell.exe wrote Check virtual network interfaces DNS
1 5.8 ZeroCERT

1907 2025-02-19 11:25 bea.exe  

e3a004b573f3b6a8e32a6cf74e63c9d2


Malicious Library PE File PE64 RWX flags setting unpack itself ComputerName DNS
1 4.0 ZeroCERT

1908 2025-02-19 11:24 artifact_x64_test2.exe  

b1e8cabf1133b394028a2ab19df8c80a


Malicious Library PE File PE64 RWX flags setting DNS crashed
1 1 1.2 ZeroCERT

1909 2025-02-19 11:22 beacon.exe  

c5d8217bd1a44f9ef1966ca00c91f85a


Malicious Library PE File PE64 RWX flags setting unpack itself ComputerName DNS
1 4.0 ZeroCERT

1910 2025-02-19 11:22 monthdragon.exe  

3987c20fe280784090e2d464dd8bb61a


ScreenShot AntiDebug AntiVM PE File .NET EXE PE32 Code Injection Check memory Checks debugger buffers extracted unpack itself crashed
6.4 ZeroCERT

1911 2025-02-19 11:10 setup8812.msi  

40b91f7289d9e797d4318581af642ad8


Generic Malware Malicious Library MSOffice File CAB OS Processor Check suspicious privilege Check memory Checks debugger unpack itself AntiVM_Disk VM Disk Size Check ComputerName
2 2 1 2.2 ZeroCERT

1912 2025-02-19 11:07 TASLoginBase.dll  

edc0784c522abc4891d9bedac02e0a1c


Generic Malware Malicious Library UPX PE File DLL PE32 OS Processor Check Checks debugger unpack itself crashed
1.0 ZeroCERT

1913 2025-02-19 11:07 cabal.exe  

c0b915db483249fbb011d4c73d0dbf1f


Emotet Generic Malware Malicious Library .NET framework(MSIL) UPX Downloader Anti_VM PE File .NET EXE PE32 DLL OS Processor Check .NET DLL MSOffice File CAB Malware Buffer PE PDB suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files ICMP traffic unpack itself Check virtual network interfaces AppData folder Ransomware Windows Update DNS Cryptographic key
116 2 7 9.4 ZeroCERT

1914 2025-02-19 11:07 fg.exe  

e86ce954943b063bb003f4769b82f7e9


XWorm Hide_EXE WebCam Antivirus UPX AntiDebug AntiVM PE File .NET EXE PE32 DLL OS Processor Check .NET DLL suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities AppData folder AntiVM_Disk VM Disk Size Check Windows ComputerName DNS Cryptographic key
1 10.8 ZeroCERT

1915 2025-02-19 11:06 tt012.exe  

76283d02eb521a667273085a9068b59d


Themida UPX PE File PE32 Checks debugger unpack itself Checks Bios Detects VMWare AntiVM_Disk VMware anti-virtualization VM Disk Size Check Windows crashed
5.0 ZeroCERT

1916 2025-02-19 11:03 cabalmain.exe  

1504c256a0a41aa361ccc85e73a6d918


Gen1 Themida Generic Malware EnigmaProtector Malicious Library Malicious Packer Antivirus Downloader UPX Anti_VM PE File ftp DllRegisterServer dll PE32 OS Processor Check
1.0 ZeroCERT

1917 2025-02-19 11:02 update.exe  

d4318770944feebcb959c1318304be0f


Generic Malware Malicious Library .NET framework(MSIL) UPX PE File .NET EXE PE32 Malware PDB suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files ICMP traffic unpack itself Check virtual network interfaces AppData folder Windows Update DNS Cryptographic key
3 2 4 6.8 ZeroCERT

1918 2025-02-19 10:55 jfufk.exe  

92b0881788e7f86b38779db248eb959b


Generic Malware Malicious Library UPX PE File PE32 MZP Format buffers extracted unpack itself sandbox evasion Browser
2.4 ZeroCERT

1919 2025-02-19 10:52 ADGService.exe  

d760d6d65e21de73fedc69a38c5dc0d4


Malicious Library PE File PE64
0.6 ZeroCERT

1920 2025-02-19 10:50 kissingdragonbestloverthinking...  

94a3b721c0f09451abe525abe8cf5c32


MS_RTF_Obfuscation_Objects RTF File doc Malware download Vulnerability Malware Malicious Traffic buffers extracted exploit crash unpack itself Exploit DNS crashed
3 3 6 4.0 ZeroCERT