popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
1996 2025-02-19 11:33 mtyihjksfda.exe  

eb12e94f260c4e66eb2dbc74bc44bb84


PE File PE32 unpack itself ComputerName crashed 		1.6 ZeroCERT

1997 2025-02-19 11:33 1358.exe  

a060b37c0ef63cafec92efde7fc6eeb9


Generic Malware Malicious Library .NET framework(MSIL) UPX ScreenShot Escalate priviledges Code injection AntiDebug AntiVM PE File PE32 OS Processor Check .NET EXE PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates executable files ICMP traffic unpack itself Windows utilities suspicious process WriteConsoleW Windows RCE DNS 		1 8.2 ZeroCERT

1998 2025-02-19 11:31 coddee.exe  

3226cbb0e99af57d6574e04c76364877


PE File PE64 Check memory Checks debugger unpack itself Check virtual network interfaces DNS 		1 2.8 ZeroCERT

1999 2025-02-19 11:31 ik.exe  

40a3b67a99299a4f0f3a352b4f7739c9


Generic Malware Malicious Library UPX PE File PE32 DLL Browser Info Stealer Phishing buffers extracted Creates executable files unpack itself AppData folder suspicious TLD Browser DNS 		15 15 5 4.6 ZeroCERT

2000 2025-02-19 11:29 beacon_x64.exe  

77bc5d5c49245b9f88fe6bded397108f


Malicious Library PE File PE64 RWX flags setting unpack itself ComputerName DNS 		1 4.0 ZeroCERT

2001 2025-02-19 11:29 laserrrrrrrr.ps1  

c1a6a13984d7ff91ce8cacc203ad8f99


Formbook Hide_EXE Generic Malware UPX Malicious Library Malicious Packer Confuser .NET Antivirus AntiDebug AntiVM PE File DLL PE32 .NET EXE Browser Info Stealer powershell Buffer PE Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself powershell.exe wrote AppData folder suspicious TLD Browser DNS 		28 16 4 10 12.6 ZeroCERT

2002 2025-02-19 11:27 ksdrgewt.exe  

c86d74db513409a3dc9ac700bd4a33b2


PE File PE32 unpack itself ComputerName crashed 		1.6 ZeroCERT

2003 2025-02-19 11:26 emgg.ps1  

d3b7a6cbb1106c831806fa680b1dad50


Hide_EXE Generic Malware Confuser .NET Antivirus PE File PE64 powershell MachineGuid Check memory Checks debugger Creates executable files unpack itself powershell.exe wrote Check virtual network interfaces DNS 		1 5.8 ZeroCERT

2004 2025-02-19 11:25 bea.exe  

e3a004b573f3b6a8e32a6cf74e63c9d2


Malicious Library PE File PE64 RWX flags setting unpack itself ComputerName DNS 		1 4.0 ZeroCERT

2005 2025-02-19 11:24 artifact_x64_test2.exe  

b1e8cabf1133b394028a2ab19df8c80a


Malicious Library PE File PE64 RWX flags setting DNS crashed 		1 1 1.2 ZeroCERT

2006 2025-02-19 11:22 beacon.exe  

c5d8217bd1a44f9ef1966ca00c91f85a


Malicious Library PE File PE64 RWX flags setting unpack itself ComputerName DNS 		1 4.0 ZeroCERT

2007 2025-02-19 11:22 monthdragon.exe  

3987c20fe280784090e2d464dd8bb61a


ScreenShot AntiDebug AntiVM PE File .NET EXE PE32 Code Injection Check memory Checks debugger buffers extracted unpack itself crashed 		6.4 ZeroCERT

2008 2025-02-19 11:10 setup8812.msi  

40b91f7289d9e797d4318581af642ad8


Generic Malware Malicious Library MSOffice File CAB OS Processor Check suspicious privilege Check memory Checks debugger unpack itself AntiVM_Disk VM Disk Size Check ComputerName 		2 2 1 2.2 ZeroCERT

2009 2025-02-19 11:07 TASLoginBase.dll  

edc0784c522abc4891d9bedac02e0a1c


Generic Malware Malicious Library UPX PE File DLL PE32 OS Processor Check Checks debugger unpack itself crashed 		1.0 ZeroCERT

2010 2025-02-19 11:07 cabal.exe  

c0b915db483249fbb011d4c73d0dbf1f


Emotet Generic Malware Malicious Library .NET framework(MSIL) UPX Downloader Anti_VM PE File .NET EXE PE32 DLL OS Processor Check .NET DLL MSOffice File CAB Malware Buffer PE PDB suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files ICMP traffic unpack itself Check virtual network interfaces AppData folder Ransomware Windows Update DNS Cryptographic key 		116 2 7 9.4 ZeroCERT

keyword