popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
2146 2025-02-10 16:24 SysToolsvCardConverterSetup.ms...  

5cbc7e749bc01170dacbdff68e128b38


MSOffice File CAB VirusTotal Malware suspicious privilege Check memory Checks debugger buffers extracted unpack itself AntiVM_Disk VM Disk Size Check ComputerName DNS 		1 4.8 M 2 ZeroCERT

2147 2025-02-10 16:24 cann.exe  

4be8edd2f271ecc53882580be2e3ebee


Process Kill Generic Malware Suspicious_Script_Bin Malicious Library FindFirstVolume CryptGenKey UPX PE File Device_File_Check PE32 OS Processor Check DLL Browser Info Stealer VirusTotal Malware Checks debugger buffers extracted Creates executable files unpack itself AppData folder Browser 		15 15 7.2 M 49 ZeroCERT

2148 2025-02-10 16:23 WindowsServices.exe  

746788dfe51900ef82589acdb5b5ea38


njRAT backdoor Generic Malware PE File .NET EXE PE32 ActiveXObject VirusTotal Malware AutoRuns suspicious privilege Check memory Checks debugger Creates executable files unpack itself Windows utilities WriteConsoleW human activity check Windows 		5.6 M 37 ZeroCERT

2149 2025-02-10 16:22 cann.exe  

5917bf2e1fb602ed734ffae5e4a8dd27


PE File .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee Windows 		2 2 3.6 M 50 ZeroCERT

2150 2025-02-10 16:22 1AWhJsY.exe  

f6fb7202ef80ed4d874eba628ba855b8


Malicious Library .NET framework(MSIL) ScreenShot AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware Code Injection Check memory Checks debugger buffers extracted unpack itself crashed 		7.4 M 53 ZeroCERT

2151 2025-02-10 16:21 bitcoin3000.exe  

1e039f12c51a941bb072c73fe2def232


Emotet Gen1 Malicious Library UPX PE File PE64 CAB VirusTotal Malware AutoRuns PDB Checks debugger Creates executable files WriteConsoleW Windows RCE DNS 		1 4.0 M 29 ZeroCERT

2152 2025-02-10 16:18 Bjkm5hE.exe  

0f2e0a4daa819b94536f513d8bb3bfe2


Vidar Themida UPX PE File PE32 VirusTotal Malware Telegram Malicious Traffic Checks debugger unpack itself Checks Bios Detects VMWare VMware anti-virtualization Tofsee Windows ComputerName DNS crashed 		1 5 3 1 8.6 M 44 ZeroCERT

2153 2025-02-10 16:16 https://si.ua.es/es/wifi/docum...  

f86c99412cf7e6c5c1ec4f68dfc30c99


Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Hijack Network Sniff Audio HTTP DNS Code injection Internet API persistence FTP KeyLogger P2P AntiDebug AntiVM MSOffice File PNG Format JPEG Format Code Injection RWX flags setting unpack itself Windows utilities malicious URLs Tofsee Windows DNS 		3 2 5.2 3 guest

2154 2025-02-10 16:16 z.exe  

a6b4918f763f99f90f595c201f50239f


Generic Malware Malicious Library Malicious Packer Downloader UPX PE File PE64 OS Processor Check Emotet VirusTotal Malware Buffer PE AutoRuns MachineGuid Code Injection buffers extracted Creates executable files unpack itself sandbox evasion Windows 		6.8 M 53 ZeroCERT

2155 2025-02-10 16:15 bin2.exe  

eeb081699fcfdc3e9b531990a0826587


Malicious Library Malicious Packer PE File PE32 MZP Format VirusTotal Malware MachineGuid Check memory Creates executable files unpack itself AppData folder ComputerName crashed 		1 4.4 M 66 ZeroCERT

2156 2025-02-10 16:15 ServerX.exe  

37e7cdd750ac364b0289287497294d10


Generic Malware UPX PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Check memory Checks debugger Creates executable files unpack itself Windows utilities AppData folder WriteConsoleW Windows 		6.0 M 57 ZeroCERT

2157 2025-02-07 14:35 giania.exe  

18653ba7baa00d4eae7f02368a3b5bc2


Generic Malware Malicious Library UPX PE File PE32 DLL Browser Info Stealer VirusTotal Malware buffers extracted Creates executable files unpack itself AppData folder Browser DNS 		19 20 6.0 M 52 ZeroCERT

2158 2025-02-07 14:26 ram.exe  

72ec64d0bc0b31f8842c9b5d488c11e7


Emotet Generic Malware Malicious Library Malicious Packer ASPack UPX Admin Tool (Sysinternals etc ...) PE File PE64 CAB OS Processor Check DLL PE32 MZP Format VirusTotal Malware PDB Checks debugger Creates executable files unpack itself DNS crashed 		17 4.0 M 29 ZeroCERT

2159 2025-02-07 14:23 sas.exe  

f0328a0d719b2a80e950b562ca0d8f80


PE File PE64 VirusTotal Malware Check memory DNS 		1 2.0 M 39 ZeroCERT

2160 2025-02-07 14:23 code.exe  

88ba5ea93cd4d63db0c02028808483d5


Formbook Generic Malware Malicious Library UPX PE File PE32 DLL Browser Info Stealer VirusTotal Malware buffers extracted Creates executable files unpack itself AppData folder Browser DNS 		23 20 6 12 6.6 M 53 ZeroCERT

keyword