popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
21811 2023-01-27 10:15 cred.dll  

e2ee20e2f0a8853cae1772d095543799


Ave Maria WARZONE RAT Malicious Library UPX PE32 OS Processor Check DLL PE File Browser Info Stealer FTP Client Info Stealer VirusTotal Malware Cryptocurrency wallets Cryptocurrency PDB Malicious Traffic Checks debugger unpack itself sandbox evasion installed browsers check Browser DNS Software 		1 1 6.4 M 38 ZeroCERT

21812 2023-01-27 09:34 cmpbksrvc32.cmd  

bc352f34af0f8ee2c8296dd6aa86b7e7


PWS[m] Generic Malware Downloader Antivirus Malicious Library Create Service DGA Socket ScreenShot DNS Internet API Code injection Sniff Audio HTTP Steal credential KeyLogger P2P Escalate priviledges FTP Http API AntiDebug AntiVM PowerShell PE32 PE File Malware powershell suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself powershell.exe wrote Check virtual network interfaces suspicious process AppData folder WriteConsoleW Windows ComputerName DNS Cryptographic key crashed 		1 1 4 11.2 ZeroCERT

21813 2023-01-27 09:31 boom.exe  

8463849a48326c8b46c38717c30a7acc


RAT PE File PE64 VirusTotal Malware Check memory Checks debugger unpack itself crashed 		2.2 M 22 ZeroCERT

21814 2023-01-27 09:29 .win32.exe  

c98fd628f48ea8674c35931367a586e9


Malicious Library UPX PE32 OS Processor Check PE File VirusTotal Malware PDB RCE 		2.2 M 42 ZeroCERT

21815 2023-01-27 09:29 vbc.exe  

a2e898a0d8e69dcc2d47202fd1cb8fb2


PWS .NET framework PE32 .NET EXE PE File VirusTotal Malware PDB Check memory Checks debugger unpack itself ComputerName 		2.4 24 ZeroCERT

21816 2023-01-27 09:27 TradingView_setup.msi  

6bf24266e05b3cd35f35ec00fd6329a6


Gen2 Generic Malware Malicious Library Antivirus Malicious Packer UPX MSOffice File OS Processor Check CAB PE32 DLL PE File VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself AppData folder AntiVM_Disk VM Disk Size Check ComputerName crashed 		2.8 M 5 ZeroCERT

21817 2023-01-26 11:10 PO_6733.exe  

76218662ffd8397441fadb34d12de1cc


AgentTesla PWS[m] PWS .NET framework browser info stealer email stealer Generic Malware Google Chrome User Data Antivirus Socket ScreenShot DNS KeyLogger AntiDebug AntiVM PE32 .NET EXE PE File VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key 		1 11.2 M 32 ZeroCERT

21818 2023-01-26 11:09 aa.exe  

4901ce4dd0d78d01170732498f3e8c49


Malicious Library UPX PE32 OS Processor Check PE File VirusTotal Malware PDB unpack itself RCE 		2.0 40 r0d

21819 2023-01-26 11:08 document26.doc  

75dd58e072281f26204dc977d0cb83b3


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic buffers extracted RWX flags setting exploit crash IP Check Tofsee Windows Exploit DNS crashed Downloader 		3 7 9 1 4.8 M 29 ZeroCERT

21820 2023-01-26 11:05 monshedy2.2.exe  

01ff6e3e800d174e5d9a1b2b0b7ab5a0


Malicious Library UPX PE32 PE File OS Processor Check Malware download AveMaria NetWireRC VirusTotal Malware AutoRuns MachineGuid Check memory Creates executable files unpack itself AppData folder Windows RAT ComputerName DNS DDNS keylogger 		2 4 5.6 M 32 ZeroCERT

21821 2023-01-26 11:03 cc.exe  

7c684ac9c2b1d2018031e342f6be13f7


Malicious Library UPX PE32 OS Processor Check PE File VirusTotal Malware PDB RCE 		1.8 M 22 ZeroCERT

21822 2023-01-26 11:02 nmnb.exe  

58a93d1d064b9e8265ea798531adb0bf


Malicious Library UPX PE32 PE File FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files ICMP traffic unpack itself DNS 		8 22 2 2 6.4 M 30 ZeroCERT

21823 2023-01-26 11:02 nonetrollplease.exe  

f1354bde910724c6efa5bdd025827bdb


Generic Malware Anti_VM UPX PE32 OS Processor Check PE File VirusTotal Malware Checks Bios Detects VirtualBox Detects VMWare VMware anti-virtualization Firmware crashed 		3.6 M 23 ZeroCERT

21824 2023-01-26 11:02 vbc.exe  

df4bcb8211f980a6fccaf369e4e86140


PWS[m] Generic Malware Antivirus SMTP KeyLogger AntiDebug AntiVM PE32 .NET EXE PE File Browser Info Stealer Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW IP Check Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed keylogger 		1 2 5 14.6 M 26 ZeroCERT

21825 2023-01-26 11:01 race.exe  

415bc4fc3537b94dbdd9f15ed8af7424


RAT Ave Maria WARZONE RAT Malicious Library UPX Malicious Packer VMProtect MPRESS PE32 .NET EXE PE File OS Processor Check JPEG Format DLL PE64 Malware download Amadey VirusTotal Malware AutoRuns Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Windows utilities suspicious process AppData folder WriteConsoleW installed browsers check Kelihos Tofsee Windows Browser ComputerName DNS crashed 		11 9 7 8 12.4 M 40 ZeroCERT

keyword