popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
22351 2022-12-13 11:53 has_o.txt.lnk  

b860a22f327bce97aa198a5e859ae20a


PWS[m] Generic Malware Downloader Create Service DGA Socket ScreenShot DNS Internet API Code injection Sniff Audio HTTP Steal credential KeyLogger P2P Escalate priviledges FTP Http API AntiDebug AntiVM GIF Format VirusTotal Malware Code Injection Check memory Creates shortcut RWX flags setting unpack itself Check virtual network interfaces suspicious process malicious URLs WriteConsoleW Tofsee Interception DNS 		3 4 2 1 6.2 29 guest

22352 2022-12-13 10:24 daemon.exe  

6ef7c0cfe6202bc5f9e519d535fdc4a9


Gen1 Gen2 Malicious Library UPX Malicious Packer PE32 PE File OS Processor Check DLL Browser Info Stealer Malware download VirusTotal Malware RecordBreaker MachineGuid Malicious Traffic Check memory Creates executable files unpack itself Collect installed applications AppData folder installed browsers check Stealer Windows Browser DNS crashed 		9 1 5 7.0 M 29 ZeroCERT

22353 2022-12-13 10:20 241.docx  

587b90f5cf6b0776db453f4404022a98


MS_RTF_Obfuscation_Objects Word 2007 file format(docx) RTF File doc Malware download VirusTotal Malware Microsoft MachineGuid Malicious Traffic Check memory buffers extracted RWX flags setting exploit crash unpack itself AntiVM_Disk VM Disk Size Check GameoverP2P Zeus Exploit ComputerName Trojan Banking DNS crashed Downloader 		1 1 7 7.8 M 31 ZeroCERT

22354 2022-12-13 10:20 Trabacoli.zip  

f820d5e6a14718b5d77f74a664cb71db

 ZeroCERT

22355 2022-12-13 10:19 Lega.exe  

94403f8fdc2f6aab27c4b847c3f7ec36


SmokeLoader PWS Loki[b] Loki.m Generic Malware Malicious Library Malicious Packer UPX Antivirus PE32 OS Processor Check PE File PowerShell DLL JPEG Format Malware download Amadey FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell AutoRuns PDB suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger Creates shortcut Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process AppData folder WriteConsoleW Tofsee Windows Email ComputerName RCE DNS Cryptographic key Software Downloader 		4 6 14 10.0 M 38 ZeroCERT

22356 2022-12-13 10:16 ureterogram.js  

05f30e6eb50a0253a559910a0327acca

 ZeroCERT

22357 2022-12-13 10:15 mp3studios_95.exe  

cfe181cb0be52169a6412c28c50c1c64


AgentTesla PWS[m] browser info stealer Generic Malware Google Chrome User Data Downloader Malicious Packer Create Service DGA Socket ScreenShot DNS BitCoin Internet API Code injection Sniff Audio HTTP Steal credential KeyLogger P2P Escalate priviledges p Browser Info Stealer VirusTotal Malware suspicious privilege Code Injection Checks debugger WMI Creates executable files exploit crash unpack itself Windows utilities suspicious process malicious URLs WriteConsoleW installed browsers check Tofsee Windows Exploit Browser ComputerName RCE DNS crashed 		1 4 4 1 10.6 M 53 ZeroCERT

22358 2022-12-13 10:15 1rYkftS0a.exe  

42ebee5400c47788993ec41139b85452


PWS .NET framework PE32 .NET EXE PE File VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger unpack itself 		5.0 M 29 ZeroCERT

22359 2022-12-13 10:14 No.002678.exe  

3eea49f995524c00bedce79918ebabbd


PWS[m] PWS .NET framework Generic Malware Antivirus KeyLogger AntiDebug AntiVM PE32 .NET EXE PE File Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW IP Check Tofsee Windows Browser Email ComputerName Cryptographic key Software crashed 		1 2 1 15.0 M 32 ZeroCERT

22360 2022-12-13 10:14 mp3studios_92.exe  

6aa856e8e3543c832d0a6c13e64a76fa


Gen2 Trojan_PWS_Stealer Credential User Data Generic Malware Malicious Library SQLite Cookie Malicious Packer UPX Anti_VM PE32 OS Processor Check PE File PNG Format Browser Info Stealer VirusTotal Malware suspicious privilege MachineGuid Code Injection Checks debugger WMI Creates executable files exploit crash Windows utilities suspicious process WriteConsoleW installed browsers check Tofsee Windows Exploit Browser ComputerName RCE DNS crashed 		1 4 4 1 9.4 M 55 ZeroCERT

22361 2022-12-13 10:11 file.exe  

495898e8c6fd72defa11061f617f24b4


Gen2 Generic Malware Malicious Library Malicious Packer UPX Antivirus PE32 OS Processor Check PE File PowerShell VirusTotal Malware powershell suspicious privilege MachineGuid Check memory Checks debugger Creates shortcut unpack itself Windows utilities powershell.exe wrote Check virtual network interfaces suspicious process AppData folder WriteConsoleW Tofsee Windows ComputerName RCE Cryptographic key 		1 2 3 10.0 M 48 ZeroCERT

22362 2022-12-13 10:11 cred64.dll  

66dc0761882ecbb1d06dea6f101f28a8


PWS Loki[b] Loki.m Malicious Library PE32 DLL PE File FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Malicious Traffic Check memory Checks debugger unpack itself Email RCE DNS Software crashed 		1 2 1 6.0 M 50 ZeroCERT

22363 2022-12-13 10:07 weriiuiuetirefdguiertiudfgiiu....  

3ec71f52fa8513019b6711672666639e


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic buffers extracted RWX flags setting exploit crash Exploit DNS crashed Downloader 		1 1 3 4.6 M 32 ZeroCERT

22364 2022-12-13 10:06 CLEP.exe  

2b3bff5880cb5d9ab44c302bd1047313


NPKI Malicious Library Malicious Packer UPX PE32 PE File VirusTotal Malware AutoRuns Creates executable files Windows utilities suspicious process AppData folder Windows ComputerName 		2 2 1 2 6.4 M 57 ZeroCERT

22365 2022-12-13 10:06 mp3studios_95.exe  

cfe181cb0be52169a6412c28c50c1c64


AgentTesla PWS[m] browser info stealer Generic Malware Google Chrome User Data Downloader Malicious Packer Create Service DGA Socket ScreenShot DNS BitCoin Internet API Code injection Sniff Audio HTTP Steal credential KeyLogger P2P Escalate priviledges p Browser Info Stealer VirusTotal Malware suspicious privilege Code Injection Checks debugger WMI Creates executable files exploit crash unpack itself Windows utilities suspicious process malicious URLs WriteConsoleW installed browsers check Tofsee Windows Exploit Browser ComputerName RCE DNS crashed 		1 4 4 1 10.6 M 53 ZeroCERT

keyword