popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
22471 2022-12-08 15:57 obz2.exe  

d0c67160c740f62c25b0558e9563a824


RAT UPX AntiDebug AntiVM PE32 .NET EXE PE File VirusTotal Malware AutoRuns Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows Cryptographic key 		8.8 M 49 ZeroCERT

22472 2022-12-08 15:53 REQUIREMENT LIST OF SPARES.xls  

64266fc0f0b37a26e14133ad19b98b7c


Generic Malware VBA_macro MSOffice File VirusTotal Malware exploit crash unpack itself Exploit crashed 		2 3.0 32 ZeroCERT

22473 2022-12-08 13:33 algo agreement.docx  

9e4b9ff1f4ac3230244f31fd2759ee0b


Doc XML Downloader Word 2007 file format(docx) VirusTotal Malware exploit crash unpack itself Exploit crashed 		2 2 2.8 M 11 guest

22474 2022-12-08 12:06 config_20.ps1  

48779787657945345533019bbf8e14ce


Generic Malware Antivirus Check memory unpack itself Check virtual network interfaces WriteConsoleW Windows ComputerName DNS Cryptographic key crashed 		1 3.4 M ZeroCERT

22475 2022-12-08 10:57 saiwer.exe  

369321f33d5ffaeeadb4da9f33c78156


PWS Loki[b] Loki.m RAT .NET framework Gen2 Trojan_PWS_Stealer Generic Malware Credential User Data Malicious Library Malicious Packer UPX Anti_VM SQLite Cookie AntiDebug AntiVM PE32 OS Processor Check PE File DLL .NET EXE PNG Format JPEG Format Browser Info Stealer Malware download Amadey FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files exploit crash unpack itself Windows utilities Collect installed applications suspicious process AppData folder WriteConsoleW installed browsers check Kelihos Tofsee Windows Exploit Browser Email ComputerName RCE DNS Cryptographic key Software crashed 		11 14 15 5 18.8 M 43 ZeroCERT

22476 2022-12-08 10:51 p10pim5u.exe  

9f935b74e327153df023aaa48e590f97


RedLine stealer[m] Malicious Library UPX AntiDebug AntiVM PE32 OS Processor Check PE File Browser Info Stealer FTP Client Info Stealer VirusTotal Malware Buffer PE PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Collect installed applications installed browsers check Windows Browser ComputerName DNS Cryptographic key Software crashed 		4 10.6 M 34 ZeroCERT

22477 2022-12-08 10:49 1.exe  

ff8b52645b3eb0b891935435db2621a2


Malicious Library UPX PE32 OS Processor Check PE File VirusTotal Malware Buffer PE PDB Check memory Checks debugger buffers extracted unpack itself Windows utilities AppData folder sandbox evasion WriteConsoleW Windows ComputerName 		1 5.0 M 31 ZeroCERT

22478 2022-12-08 10:47 TUN3.exe  

f59160f8bf6d380cdecbd2db94c61deb


Emotet RAT Gen1 PWS .NET framework Malicious Library UPX AntiDebug AntiVM PE32 PE File OS Processor Check PNG Format JPEG Format .NET EXE MSOffice File GIF Format DLL PE64 VirusTotal Malware AutoRuns MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files ICMP traffic RWX flags setting unpack itself Windows utilities Check virtual network interfaces AppData folder AntiVM_Disk VM Disk Size Check human activity check Tofsee Windows Google ComputerName DNS crashed 		21 27 5 15 16.0 M 34 ZeroCERT

22479 2022-12-08 10:46 .win32.exe  

4be31e244804fd6d2e0a8ba49447352a


Malicious Library UPX PE32 OS Processor Check PE File VirusTotal Malware PDB unpack itself RCE DNS 		1 2.8 M 44 ZeroCERT

22480 2022-12-08 10:44 JHBHGatT.exe  

60c2ecb44642d9e51cd4b17b82358cb8


PWS[m] SMTP KeyLogger AntiDebug AntiVM PE File PE64 Browser Info Stealer Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AgentTesla PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Windows Browser Email ComputerName DNS Cryptographic key Software crashed keylogger 		5 2 14.4 M 22 ZeroCERT

22481 2022-12-08 10:41 7s4udn5F1.exe  

b22e904e9814c22f6e32667b015c6dad


Confuser .NET PE32 .NET EXE PE File VirusTotal Malware Check memory Checks debugger unpack itself ComputerName 		2.6 44 r0d

22482 2022-12-08 10:40 setup_1670430157.2111816.exe  

89b2ce64736e525d07b5385fa50c5266


RedLine stealer[m] Malicious Library Admin Tool (Sysinternals etc ...) UPX AntiDebug AntiVM PE32 OS Processor Check PE File Browser Info Stealer FTP Client Info Stealer VirusTotal Malware Buffer PE PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted WMI unpack itself Collect installed applications suspicious TLD installed browsers check Windows Browser ComputerName DNS Cryptographic key Software crashed 		2 1 13.2 M 20 ZeroCERT

22483 2022-12-08 10:39 vbc.exe  

2b087c00777a630a4100c122f4687783


Malicious Library UPX PE32 PE File VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself 		23 24 1 21 4.2 M 28 ZeroCERT

22484 2022-12-08 10:38 .csrss.exe  

cc225cb1905a406897961c0377a9624e


PWS .NET framework PE32 .NET EXE PE File VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger unpack itself 		5.6 M 24 ZeroCERT

22485 2022-12-08 10:35 linda5.exe  

d6b4631a2fc321751906eef19c85bdef


Malicious Library UPX AntiDebug AntiVM PE32 OS Processor Check PE File DLL PDB Code Injection Checks debugger unpack itself AppData folder RCE 		2.6 M ZeroCERT

keyword