popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
2236 2025-01-23 18:45 99999.exe  

cd49dea59efe62d7288c76280c38f134


Generic Malware UPX PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Check memory Checks debugger Creates executable files unpack itself Windows utilities AppData folder WriteConsoleW Creates autorun.inf human activity check Windows 		6.2 M 58 ZeroCERT

2237 2025-01-23 18:41 22.exe  

448478c46fe0884972f0047c26da0935


Browser Login Data Stealer Generic Malware Malicious Library Downloader Malicious Packer UPX PE File PE32 OS Processor Check VirusTotal Malware Windows DNS DDNS keylogger 		9 4.4 M 63 ZeroCERT

2238 2025-01-23 18:39 discordupdate.exe  

25befffc195ce47401f74afbe942f3ff


Malicious Library .NET framework(MSIL) UPX PE File .NET EXE PE32 OS Processor Check VirusTotal Malware Check memory Checks debugger unpack itself 		2.0 M 59 ZeroCERT

2239 2025-01-23 18:34 eaf175ea-4567-44d0-ba47-1c6686...  

0b9c6adaad6b250ad72923c2014b44b0


Malicious Library Malicious Packer PE File .NET EXE PE32 VirusTotal Malware Buffer PE AutoRuns suspicious privilege MachineGuid Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW human activity check Windows ComputerName DNS DDNS 		3 11.4 M 61 ZeroCERT

2240 2025-01-23 18:32 update.exe  

a47e4a0f261c300fb4b350ba21702cdf


RedLine stealer Antivirus ScreenShot PWS AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware PDB Code Injection Check memory Checks debugger buffers extracted ICMP traffic unpack itself Windows DNS Cryptographic key 		2 11.6 M 53 ZeroCERT

2241 2025-01-23 18:30 Remittance_form.exe  

b10bc7e9b22158fcf311a4ad0435d7f5


njRAT backdoor Generic Malware Malicious Library Antivirus UPX PE File MSOffice File CAB PE32 OS Name Check OS Processor Check DLL VirusTotal Malware PDB suspicious privilege Check memory Checks debugger buffers extracted Creates executable files unpack itself AppData folder AntiVM_Disk VM Disk Size Check Windows ComputerName RCE Cryptographic key crashed 		2 5.4 M 17 ZeroCERT

2242 2025-01-23 18:30 setup.msi  

ad69b77049fc6fc49ea4766e4501575b


Generic Malware Malicious Library MSOffice File CAB OS Processor Check VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself AntiVM_Disk VM Disk Size Check ComputerName 		5 2 2.4 15 ZeroCERT

2243 2025-01-23 18:28 Network.exe  

31c81fac210cd56abb84ff55ede0365b


Antivirus UPX PE File .NET EXE PE32 OS Processor Check VirusTotal Malware suspicious privilege MachineGuid Check memory Checks debugger unpack itself AntiVM_Disk VM Disk Size Check Windows ComputerName Cryptographic key 		4.0 54 ZeroCERT

2244 2025-01-23 18:26 access.exe  

5af2fd64b9622284e9cb099ac08ae120


Malicious Packer UPX PE File PE32 VirusTotal Malware unpack itself DNS 		1 3.6 M 63 ZeroCERT

2245 2025-01-23 18:25 SharpHound.exe  

7d9213f8f3cba4035542eff1c9dbb341


Malicious Library .NET framework(MSIL) UPX PE File .NET EXE PE32 OS Processor Check VirusTotal Malware PDB Check memory Checks debugger unpack itself Windows Cryptographic key 		2.8 M 57 ZeroCERT

2246 2025-01-23 06:51 jmkykhjksefkyt.exe  

65cc23e7237f3cff2d206a269793772e


Generic Malware Malicious Library Antivirus UPX PE File PE32 OS Processor Check Malware Malicious Traffic ComputerName DNS 		1 5 3.0 M ZeroCERT

2247 2025-01-23 06:47 nova_kaycee.vbs  

c5f0c9c14fae991ee6e6f25f8e7f0221


Generic Malware Downloader Antivirus Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Sniff Audio HTTP DNS Code injection Internet API FTP KeyLogger P2P AntiDebug AntiVM PowerShell powershell suspicious privilege Code Injection Check memory Checks debugger Creates shortcut Creates executable files unpack itself suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key 		1 6.8 M ZeroCERT

2248 2025-01-23 06:46 kj00kw.ps1  

19a08bc2cb81ffc243a4223121b4d6e9


Hide_EXE Generic Malware Antivirus UPX Malicious Library Malicious Packer Confuser .NET AntiDebug AntiVM PE File DLL PE32 .NET EXE Browser Info Stealer powershell Buffer PE Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself powershell.exe wrote AppData folder suspicious TLD Browser 		15 13 12.6 M ZeroCERT

2249 2025-01-23 06:45 cred64.dll  

f9f252d2dfbb062e1ccc62df48e3b531


Generic Malware Malicious Library UPX Antivirus PE File DLL PE64 OS Processor Check Browser Info Stealer FTP Client Info Stealer Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency PDB suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger Creates shortcut unpack itself Windows utilities suspicious process sandbox evasion installed browsers check Windows Browser Email ComputerName DNS Cryptographic key Software 		1 1 8.6 M ZeroCERT

2250 2025-01-23 06:40 Client.exe  

fb322bb8839082f017faf5d77b1789c1


Malicious Library Malicious Packer Antivirus .NET framework(MSIL) UPX PE File .NET EXE PE32 OS Processor Check Check memory Checks debugger unpack itself 		0.8 M ZeroCERT

keyword