popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
22501 2022-12-08 05:35 http://wagwalker.test-app.link  

991249b1da4faebe139fe961c6ffb360


PWS[m] Downloader Create Service DGA Socket ScreenShot DNS Internet API Code injection Hijack Network Sniff Audio HTTP Steal credential KeyLogger P2P Escalate priviledges persistence FTP Http API AntiDebug AntiVM MSOffice File PNG Format JPEG Format Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		1 2 3 4.2 guest

22502 2022-12-07 16:13 Juzgado 09 civil del circuito ...  

4a69b0a3796dd688d57e11658ac1058c


Antivirus Word 2007 file format(docx) VirusTotal Malware RWX flags setting 		2.0 26 ZeroCERT

22503 2022-12-07 16:10 Juzgado 09 civil del circuito ...  

4a69b0a3796dd688d57e11658ac1058c


Antivirus Word 2007 file format(docx) VirusTotal Malware exploit crash unpack itself Exploit crashed 		2.6 26 ZeroCERT

22504 2022-12-07 16:03 cred64.dll  

98cc0f811ad5ff43fedc262961002498


PWS Loki[b] Loki.m Malicious Library PE32 DLL PE File FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Malicious Traffic Check memory Checks debugger unpack itself Email RCE DNS Software crashed 		1 1 1 1 6.0 M 53 ZeroCERT

22505 2022-12-07 15:51 pb1109.exe  

d925de50dd98dbed8ec6b93c98e6900c


Malicious Library VMProtect PE File PE64 VirusTotal Malware crashed 		2.0 M 23 ZeroCERT

22506 2022-12-07 15:51 newlege.exe  

065ee41f9a4f66bd96f0448d68cc4178


RedLine stealer[m] PWS Loki[b] Loki.m RAT .NET framework Malicious Library Malicious Packer UPX Admin Tool (Sysinternals etc ...) VMProtect Create Service Escalate priviledges AntiDebug AntiVM PE32 OS Processor Check PE File DLL .NET EXE PE64 JPEG Fo Browser Info Stealer Malware download Amadey FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Buffer PE AutoRuns PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Collect installed applications suspicious process AppData folder WriteConsoleW installed browsers check Tofsee Interception Windows Browser Email ComputerName WordPress RCE DNS Cryptographic key Software crashed 		9 10 10 1 19.4 M 49 ZeroCERT

22507 2022-12-07 15:51 lib32.exe  

72eae711b521c031d8c4616459f6da89


UPX PE File PE64 VirusTotal Malware MachineGuid Check memory Checks debugger unpack itself Windows Cryptographic key 		2.6 38 ZeroCERT

22508 2022-12-07 15:50 Logic%20Media%20Explorer.exe  

fa9b0ac29dc8d6d7d6078c6bb16bf669


Gen2 Malicious Library Malicious Packer UPX Antivirus OS Processor Check PE File PE64 VirusTotal Malware PDB RCE DNS 		1 1 3.0 5 ZeroCERT

22509 2022-12-07 15:50 dealer2.exe  

09e48a34077f3f13adf9e08c8c3626c0


RAT PWS Loki[b] Loki.m Generic Malware UPX Antivirus PE File PE64 VirusTotal Malware powershell suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote Check virtual network interfaces suspicious process Windows ComputerName DNS Cryptographic key 		1 1 6.8 36 ZeroCERT

22510 2022-12-07 15:47 newversion5.exe  

355ce92ce35c97a86c144d175d83a3a3


RAT PWS Loki[b] Loki.m Generic Malware UPX Antivirus PE File PE64 VirusTotal Malware powershell suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key 		1 1 1 7.8 M 28 ZeroCERT

22511 2022-12-07 11:35 3.txt.ps1  

fafde8664fa8689a4a001724caaa0b9a


Hide_EXE PowerShell Script Generic Malware Anti_VM Antivirus VirusTotal Malware powershell AutoRuns Check memory heapspray Creates executable files unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		1 1 5.2 M 5 ZeroCERT

22512 2022-12-07 10:31 9.exe  

c92a7da9372f6c5f1f1464aaaa4ce6bc


Cutwail Malicious Library ScreenShot DNS Internet API Code injection HTTP Escalate priviledges Http A Malware download VirusTotal Malware Buffer PE MachineGuid Code Injection Malicious Traffic Check memory buffers extracted ICMP traffic unpack itself Check virtual network interfaces suspicious process suspicious TLD sandbox evasion Tofsee Windows Backdoor ComputerName DNS Cryptographic key 		236 687 9 17.2 M 39 ZeroCERT

22513 2022-12-07 10:02 config_20.ps1  

c33e914ccb466f16598888c2c574818a


Generic Malware Antivirus Malware powershell Malicious Traffic Check memory unpack itself Check virtual network interfaces WriteConsoleW Windows ComputerName DNS Cryptographic key crashed 		1 1 4.6 ZeroCERT

22514 2022-12-07 09:49 csrss.exe  

fc978e8e9d20edf8f2a0c4b157fe1920


Malicious Library UPX PE32 PE File VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself 		22 24 1 17 4.4 M 34 ZeroCERT

22515 2022-12-07 09:48 lib.hta  

b31d78c45268cf98eb09a4ce81ab7f60


Generic Malware Antivirus PowerShell powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		4.8 ZeroCERT

keyword