popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
2356 2024-07-10 09:52 Update2.js  

1d07102e4ad699b952201104aca88770


VBScript wscript.exe payload download unpack itself Tofsee crashed Dropper 		1 2 2 10.0 guest

2357 2024-07-10 09:52 Update.js  

94a69d2789ce8db937bd23160c7cf57b


VBScript wscript.exe payload download Tofsee crashed Dropper 		1 2 2 10.0 guest

2358 2024-07-10 07:46 wev233v22.exe  

f7f9d3c98351d9be736e7aafb3563561


Gen1 Generic Malware Malicious Library UPX Antivirus Malicious Packer Anti_VM PE File PE64 DLL OS Processor Check ftp wget VirusTotal Malware Check memory Creates executable files unpack itself 		3.2 M 50 ZeroCERT

2359 2024-07-10 07:41 1.exe  

21cccf69e6aac10cae5b938d7b6c5fd4


Lumma Stealer UPX PE File PE32 VirusTotal Malware 		1.2 51 ZeroCERT

2360 2024-07-10 07:38 200.exe  

74454c0916108ed9de037798dd9fb948


Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware unpack itself 		2.2 32 ZeroCERT

2361 2024-07-10 07:36 2.exe  

536b6b4464f2476d693267bd71d9a1ee


Lumma Stealer UPX PE File PE32 VirusTotal Malware 		1.2 52 ZeroCERT

2362 2024-07-09 21:37 https://l.facebook.com/l.php?u...  

c896711e056cb6f0df71a7c8e0fac71c


Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Hijack Network Sniff Audio HTTP DNS Code injection Internet API persistence FTP KeyLogger P2P AntiDebug AntiVM PNG Format MSOffice File icon Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		13 10 2 4.8 guest

2363 2024-07-09 21:37 https://www.facebook.com/38022...  

1248cb643e2592a6bcce60711dc10617


Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Hijack Network Sniff Audio HTTP DNS Code injection Internet API persistence FTP KeyLogger P2P AntiDebug AntiVM PNG Format icon MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		10 8 2 4.2 guest

2364 2024-07-09 21:31 https://l.facebook.com/l.php?u...  

2bec4686337f2e399b71386575535145


Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Hijack Network Sniff Audio HTTP DNS Code injection Internet API persistence FTP KeyLogger P2P AntiDebug AntiVM PNG Format MSOffice File icon Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		12 10 2 4.2 guest

2365 2024-07-09 18:49 DS_Store.exe  

14df06539b72837adb9f8d13cfcea6db


Generic Malware Malicious Packer UPX PE File PE32 VirusTotal Malware PDB Remote Code Execution 		0.8 7 ZeroCERT

2366 2024-07-09 18:47 DS_Store.exe  

14df06539b72837adb9f8d13cfcea6db


Generic Malware Malicious Packer UPX PE File PE32 VirusTotal Malware PDB Remote Code Execution 		0.8 7 ZeroCERT

2367 2024-07-09 18:41 2aba0c4cfb95beba9ddb8208234f1b...  

432230af1d59dac7dfb47e0684807240


Escalate priviledges PWS KeyLogger AntiDebug AntiVM VirusTotal Malware suspicious privilege Check memory Checks debugger Creates shortcut Creates executable files unpack itself DNS 		3 4.2 5 ZeroCERT

2368 2024-07-09 18:21 소명자료 목록.hwp.lnk  

a330b834cc2ec19c3e151f07fb4b877c


Generic Malware Antivirus AntiDebug AntiVM HWP MSOffice File Lnk Format GIF Format VirusTotal Malware powershell AutoRuns suspicious privilege Code Injection Check memory Checks debugger Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		1 6.0 24 ZeroCERT

2369 2024-07-09 18:16 근로신청서 관련의 건.docx.lnk  

21d12dc7f08752293847af6ed19df0e3


Generic Malware Antivirus AntiDebug AntiVM Lnk Format GIF Format VirusTotal Malware powershell suspicious privilege Code Injection Check memory Checks debugger Creates shortcut unpack itself powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		5.2 8 ZeroCERT

2370 2024-07-09 17:10 fromblueRmilxch.exe  

0234bff4bd4e6dd7a80d3fde4f12fc09


Malicious Library Malicious Packer .NET framework(MSIL) PE File .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself ComputerName 		2.4 M 35 ZeroCERT

keyword