popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
2401 2024-07-08 17:01 sync.exe  

69bf43760932bcccc3f1d58edc80bef9


UPX PE File PE64 VirusTotal Malware 		2.0 M 19 ZeroCERT

2402 2024-07-08 17:01 pc9.chm  

7d101e683e7dbdfb83788c109c7b7de3


AntiDebug AntiVM CHM Format PNG Format JPEG Format VirusTotal Malware MachineGuid Code Injection Check memory RWX flags setting unpack itself ComputerName 		2.8 4 ZeroCERT

2403 2024-07-08 16:56 Alingme.exe  

2a16ef4fbdab9645dbd0dff6f3c1b0af


Malicious Library SMTP AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware AutoRuns PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Windows utilities Check virtual network interfaces WriteConsoleW Windows ComputerName DNS Cryptographic key 		1 5 1 14.4 M 44 ZeroCERT

2404 2024-07-08 16:54 cab.exe  

5aefab6d98b943df267e28b42b5871e0


UPX PE File PE32 VirusTotal Malware suspicious privilege Windows utilities WriteConsoleW Windows DNS 		2 4.4 M 47 ZeroCERT

2405 2024-07-08 16:53 2019년 졸업자 취업통계조사 붙임.chm...  

972be4aec6506e8bf4dc8d72491099f6


AntiDebug AntiVM CHM Format VirusTotal Malware Code Injection Check memory unpack itself crashed 		2.6 28 ZeroCERT

2406 2024-07-08 16:53 Uialn.exe  

4104370a4f4d897292560d55666cdb10


Generic Malware Malicious Library Antivirus AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware powershell PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote Check virtual network interfaces suspicious process Windows ComputerName Cryptographic key crashed 		1 5 1 15.0 M 52 ZeroCERT

2407 2024-07-08 16:52 svchost.exe  

cb146d2042ae0df2c95f3afde7256583


UPX PE File PE64 VirusTotal Malware suspicious privilege Windows utilities suspicious TLD WriteConsoleW Windows DNS 		1 3 2 4.0 M 19 ZeroCERT

2408 2024-07-08 16:51 venture45.hta  

e17e0242e9fe3834c192513619013b92

VirusTotal Malware unpack itself crashed 		1.4 23 ZeroCERT

2409 2024-07-08 16:50 Erlnb.exe  

9352ddda312eeb93823ee2e6cc9a83bc


Generic Malware Malicious Library .NET framework(MSIL) Antivirus AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware powershell PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut unpack itself powershell.exe wrote Check virtual network interfaces suspicious process Windows ComputerName Cryptographic key 		1 2 1 13.6 M 50 ZeroCERT

2410 2024-07-08 16:50 cp.exe  

a40cfc38fce8d0285fd1462bd2d7abd1


UPX PE File PE64 VirusTotal Malware suspicious privilege Windows utilities WriteConsoleW Windows DNS 		1 3.8 M 20 ZeroCERT

2411 2024-07-08 14:24 INVESTIGATION_OF_SEXUAL_HARASS...  

9345d52abd5bab4320c1273eb2c90161


ZIP Format Word 2007 file format(docx) VirusTotal Malware exploit crash unpack itself Tofsee Exploit crashed 		2 4 1 1 2.6 M 4 ZeroCERT

2412 2024-07-08 14:16 482c30dc5680e0c01b8a117ce969ae...  

482c30dc5680e0c01b8a117ce969aef0


MSOffice File VirusTotal Malware unpack itself suspicious TLD 		1 2.0 3 ZeroCERT

2413 2024-07-08 14:09 INVESTIGATION_OF_SEXUAL_HARASS...  

9345d52abd5bab4320c1273eb2c90161


ZIP Format Word 2007 file format(docx) VirusTotal Malware unpack itself Tofsee 		2 4 1 2.0 4 ZeroCERT

2414 2024-07-08 13:29 node.js.exe  

9e6ba754b50c865d54a69075a65620ae


Gen1 RedLine stealer NSIS Generic Malware Malicious Library UPX Malicious Packer Admin Tool (Sysinternals etc ...) Obsidium protector Antivirus Anti_VM Javascript_Blob PE File PE32 DLL PE64 OS Processor Check ftp VirusTotal Malware suspicious privilege Check memory Creates executable files unpack itself AppData folder Ransomware 		4.2 1 ZeroCERT

2415 2024-07-08 11:11 archive.rar  

2074be740d489e298715968ed68fd122


Escalate priviledges PWS KeyLogger AntiDebug AntiVM Malware suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself IP Check Tofsee Windows Discord DNS 		10 26 18 7 5.2 M ZeroCERT

keyword