popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
2446 2024-07-07 18:55 buildj.exe  

7debc473f9ec83c3d000a57466eab9b2


Vidar Generic Malware Malicious Library Antivirus UPX AntiDebug AntiVM PE File PE32 OS Processor Check FTP Client Info Stealer VirusTotal Malware Telegram MachineGuid Code Injection Malicious Traffic Check memory WMI unpack itself Windows utilities Collect installed applications suspicious process AppData folder sandbox evasion WriteConsoleW anti-virtualization installed browsers check Tofsee Windows Browser ComputerName DNS Software 		3 5 3 1 11.0 M 58 ZeroCERT

2447 2024-07-07 18:53 UGcLEmRAhjNb.exe  

f2a5c7e8313862aca9b7a6314ca73f3a


Generic Malware Malicious Library Malicious Packer UPX PE File PE64 DllRegisterServer dll OS Processor Check VirusTotal Malware crashed 		1.4 48 ZeroCERT

2448 2024-07-07 18:50 offic%E8%A1%A8%E6%A0%BCluck.ex...  

06592a8ca068935d98a5ada152e3393d


UPX PE File PE64 VirusTotal Malware Remote Code Execution 		2.6 M 49 ZeroCERT

2449 2024-07-07 18:48 qwerty.ps1  

b099d0ec774fccc05b662d86eaba027a


Hide_EXE Generic Malware Malicious Packer UPX Antivirus AntiDebug AntiVM PE File PE32 VirusTotal Malware powershell Buffer PE Code Injection Check memory buffers extracted heapspray Creates executable files RWX flags setting unpack itself powershell.exe wrote malicious URLs WriteConsoleW Windows crashed 		4 2 2 2 10.0 M 29 ZeroCERT

2450 2024-07-07 18:48 PO%2012.04%20pdf.exe  

d90a72256615ac3ba74c924012fea42c


Process Kill Generic Malware Suspicious_Script_Bin Malicious Library FindFirstVolume CryptGenKey UPX PE File PE32 Device_File_Check OS Processor Check Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Check memory Checks debugger unpack itself Windows Browser Email ComputerName Cryptographic key Software crashed 		6.0 53 ZeroCERT

2451 2024-07-07 18:48 asdfg.exe  

a2a9c309c5300a53d2c2fc41b71b174b


Malicious Library .NET framework(MSIL) PE File .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself ComputerName 		2.6 M 55 ZeroCERT

2452 2024-07-06 18:35 build.exe  

2dece3353cda5321fff7c92a697c37ee


Vidar Generic Malware Malicious Library Antivirus UPX AntiDebug AntiVM PE File PE32 OS Processor Check FTP Client Info Stealer VirusTotal Malware Telegram MachineGuid Code Injection Malicious Traffic Check memory WMI unpack itself Windows utilities Collect installed applications suspicious process AppData folder sandbox evasion WriteConsoleW anti-virtualization installed browsers check Tofsee Windows Browser ComputerName DNS Software 		3 5 3 1 11.0 M 60 ZeroCERT

2453 2024-07-06 18:33 CoronaVirus.exe  

055d1462f66a350d9886542d4d79bc2b


Generic Malware Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware AutoRuns suspicious privilege Check memory Checks debugger Creates executable files unpack itself suspicious process sandbox evasion shadowcopy delete installed browsers check Ransomware Windows Browser ComputerName Remote Code Execution 		9.6 M 63 ZeroCERT

2454 2024-07-06 18:31 RedLineStealer.exe  

a957dc16d684fbd7e12fc87e8ee12fea


Generic Malware Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware unpack itself crashed 		2.4 M 62 ZeroCERT

2455 2024-07-06 18:30 stealc_zov.exe  

253ccac8a47b80287f651987c0c779ea


Gen1 Generic Malware Malicious Library UPX Malicious Packer PE File PE32 DLL OS Processor Check Browser Info Stealer Malware download FTP Client Info Stealer Vidar VirusTotal Email Client Info Stealer Malware c&c Malicious Traffic Check memory Creates executable files unpack itself Collect installed applications sandbox evasion anti-virtualization installed browsers check Stealc Stealer Windows Browser Email ComputerName DNS Software plugin 		8 1 16 8.4 M 65 ZeroCERT

2456 2024-07-06 18:29 newbuild.exe  

9ab4de8b2f2b99f009d32aa790cd091b


RedLine stealer RedlineStealer Malicious Library .NET framework(MSIL) UPX PE File .NET EXE PE32 OS Processor Check Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware Microsoft suspicious privilege Check memory Checks debugger buffers extracted unpack itself Collect installed applications installed browsers check Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 6 6.2 M 63 ZeroCERT

2457 2024-07-06 18:27 setup.exe  

6b189fc6ddde33cba5c63e1dfec82b2a


Malicious Library PE File PE32 VirusTotal Malware Checks debugger WMI Creates executable files RWX flags setting unpack itself Checks Bios anti-virtualization ComputerName DNS 		1 5.2 M 37 ZeroCERT

2458 2024-07-06 18:25 leva.exe  

de1f91ae5c55b1cbbc6d6561464d7d99


Gen1 EnigmaProtector Generic Malware Malicious Library UPX Malicious Packer AntiDebug AntiVM PE File PE32 DLL OS Processor Check Browser Info Stealer Malware download FTP Client Info Stealer Vidar VirusTotal Email Client Info Stealer Malware c&c Code Injection Malicious Traffic Check memory Creates executable files unpack itself Collect installed applications suspicious process sandbox evasion WriteConsoleW anti-virtualization installed browsers check Stealc Stealer Windows Browser Email ComputerName DNS Software crashed plugin 		8 3 16 12.4 M 35 ZeroCERT

2459 2024-07-06 18:25 CryptoWall.exe  

919034c8efb9678f96b47a20fa6199f2


ScreenShot KeyLogger AntiDebug AntiVM PE File PE32 VirusTotal Malware Buffer PE Code Injection buffers extracted IP Check DNS 		2 10 3 7.8 M 60 ZeroCERT

2460 2024-07-06 18:22 univ.exe  

217b817f890ef7fc49dc9207d55d2a01


GCleaner Generic Malware Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware Malicious Traffic human activity check DNS 		1 1 1 1 3.4 M 57 ZeroCERT

keyword