popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
286 2024-09-07 17:06 sheisgoodgirlaroundmewholovedm...  

2aaf86224ef3338f2f4817f3684487b4


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware Malicious Traffic RWX flags setting exploit crash Tofsee Exploit DNS crashed 		1 3 1 4.4 M 28 ZeroCERT

287 2024-09-07 17:05 Chrome.exe  

f90a0ca2766ad3e02c15fe5622546d01


Gen1 Generic Malware Malicious Library ASPack UPX Malicious Packer Anti_VM PE File PE64 OS Processor Check DLL ZIP Format VirusTotal Malware Creates executable files 		2.4 M 24 ZeroCERT

288 2024-09-07 17:04 verynicegirlwantihavetokissher...  

afb14dcb82dbb041183e8d492c415a13


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware Malicious Traffic exploit crash unpack itself Tofsee Exploit DNS crashed 		1 3 1 4.8 M 41 ZeroCERT

289 2024-09-07 17:04 equitozzmondayMPDW-constraints...  

ac45ec4efd718861d4c51a619be863a1


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		1 2 1 7.6 M 4 ZeroCERT

290 2024-09-07 17:02 Installer.exe  

dcb050a81038862531cf2e23a095dbd0


Malicious Library .NET framework(MSIL) UPX PE File .NET EXE PE32 VirusTotal Malware PDB MachineGuid Check memory Checks debugger unpack itself 		2.6 M 38 ZeroCERT

291 2024-09-07 16:30 mony.exe  

d3d04b9a91899184dd243d0c9339928a


Malicious Library PE File .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself Check virtual network interfaces ComputerName DNS 		1 4.2 M 55 guest

292 2024-09-06 15:38 http://213.21.220.222:8080  


Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Hijack Network Sniff Audio HTTP DNS Code injection Internet API persistence FTP KeyLogger P2P AntiDebug AntiVM MSOffice File PNG Format JPEG Format VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		1 2 6.4 guest

293 2024-09-06 14:32 MeMpEng.exe  

cf43fda6634d7674690c8eaf6c348816


Formbook Process Kill Generic Malware Suspicious_Script_Bin Malicious Library FindFirstVolume CryptGen Browser Info Stealer VirusTotal Malware Checks debugger buffers extracted Creates executable files unpack itself AppData folder suspicious TLD Java Browser DNS 		19 21 6 18 6.4 M 18 ZeroCERT

294 2024-09-06 14:23 66d97993e0460_stealc_w9.vmp.ex...  

a79fa370fdeecbb187f96558a76534b5


Generic Malware Malicious Library UPX PE File PE32 VirusTotal Malware 		2.2 M 51 ZeroCERT

295 2024-09-06 14:21 66ba1a1880f9e_crypta.exe#kiscr  

a8b732ee59958581b2d5c62bb5b60c7a


Stealc Client SW User Data Stealer ftp Client info stealer Generic Malware Malicious Library Malicious Packer .NET framework(MSIL) UPX ASPack Http API PWS AntiDebug AntiVM PE File .NET EXE PE32 OS Processor Check Malware download FTP Client Info Stealer VirusTotal Malware c&c Buffer PE PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities Collect installed applications suspicious process sandbox evasion WriteConsoleW anti-virtualization installed browsers check Stealc Stealer Windows Browser ComputerName Remote Code Execution DNS Software plugin 		3 1 8 2 16.4 M 55 ZeroCERT

296 2024-09-06 14:21 66d98aa7bea3e_newPrime.exe#rea...  

c4d092354c3f964ee1d9671f2517a6c9


Malicious Library UPX PE File .NET EXE PE32 OS Processor Check VirusTotal Malware PDB Check memory Checks debugger unpack itself ComputerName Remote Code Execution 		3.6 M 43 ZeroCERT

297 2024-09-06 14:19 66d9da4dc547c_vrge12.exe#d12  

b34fcafdfc4ddbe4db51b22dd618b8d9


Stealc Client SW User Data Stealer LokiBot ftp Client info stealer Malicious Library Antivirus Http API PWS HTTP Code injection Internet API AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer Malware download Vidar VirusTotal Malware c&c PDB MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Collect installed applications malicious URLs sandbox evasion anti-virtualization installed browsers check Stealc Stealer Windows Browser ComputerName DNS plugin 		2 1 5 1 13.6 M 41 ZeroCERT

298 2024-09-06 14:18 66d9de22f231f_crypted.exe#1  

e600b6015b0312b52214f459fcc6f3c2


RedLine stealer Malicious Library Antivirus .NET framework(MSIL) ScreenShot PWS AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware Microsoft Buffer PE PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Collect installed applications Check virtual network interfaces AppData folder installed browsers check Tofsee Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		2 5 7 16.2 M 44 ZeroCERT

299 2024-09-06 14:17 66d9da52f20ba_vghew.exe#space  

5f7bdc962aa76f272673ffb86ae8d634


Stealc Client SW User Data Stealer LokiBot Gen1 ftp Client info stealer Generic Malware Malicious Library Antivirus UPX Malicious Packer Http API PWS HTTP Code injection Internet API ScreenShot AntiDebug AntiVM PE File .NET EXE PE32 DLL OS Processo Browser Info Stealer Malware download FTP Client Info Stealer Vidar VirusTotal Email Client Info Stealer Malware c&c Telegram PDB MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Windows utilities Collect installed applications suspicious process malicious URLs sandbox evasion WriteConsoleW anti-virtualization installed browsers check Tofsee Stealc Stealer Windows Browser Email ComputerName DNS Software plugin 		11 7 15 2 19.8 M 41 ZeroCERT

300 2024-09-06 14:17 TikTokTool24.exe  

3c0bc60ec3907224b9720d80bf799281


Generic Malware Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger WMI Creates executable files Windows utilities suspicious process AppData folder WriteConsoleW Windows ComputerName 		5.8 M 30 ZeroCERT

keyword