popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
2986 2024-06-15 08:12 Bio Data Form.jpg.lnk  

e10c8df203a7a195a44ee629fcf0c756


Generic Malware AntiDebug AntiVM GIF Format Lnk Format Code Injection Check memory buffers extracted Creates shortcut RWX flags setting unpack itself Check virtual network interfaces suspicious process Tofsee Interception 		3 4 1 1 5.2 ZeroCERT

2987 2024-06-15 08:12 Appendix.jpg.lnk  

b8be125e6f496b0d5856fd4c2b59d778


Generic Malware AntiDebug AntiVM GIF Format Lnk Format Code Injection Check memory buffers extracted Creates shortcut RWX flags setting unpack itself Check virtual network interfaces suspicious process Tofsee Interception 		3 4 1 1 4.6 ZeroCERT

2988 2024-06-14 19:20 ade4f437.exe  

b6a77e293a158f046f39ab50f276ef9f


Malicious Packer Malicious Library UPX PE File PE32 Malware buffers extracted ICMP traffic WriteConsoleW Windows DNS 		722 6 5.2 ZeroCERT

2989 2024-06-14 18:48 help.scr  

2d927fdb462570728a981443bf36d19f


Emotet Generic Malware Malicious Packer Malicious Library UPX Antivirus PE File PE32 OS Processor Check DLL PE64 ftp Malware download VirusTotal Cryptocurrency Miner Malware Cryptocurrency AutoRuns suspicious privilege Check memory buffers extracted WMI Creates executable files unpack itself Windows utilities Auto service suspicious process AntiVM_Disk sandbox evasion WriteConsoleW VM Disk Size Check human activity check Windows Exploit ComputerName Remote Code Execution 		4 5 14.0 M 63 ZeroCERT

2990 2024-06-14 18:46 Asusdebug.exe  

9d3b19c8bf21723224e6885db1eea012


Malicious Packer Malicious Library UPX PE File PE32 VirusTotal Malware suspicious privilege WMI Windows utilities Windows ComputerName DNS 		2 3.8 M 39 ZeroCERT

2991 2024-06-14 18:46 appverify.dll  

6a4f16c2ac0de1c9c11946f0e92b49b4


Generic Malware Malicious Library UPX DLL PE64 PE File OS Processor Check VirusTotal Malware Check memory Checks debugger unpack itself Exploit crashed 		3 3.8 M 39 ZeroCERT

2992 2024-06-14 18:45 Gqgsm.exe  

c6cd0f62d86d87344a7d7483d82ac6d3


Malicious Library .NET framework(MSIL) AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces malicious URLs Ransomware Windows Browser Email ComputerName DNS Cryptographic key Software crashed 		1 2 5 17.4 M 47 ZeroCERT

2993 2024-06-14 18:42 drivermanager.exe  

c28a2d0a008788b49690b333d501e3f3


Generic Malware Malicious Library ScreenShot AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Remote Code Execution 		8.0 M 50 ZeroCERT

2994 2024-06-14 18:42 hecto.doc  

dd2d12d4f427963b4334a6f1061a252b


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware exploit crash unpack itself Tofsee Exploit DNS crashed 		1 3 5 4.0 M 27 ZeroCERT

2995 2024-06-14 18:40 rothc.doc  

40d18ab9b48c16d917ab69e101fa45eb


Formbook MS_RTF_Obfuscation_Objects RTF File doc Cobalt Strike Cobalt VirusTotal Malware c&c exploit crash unpack itself Tofsee Exploit DNS crashed 		23 7 14 3.2 M 32 ZeroCERT

2996 2024-06-14 18:40 natcontroler.exe  

381e4d25d271d8fd15f8b04b180be401


Malicious Library .NET framework(MSIL) UPX Socket Http API HTTP DNS Internet API AntiDebug AntiVM PE File .NET EXE PE32 OS Processor Check VirusTotal Malware Buffer PE AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		8.8 M 34 ZeroCERT

2997 2024-06-14 18:39 licc.doc  

af079d569c6115b1f3998c7cce495168


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware Malicious Traffic exploit crash unpack itself Tofsee Exploit DNS crashed 		2 3 2 4.4 M 29 ZeroCERT

2998 2024-06-14 18:38 Ejpba.exe  

1c56623199e1959f271a191d603360bf


AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces installed browsers check Ransomware Windows Browser Email ComputerName DNS Cryptographic key Software crashed 		1 2 5 15.8 M 47 ZeroCERT

2999 2024-06-14 18:27 help.scr  

2d927fdb462570728a981443bf36d19f


Emotet Generic Malware Malicious Packer Malicious Library UPX Antivirus PE File PE32 OS Processor Check DLL PE64 ftp Malware download VirusTotal Cryptocurrency Miner Malware Cryptocurrency AutoRuns suspicious privilege Malicious Traffic Check memory WMI Creates executable files unpack itself Windows utilities Auto service Check virtual network interfaces suspicious process AntiVM_Disk sandbox evasion WriteConsoleW VM Disk Size Check human activity check Windows ComputerName Remote Code Execution 		1 5 2 14.8 63 ZeroCERT

3000 2024-06-14 17:49 tes.ps1  

bfb1332339eda5252ef18e4a877bccba


Generic Malware Antivirus unpack itself Windows Cryptographic key 		0.6 ZeroCERT

keyword