popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
3016 2024-06-14 09:28 setup%E4%B8%8B%E8%BD%BD%E5%90%...  

2b2690881f0030510504113baf20831b


Malicious Library PE64 PE File VirusTotal Malware DNS 		1 3.2 M 47 ZeroCERT

3017 2024-06-14 09:28 steal.exe  

1db2c9b7cd800917493a1439dcfa8eb6


Emotet Gen1 Generic Malware ASPack Malicious Library UPX Admin Tool (Sysinternals etc ...) Anti_VM PE64 ftp PE File OS Processor Check DLL DllRegisterServer dll ZIP Format VirusTotal Malware Check memory Creates executable files unpack itself crashed 		2.4 23 ZeroCERT

3018 2024-06-14 09:27 client.exe  

866ad295aff7b5f29b44040b98c6994d


Gen1 Generic Malware ASPack Malicious Library UPX Anti_VM PE64 ftp PE File OS Processor Check DLL ZIP Format Malware Check memory Creates executable files unpack itself Ransomware 		2.6 ZeroCERT

3019 2024-06-14 09:27 ransom.exe  

425a94ea0db7c1fb84b3abeaed25784b


Icarus Stealer Emotet Gen1 Generic Malware Malicious Library UPX Admin Tool (Sysinternals etc ...) Malicious Packer Anti_VM PE64 ftp PE File OS Processor Check DLL DllRegisterServer dll ZIP Format Malware Check memory Creates executable files Ransomware DNS 		1 2.2 ZeroCERT

3020 2024-06-14 09:27 onecommander.exe  

55757364d854adc3fc1e5cb59532f1c3


Generic Malware Malicious Library Malicious Packer UPX PE64 DllRegisterServer dll PE File OS Processor Check DNS crashed 		1 0.8 M ZeroCERT

3021 2024-06-14 09:25 OfferedBuilt.exe  

00614852dbe5c98d84c4501702d04e93


NSIS Generic Malware Downloader Malicious Library UPX Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Hijack Network Sniff Audio HTTP DNS Code injection Internet API persistence FTP KeyLogger P2P AntiDebug AntiVM PE suspicious privilege Code Injection Check memory Checks debugger WMI Creates executable files unpack itself Windows utilities suspicious process AppData folder malicious URLs sandbox evasion WriteConsoleW Windows ComputerName 		6.4 M ZeroCERT

3022 2024-06-14 09:24 sharo.doc  

8b049d5e850fc75c1cef5edb8fc68feb


Formbook MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware exploit crash unpack itself suspicious TLD Tofsee Exploit DNS crashed 		21 7 12 3.6 M 33 ZeroCERT

3023 2024-06-14 09:24 sharo.scr  

3935f15dafdd5edfca70895940dce681


Formbook Generic Malware Malicious Library .NET framework(MSIL) UPX AntiDebug AntiVM .NET EXE PE32 PE File DLL Browser Info Stealer VirusTotal Malware Buffer PE Code Injection Check memory Checks debugger buffers extracted Creates executable files ICMP traffic unpack itself AppData folder malicious URLs Browser 		15 1 12 12.6 M 42 ZeroCERT

3024 2024-06-14 09:22 bin1.doc  

ab6398c625d0ae23c0582ad07d044581


MS_RTF_Obfuscation_Objects RTF File doc Cobalt Strike Cobalt VirusTotal Malware c&c RWX flags setting exploit crash Tofsee Exploit DNS crashed 		19 4 3.2 M 32 ZeroCERT

3025 2024-06-14 09:20 bin2.doc  

118072abaca518e6ece93908a9fee1f4


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware RWX flags setting exploit crash suspicious TLD Tofsee Exploit DNS crashed 		17 16 3 4.4 M 33 ZeroCERT

3026 2024-06-14 09:20 setup%E7%9B%AE%E5%BD%95%E8%A1%...  

b8cc81e57efd30cab09d0256f79f7098


Malicious Library PE64 PE File VirusTotal Malware DNS 		1 1 2.6 16 ZeroCERT

3027 2024-06-14 09:17 setup%E7%9B%AE%E5%BD%95%E8%A1%...  

7fbc6a95fc41c5bb0fecdd659d641ae9


Malicious Library PE64 PE File VirusTotal Malware DNS 		1 1 2.4 6 ZeroCERT

3028 2024-06-14 07:51 lummac2.exe  

6e3d83935c7a0810f75dfa9badc3f199


PE32 PE File 		0.4 M ZeroCERT

3029 2024-06-14 07:49 setup%E4%B8%8B%E8%BD%BD%E5%90%...  

4dc6a0aa29fc47b343521af82014af0f


Malicious Library PE64 PE File DNS crashed 		1 1 2.2 M ZeroCERT

3030 2024-06-14 07:47 qgtplfgy2.exe  

3d033b03106e5b46abde0df781c164d5


Process Kill Generic Malware Suspicious_Script_Bin Malicious Library FindFirstVolume CryptGenKey UPX Device_File_Check PE32 PE File OS Processor Check Browser Info Stealer FTP Client Info Stealer Email Client Info Stealer suspicious privilege Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee Windows Browser Email ComputerName Software crashed 		2 2 7.4 M ZeroCERT

keyword