popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
3091 2024-06-11 07:39 conhost.exe  

8378455f7c8a30d74b355adaf576a10b


XMRig Miner Emotet Cryptocurrency Miner Suspicious_Script_Bin Generic Malware CoinHive Cryptocurrency task schedule Downloader Malicious Library UPX Malicious Packer Antivirus .NET framework(MSIL) Create Service Socket DGA Http API ScreenShot Escalate pri VirusTotal Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check Tofsee Windows ComputerName DNS Cryptographic key 		4 3 6 13.2 M 35 ZeroCERT

3092 2024-06-11 07:36 meta0906.exe  

05a1e80be42d093214516f6862c84ad9


Generic Malware Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware unpack itself crashed 		2.2 M 45 ZeroCERT

3093 2024-06-11 07:36 dmshell.exe  

a62abdeb777a8c23ca724e7a2af2dbaa


Metasploit Meterpreter Generic Malware PE64 PE File VirusTotal Malware DNS crashed 		1 3.6 M 62 ZeroCERT

3094 2024-06-10 10:37 DUU.exe  

e26a8ce5b2f2b9730cc15713a4b1d4a1


Process Kill Generic Malware Suspicious_Script_Bin Malicious Library FindFirstVolume CryptGenKey UPX PE File Device_File_Check PE32 OS Processor Check Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key Software crashed 		1 2 3 7.6 34 ZeroCERT

3095 2024-06-10 10:10 loader-1001.exe  

58ca6d5068fa4fed981cf5ef8a04e4d5


NSIS Generic Malware Downloader Malicious Library UPX Antivirus Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Sniff Audio HTTP DNS Code injection Internet API FTP KeyLogger P2P AntiDebug AntiVM PE File PE32 Pow VirusTotal Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself powershell.exe wrote Check virtual network interfaces suspicious process AppData folder Tofsee Windows ComputerName Cryptographic key crashed 		5 9 1 3 10.2 M 31 ZeroCERT

3096 2024-06-10 10:08 Nngraprczwe.exe  

9e57a1210d8f8c3be8e109e888eb1cc4


.NET framework(MSIL) PE File .NET EXE PE32 Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee Windows 		2 1 3.4 M ZeroCERT

3097 2024-06-10 10:06 Ucxnbz.exe  

9399f672f1d34d17a26a1a6336cfdf6a


.NET framework(MSIL) PE File .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee Windows 		2 1 3.4 M 34 ZeroCERT

3098 2024-06-10 10:05 timeSync.exe  

8f709d3db81945c2261c46827a83d33b


Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware unpack itself Remote Code Execution 		2.2 M 48 ZeroCERT

3099 2024-06-10 10:04 loki.exe  

94af29468388f69f7cb8332883e5e88e


Generic Malware Malicious Packer PE File PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Malicious Traffic Check memory AntiVM_Disk suspicious TLD VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software crashed 		1 3 6 8.6 M 66 ZeroCERT

3100 2024-06-10 10:02 sapsan.exe  

53099afa75043ea832b64db81231caff


Generic Malware Malicious Library UPX PE64 PE File OS Processor Check VirusTotal Malware Check memory crashed 		2.2 M 42 ZeroCERT

3101 2024-06-10 10:01 putty.exe  

744f16da7768ed9f66393cb57f760746


PE64 PE File VirusTotal Cryptocurrency Miner Malware Cryptocurrency 		2 1 1.4 M 55 ZeroCERT

3102 2024-06-10 10:01 update.exe  

5d0fb9d3fcf1a559a5a346ce92cab568


Themida Packer PE64 PE File VirusTotal Malware unpack itself Windows crashed 		3.0 M 60 ZeroCERT

3103 2024-06-09 15:57 8910.unp.exe  

f8d212919820b46438d8b921fd6e0857


UPX PE File PE32 OS Processor Check 		0.2 guest

3104 2024-06-09 14:24 Satin06.exe  

09ab6049a1abaac4ce2aef0dc60b6b6d


Formbook Gen1 Process Kill Generic Malware Suspicious_Script_Bin Malicious Library FindFirstVolume Cry FormBook Browser Info Stealer Malware download VirusTotal Malware Checks debugger buffers extracted Creates executable files unpack itself AppData folder Browser DNS 		21 20 3 18 7.0 M 45 ZeroCERT

3105 2024-06-09 09:39 work.exe  

fcd2251a8050b590a00cfe90dde9bd4c


Malicious Library Admin Tool (Sysinternals etc ...) UPX PE File PE32 VirusTotal Malware AutoRuns Creates executable files RWX flags setting unpack itself AppData folder Windows crashed 		4.0 M 60 ZeroCERT

keyword