popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
301 2024-09-07 17:08 tm.vbs  

e0b9a7748f289bbcdac5546c26475fef


VirusTotal Malware VBScript AutoRuns WMI wscript.exe payload download unpack itself AntiVM_Disk VM Disk Size Check Windows ComputerName DNS DDNS Dropper 		2 1 10.0 M 29 ZeroCERT

302 2024-09-07 17:06 java.js  

961caa8b91ecbca3ce8601dc4a515e51


Antivirus MSOffice File VirusTotal Malware Check memory heapspray unpack itself Java 		4.8 M 28 ZeroCERT

303 2024-09-07 17:06 sheisgoodgirlaroundmewholovedm...  

2aaf86224ef3338f2f4817f3684487b4


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware Malicious Traffic RWX flags setting exploit crash Tofsee Exploit DNS crashed 		1 3 1 4.4 M 28 ZeroCERT

304 2024-09-07 17:05 Chrome.exe  

f90a0ca2766ad3e02c15fe5622546d01


Gen1 Generic Malware Malicious Library ASPack UPX Malicious Packer Anti_VM PE File PE64 OS Processor Check DLL ZIP Format VirusTotal Malware Creates executable files 		2.4 M 24 ZeroCERT

305 2024-09-07 17:04 verynicegirlwantihavetokissher...  

afb14dcb82dbb041183e8d492c415a13


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware Malicious Traffic exploit crash unpack itself Tofsee Exploit DNS crashed 		1 3 1 4.8 M 41 ZeroCERT

306 2024-09-07 17:04 equitozzmondayMPDW-constraints...  

ac45ec4efd718861d4c51a619be863a1


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		1 2 1 7.6 M 4 ZeroCERT

307 2024-09-07 17:02 Installer.exe  

dcb050a81038862531cf2e23a095dbd0


Malicious Library .NET framework(MSIL) UPX PE File .NET EXE PE32 VirusTotal Malware PDB MachineGuid Check memory Checks debugger unpack itself 		2.6 M 38 ZeroCERT

308 2024-09-07 16:30 mony.exe  

d3d04b9a91899184dd243d0c9339928a


Malicious Library PE File .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself Check virtual network interfaces ComputerName DNS 		1 4.2 M 55 guest

309 2024-09-06 15:38 http://213.21.220.222:8080  


Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Hijack Network Sniff Audio HTTP DNS Code injection Internet API persistence FTP KeyLogger P2P AntiDebug AntiVM MSOffice File PNG Format JPEG Format VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		1 2 6.4 guest

310 2024-09-06 14:32 MeMpEng.exe  

cf43fda6634d7674690c8eaf6c348816


Formbook Process Kill Generic Malware Suspicious_Script_Bin Malicious Library FindFirstVolume CryptGen Browser Info Stealer VirusTotal Malware Checks debugger buffers extracted Creates executable files unpack itself AppData folder suspicious TLD Java Browser DNS 		19 21 6 18 6.4 M 18 ZeroCERT

311 2024-09-06 14:23 66d97993e0460_stealc_w9.vmp.ex...  

a79fa370fdeecbb187f96558a76534b5


Generic Malware Malicious Library UPX PE File PE32 VirusTotal Malware 		2.2 M 51 ZeroCERT

312 2024-09-06 14:21 66ba1a1880f9e_crypta.exe#kiscr  

a8b732ee59958581b2d5c62bb5b60c7a


Stealc Client SW User Data Stealer ftp Client info stealer Generic Malware Malicious Library Malicious Packer .NET framework(MSIL) UPX ASPack Http API PWS AntiDebug AntiVM PE File .NET EXE PE32 OS Processor Check Malware download FTP Client Info Stealer VirusTotal Malware c&c Buffer PE PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities Collect installed applications suspicious process sandbox evasion WriteConsoleW anti-virtualization installed browsers check Stealc Stealer Windows Browser ComputerName Remote Code Execution DNS Software plugin 		3 1 8 2 16.4 M 55 ZeroCERT

313 2024-09-06 14:21 66d98aa7bea3e_newPrime.exe#rea...  

c4d092354c3f964ee1d9671f2517a6c9


Malicious Library UPX PE File .NET EXE PE32 OS Processor Check VirusTotal Malware PDB Check memory Checks debugger unpack itself ComputerName Remote Code Execution 		3.6 M 43 ZeroCERT

314 2024-09-06 14:19 66d9da4dc547c_vrge12.exe#d12  

b34fcafdfc4ddbe4db51b22dd618b8d9


Stealc Client SW User Data Stealer LokiBot ftp Client info stealer Malicious Library Antivirus Http API PWS HTTP Code injection Internet API AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer Malware download Vidar VirusTotal Malware c&c PDB MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Collect installed applications malicious URLs sandbox evasion anti-virtualization installed browsers check Stealc Stealer Windows Browser ComputerName DNS plugin 		2 1 5 1 13.6 M 41 ZeroCERT

315 2024-09-06 14:18 66d9de22f231f_crypted.exe#1  

e600b6015b0312b52214f459fcc6f3c2


RedLine stealer Malicious Library Antivirus .NET framework(MSIL) ScreenShot PWS AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware Microsoft Buffer PE PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Collect installed applications Check virtual network interfaces AppData folder installed browsers check Tofsee Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		2 5 7 16.2 M 44 ZeroCERT

keyword