popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
35341 2022-01-19 11:35 DriversFix_Setup.exe  

e345d89e01136e84982a83abc00fb362


Emotet Gen1 Generic Malware Malicious Library UPX PE File PE32 .NET DLL DLL .NET EXE OS Processor Check PE64 GIF Format VirusTotal Malware AutoRuns suspicious privilege MachineGuid Check memory Checks debugger Creates shortcut Creates executable files unpack itself AppData folder AntiVM_Disk VM Disk Size Check human activity check Windows ComputerName 		6.4 M 36 ZeroCERT

35342 2022-01-19 11:34 vbc.exe  

b47dcb6d32689a4d5e552a7918a9c732


Malicious Library UPX PE File PE32 VirusTotal Malware PDB unpack itself RCE 		3.0 M 46 ZeroCERT

35343 2022-01-19 09:54 ve.html  

5c2e8fbd656903baac1dbcf81ac19e78


Generic Malware Malicious Packer Malicious Library UPX Antivirus AntiDebug AntiVM PE File OS Processor Check PE32 DLL MSOffice File VirusTotal Malware powershell AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Auto service powershell.exe wrote Check virtual network interfaces suspicious process sandbox evasion WriteConsoleW Windows Exploit ComputerName DNS Cryptographic key crashed 		4 32 16.4 7 ZeroCERT

35344 2022-01-19 09:48 ffffffffffffff.ps1  

0e1653316ca12c3edbac35d9af6350a6


Generic Malware Antivirus PE File PE32 .NET DLL DLL VirusTotal Malware powershell Creates executable files unpack itself Windows utilities Check virtual network interfaces AppData folder WriteConsoleW Windows ComputerName Cryptographic key 		2 4 6.0 M 3 ZeroCERT

35345 2022-01-19 09:48 includes  

82fd3b42362faaec6999856ed403c792


UPX PE64 PE File OS Processor Check DLL VirusTotal Malware 		0.6 M 12 ZeroCERT

35346 2022-01-19 09:46 pu1.exe  

9d1e45a6cab91e540202b11ffe67136c


NSIS Malicious Library UPX PE File PE32 OS Processor Check DLL Emotet VirusTotal Malware Code Injection Check memory Creates executable files unpack itself AppData folder 		4.2 M 24 ZeroCERT

35347 2022-01-19 09:46 nnabu.exe  

f2bb24f210d3e4a27842ec12e545f3fd


PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows ComputerName Cryptographic key crashed 		10.4 M 26 ZeroCERT

35348 2022-01-19 09:34 12999000002490152554.xls  

0c890caa5574298838e2463f2a9eec1f


Generic Malware Antivirus Malicious Packer Malicious Library UPX MSOffice File PE File OS Processor Check PE32 DLL VirusTotal Malware powershell AutoRuns suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files ICMP traffic RWX flags setting unpack itself Auto service powershell.exe wrote Check virtual network interfaces suspicious process AntiVM_Disk sandbox evasion WriteConsoleW VM Disk Size Check Interception Windows ComputerName DNS Cryptographic key 		5 38 16.6 9 ZeroCERT

35349 2022-01-19 09:33 YOCJA-19842.xlsm  

e7fa5369947b139f8f5d636791b236b8


Generic Malware Malicious Packer Malicious Library UPX Antivirus PE File OS Processor Check PE32 DLL Malware powershell AutoRuns suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files ICMP traffic RWX flags setting unpack itself Auto service powershell.exe wrote Check virtual network interfaces suspicious process sandbox evasion WriteConsoleW Interception Windows ComputerName DNS Cryptographic key 		3 16 17.4 ZeroCERT

35350 2022-01-18 18:29 yyyy.exe  

5e22f82de536045419032c6f7d8a366b


NSIS Malicious Library UPX PE File PE32 OS Processor Check DLL VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Creates executable files unpack itself AppData folder 		15 30 6.4 20 ZeroCERT

35351 2022-01-18 16:47 invoice.exe  

9fca8332a98b2475b8c5243f70ce5058


Darkside Ransomware Cobalt Strike Malicious Library UPX PE File PE32 VirusTotal Malware PDB unpack itself RCE 		2.8 M 30 ZeroCERT

35352 2022-01-18 16:46 8879_1642270780_4802.exe  

236b3dc043d26a121949e4d5cfb13d1d


RedLine stealer[m] Malicious Library UPX AntiDebug AntiVM PE File OS Processor Check PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware Buffer PE suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Collect installed applications Check virtual network interfaces installed browsers check Windows Browser ComputerName Cryptographic key Software crashed 		2 6 12.4 M 29 ZeroCERT

35353 2022-01-18 16:45 645_1642427720_7114.exe  

80ea5601dfddd352cad47e20c2e77f86


Malicious Library UPX PE File PE32 VirusTotal Malware PDB unpack itself RCE 		2.8 M 31 ZeroCERT

35354 2022-01-18 16:43 Updated_Payments_Statements.li...  

8bdf50e9270b6f6e3c461be75999305d


Darkside Ransomware Cobalt Strike Generic Malware Antivirus Malicious Library UPX AntiDebug AntiVM GIF Format PE File PE32 OS Processor Check VirusTotal Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted heapspray Creates shortcut Creates executable files unpack itself powershell.exe wrote Check virtual network interfaces suspicious process AppData folder WriteConsoleW Interception Windows ComputerName DNS Cryptographic key 		1 13.6 M 9 ZeroCERT

35355 2022-01-18 16:43 payment.exe  

fae3f90c433730f1920f947057a90bde


Malicious Library UPX PE File OS Processor Check PE32 PDB unpack itself 		1.0 M ZeroCERT

keyword