popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
3526 2024-07-08 09:48 update.exe  

f8ae25eb2bef827759f8cd837ad85bda


Browser Login Data Stealer Generic Malware Malicious Library Downloader Malicious Packer UPX PE File PE64 OS Processor Check Browser Info Stealer VirusTotal Malware Malicious Traffic RWX flags setting sandbox evasion VMware Windows Update Browser DNS crashed 		1 1 2 5.6 M 45 ZeroCERT

3527 2024-07-08 09:48 1.exe  

ed44c98c40576ef50f6abcf6e40c71d7


UPX PE File PE32 VirusTotal Malware suspicious privilege Windows utilities WriteConsoleW Windows DNS 		1 4.0 M 23 ZeroCERT

3528 2024-07-08 09:46 Installer.exe  

bed8cdced2d57be2bd750f0f59991ecd


Malicious Library UPX PE File .NET EXE PE32 OS Processor Check VirusTotal Malware Cryptocurrency wallets Cryptocurrency Telegram AutoRuns suspicious privilege MachineGuid Check memory Checks debugger Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check Tofsee Ransomware Windows ComputerName DNS 		4 4 9.8 M 63 ZeroCERT

3529 2024-07-08 09:46 build.exe  

7081e613321921500b70899fddb56a4d


RedLine stealer RedlineStealer Malicious Library .NET framework(MSIL) UPX PE File .NET EXE PE32 OS Processor Check VirusTotal Malware Check memory Checks debugger unpack itself Windows DNS Cryptographic key 		1 3.8 M 63 ZeroCERT

3530 2024-07-08 09:44 windows_update.exe  

14129aa32bbd6bf03d3cde8837119e2a


UPX PE File PE64 VirusTotal Malware 		2.2 M 27 ZeroCERT

3531 2024-07-08 09:44 tool.exe  

34c704347497551c5593eeabebb7b6ce


UPX PE File PE64 VirusTotal Malware suspicious privilege Windows utilities WriteConsoleW Windows DNS 		2 5.2 M 44 ZeroCERT

3532 2024-07-08 09:44 igccu.exe  

c3ebea7cd7e96887d0fffff22bf00101


Process Kill Generic Malware Suspicious_Script_Bin Malicious Library FindFirstVolume CryptGenKey UPX PE File PE32 Device_File_Check OS Processor Check DLL Browser Info Stealer VirusTotal Malware Checks debugger buffers extracted Creates executable files unpack itself AppData folder Browser 		15 17 7.2 52 ZeroCERT

3533 2024-07-08 09:42 igccu.exe  

7e65b6742284236fdd138467fad4a26b


Process Kill Generic Malware Suspicious_Script_Bin Malicious Library FindFirstVolume CryptGenKey UPX PE File PE32 Device_File_Check OS Processor Check FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Checks debugger unpack itself 		1 4 1 4.4 49 ZeroCERT

3534 2024-07-08 09:40 aaa.exe  

e52ba92d25281e90aa7f27bd3719951f


Malicious Library Malicious Packer Antivirus .NET framework(MSIL) UPX PE File .NET EXE PE32 OS Processor Check VirusTotal Malware Check memory Checks debugger unpack itself 		2.0 63 ZeroCERT

3535 2024-07-08 09:39 Server.exe  

68fad5f5f8de1c290df5d3754b4af358


Generic Malware Malicious Library Malicious Packer .NET framework(MSIL) UPX PE File .NET EXE PE32 OS Processor Check VirusTotal Malware 		1.2 65 ZeroCERT

3536 2024-07-08 09:32 1.exe  

956cc5fc3eb02c4e9fa0f180a7155895


ELF VirusTotal Malware 		0.4 M 3 ZeroCERT

3537 2024-07-08 07:58 vidar0607.exe  

47a4c6547aaa57510c4d02ce8a6ae548


Generic Malware Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware unpack itself crashed 		2.2 M 39 ZeroCERT

3538 2024-07-08 07:56 win.exe  

36dcf115331160b2f88e83e5b8d07036


UPX Anti_VM PE File PE64 VirusTotal Malware 		2.2 M 24 ZeroCERT

3539 2024-07-08 07:54 lumma0607.exe  

383dc98d03038d2374701a5bfa5d8c0a


Generic Malware Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware unpack itself crashed 		2.4 M 54 ZeroCERT

3540 2024-07-08 07:52 PACKAGE_DEMO.exe  

e450ca946d4bf6173ebe3f00c3d08d81


Generic Malware Malicious Library Malicious Packer UPX PE File PE64 OS Processor Check Browser Info Stealer Malware download VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency Check memory Creates shortcut Collect installed applications sandbox evasion IP Check installed browsers check Tofsee Ransomware MeduzaStealer Stealer Browser Email ComputerName Trojan Banking DNS 		3 8 11.8 M 56 ZeroCERT

keyword