popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
3541 2024-05-31 10:16 bind_tcp.hta  

248aa4289e3739f172987f89212e4093


Generic Malware Antivirus PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut RWX flags setting unpack itself powershell.exe wrote suspicious process Windows ComputerName Cryptographic key 		6.0 M 36 ZeroCERT

3542 2024-05-31 10:15 dl.php  

27818a4fe57d322127c3311959c5af69


Generic Malware Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware unpack itself 		2.2 M 37 ZeroCERT

3543 2024-05-31 10:14 reverse_http.msi  

c16d8d4e2bcfb175ad690580b3502218


Generic Malware MSOffice File suspicious privilege Check memory Checks debugger unpack itself AntiVM_Disk VM Disk Size Check ComputerName DNS 		1 4.0 M ZeroCERT

3544 2024-05-31 10:12 bind_tcp_uuid.hta  

bce1078c57268ef42732dc651d2049c9


Generic Malware Antivirus PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut RWX flags setting unpack itself powershell.exe wrote suspicious process Windows ComputerName Cryptographic key 		6.0 M 38 ZeroCERT

3545 2024-05-31 10:11 go.exe  

f75b6c59b0a588f5aa42cf6fb6539043


Generic Malware Malicious Library UPX AntiDebug AntiVM PE File PE32 OS Processor Check MSOffice File VirusTotal Malware Code Injection Check memory Checks debugger buffers extracted RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		8 6 1 5.4 M 21 ZeroCERT

3546 2024-05-31 10:10 ReflectiveDll_poc.dll  

5c71c670dbfa86ec09cd4cf344e53686


PE64 PE File DLL VirusTotal Malware Checks debugger 		0.6 M 5 ZeroCERT

3547 2024-05-31 10:08 buildjudit.exe  

cc7933b503e061ddde7158e108f19cc3


Gen1 Generic Malware Malicious Library UPX Malicious Packer Antivirus Anti_VM PE64 PE File DLL OS Processor Check ftp wget VirusTotal Malware Check memory Creates executable files unpack itself 		3.2 M 56 ZeroCERT

3548 2024-05-31 10:08 reverse_http.ps1  

01afbe1110a8dc2eb754291bd28685a5


Generic Malware Antivirus VirusTotal Malware Check memory Checks debugger RWX flags setting unpack itself ComputerName crashed 		3.2 M 34 ZeroCERT

3549 2024-05-31 10:07 NimDllPayload.dll  

9b18a8a5506ae514acbeb369f3b9e9e0


UPX PE64 PE File DLL VirusTotal Malware Check memory crashed 		1.0 M 12 ZeroCERT

3550 2024-05-31 10:06 buildjudit.exe  

c09ff1273b09cb1f9c7698ed147bf22e


Gen1 Generic Malware Malicious Library UPX Malicious Packer Antivirus Anti_VM PE64 PE File DLL OS Processor Check ftp wget Check memory Creates executable files unpack itself 		2.0 M ZeroCERT

3551 2024-05-31 10:05 sarra.exe  

be49ac418959705d20f029634d85040f


Anti_VM PE File PE32 Malware download VirusTotal Malware AutoRuns MachineGuid Checks debugger unpack itself Windows utilities Checks Bios Detects VMWare suspicious process WriteConsoleW VMware anti-virtualization IP Check Tofsee Windows RisePro ComputerName DNS crashed 		1 5 5 9.6 M 39 ZeroCERT

3552 2024-05-31 10:05 Emuxedlljrbbjp.bat  

a33d1bcae258475e7ec293f1abf928e5


Gen1 Generic Malware Suspicious_Script_Bin Downloader Malicious Library Malicious Packer UPX Antivirus Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Sniff Audio HTTP DNS Code injection Internet API FTP KeyLogger P VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files unpack itself Windows utilities suspicious process WriteConsoleW Tofsee Interception Windows ComputerName DNS Cryptographic key DDNS crashed 		4 4 7.8 M 9 ZeroCERT

3553 2024-05-31 10:05 Qwsyldgxfuefxl.bat  

3e942e68cf16c51d836d7762eaa2085d


Gen1 Generic Malware Suspicious_Script_Bin Downloader Malicious Library Malicious Packer UPX Antivirus Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Sniff Audio HTTP DNS Code injection Internet API FTP KeyLogger P suspicious privilege Code Injection Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files unpack itself Windows utilities suspicious process WriteConsoleW Tofsee Interception Windows ComputerName DNS Cryptographic key DDNS crashed 		4 4 8.0 M ZeroCERT

3554 2024-05-31 08:18 amers.exe  

f55d40b74d38f0fcea654437183a7b1e


Amadey Emotet HermeticWiper Gen1 RedLine stealer RedlineStealer NPKI SmokeLoader Generic Malware UltraVNC PhysicalDrive Suspicious_Script_Bin EnigmaProtector NSIS Buhtrap Group Downloader Malicious Library Antivirus UPX Malicious Packer Admin Tool (Sy Browser Info Stealer RedLine Malware download Amadey FTP Client Info Stealer VirusTotal Cryptocurrency Miner Malware powershell Microsoft Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files ICMP traffic RWX flags setting unpack itself Windows utilities Disables Windows Security Checks Bios Collect installed applications Auto service Detects VMWare Check virtual network interfaces suspicious process AppData folder malicious URLs AntiVM_Disk sandbox evasion WriteConsoleW VMware China Firewall state off anti-virtualization IP Check VM Disk Size Check human activity check installed browsers check PrivateLoader Tofsee Ransomware GameoverP2P Zeus Stealer Windows Browser Advertising ComputerName Trojan Banking Firmware DNS Cryptographic key Software crashed CoinMiner 		37 77 33 5 40.8 M 41 ZeroCERT

3555 2024-05-31 07:52 well.exe  

861859a608c8769febf142e752abb057


Client SW User Data Stealer browser info stealer Generic Malware Google Chrome User Data Downloader Malicious Library UPX Http API PWS Code injection Create Service Socket DGA ScreenShot Escalate priviledges Steal credential Sniff Audio HTTP DNS BitCoin I Browser Info Stealer Code Injection Check memory Checks debugger exploit crash unpack itself malicious URLs installed browsers check Exploit Browser crashed 		5.4 M ZeroCERT

keyword