popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
40561 2021-10-16 09:44 TimeLimit.exe  

465784e139b2fb62fa2ee0cce3ee5551


Crossrider Adware PE File PE32 VirusTotal Malware AutoRuns Check memory unpack itself suspicious process WriteConsoleW Windows 		4.6 M 20 r0d

40562 2021-10-15 18:11 audio.exe  

98fc6998c7943f10c6eab32dd5f87e92


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself Check virtual network interfaces malicious URLs Tofsee Windows Cryptographic key crashed 		26 27 2 10 9.8 M 10 ZeroCERT

40563 2021-10-15 18:10 TimeLimitInst.exe  

9b93526bb5cb8f5b487a2236f45bf4a9


UPX Malicious Library PE File PE32 DLL VirusTotal Malware AutoRuns Check memory Creates executable files unpack itself suspicious process AntiVM_Disk WriteConsoleW VM Disk Size Check Windows crashed 		4.8 M 19 ZeroCERT

40564 2021-10-15 18:07 audio.exe  

f977d96c98335083d54f9b9b54fb0cd9


RAT PWS .NET framework Generic Malware UPX AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs DNS 		8 18 2 6 8.4 M 21 ZeroCERT

40565 2021-10-15 18:06 1soft.exe  

6084bf88a6d2c70c894614fc762244de


Generic Malware Malicious Packer UPX Malicious Library PE64 PE File VirusTotal Malware Code Injection Malicious Traffic buffers extracted Tofsee RCE 		1 5 1 1 4.0 M 28 ZeroCERT

40566 2021-10-15 18:06 6666.exe  

f95a35e8c3f3f57b3f347bd6c8180bee


NPKI UPX Malicious Library PE64 PE File VirusTotal Malware RCE crashed 		1.8 M 21 r0d

40567 2021-10-15 18:04 TimeLimit.exe  

465784e139b2fb62fa2ee0cce3ee5551


PE File PE32 VirusTotal Malware AutoRuns Check memory unpack itself suspicious process WriteConsoleW Windows 		4.6 M 20 ZeroCERT

40568 2021-10-15 18:04 babay.exe  

1f67cc3aee307cde9e5102d372f9b87e


UPX Malicious Library PE File PE32 OS Processor Check VirusTotal Malware suspicious privilege ICMP traffic unpack itself human activity check Windows DNS keylogger 		3 5.8 M 55 ZeroCERT

40569 2021-10-15 18:01 6666.exe  

f95a35e8c3f3f57b3f347bd6c8180bee


NPKI UPX Malicious Library PE64 PE File VirusTotal Cryptocurrency Miner Malware Cryptocurrency RCE 		2 1 1.6 M 21 ZeroCERT

40570 2021-10-15 18:01 smhosts.exe  

e1164db137877a49ac6d5c6d90ff11ab


UPX Malicious Library PE File PE32 OS Processor Check VirusTotal Malware PDB unpack itself 		1.8 M 21 ZeroCERT

40571 2021-10-15 14:04 Wetranfer.html  

34e6eec71f5eda2bcc5590067f3d8791


AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		1 6 2 3.8 ZeroCERT

40572 2021-10-15 13:53 Auszahlungen.xls  

413bd16983ee371d2955416354a17b2c


VBA_macro Generic Malware MSOffice File VirusTotal Malware ICMP traffic RWX flags setting unpack itself DNS 		1 3.8 14 ZeroCERT

40573 2021-10-15 13:51 DOCS-93897-2021-2975GJ53.scr  

8575cb6fc0f2e03e427b847b8bf734a9


Generic Malware UPX DNS AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW human activity check Windows ComputerName DNS 		1 15.2 22 ZeroCERT

40574 2021-10-15 13:50 ARRIVAL NOTICE A AND B GLOBAL ...  

8575cb6fc0f2e03e427b847b8bf734a9


Generic Malware UPX DNS AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW human activity check Windows ComputerName DNS 		1 15.2 22 ZeroCERT

40575 2021-10-15 10:31 goshcj.exe  

d1baa9515f4c67a7b561938bbd81bc75


RAT Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName crashed 		8.8 M 23 ZeroCERT

keyword