popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
43591 2024-03-24 13:59 sarra.exe  

cb6ca7a54ebb767d3d996fde3d6b20bb


Amadey Themida Packer Generic Malware Admin Tool (Sysinternals etc ...) Malicious Library UPX Malicious Packer Antivirus Anti_VM AntiDebug AntiVM PE File PE32 MSOffice File ZIP Format OS Processor Check Lnk Format GIF Format DLL PE64 Browser Info Stealer Malware download Amadey FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency powershell AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Checks Bios Collect installed applications Detects VirtualBox Detects VMWare powershell.exe wrote suspicious process AppData folder AntiVM_Disk sandbox evasion WriteConsoleW VMware anti-virtualization IP Check VM Disk Size Check installed browsers check Tofsee Ransomware Windows Exploit Browser RisePro Email ComputerName DNS Cryptographic key Software crashed Downloader 		16 18 16 1 29.0 M 29 ZeroCERT

43592 2024-03-24 14:00 lummalg.exe  

04df085b57814d1a1accead4e153909e


Craxs RAT Generic Malware PE File .NET EXE PE32 VirusTotal Malware PDB Check memory Checks debugger unpack itself WriteConsoleW ComputerName 		2.8 M 34 ZeroCERT

43593 2024-03-24 14:00 ISetup3.exe  

46cb065381895196cf6c887ea1c38aa6


Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware unpack itself Remote Code Execution 		2.0 M 34 ZeroCERT

43594 2024-03-24 14:02 kissmydearuarereallysweetforme...  

cf97df47c7e054abfa506a0f7d5cc20d


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware buffers extracted 		2.6 M 31 ZeroCERT

43595 2024-03-24 14:02 djdjdje1939_crypted_EASY.exe  

d27ac79a31d3b896630513670235991b


Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware unpack itself crashed 		2.2 M 54 ZeroCERT

43596 2024-03-24 14:03 riviera_tour_sochi.pdf.exe  

5bcfa8f37baca2ce16991579bbcd6637


Client SW User Data Stealer browser info stealer NSIS Generic Malware Themida Packer Google Chrome User Data Downloader Malicious Library UPX Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Sniff Audio HTTP DNS Code Browser Info Stealer VirusTotal Malware AutoRuns Code Injection Check memory Checks debugger Creates shortcut Creates executable files exploit crash unpack itself Checks Bios Detects VirtualBox Detects VMWare AppData folder malicious URLs VMware anti-virtualization installed browsers check Windows Exploit Browser Firmware crashed 		12.4 M 41 ZeroCERT

43597 2024-03-24 14:04 kissherwithlotoflovetoundersta...  

61ebc536a8018c94dd5ec0dbe911dce1


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware buffers extracted RWX flags setting exploit crash Exploit DNS crashed 		1 5.2 M 30 ZeroCERT

43598 2024-03-24 14:05 america.vbs  

c2d1123deff869fb763cbfe7ec1d8ff9


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware VBScript powershell suspicious privilege Check memory Checks debugger buffers extracted wscript.exe payload download Creates shortcut unpack itself Check virtual network interfaces suspicious process Tofsee Windows ComputerName Cryptographic key Dropper 		2 5 2 10.0 M 6 ZeroCERT

43599 2024-03-24 14:06 baran.exe  

90d15f28eeafb9aec92021da5ef95099


Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware PDB unpack itself 		2.0 M 32 ZeroCERT

43600 2024-03-24 14:07 Build.exe  

2b74fd898c6ca79faa64f3d9cae268d4


Generic Malware Malicious Library UPX Antivirus PE File PE32 OS Processor Check ftp .NET EXE VirusTotal Cryptocurrency Miner Malware Cryptocurrency Telegram suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger WMI Creates shortcut Creates executable files unpack itself Check virtual network interfaces suspicious process AppData folder WriteConsoleW Tofsee Windows ComputerName DNS Cryptographic key crashed CoinMiner 		1 11 7 9.6 M 57 ZeroCERT

43601 2024-03-24 14:08 ISetup6.exe  

816f37f278af644bf55369c30b6b59ba


Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware unpack itself Remote Code Execution 		2.0 M 34 ZeroCERT

43602 2024-03-24 14:09 americaisveryniceplaceforkisst...  

9b02d303ef9ba87d855551bd4a541105


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware RWX flags setting exploit crash Exploit DNS crashed 		2 4.8 M 32 ZeroCERT

43603 2024-03-24 14:11 anki.exe  

e990d75ee17deb0ad3a5c6ac25d66ad5


Malicious Library UPX PE File PE32 DLL VirusTotal Malware AppData folder 		1.4 M 28 ZeroCERT

43604 2024-03-24 14:11 ISetup5.exe  

5d7d22a6259d24baa5fe96e51a84a178


Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware unpack itself Remote Code Execution 		2.0 M 34 ZeroCERT

43605 2024-03-24 14:15 ankiWinthisbeautifulmomentwith...  

129ac441a02f8ecf7f6d4a14135c4bdb


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic buffers extracted exploit crash unpack itself Tofsee Windows Exploit Advertising Google DNS crashed 		2 5 6 5.4 M 38 ZeroCERT

keyword