popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
43711 2024-04-01 07:41 cmd.10001.exe  

ce8e1592a4685f349136cb13c12e543f


Malicious Packer UPX PE64 PE File 		0.6 ZeroCERT

43712 2024-04-01 07:42 Akh.exe  

f3054dc7004336617747743d172b111b


Malicious Library UPX AntiDebug AntiVM PE64 PE File PE32 OS Processor Check Malware Buffer PE AutoRuns PDB MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Check virtual network interfaces malicious URLs Tofsee Windows Discord DNS Cryptographic key crashed 		13 31 8 2 11.6 M ZeroCERT

43713 2024-04-01 07:43 ytgytftf.exe  

0f6a7323fb09a98ee204e42a4695dfd9


AsyncRAT task schedule Downloader Malicious Library Malicious Packer .NET framework(MSIL) UPX Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Sniff Audio HTTP DNS Code injection Internet API FTP KeyLogger P2P AntiDe AutoRuns Code Injection Windows utilities suspicious process AppData folder WriteConsoleW Windows ComputerName DNS 		2 5.2 M ZeroCERT

43714 2024-04-01 07:44 hghghdg.exe  

c4497b459274cec0b9fd6e3ac6c67aaa


Malicious Library .NET framework(MSIL) UPX PE File .NET EXE PE32 OS Processor Check Check memory Checks debugger unpack itself 		0.8 M ZeroCERT

43715 2024-04-01 07:46 pr1KoYGyugcP.exe  

abaf1e6e0cadc624156319232e349005


.NET framework(MSIL) UPX PE File .NET EXE PE32 OS Processor Check suspicious privilege Check memory Checks debugger unpack itself Windows Cryptographic key 		1.8 M ZeroCERT

43716 2024-04-01 07:46 gfhghfdg.exe  

ec0431d7e177b29ebe913a6230500436


Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Sniff Audio HTTP DNS Code injection Internet API FTP KeyLogger P2P AntiDebug AntiVM PE64 PE File Buffer PE AutoRuns PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Checks Bios Detects VirtualBox suspicious process WriteConsoleW VMware anti-virtualization Windows ComputerName DNS Cryptographic key Software 		9 13.2 M ZeroCERT

43717 2024-04-01 07:48 Client-built4.exe  

db20b98d60f589570ba13a3aa5950f99


Malicious Library .NET framework(MSIL) UPX PE File .NET EXE PE32 OS Processor Check Check memory Checks debugger unpack itself DNS 		1 1.4 M ZeroCERT

43718 2024-04-01 07:48 dfgfgds.exe  

22afa096fc6c8ce6b3c60566e7b41c37


Malicious Library .NET framework(MSIL) UPX PE File .NET EXE PE32 OS Processor Check Check memory Checks debugger unpack itself 		0.8 M ZeroCERT

43719 2024-04-01 07:51 Blaze_combat.exe  

c9e887a8ed0014744d5f59ef07327175


Generic Malware Malicious Library Malicious Packer UPX PE64 PE File OS Processor Check PDB 		0.4 M ZeroCERT

43720 2024-04-01 07:51 hghgfhjfhmain.exe  

caddfe2adb6d8c878a2a1001e7fd4fd7


Malicious Library .NET framework(MSIL) UPX PE File .NET EXE PE32 OS Processor Check Check memory Checks debugger unpack itself 		0.8 M ZeroCERT

43721 2024-04-01 07:52 http://www.example.com  

e75338a175f80b85cb99b51580451d37


Generic Malware Malicious Library UPX PE64 PE File Malware Check memory buffers extracted DNS 		1 3 6.2 M ZeroCERT

43722 2024-04-01 07:52 hghghgfhgfh.EXE  

93b2a56dbc2bb2a4ee1b4c6f2873b50b


Generic Malware Malicious Library UPX PE64 PE File Malware suspicious privilege unpack itself DNS 		1 4.8 M ZeroCERT

43723 2024-04-01 07:55 fgghghg.exe  

2ee84cfcc3797afb0ca991abffab0e91


Themida Packer UPX PE64 PE File Windows crashed 		1.4 M ZeroCERT

43724 2024-04-01 07:56 current.exe  

ba76ca8c8922219555a894663329c3e5


Malicious Library UPX PE File PE32 OS Processor Check unpack itself Remote Code Execution 		1.0 M ZeroCERT

43725 2024-04-01 07:59 fdfdgfgf.exe  

0b4ced1e11fac0306ee8d9411aea4219


Malicious Packer UPX PE File .NET EXE PE32 OS Processor Check Check memory Checks debugger unpack itself ComputerName 		1.0 M ZeroCERT

keyword