popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
43936 2024-04-19 13:04 xlamlikeiamverymuchwithentiret...  

cd7c4ece35508ec593df126f064bb3a8


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware Malicious Traffic buffers extracted RWX flags setting exploit crash Tofsee Exploit DNS crashed 		3 6 2 5.0 M 36 ZeroCERT

43937 2024-04-19 13:07 22.exe  

f6317c56f0eba0c5ce7d0067707f96c4


Generic Malware Antivirus PE File .NET EXE PE32 VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		2 6.8 M 55 ZeroCERT

43938 2024-04-19 13:07 ireallywantakissfrommywifeshei...  

9278d07272accaf33d132bb6dbf6a7e7


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware Malicious Traffic buffers extracted exploit crash unpack itself Tofsee Exploit DNS crashed 		3 6 2 5.0 M 36 ZeroCERT

43939 2024-04-19 13:09 rules.exe  

65be3195b801d271e01d41f7bf576bd8


Generic Malware Malicious Library PE File PE32 VirusTotal Malware unpack itself Remote Code Execution 		2.4 M 34 ZeroCERT

43940 2024-04-19 13:10 Transfusionist.vbs  

03e2a0c33e613d9aabf9167bd28cf3c7


GuLoader Generic Malware Suspicious_Script_Bin Admin Tool (Sysinternals etc ...) Antivirus AntiDebug AntiVM VirusTotal Malware powershell suspicious privilege Code Injection Check memory Checks debugger buffers extracted WMI Creates shortcut unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows Advertising Google ComputerName Cryptographic key crashed 		2 4 1 11.2 7 ZeroCERT

43941 2024-04-19 13:12 HJC.exe  

29af19382bdeadee6d93b98f354e703d


Emotet Malicious Library UPX PE File DllRegisterServer dll PE32 MZP Format VirusTotal Malware RWX flags setting unpack itself Tofsee Interception Remote Code Execution crashed 		2 1 4.8 M 41 ZeroCERT

43942 2024-04-19 13:12 js.exe  

269a3d770289d6442ad0b01e03276a10


Generic Malware Malicious Library UPX PE File DllRegisterServer dll PE32 OS Processor Check VirusTotal Malware Check memory buffers extracted Creates executable files RWX flags setting unpack itself AppData folder AntiVM_Disk sandbox evasion VM Disk Size Check Windows Browser ComputerName Remote Code Execution DNS 		1 1 4 7.6 M 47 ZeroCERT

43943 2024-04-19 13:14 last_stage  

ad15c8f35af52d9258c025bc2f051e34


UPX PE File PE32 VirusTotal Malware PDB Remote Code Execution 		1.2 M 14 ZeroCERT

43944 2024-04-19 13:14 shortcut.exe  

2758e553732310d8b606fca67a1096c1


Malicious Library VMProtect Antivirus UPX PE File .NET EXE PE32 OS Processor Check MachineGuid Check memory Checks debugger unpack itself Check virtual network interfaces AntiVM_Disk VM Disk Size Check ComputerName crashed 		3.2 M ZeroCERT

43945 2024-04-19 13:15 amadka.exe  

f854143c49c4d2fa4cf73bab97ba8d3a


Amadey Generic Malware UPX Antivirus Malicious Library Anti_VM PE File PE32 ZIP Format DLL OS Processor Check PE64 Browser Info Stealer Malware download Amadey FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files exploit crash unpack itself Windows utilities Checks Bios Collect installed applications Detects VirtualBox Detects VMWare suspicious process AppData folder AntiVM_Disk sandbox evasion WriteConsoleW VMware anti-virtualization IP Check VM Disk Size Check installed browsers check Tofsee Ransomware Windows Exploit Browser RisePro Email ComputerName DNS Cryptographic key Software crashed 		6 8 16 1 26.6 M 38 ZeroCERT

43946 2024-04-19 13:16 build_1GyXIDXRUC.exe  

51b0ed6b4908a21e5cc1d9ec7c046040


Generic Malware Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware unpack itself crashed 		2.2 M 47 ZeroCERT

43947 2024-04-19 13:18 o9RbXKF6ZJDK949.scr  

739cefccf7fa26e1f7f9923a6cc9620a


Generic Malware Malicious Library .NET framework(MSIL) Antivirus AntiDebug AntiVM PE File .NET EXE PE32 DLL Browser Info Stealer VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Windows utilities suspicious process AppData folder WriteConsoleW Windows Browser ComputerName Cryptographic key 		14 15 13.2 M 40 ZeroCERT

43948 2024-04-19 13:18 H8w3nxJQ4Gya5ED.scr  

75fd7827bbf0b22f48275d5882af458f


AgentTesla Generic Malware Malicious Library .NET framework(MSIL) Antivirus PWS SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW IP Check Windows Browser Email ComputerName Cryptographic key Software crashed keylogger 		1 2 1 15.0 M 46 ZeroCERT

43949 2024-04-19 13:19 Amzey.exe  

926fc8b724cc682d97cf0849c0fcbda3


Generic Malware WinRAR Malicious Library UPX Antivirus PE File PE32 OS Processor Check PowerShell VirusTotal Malware powershell PDB suspicious privilege Check memory Checks debugger Creates shortcut Creates executable files unpack itself powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Remote Code Execution Cryptographic key 		6.4 M 19 ZeroCERT

43950 2024-04-19 13:20 Factura_SA161.pdf.lnk  

6b602c96ff01c4f55c7a625b2358a988


Generic Malware Suspicious_Script_Bin NSIS Hide_EXE Downloader UPX Malicious Library Antivirus Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Hijack Network Sniff Audio HTTP DNS Code injection Internet API persiste VirusTotal Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI heapspray Creates shortcut Creates executable files RWX flags setting unpack itself Windows utilities powershell.exe wrote Check virtual network interfaces suspicious process AppData folder malicious URLs sandbox evasion WriteConsoleW installed browsers check Interception Windows Browser ComputerName DNS Cryptographic key 		1 2 7 18.4 M 24 ZeroCERT

keyword