popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
44041 2024-04-27 17:28 rtx.exe  

46d004a90bfc51d6447a0661f440e7a5


Generic Malware Malicious Library UPX Anti_VM AntiDebug AntiVM PE File PE32 OS Processor Check ENERGETIC BEAR VirusTotal Malware Buffer PE AutoRuns PDB Code Injection Check memory Checks debugger buffers extracted Creates executable files ICMP traffic unpack itself Check virtual network interfaces suspicious TLD sandbox evasion Windows Discord Tor ComputerName Remote Code Execution DNS DDNS 		331 401 18 15.4 M 45 ZeroCERT

44042 2024-04-28 01:25 rtx.exe  

46d004a90bfc51d6447a0661f440e7a5


Generic Malware Malicious Library UPX Anti_VM AntiDebug AntiVM PE File PE32 OS Processor Check VirusTotal Malware Buffer PE AutoRuns PDB Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files ICMP traffic unpack itself Check virtual network interfaces sandbox evasion Windows Java Tor ComputerName WordPress Remote Code Execution DNS 		45 702 10 14.8 M 45 guest

44043 2024-04-29 06:28 UAH-REM-PEF-202324.dll  

9045490ffd594cb9efdb772a5f336dd0


Generic Malware Malicious Library UPX PE64 PE File DLL OS Processor Check VirusTotal Malware PDB 		1.0 1 guest

44044 2024-04-29 07:28 steam.exe  

5ca52ff25980ef72bd864ad82ba83677


Generic Malware Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware PDB unpack itself 		2.0 M 33 ZeroCERT

44045 2024-04-29 07:29 fiona.exe  

c0d3bad870f8d2512d2172e4ce6e650f


Themida Packer Malicious Packer UPX Anti_VM PE File PE32 ZIP Format Browser Info Stealer Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency AutoRuns MachineGuid Check memory buffers extracted unpack itself Windows utilities Checks Bios Collect installed applications Detects VirtualBox Detects VMWare suspicious process AntiVM_Disk sandbox evasion WriteConsoleW VMware anti-virtualization IP Check VM Disk Size Check installed browsers check Tofsee Ransomware Windows Browser RisePro Email ComputerName Firmware DNS Software crashed 		1 5 7 15.6 M 34 ZeroCERT

44046 2024-04-29 07:31 setup294.exe  

82b92970234eeb94883182381e626c63


Generic Malware Malicious Library UPX PE File PE32 OS Processor Check DLL VirusTotal Malware PDB unpack itself suspicious process AppData folder Remote Code Execution 		3.0 M 47 ZeroCERT

44047 2024-04-29 09:26 morningworkingforgetbackwithen...  

bd7a9eba72d2a2a8cc97260ec906b842


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware Malicious Traffic buffers extracted exploit crash unpack itself Exploit DNS crashed 		1 1 5.0 M 38 ZeroCERT

44048 2024-04-29 09:33 csgg.exe  

3e1fb053e8ca0281a2952fbdced68d1e


NSIS Generic Malware Malicious Library UPX Antivirus PE File PE32 VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut Creates executable files unpack itself suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		7.0 M 44 ZeroCERT

44049 2024-04-29 09:33 done.exe  

d5141d80d46fd3df879495cca103caba


NSIS Generic Malware Malicious Library UPX Antivirus PE File PE32 VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut Creates executable files unpack itself suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		6.6 25 ZeroCERT

44050 2024-04-29 09:34 eveninggreatformonkeykingtound...  

c63cbdfeaddd4e1867b5d9aedf4b77dd


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware VBScript Malicious Traffic buffers extracted exploit crash unpack itself Tofsee Exploit DNS crashed 		3 6 3 5.0 M 38 ZeroCERT

44051 2024-04-29 09:36 xie.exe  

f44bcedfb71262dd1484bcbb63122ba5


Gen1 HermeticWiper Generic Malware Malicious Library UPX Malicious Packer Admin Tool (Sysinternals etc ...) Obsidium protector .NET framework(MSIL) Anti_VM PE File PE32 JPEG Format ftp DLL .NET DLL PNG Format OS Processor Check OS Memory Check OS Name Che VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself Check virtual network interfaces AppData folder Ransomware Windows ComputerName Cryptographic key 		2 4 2 7.2 M 25 ZeroCERT

44052 2024-04-29 10:14 mariogame.dll  

a239211f31bbaaeb73d1a985c4cd163c


Malicious Library Malicious Packer PE File DLL PE32 .NET DLL VirusTotal Malware PDB 		1.4 M 48 ZeroCERT

44053 2024-04-29 10:32 1.jpg  

e34edde9e1fcae0ffaac450491a0b7a6


Generic Malware Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware PDB unpack itself 		2.0 M 31 ZeroCERT

44054 2024-04-29 11:09 Exodus.exe  

3b43da1be0c39802b78f6b2c55c4d7e6


HelloXD Ransomware PE64 PE File VirusTotal Malware DNS 		2 1 1.4 M 52 r0d

44055 2024-04-29 14:39 Exodus.exe  

3b43da1be0c39802b78f6b2c55c4d7e6


HelloXD Ransomware PE64 PE File VirusTotal Malware DNS 		2 1 1.4 M 52 guest

keyword