popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
44086 2024-05-02 07:26 cock.exe  

bd909fb2282ec2e4a11400157c33494a


Generic Malware Malicious Library Malicious Packer UPX AntiDebug AntiVM PE File PE32 OS Processor Check VirusTotal Malware Code Injection Check memory Checks debugger buffers extracted unpack itself WriteConsoleW Windows DNS Cryptographic key 		1 1 10.0 59 ZeroCERT

44087 2024-05-02 07:27 EPQ.exe  

615b4b1ddc71f4928bf4afdfaa68231f


Generic Malware Suspicious_Script_Bin Malicious Library UPX PE File PE32 OS Processor Check Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key Software crashed 		1 2 3 7.8 M 29 ZeroCERT

44088 2024-05-02 07:29 setup_6053.exe  

a1361baff4d2c31430365cce9bc2cfff


Generic Malware Malicious Library Antivirus UPX PE64 PE File OS Processor Check Emotet Malware download NetWireRC VirusTotal Malware Code Injection buffers extracted unpack itself sandbox evasion Anonymous RAT DNS crashed 		2 2 7.4 M 19 ZeroCERT

44089 2024-05-02 07:31 be.exe  

219ad549c4d74baaf85871c1eb484b2f


Downloader PE File PE32 VirusTotal Malware Check memory WriteConsoleW ComputerName 		3.0 M 54 ZeroCERT

44090 2024-05-03 07:42 mm.exe  

90023ee5d93707bca67e178daf81830f


Malicious Packer UPX PE64 PE File VirusTotal Malware Checks debugger Check virtual network interfaces DNS 		1 3.2 45 ZeroCERT

44091 2024-05-03 07:42 build22.exe  

06c758c576de9e18db3394f1044b27ae


NSIS Generic Malware Malicious Library UPX Antivirus PE File PE32 VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut Creates executable files unpack itself suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		6.4 M 15 ZeroCERT

44092 2024-05-03 07:44 lenin.exe  

51eb099e680eb872a3619c63edcfdc5a


UPX PE File PE32 ZIP Format Browser Info Stealer Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency AutoRuns MachineGuid Check memory Checks debugger buffers extracted unpack itself Windows utilities Checks Bios Collect installed applications Detects VMWare suspicious process AntiVM_Disk sandbox evasion WriteConsoleW VMware anti-virtualization IP Check VM Disk Size Check installed browsers check Tofsee Ransomware Windows Browser RisePro Email ComputerName DNS Software crashed 		1 5 8 16.0 37 ZeroCERT

44093 2024-05-03 07:45 GVV.exe  

fa3641c75d2beb68c01e8065eefc4707


Generic Malware Suspicious_Script_Bin Malicious Library UPX ScreenShot AntiDebug AntiVM PE File PE32 OS Processor Check Browser Info Stealer Remcos VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself suspicious process AppData folder AntiVM_Disk sandbox evasion VM Disk Size Check Windows Browser Email ComputerName DNS DDNS keylogger 		1 4 2 13.8 22 ZeroCERT

44094 2024-05-03 07:46 sok.exe  

ec7154a50488ecfd5936b6fd10e0a8e3


SystemBC Malicious Library Antivirus PE File PE32 VirusTotal Malware powershell AutoRuns Windows DNS 		1 1 4.4 56 ZeroCERT

44095 2024-05-03 07:48 flash.cn.exe  

49e2d38242e314cb72ff7a297dbf132f


Malicious Library PE64 PE File VirusTotal Malware RWX flags setting unpack itself ComputerName DNS 		1 5.2 M 55 ZeroCERT

44096 2024-05-03 07:48 go.exe  

b8e5ad86c9e9b3aef46098f287e8b0ac


Generic Malware Malicious Library UPX AntiDebug AntiVM PE File PE32 OS Processor Check MSOffice File VirusTotal Malware Code Injection Check memory Checks debugger buffers extracted RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		8 7 1 5.8 M 18 ZeroCERT

44097 2024-05-03 07:49 mm2.exe  

497d88a78d010a02672474e9cf67b5ff


Malicious Packer UPX Anti_VM PE64 PE File VirusTotal Malware Checks debugger Check virtual network interfaces DNS 		1 3.2 M 45 ZeroCERT

44098 2024-05-03 07:50 sarra.exe  

9108c53602981487b7b44c2729fbd5bc


Anti_VM PE File PE32 Malware download VirusTotal Malware AutoRuns MachineGuid Checks debugger unpack itself Windows utilities Checks Bios Detects VMWare suspicious process WriteConsoleW VMware anti-virtualization IP Check Tofsee Windows RisePro ComputerName DNS crashed 		1 6 4 10.8 M 40 ZeroCERT

44099 2024-05-03 07:51 noa.exe  

ce55e5869c5b7274fdfee8145058a015


AgentTesla Generic Malware Malicious Library .NET framework(MSIL) Antivirus PWS SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key Software crashed 		1 3 3 14.0 M 38 ZeroCERT

44100 2024-05-03 07:53 mtls.exe  

3b65343bff4c7397ed19ef22efaae899


Malicious Packer UPX PE64 PE File VirusTotal Malware Checks debugger Check virtual network interfaces 		2 2.4 M 36 ZeroCERT

keyword