popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
44101 2024-05-03 07:55 BackgroundRemover-Setup.exe  

7e37f8c945d005226870e60aa2baea93


Generic Malware Malicious Library Malicious Packer UPX PE64 PE File DllRegisterServer dll OS Processor Check 		M ZeroCERT

44102 2024-05-03 07:55 random.exe  

6b31dd4a6560603dfe9f833ca5dd4d7d


Generic Malware Malicious Library UPX PE File PE32 OS Processor Check Browser Info Stealer VirusTotal Malware Code Injection Check memory Checks debugger installed browsers check Browser 		3.4 M 22 ZeroCERT

44103 2024-05-03 07:57 HSTS.exe  

f970eb941bf3666823b761cea657061c


Malicious Packer UPX PE64 PE File VirusTotal Malware Checks debugger Check virtual network interfaces 		2 2.6 M 45 ZeroCERT

44104 2024-05-03 07:59 file.exe  

5451fddd7b59b191df90b89a06ef1691


Generic Malware Malicious Library PE File PE32 VirusTotal Malware Remote Code Execution 		1.6 M 32 ZeroCERT

44105 2024-05-03 08:03 amert.exe  

b47bc18496fcf0de153317af360b3020


Amadey Client SW User Data Stealer Craxs RAT Emotet RedLine stealer RedlineStealer ftp Client info stealer Generic Malware Downloader Malicious Library Antivirus UPX Malicious Packer MPRESS .NET framework(MSIL) VMProtect PWS Create Servi Browser Info Stealer RedLine Malware download Amadey FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency powershell Microsoft Telegram Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files RWX flags setting unpack itself Windows utilities Disables Windows Security Checks Bios Collect installed applications Detects VMWare Check virtual network interfaces suspicious process AppData folder malicious URLs suspicious TLD sandbox evasion WriteConsoleW VMware anti-virtualization human activity check installed browsers check Kelihos Tofsee Stealer Windows Browser Email ComputerName DNS Cryptographic key Software crashed Downloader 		25 37 24 6 33.4 M 44 ZeroCERT

44106 2024-05-03 15:35 beautifulroseipictureiseenitss...  

844d25a95681bdf377d72dc961fe7357


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware Malicious Traffic buffers extracted exploit crash unpack itself Tofsee Exploit DNS crashed 		1 3 2 5.0 M 33 ZeroCERT

44107 2024-05-03 15:39 loader-1000.exe  

d58a180c5d85448472b4e1007fae4b2a


NSIS Generic Malware Downloader Malicious Library UPX Antivirus Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Sniff Audio HTTP DNS Code injection Internet API FTP KeyLogger P2P AntiDebug AntiVM PE File PE32 PowerS VirusTotal Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself powershell.exe wrote Check virtual network interfaces suspicious process AppData folder suspicious TLD WriteConsoleW Tofsee Windows ComputerName DNS Cryptographic key 		6 7 9 11.6 M 22 ZeroCERT

44108 2024-05-03 15:44 havenewthingstounderstandwhich...  

0aba1094e29ed6d65fa5a8b1ec8c2e57


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware Malicious Traffic buffers extracted exploit crash unpack itself Tofsee Exploit DNS crashed 		3 6 2 5.0 M 38 ZeroCERT

44109 2024-05-03 15:45 reallylovelyladylovedfisherman...  

a3fdaa72eed95c9df31ee087177f76c5


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware VBScript Malicious Traffic buffers extracted RWX flags setting exploit crash Tofsee Exploit DNS crashed 		1 3 3 5.0 M 38 ZeroCERT

44110 2024-05-03 15:46 shar.scr  

6dc6f63b7b1a593e209d062c877a488f


LokiBot Malicious Library .NET framework(MSIL) UPX PWS DNS AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Buffer PE suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs suspicious TLD installed browsers check Browser Email ComputerName DNS Software 		1 1 12.8 M 54 ZeroCERT

44111 2024-05-03 15:47 creatednewthingstounderstandho...  

584c735262a9081e8936430d1e631f01


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic buffers extracted RWX flags setting exploit crash Exploit DNS crashed Downloader 		1 2 5.0 M 38 ZeroCERT

44112 2024-05-03 15:48 vistatharagreatgirlwholovedafi...  

5781051426025f65897f57bcb1ce41ca


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware VBScript Malicious Traffic buffers extracted exploit crash unpack itself Tofsee Exploit DNS crashed 		3 6 3 5.2 M 40 ZeroCERT

44113 2024-05-03 15:49 setup%E4%B8%8B%E8%BD%BD%E5%90%...  

6072310e460bb41fb1a0e5ea9f16e33c


Malicious Library PE64 PE File VirusTotal Malware DNS 		1 3.2 M 46 ZeroCERT

44114 2024-05-03 15:50 prnportlatinos.vbs  

544d0c91d215bdd930d481b2edb9a9ff

VirusTotal Malware VBScript wscript.exe payload download Creates shortcut Check virtual network interfaces Tofsee Dropper 		1 2 2 10.0 M 15 ZeroCERT

44115 2024-05-03 15:51 1668093182.exe  

9fbc495f7b8396fd10b994d966f88796


Malicious Packer PE File PE32 VirusTotal Malware unpack itself 		2.0 M 63 ZeroCERT

keyword