popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
44341 2024-05-16 18:22 FlexPremises.exe  

bdaf0c44377ebc825e98d8e649ca8f4b


NSIS Generic Malware Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger WMI Creates executable files Windows utilities suspicious process AppData folder sandbox evasion WriteConsoleW Windows ComputerName 		6.0 M 28 ZeroCERT

44342 2024-05-17 07:29 324hj23k4jh423kjh4g423.exe  

348bce7a46271aa5ff25de5e15e291d4


Malicious Library Downloader UPX PE File PE32 MZP Format OS Processor Check VirusTotal Malware Check memory unpack itself crashed 		1.8 M 18 ZeroCERT

44343 2024-05-17 07:31 smss.exe  

413bf385b1f985dcd43e2cdd2ebce8c5


Formbook Generic Malware Malicious Library .NET framework(MSIL) AntiDebug AntiVM PE File .NET EXE PE32 DLL FormBook Browser Info Stealer Malware download VirusTotal Malware PDB Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself AppData folder Browser crashed 		9 14 1 4 10.8 M 29 ZeroCERT

44344 2024-05-17 07:32 ReurgingGleek.exe  

1d3535cc01b2cc54b808a55e945707a0


Generic Malware Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware unpack itself Remote Code Execution 		2.4 M 36 ZeroCERT

44345 2024-05-17 07:32 bas.exe  

53d0c5288b720419cb95ed2cb57cbfd9


Malicious Library UPX AntiDebug AntiVM PE File DllRegisterServer dll PE32 MZP Format URL Format VirusTotal Malware Buffer PE AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself AntiVM_Disk VM Disk Size Check Tofsee Interception Windows Advertising Google ComputerName DNS Cryptographic key keylogger 		2 5 1 13.6 M 47 ZeroCERT

44346 2024-05-17 07:34 yak.exe  

33bbd27a00b4160a844a7edf2efef84e


Malicious Library UPX PE File DllRegisterServer dll PE32 MZP Format URL Format Remcos VirusTotal Malware Malicious Traffic Check memory Checks debugger Creates executable files unpack itself Tofsee Windows Advertising Google DNS DDNS keylogger 		3 8 3 5.0 M 37 ZeroCERT

44347 2024-05-17 07:39 gotomeeting.exe  

877187ad95d25a0e3582331588ac8892


Malicious Library PE64 PE File VirusTotal Malware Malicious Traffic RWX flags setting unpack itself ComputerName DNS 		1 1 4.4 M 59 ZeroCERT

44348 2024-05-17 07:39 sb.exe  

04bcca3d8db9f3034c8814acd8735073


Generic Malware Malicious Library Malicious Packer UPX PE File PE32 OS Processor Check VirusTotal Malware PDB Check memory Windows 		2.2 55 ZeroCERT

44349 2024-05-17 07:41 grace.exe  

6cb57b7bbac238426bb2f888fbfc3ed7


Malicious Library .NET framework(MSIL) PE File .NET EXE PE32 VirusTotal Malware PDB Check memory Checks debugger unpack itself 		2.6 M 52 ZeroCERT

44350 2024-05-17 07:43 shell.exe  

346dae7e729ed4f192d213fcd2292d58


UPX MPRESS PE File PE32 DLL VirusTotal Malware AutoRuns Check memory Creates executable files AppData folder sandbox evasion Windows 		4.6 54 ZeroCERT

44351 2024-05-17 09:10 mrngisagreatdayformebecausewew...  

8dc3b5e3a2c0fbc303f76905e8247926


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware ICMP traffic RWX flags setting exploit crash Tofsee Exploit DNS DDNS crashed 		2 4 5 4.4 33 ZeroCERT

44352 2024-05-17 09:10 createdbeautifulimagesentirepl...  

118a6298bf966ad5979e15faca957cbd


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware Malicious Traffic buffers extracted exploit crash unpack itself Tofsee Exploit DNS crashed 		2 3 2 4.6 M 35 ZeroCERT

44353 2024-05-17 09:11 dl.php  

9b811321fcab794c77c3f9a6b6622c37


Generic Malware Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware unpack itself Remote Code Execution 		2.4 M 32 ZeroCERT

44354 2024-05-17 09:13 weneverneedtokissflowersbeause...  

4f3983c99751f41c7d1639fccbee0491


Formbook MS_RTF_Obfuscation_Objects RTF File doc FormBook Malware download VirusTotal Malware Malicious Traffic exploit crash unpack itself Windows Exploit DNS crashed 		13 17 7 4 4.6 M 35 ZeroCERT

44355 2024-05-17 09:13 dl.php  

d20089770bdb6ace5be655ee209e4f24


Generic Malware Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware unpack itself Remote Code Execution 		2.4 M 31 ZeroCERT

keyword