popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
44416 2024-05-19 10:36 vpn-1002.exe  

ccb630a81a660920182d1c74b8db7519


NSIS Generic Malware Downloader Malicious Library UPX Antivirus Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Sniff Audio HTTP DNS Code injection Internet API FTP KeyLogger P2P AntiDebug AntiVM PE File PE32 PowerS VirusTotal Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself powershell.exe wrote Check virtual network interfaces suspicious process AppData folder WriteConsoleW Tofsee Windows ComputerName DNS Cryptographic key crashed 		7 11 3 10.2 24 ZeroCERT

44417 2024-05-19 10:38 gena.exe  

e823604de8e1907f31935dd778dc6686


EnigmaProtector Malicious Packer PE File PE32 ZIP Format Browser Info Stealer Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency AutoRuns MachineGuid Check memory buffers extracted unpack itself Windows utilities Collect installed applications suspicious process AntiVM_Disk sandbox evasion WriteConsoleW anti-virtualization IP Check VM Disk Size Check installed browsers check Tofsee Ransomware Windows Browser RisePro Email ComputerName DNS Software crashed 		1 5 7 13.4 M 46 ZeroCERT

44418 2024-05-19 10:38 inte.exe  

3f77b69c60f28f076bd02d531490b300


Generic Malware Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware suspicious privilege Malicious Traffic WMI Windows utilities suspicious process AppData folder WriteConsoleW Windows ComputerName DNS 		1 1 1 1 5.4 M 58 ZeroCERT

44419 2024-05-19 10:38 inte.exe  

d4b94a173c3eacbb022ccbaba87776be


Generic Malware Malicious Library PE File PE32 VirusTotal Malware unpack itself 		2.4 43 ZeroCERT

44420 2024-05-19 10:51 crypted_9f4ae6b2.exe  

98daa2d8ad0b3ee66a55d6d34090e76e


Generic Malware Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware unpack itself crashed 		2.4 40 ZeroCERT

44421 2024-05-19 10:51 xmrig-notls.exe  

b03bd8c9b9965ed83232260719faedbf


XMRig Miner Generic Malware Malicious Library Malicious Packer UPX PE64 PE File OS Processor Check VirusTotal Malware unpack itself ComputerName 		2.0 53 ZeroCERT

44422 2024-05-19 10:53 demo.exe  

951a002246e2efab46649de942b7c775


Generic Malware Malicious Library Malicious Packer PE64 PE File VirusTotal Malware Code Injection unpack itself crashed 		3.4 M 35 ZeroCERT

44423 2024-05-20 07:35 conhost.exe  

be320b59ef29060678bcb78d6c8fa059


Malicious Library UPX PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself crashed 		2.0 20 ZeroCERT

44424 2024-05-20 07:40 build13.exe  

b99a7c6c9e6a2eb2945d894b2ce2c63b


Generic Malware Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware unpack itself DNS crashed 		3 4.4 M 48 ZeroCERT

44425 2024-05-20 07:40 Document0984757478.exe  

c36f798f2646092c180c6fc904c418f7


Gen1 Process Kill Generic Malware Suspicious_Script_Bin Malicious Library FindFirstVolume CryptGenKey UPX Malicious Packer PE File Device_File_Check PE32 OS Processor Check DLL FormBook Browser Info Stealer Malware download VirusTotal Malware Checks debugger buffers extracted Creates executable files unpack itself AppData folder Browser DNS 		12 22 3 7.2 M 47 ZeroCERT

44426 2024-05-20 07:42 1234.exe  

d3a80c7a3a80478b08cc17522a55bb44


Generic Malware Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware unpack itself DNS crashed 		3 4.4 M 48 ZeroCERT

44427 2024-05-20 07:45 random.exe  

d0d9b758764ced5f38eddd0f9c765b79


Amadey Gen1 RedLine stealer RedlineStealer XMRig Miner Generic Malware NSIS Downloader Malicious Library UPX .NET framework(MSIL) Malicious Packer MPRESS Antivirus Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal cr Browser Info Stealer RedLine Malware download Amadey FTP Client Info Stealer VirusTotal Cryptocurrency Miner Malware Cryptocurrency powershell Microsoft Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files ICMP traffic RWX flags setting unpack itself Windows utilities Disables Windows Security Checks Bios Collect installed applications Detects VMWare powershell.exe wrote Check virtual network interfaces suspicious process AppData folder malicious URLs AntiVM_Disk WriteConsoleW VMware anti-virtualization VM Disk Size Check installed browsers check Kelihos Tofsee Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed CoinMiner 		35 45 22 32.2 M 42 ZeroCERT

44428 2024-05-20 08:55 sdf34ert3etgrthrthfghfghjfgh.e...  

7fce620eed38da6eb6552e1713e4fa84


Malicious Library Downloader Malicious Packer UPX PE File PE32 MZP Format OS Processor Check VirusTotal Malware Check memory unpack itself crashed 		2.2 M 31 ZeroCERT

44429 2024-05-20 08:55 gena.exe  

e520f65d2af59a1c69a96809fd025d9b


EnigmaProtector Malicious Packer PE File PE32 ZIP Format Browser Info Stealer Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency AutoRuns MachineGuid Check memory buffers extracted unpack itself Windows utilities Collect installed applications suspicious process AntiVM_Disk sandbox evasion WriteConsoleW anti-virtualization IP Check VM Disk Size Check installed browsers check Tofsee Ransomware Windows Browser RisePro Email ComputerName DNS Software crashed 		1 5 7 13.4 M 46 ZeroCERT

44430 2024-05-20 08:59 csrss.exe  

591deb3212cb1720fa03640f6257b5dc


Browser Login Data Stealer Gen1 EnigmaProtector Generic Malware UPX Malicious Library Malicious Packer AntiDebug AntiVM PE File PE32 DLL OS Processor Check Browser Info Stealer Malware download FTP Client Info Stealer Vidar VirusTotal Email Client Info Stealer Malware c&c Telegram MachineGuid Code Injection Malicious Traffic Check memory WMI Creates executable files unpack itself Collect installed applications suspicious process sandbox evasion WriteConsoleW anti-virtualization installed browsers check Tofsee Stealc Stealer Windows Browser Email ComputerName DNS Software crashed plugin 		9 3 13 12.8 M 49 ZeroCERT

keyword