Submissions

Date range button:

First seen:

Last seen:

No	Date	Request	Urls	Hosts	IDS	Score	Zero	VT	Player
44626	2024-05-28 11:04	STHealthBQ.exe e67f683eac76d370334f3fdf51aa430a RedLine Infostealer UltraVNC Generic Malware Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware PDB suspicious privilege Check memory Checks debugger unpack itself Windows Cryptographic key crashed				3.4	M	44	ZeroCERT

44627	2024-05-28 11:08	kureyonshinchan.exe 598f99c870529c864b369aff4b27fc20 PhysicalDrive Generic Malware Malicious Library Malicious Packer Antivirus UPX PE File PE32 OS Processor Check PE64 DLL Malware download VirusTotal Malware AutoRuns Malicious Traffic Check memory Creates executable files unpack itself Windows utilities suspicious process AntiVM_Disk sandbox evasion WriteConsoleW VM Disk Size Check Windows Browser ComputerName Remote Code Execution DNS crashed	6 Keyword trend analysis	3	8 Info ET ADWARE_PUP User-Agent (Mozilla/4.0 (compatible)) ET HUNTING Rejetto HTTP File Sever Response ET HUNTING Terse Request for .txt - Likely Hostile ET POLICY PE EXE or DLL Windows file download HTTP ET MALWARE Possible Windows executable sent when remote host claims to send a Text File ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response ET INFO Packed Executable Download ET INFO EXE IsDebuggerPresent (Used in Malware Anti-Debugging)	9.8	M	36	ZeroCERT

44628	2024-05-28 11:08	toolspub1.exe 32685b36f7414ff7a3434cc6735d0a62 Generic Malware Malicious Library PE File PE32 VirusTotal Malware unpack itself DNS		1		2.4	M	33	ZeroCERT

44629	2024-05-28 11:11	example.exe 356697b39d3721250aa3cc92bacc6120 Malicious Packer PE File PE32 VirusTotal Malware unpack itself DNS		1		4.0	M	67	ZeroCERT

44630	2024-05-28 11:13	4.exe efdf33fdadb58c109e3811a2db514904 Generic Malware Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware unpack itself Remote Code Execution				2.6	M	57	ZeroCERT

44631	2024-05-28 11:15	MyCheckBack.exe 58d9da67f31be50170dadd4ff9a837ad RedLine Infostealer UltraVNC Generic Malware Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware PDB suspicious privilege Check memory Checks debugger unpack itself Windows Cryptographic key crashed				3.4	M	52	ZeroCERT

44632	2024-05-28 11:17	QEwecfyhj.exe 9efd5e60fd358a4bed2382d3815783ae Process Kill Generic Malware Suspicious_Script_Bin Malicious Library FindFirstVolume CryptGenKey UPX PE File Device_File_Check PE32 OS Processor Check Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Check memory Checks debugger unpack itself Check virtual network interfaces suspicious TLD Tofsee Windows Browser Email ComputerName DNS Software crashed		2	3	8.6	M	54	ZeroCERT

44633	2024-05-28 11:20	AppGate2103v01.exe 1306e81bc13677c04abe69a1d2ca4e12 Generic Malware UPX PE64 PE File OS Processor Check VirusTotal Malware unpack itself Windows Remote Code Execution crashed				3.8	M	45	ZeroCERT

44634	2024-05-28 11:21	toolspub1.exe 172f983807439978fc99f21c84902b38 Generic Malware Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware unpack itself Remote Code Execution				2.4	M	38	ZeroCERT

44635	2024-05-28 11:24	Zinckeds.exe 8eb3c7bc1ad38ae064eda594deed070b Generic Malware Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware PDB unpack itself crashed				2.6	M	56	ZeroCERT

44636	2024-05-28 11:26	12345.exe 4970de9b0427c9a7fb2691558dd0ba77 Generic Malware Malicious Packer Malicious Library UPX PE File .NET EXE PE32 DLL OS Processor Check VirusTotal Malware Check memory Checks debugger Creates executable files unpack itself AppData folder crashed				3.4	M	33	ZeroCERT

44637	2024-05-28 11:28	STHealthUpdate.exe 341a6645505c8eaf54ec83738067d0c8 RedLine Infostealer UltraVNC Generic Malware Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware PDB suspicious privilege Check memory Checks debugger unpack itself Windows Cryptographic key crashed				3.2	M	35	ZeroCERT

44638	2024-05-28 11:30	backdoor.exe 32bab4b22104f0e73eb9f98efa619a68 Malicious Packer PE File PE32 VirusTotal Malware unpack itself DNS		1		3.6	M	67	ZeroCERT

44639	2024-05-28 11:33	zwuivg.exe 9bd9e74ec90979f70c3e6ceead15aa5a Process Kill Generic Malware Suspicious_Script_Bin Malicious Library FindFirstVolume CryptGenKey UPX PE File Device_File_Check PE32 OS Processor Check Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee Windows Browser Email ComputerName DNS Software crashed		3	3	8.8	M	48	ZeroCERT

44640	2024-05-28 11:35	beacon.exe 927ee11071594552182a02d7b0b971fa Malicious Library PE64 PE File VirusTotal Malware RWX flags setting unpack itself ComputerName DNS		1		4.6	M	63	ZeroCERT