popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
44641 2024-05-28 11:40 zxcv.exe  

99de2efc5673d2d9b51f54570e7cf3f2


Antivirus AntiDebug AntiVM MSOffice File Code Injection ICMP traffic RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		16 1 6.2 M ZeroCERT

44642 2024-05-28 12:16 time2time.exe  

7ff8c26a36f5a4566990745dff1594f3


Emotet HermeticWiper Gen1 NPKI SmokeLoader Generic Malware UltraVNC PhysicalDrive Suspicious_Script_Bin Buhtrap Group Downloader Malicious Library Malicious Packer Antivirus UPX Admin Tool (Sysinternals etc ...) ASPack Confuser .NET Create Service Socke Browser Info Stealer VirusTotal Malware powershell Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files ICMP traffic RWX flags setting unpack itself Windows utilities Disables Windows Security Checks Bios Auto service Check virtual network interfaces suspicious process AppData folder malicious URLs AntiVM_Disk sandbox evasion WriteConsoleW China anti-virtualization VM Disk Size Check human activity check installed browsers check Tofsee Ransomware Windows Browser Advertising ComputerName Remote Code Execution Firmware DNS Cryptographic key 		19 45 11 32.2 M 45 ZeroCERT

44643 2024-05-28 19:49 security-sysdiagnose.txt  

53af5ea9689e06df9b62a853cbbc29a3


ScreenShot AntiDebug AntiVM Check memory unpack itself 		1.0 guest

44644 2024-05-28 20:06 TCC 2.db-wal  

af7d177cce594aed5916d443ab6d1833


AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Windows Exploit DNS crashed 		3.8 guest

44645 2024-05-28 20:07 TCC 2.db-wal  

af7d177cce594aed5916d443ab6d1833


Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Hijack Network Sniff Audio HTTP DNS Code injection Internet API persistence FTP KeyLogger P2P AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		2 4.2 guest

44646 2024-05-28 20:07 ._TCC 2.db-wal  

45eefdc390273286afcc07d798eb1807


Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Hijack Network Sniff Audio HTTP DNS Code injection Internet API persistence FTP KeyLogger P2P AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		2 4.8 guest

44647 2024-05-28 20:08 ._TCC 2.db-wal  

45eefdc390273286afcc07d798eb1807


AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Windows Exploit DNS crashed 		3.8 guest

44648 2024-05-28 20:09 TCC 2.db-wal  

af7d177cce594aed5916d443ab6d1833


Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Hijack Network Sniff Audio HTTP DNS Code injection Internet API persistence FTP KeyLogger P2P AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		2 4.2 guest

44649 2024-05-28 20:09 TCC 2.db-wal  

af7d177cce594aed5916d443ab6d1833


AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Windows Exploit DNS crashed 		3.8 guest

44650 2024-05-28 20:10 ._TCC 2.db-wal  

45eefdc390273286afcc07d798eb1807


Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Hijack Network Sniff Audio HTTP DNS Code injection Internet API persistence FTP KeyLogger P2P AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		2 4.8 guest

44651 2024-05-28 20:11 ._TCC 2.db-wal  

45eefdc390273286afcc07d798eb1807


AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Windows Exploit DNS crashed 		3.8 guest

44652 2024-05-28 20:12 ._TCC 2.db-wal  

45eefdc390273286afcc07d798eb1807


Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Hijack Network Sniff Audio HTTP DNS Code injection Internet API persistence FTP KeyLogger P2P AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		2 4.2 guest

44653 2024-05-28 20:12 TCC 2.db-wal  

af7d177cce594aed5916d443ab6d1833


Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Hijack Network Sniff Audio HTTP DNS Code injection Internet API persistence FTP KeyLogger P2P AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		2 4.8 guest

44654 2024-05-28 20:13 ._TCC 2.db-wal  

45eefdc390273286afcc07d798eb1807


AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Windows Exploit DNS crashed 		3.8 guest

44655 2024-05-28 20:14 TCC 2.db-wal  

af7d177cce594aed5916d443ab6d1833


Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Hijack Network Sniff Audio HTTP DNS Code injection Internet API persistence FTP KeyLogger P2P AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		2 4.2 guest

keyword