popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
44761 2024-05-31 07:42 5.exe  

58f255cdde1639cac205467621bfcb70


Emotet NSIS Malicious Library UPX PE File DllRegisterServer dll PE32 MZP Format CAB suspicious privilege Check memory Checks debugger Creates shortcut Creates executable files installed browsers check Browser ComputerName DNS 		3 3.0 M ZeroCERT

44762 2024-05-31 07:42 fileosn.exe  

84bf36993bdd61d216e83fe391fcc7fd


RedLine stealer RedlineStealer Malicious Library .NET framework(MSIL) UPX PE File .NET EXE PE32 OS Processor Check Browser Info Stealer RedLine Malware download FTP Client Info Stealer Malware Microsoft suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 3 7 1 8.0 M ZeroCERT

44763 2024-05-31 07:44 alex.exe  

ebc2640384e061203dcf9efb12a67cd9


Generic Malware Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware PDB unpack itself crashed 		2.4 M 57 ZeroCERT

44764 2024-05-31 07:47 setup.exe  

08063da816c5db77ce64807c4ec2f7e8


NPKI Generic Malware Malicious Library Antivirus AntiDebug AntiVM PE File PE32 PowerShell VirusTotal Malware powershell suspicious privilege Code Injection Check memory Checks debugger WMI Creates shortcut Creates executable files RWX flags setting unpack itself Windows utilities Disables Windows Security Checks Bios powershell.exe wrote suspicious process WriteConsoleW anti-virtualization Windows ComputerName Cryptographic key 		12.0 M 37 ZeroCERT

44765 2024-05-31 07:49 ADServices.exe  

0c2564813f2b9fc088cfb6938214d3cb


Malicious Library PE File .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself crashed 		2.2 M 60 ZeroCERT

44766 2024-05-31 07:52 well.exe  

861859a608c8769febf142e752abb057


Client SW User Data Stealer browser info stealer Generic Malware Google Chrome User Data Downloader Malicious Library UPX Http API PWS Code injection Create Service Socket DGA ScreenShot Escalate priviledges Steal credential Sniff Audio HTTP DNS BitCoin I Browser Info Stealer Code Injection Check memory Checks debugger exploit crash unpack itself malicious URLs installed browsers check Exploit Browser crashed 		5.4 M ZeroCERT

44767 2024-05-31 08:18 amers.exe  

f55d40b74d38f0fcea654437183a7b1e


Amadey Emotet HermeticWiper Gen1 RedLine stealer RedlineStealer NPKI SmokeLoader Generic Malware UltraVNC PhysicalDrive Suspicious_Script_Bin EnigmaProtector NSIS Buhtrap Group Downloader Malicious Library Antivirus UPX Malicious Packer Admin Tool (Sy Browser Info Stealer RedLine Malware download Amadey FTP Client Info Stealer VirusTotal Cryptocurrency Miner Malware powershell Microsoft Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files ICMP traffic RWX flags setting unpack itself Windows utilities Disables Windows Security Checks Bios Collect installed applications Auto service Detects VMWare Check virtual network interfaces suspicious process AppData folder malicious URLs AntiVM_Disk sandbox evasion WriteConsoleW VMware China Firewall state off anti-virtualization IP Check VM Disk Size Check human activity check installed browsers check PrivateLoader Tofsee Ransomware GameoverP2P Zeus Stealer Windows Browser Advertising ComputerName Trojan Banking Firmware DNS Cryptographic key Software crashed CoinMiner 		37 77 33 5 40.8 M 41 ZeroCERT

44768 2024-05-31 10:05 Qwsyldgxfuefxl.bat  

3e942e68cf16c51d836d7762eaa2085d


Gen1 Generic Malware Suspicious_Script_Bin Downloader Malicious Library Malicious Packer UPX Antivirus Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Sniff Audio HTTP DNS Code injection Internet API FTP KeyLogger P suspicious privilege Code Injection Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files unpack itself Windows utilities suspicious process WriteConsoleW Tofsee Interception Windows ComputerName DNS Cryptographic key DDNS crashed 		4 4 8.0 M ZeroCERT

44769 2024-05-31 10:05 Emuxedlljrbbjp.bat  

a33d1bcae258475e7ec293f1abf928e5


Gen1 Generic Malware Suspicious_Script_Bin Downloader Malicious Library Malicious Packer UPX Antivirus Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Sniff Audio HTTP DNS Code injection Internet API FTP KeyLogger P VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files unpack itself Windows utilities suspicious process WriteConsoleW Tofsee Interception Windows ComputerName DNS Cryptographic key DDNS crashed 		4 4 7.8 M 9 ZeroCERT

44770 2024-05-31 10:05 sarra.exe  

be49ac418959705d20f029634d85040f


Anti_VM PE File PE32 Malware download VirusTotal Malware AutoRuns MachineGuid Checks debugger unpack itself Windows utilities Checks Bios Detects VMWare suspicious process WriteConsoleW VMware anti-virtualization IP Check Tofsee Windows RisePro ComputerName DNS crashed 		1 5 5 9.6 M 39 ZeroCERT

44771 2024-05-31 10:06 buildjudit.exe  

c09ff1273b09cb1f9c7698ed147bf22e


Gen1 Generic Malware Malicious Library UPX Malicious Packer Antivirus Anti_VM PE64 PE File DLL OS Processor Check ftp wget Check memory Creates executable files unpack itself 		2.0 M ZeroCERT

44772 2024-05-31 10:07 NimDllPayload.dll  

9b18a8a5506ae514acbeb369f3b9e9e0


UPX PE64 PE File DLL VirusTotal Malware Check memory crashed 		1.0 M 12 ZeroCERT

44773 2024-05-31 10:08 reverse_http.ps1  

01afbe1110a8dc2eb754291bd28685a5


Generic Malware Antivirus VirusTotal Malware Check memory Checks debugger RWX flags setting unpack itself ComputerName crashed 		3.2 M 34 ZeroCERT

44774 2024-05-31 10:08 buildjudit.exe  

cc7933b503e061ddde7158e108f19cc3


Gen1 Generic Malware Malicious Library UPX Malicious Packer Antivirus Anti_VM PE64 PE File DLL OS Processor Check ftp wget VirusTotal Malware Check memory Creates executable files unpack itself 		3.2 M 56 ZeroCERT

44775 2024-05-31 10:10 ReflectiveDll_poc.dll  

5c71c670dbfa86ec09cd4cf344e53686


PE64 PE File DLL VirusTotal Malware Checks debugger 		0.6 M 5 ZeroCERT

keyword