popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
44866 2024-06-05 09:14 lionandtigerbothareequalinthej...  

652858a50ce6a2279d414b2d7ae4d0fe


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware Malicious Traffic RWX flags setting exploit crash Tofsee Exploit DNS crashed 		2 3 2 4.2 M 34 ZeroCERT

44867 2024-06-05 09:17 lionsarecomparingtigerwiththey...  

5e41130a09c6215e9e22e89afe0f3168


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware Malicious Traffic exploit crash unpack itself Tofsee Exploit DNS crashed 		2 3 2 4.2 M 37 ZeroCERT

44868 2024-06-05 09:18 Archvisitor.cur  

e55f25384365d8cb1cc6ffb71600ff50


Suspicious_Script_Bin VirusTotal Malware 		0.4 1 ZeroCERT

44869 2024-06-05 09:18 Quote.hta  

cd5915bac2ea167ddb7bcc2ae9ceab78


Formbook Generic Malware Antivirus Malicious Library PowerShell PE File DLL PE32 FormBook Browser Info Stealer Malware download VirusTotal Malware powershell suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files RWX flags setting unpack itself powershell.exe wrote Check virtual network interfaces suspicious process AppData folder WriteConsoleW Windows Browser ComputerName DNS Cryptographic key 		16 17 5 14 13.4 M 28 ZeroCERT

44870 2024-06-05 09:19 obiz.scr  

3a050f5830ff95d1858e94f231f7ea4b


AgentTesla Generic Malware Malicious Library .NET framework(MSIL) Antivirus PWS SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key Software crashed keylogger 		1 2 3 14.4 39 ZeroCERT

44871 2024-06-05 09:20 lionsarekingofthejunglewhorule...  

c5858e4c690557b5240597db6e4d88c9


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic RWX flags setting exploit crash Windows Exploit DNS crashed 		1 2 5 4.2 M 38 ZeroCERT

44872 2024-06-05 09:23 lionsarekingofthejunglewhichcr...  

96094535fe4ae7ea46eb3df5e0b45231


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware Malicious Traffic RWX flags setting exploit crash Tofsee Exploit DNS crashed 		2 3 3 1 4.2 M 39 ZeroCERT

44873 2024-06-05 09:26 dion.hta  

24be5183dd56c3d08bae8625fba83aaa


Formbook Gen1 Generic Malware Suspicious_Script_Bin Process Kill Antivirus Malicious Library FindFirstVolume CryptGenKey UPX Malicious Packer PowerShell PE File DLL PE32 Device_File_Check OS Processor Check FormBook Browser Info Stealer Malware download Malware powershell suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted heapspray Creates shortcut Creates executable files RWX flags setting unpack itself powershell.exe wrote Check virtual network interfaces suspicious process AppData folder WriteConsoleW Windows Browser ComputerName DNS Cryptographic key crashed 		4 4 5 2 13.4 M ZeroCERT

44874 2024-06-05 09:27 Auto%20R.exe  

351650a422e427140d74d8c68185fa24


Formbook Gen1 Process Kill Generic Malware Suspicious_Script_Bin Malicious Library FindFirstVolume Cry FormBook Browser Info Stealer Malware download VirusTotal Malware Checks debugger buffers extracted Creates executable files unpack itself AppData folder Browser DNS 		19 20 3 18 6.6 M 22 ZeroCERT

44875 2024-06-05 23:26 ICARUS.Setup.exe  

225fcf1e03e30b492bd0aef35969329b


Emotet Gen1 NSIS Generic Malware Malicious Library UPX Malicious Packer Anti_VM Javascript_Blob PE File PE32 DLL PE64 OS Processor Check DllRegisterServer dll BMP Format Lnk Format GIF Format icon VirusTotal Malware AutoRuns suspicious privilege Check memory Checks debugger Creates shortcut Creates executable files ICMP traffic unpack itself Windows utilities Auto service Check virtual network interfaces AppData folder AntiVM_Disk sandbox evasion VM Disk Size Check Tofsee Ransomware GameoverP2P Interception Zeus Windows ComputerName Trojan Banking 		3 9 2 13.0 1 guest

44876 2024-06-06 14:27 SetupTools.exe  

5ec12277c0679d4761d265dd821f674f


Generic Malware Malicious Library UPX Antivirus PE File PE32 .NET EXE OS Processor Check VirusTotal Malware Cryptocurrency wallets Cryptocurrency powershell Telegram AutoRuns suspicious privilege MachineGuid Check memory Checks debugger Creates shortcut Creates executable files unpack itself Windows utilities powershell.exe wrote Check virtual network interfaces suspicious process AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check Tofsee Ransomware Windows ComputerName DNS Cryptographic key 		2 4 11.4 56 guest

44877 2024-06-06 14:51 com.wag.walker_2.74.1.apk  

54be4e2a316b871562c40088db968778


ZIP Format ftp Word 2007 file format(docx) OS Processor Check 		guest

44878 2024-06-07 09:29 xxun.exe  

3311b8c3707f75831aa443db406c71e0


AntiDebug AntiVM PE File PE32 VirusTotal Malware AutoRuns Code Injection Check memory RWX flags setting unpack itself Windows utilities suspicious process AppData folder Windows DNS 		1 6.8 M 62 ZeroCERT

44879 2024-06-07 09:33 lenin.exe  

fb2f90584265d465b4046c9a4e7c9bfa


UPX PE File PE32 ZIP Format Browser Info Stealer Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency AutoRuns MachineGuid Check memory Checks debugger buffers extracted unpack itself Windows utilities Checks Bios Collect installed applications Detects VMWare suspicious process AntiVM_Disk sandbox evasion WriteConsoleW VMware anti-virtualization IP Check VM Disk Size Check installed browsers check Tofsee Ransomware Windows Browser RisePro Email ComputerName DNS Software crashed 		1 5 9 16.0 M 38 ZeroCERT

44880 2024-06-07 09:33 john.doc  

da2543ed3a6567896c950bfeb597814b


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware exploit crash unpack itself suspicious TLD Tofsee Exploit DNS crashed 		25 25 2 4.4 M 33 ZeroCERT

keyword