popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
45196 2024-06-08 17:42 9a3efc.exe  

8fdefd3d070cf9c9517735b029759eff


Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware unpack itself Remote Code Execution 		2.2 M 24 ZeroCERT

45197 2024-06-08 17:44 dude.exe  

aaf735aafa732fc96d2091354795185a


Generic Malware Malicious Library UPX AntiDebug AntiVM PE File PE32 OS Processor Check icon MSOffice File VirusTotal Malware Code Injection Check memory Checks debugger buffers extracted RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		8 6 1 5.8 M 45 ZeroCERT

45198 2024-06-08 17:44 lsass.exe  

6293f7a0a604be58b31b34460fd5a71b


PE File .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee Windows 		2 1 4.2 M 43 ZeroCERT

45199 2024-06-08 17:47 HER.exe  

004d48284a26569ed3220fd1fd4b7c31


Process Kill Generic Malware Suspicious_Script_Bin Malicious Library FindFirstVolume CryptGenKey UPX PE File Device_File_Check PE32 OS Processor Check Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key Software crashed 		1 2 3 7.2 M 50 ZeroCERT

45200 2024-06-09 04:21 ghsalncr.exe  

6ec12dab45f4cd794945a73eabdcd9d3


PE File PE32 VirusTotal Malware 		1.4 21 guest

45201 2024-06-09 05:49 5010_1635873664_4193.exe  

60938dc1c7bc8a2bbab6b7dac4ac06b4


PE File PE32 VirusTotal Malware Check memory Checks debugger ICMP traffic unpack itself Windows DNS Cryptographic key 		1 5.0 M 59 guest

45202 2024-06-09 09:15 UNP%20Setup.exe  

a2f39491c9d6e8be4a1bf05ac024fdb4


Generic Malware Malicious Library Malicious Packer Antivirus UPX PE File PE32 CAB OS Processor Check VirusTotal Malware Check memory unpack itself Remote Code Execution 		1.6 M 3 ZeroCERT

45203 2024-06-09 09:20 sila.exe  

3e9ba4168fb1c8e4a8a3a69c4968abb3


Malicious Packer PE File PE32 ZIP Format Browser Info Stealer Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency AutoRuns MachineGuid Check memory buffers extracted unpack itself Windows utilities Collect installed applications suspicious process AntiVM_Disk sandbox evasion WriteConsoleW anti-virtualization IP Check VM Disk Size Check installed browsers check Tofsee Ransomware Windows Browser RisePro Email ComputerName DNS Software crashed 		1 6 9 13.8 M 46 ZeroCERT

45204 2024-06-09 09:21 wow123.hta  

21164aaeeaaa2a4a6e77798aa82d5c7c


Formbook Generic Malware Antivirus Malicious Library PowerShell PE File DLL PE32 FormBook Browser Info Stealer Malware download VirusTotal Malware powershell suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files RWX flags setting unpack itself powershell.exe wrote Check virtual network interfaces suspicious process AppData folder WriteConsoleW Windows Browser ComputerName DNS Cryptographic key 		15 17 6 13 13.4 M 27 ZeroCERT

45205 2024-06-09 09:21 DELIVERED%200606.exe  

2eebcdd0e833ba968a9cac360aed72de


Formbook Gen1 Process Kill Generic Malware Suspicious_Script_Bin Malicious Library FindFirstVolume Cry FormBook Browser Info Stealer Malware download VirusTotal Malware Checks debugger buffers extracted Creates executable files unpack itself AppData folder suspicious TLD Browser DNS 		20 22 5 18 7.8 M 38 ZeroCERT

45206 2024-06-09 09:22 Delivery%2007.exe  

b94b6c27e410388cd4e7dfeb352b75ce


Formbook Gen1 Process Kill Generic Malware Suspicious_Script_Bin Malicious Library FindFirstVolume Cry FormBook Browser Info Stealer Malware download VirusTotal Malware Checks debugger buffers extracted Creates executable files unpack itself AppData folder Browser DNS 		19 20 3 18 7.6 M 40 ZeroCERT

45207 2024-06-09 09:23 proposal%20report.exe  

092cd26903ed79eb7da016adbb7c928d


Formbook Gen1 Process Kill Generic Malware Suspicious_Script_Bin Malicious Library FindFirstVolume CryptGenKey UPX Malic FormBook Browser Info Stealer Malware download VirusTotal Malware Checks debugger buffers extracted Creates executable files unpack itself AppData folder Browser DNS 		18 18 3 16 7.0 M 41 ZeroCERT

45208 2024-06-09 09:23 Delivery%2006.exe  

132e9cb76def326daa4088f99587b759


Formbook Gen1 Process Kill Generic Malware Suspicious_Script_Bin Malicious Library FindFirstVolume CryptGenKey UPX Malicious Pack FormBook Browser Info Stealer Malware download VirusTotal Malware Checks debugger buffers extracted Creates executable files ICMP traffic unpack itself AppData folder Browser DNS 		16 18 3 15 7.8 M 41 ZeroCERT

45209 2024-06-09 09:32 RunasCs.exe  

ed04f33a60faa912c5406158e2d0a800


Generic Malware Antivirus .NET framework(MSIL) PE File .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself 		2.0 45 ZeroCERT

45210 2024-06-09 09:32 main.exe  

39b9b77f950a56b61419c2550c0ee2cf


Malicious Library UPX PE File PE32 DLL .NET DLL VirusTotal Malware Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Check virtual network interfaces AppData folder Windows DNS Cryptographic key 		1 1 2 5.4 M 45 ZeroCERT

keyword